$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: k6+r4rcMMAcWpoBwToBTISwpwd5sNybwcQ7ocWdZTKw= Subject key identifier: D4:D9:98:A7:3D:A2:77:C4:BC:74:AE:B6:1F:31:B2:13:D7:52:73:48 Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 01E7 Signing time: Sun 15 Jun 2025 01:52:01 +0000 Manifest this update: Sun 15 Jun 2025 01:52:00 +0000 Manifest next update: Sun 22 Jun 2025 01:52:00 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: hponlBvSk3Glf68C1INkMBCD7DMTZlIpULMS0mYBojk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Jun 15 01:52:00 2025 GMT Not After : Jun 22 01:52:00 2025 GMT Subject: CN=684e2741-60cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:da:cd:ba:57:a4:10:92:78:ac:35:9c:ff: fe:2c:df:0f:0d:c8:36:67:97:55:de:49:a3:dc:9a: 71:d7:da:97:f1:29:5e:f6:1c:b8:1d:d4:b4:5e:3e: 9c:1f:fa:52:c2:2d:8a:dc:99:92:42:c9:b3:87:fb: 42:40:a0:79:6b:1d:a9:44:d9:85:11:0d:d4:29:c4: b6:0b:4d:d4:02:6d:78:b7:0c:f4:01:64:b6:c7:2d: 5b:9a:0b:c5:d7:2b:81:db:e7:d2:65:59:20:84:97: 4f:8c:f5:a2:6d:57:f0:7c:31:91:54:5a:2e:d9:76: a6:20:1b:fd:74:3e:b2:a3:d6:82:ad:79:6e:bf:ac: fd:d1:09:64:45:67:79:68:0c:37:c8:ad:ad:ee:b7: 65:42:2d:5e:9e:fb:09:be:c2:b7:5f:4a:a8:a7:d0: 58:a7:96:80:c9:64:dc:85:e7:0d:b4:1b:24:b6:af: c5:a2:dd:74:28:99:2d:31:ef:62:6c:56:1e:1c:83: e6:2a:f6:66:63:85:39:f4:3c:3b:7c:e5:dd:b4:ee: a8:9c:c3:d4:94:c7:78:93:88:1a:ca:a0:6e:1c:0f: 5d:20:54:c4:38:8f:37:37:f8:b5:42:03:9f:f4:cd: 31:85:e0:d0:f6:45:90:6b:60:0d:ee:20:f9:8c:7e: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D9:98:A7:3D:A2:77:C4:BC:74:AE:B6:1F:31:B2:13:D7:52:73:48 X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b8:98:dd:5d:76:66:cb:13:37:90:f6:ef:7e:96:c8:99:e2: f7:0f:e3:6e:f2:d5:1c:82:58:c7:ce:74:c3:b8:a9:57:94:57: 53:8c:9a:a5:b1:c6:50:c2:67:37:6a:21:e7:f6:b0:e9:39:55: 93:e3:13:5c:f4:c9:0d:39:a9:6a:c2:2e:70:70:1c:60:67:d5: 98:eb:e8:31:60:3c:84:7d:bb:08:d8:ab:8f:02:0c:c6:b2:4a: 24:16:1b:7f:ba:ed:3d:be:2e:d5:cd:5d:a1:42:04:80:72:7c: 4a:f4:0b:ca:c5:d4:b3:c4:5b:d6:b2:8c:0f:db:26:3c:5e:2f: 6a:05:22:9b:c8:14:7d:7b:64:a6:24:8d:a8:9b:3b:a2:cb:f5: d6:0a:55:af:d2:57:68:27:06:1a:93:66:56:6e:bf:78:ee:15: 9f:4a:37:d3:c5:88:ec:e9:e6:e3:9f:ab:37:01:fc:2d:2d:48: 1f:81:bc:33:4e:8c:9a:79:de:05:45:ec:bb:f1:60:8c:ed:ea: ee:a1:c0:9a:62:86:8c:eb:23:fc:09:e8:26:22:04:3d:fb:08: c8:b4:58:4c:6f:c2:3a:08:82:cd:cc:b3:f4:f6:03:6c:63:a6: 4b:0a:dd:fa:77:20:a6:eb:2d:5e:ca:06:35:29:04:cd:ca:06: 0e:88:39:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUwNjE1MDE1MjAwWhcNMjUwNjIyMDE1MjAwWjAYMRYwFAYD VQQDEw02ODRlMjc0MS02MGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOXazbpXpBCSeKw1nP/+LN8PDcg2Z5dV3kmj3Jpx19qX8Sle9hy4HdS0Xj6c H/pSwi2K3JmSQsmzh/tCQKB5ax2pRNmFEQ3UKcS2C03UAm14twz0AWS2xy1bmgvF 1yuB2+fSZVkghJdPjPWibVfwfDGRVFou2XamIBv9dD6yo9aCrXluv6z90QlkRWd5 aAw3yK2t7rdlQi1envsJvsK3X0qop9BYp5aAyWTchecNtBsktq/Fot10KJktMe9i bFYeHIPmKvZmY4U59Dw7fOXdtO6onMPUlMd4k4gayqBuHA9dIFTEOI83N/i1QgOf 9M0xheDQ9kWQa2AN7iD5jH7GoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTZmKc9 onfEvHSuth8xshPXUnNIMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6uJjdXXZmyxM3kPbvfpbImeL3D+Nu8tUcgljHznTDuKlXlFdTjJql scZQwmc3aiHn9rDpOVWT4xNc9MkNOalqwi5wcBxgZ9WY6+gxYDyEfbsI2KuPAgzG skokFht/uu09vi7VzV2hQgSAcnxK9AvKxdSzxFvWsowP2yY8Xi9qBSKbyBR9e2Sm JI2omzuiy/XWClWv0ldoJwYak2ZWbr947hWfSjfTxYjs6ebjn6s3AfwtLUgfgbwz Toyaed4FRey78WCM7eruocCaYoaM6yP8CegmIgQ9+wjItFhMb8I6CILNzLP09gNs Y6ZLCt36dyCm6y1eygY1KQTNygYOiDnH -----END CERTIFICATE-----Generated at Sun Jun 15 08:51:20 2025 by rpki-client