$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: 54RAbtkeT4/aTZurbW+S1r87uijqFShIxO6ZcGf97LY= Subject key identifier: DF:82:76:C0:CD:04:2C:84:44:92:3E:7C:46:68:B4:BD:40:08:26:FD Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 01CE Signing time: Fri 25 Apr 2025 02:01:27 +0000 Manifest this update: Fri 25 Apr 2025 02:01:26 +0000 Manifest next update: Fri 02 May 2025 02:01:26 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: aNYcrBOdFB6hE2zzLqYh9KwyRQ2fcR3ZQvcUZZ7sWTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Apr 25 02:01:26 2025 GMT Not After : May 2 02:01:26 2025 GMT Subject: CN=680aecf6-634b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:93:18:fd:9e:6d:a7:6e:b1:7a:e2:b8:4e: d1:3b:3d:39:94:32:90:46:e1:3d:ee:2b:70:2a:e6: ac:62:fe:ee:0f:e3:ae:e0:1f:74:0f:78:43:b8:ce: 74:de:2e:36:82:63:e0:10:36:b6:de:ee:c5:f4:07: db:ab:a9:d4:5a:0c:12:33:52:9b:62:f5:c8:0c:25: 5f:80:31:e9:05:dd:ba:ad:4f:17:d5:23:e8:b3:ac: 24:0a:d3:ae:7c:83:aa:ee:f5:c9:83:73:7b:a5:aa: d7:5f:ea:5e:90:43:c1:70:37:6b:50:8c:4d:40:c7: c9:a3:71:77:4b:1f:91:c7:94:45:51:fa:46:4f:95: 65:37:7a:0b:61:65:9a:50:af:05:ec:4c:80:44:39: c6:54:62:af:ea:a2:3b:b7:d1:a3:9a:c2:c4:b4:0e: 34:47:99:07:ec:3f:f7:1d:25:0a:96:e8:3c:ac:2b: 8f:16:d8:b6:0b:b7:d0:f5:32:5f:ab:fb:68:c2:22: cd:f7:b2:f2:b1:67:bb:83:b4:1b:4d:a1:09:16:4b: 58:84:cf:1f:be:25:0e:9e:9b:c9:14:92:64:0f:c5: bd:22:4d:00:a2:39:cc:7a:26:92:ce:c5:00:9d:66: c3:6e:46:29:57:c1:97:76:ba:db:4e:e4:70:08:45: 99:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:82:76:C0:CD:04:2C:84:44:92:3E:7C:46:68:B4:BD:40:08:26:FD X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0f:76:42:5e:c4:db:22:fa:61:fb:be:c5:ce:15:fe:a6:57: 6d:15:2b:2c:5e:27:fe:cd:c2:0d:e4:de:7c:a8:43:1e:d4:8a: 16:0b:a0:20:54:cf:ad:d2:f1:5e:87:13:50:6f:70:1d:29:3a: 0f:91:24:30:95:2a:d6:06:0c:b3:8c:4a:02:8c:01:f7:bb:03: e3:12:45:8d:f8:91:f7:1e:dc:95:25:5e:4c:c3:37:17:5a:ce: 89:c2:7a:f8:e3:f4:4c:69:6c:e0:31:8f:23:4d:af:3c:3b:35: 84:5a:06:a3:58:23:ce:69:f2:9f:de:e4:bc:8a:49:24:de:6c: fa:51:2f:ba:de:8c:40:b8:0b:9f:1a:40:a5:5c:d7:4f:d6:68: 4a:a7:b5:cb:96:a2:b6:73:73:0c:7b:7a:53:8a:66:91:1c:68: c9:2c:70:a6:59:e1:f8:2d:10:ef:93:a6:66:b0:7d:a8:58:4d: d6:f7:a9:9b:57:84:9c:6c:ce:41:82:41:f0:4b:27:75:ff:82: 11:44:48:01:5f:07:64:43:10:d1:6c:69:0b:b4:e9:76:7e:c8: 56:43:98:23:cf:f7:22:fb:39:7d:47:38:4f:03:f2:8a:ed:e5: 30:a2:3f:d9:43:b3:e3:94:01:8b:00:40:09:ca:f8:d7:01:73: 71:d9:84:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUwNDI1MDIwMTI2WhcNMjUwNTAyMDIwMTI2WjAYMRYwFAYD VQQDEw02ODBhZWNmNi02MzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQCTGP2ebadusXriuE7ROz05lDKQRuE97itwKuasYv7uD+Ou4B90D3hDuM50 3i42gmPgEDa23u7F9Afbq6nUWgwSM1KbYvXIDCVfgDHpBd26rU8X1SPos6wkCtOu fIOq7vXJg3N7parXX+pekEPBcDdrUIxNQMfJo3F3Sx+Rx5RFUfpGT5VlN3oLYWWa UK8F7EyARDnGVGKv6qI7t9GjmsLEtA40R5kH7D/3HSUKlug8rCuPFti2C7fQ9TJf q/towiLN97LysWe7g7QbTaEJFktYhM8fviUOnpvJFJJkD8W9Ik0AojnMeiaSzsUA nWbDbkYpV8GXdrrbTuRwCEWZmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+CdsDN BCyERJI+fEZotL1ACCb9MB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsD3ZCXsTbIvph+77FzhX+pldtFSssXif+zcIN5N58qEMe1IoWC6Ag VM+t0vFehxNQb3AdKToPkSQwlSrWBgyzjEoCjAH3uwPjEkWN+JH3HtyVJV5MwzcX Ws6Jwnr44/RMaWzgMY8jTa88OzWEWgajWCPOafKf3uS8ikkk3mz6US+63oxAuAuf GkClXNdP1mhKp7XLlqK2c3MMe3pTimaRHGjJLHCmWeH4LRDvk6ZmsH2oWE3W96mb V4ScbM5BgkHwSyd1/4IRREgBXwdkQxDRbGkLtOl2fshWQ5gjz/ci+zl9RzhPA/KK 7eUwoj/ZQ7PjlAGLAEAJyvjXAXNx2YSB -----END CERTIFICATE-----Generated at Sat Apr 26 16:54:25 2025 by rpki-client