$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: IzgJtoh66lHTzQRQ9P84W2wmpTr7HQ1932BHJJmFf1A= Subject key identifier: 49:98:42:15:EB:E0:2F:3D:1B:F2:C4:1C:60:B6:E3:8D:43:DB:F8:35 Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 0206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 0204 Signing time: Sat 09 Aug 2025 02:39:35 +0000 Manifest this update: Sat 09 Aug 2025 02:39:35 +0000 Manifest next update: Sat 16 Aug 2025 02:39:35 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: NEuezeBxFHwj9PSVfB07bcNmzaccdiKzb1/fH6OOw2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 518 (0x206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Aug 9 02:39:35 2025 GMT Not After : Aug 16 02:39:35 2025 GMT Subject: CN=6896b4e7-1d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:51:73:a5:23:87:9d:4b:e3:8b:b2:5a:c9:41: 12:68:42:38:b2:46:df:ed:7f:b4:79:4f:ca:5b:fc: d7:ad:4c:85:70:f9:6c:19:24:6a:15:3e:90:f2:90: e0:cc:68:1f:fb:07:7f:b3:a1:25:d3:a0:29:ec:94: 62:0d:f6:13:32:71:e5:3e:f0:8d:c0:50:59:79:71: 9d:ef:7d:21:38:4c:72:60:de:e7:c6:33:b6:83:2b: 9c:05:57:cf:a3:b7:e5:4f:43:32:21:20:d5:31:c5: 54:18:a8:50:c1:96:77:93:4e:53:ac:89:de:a7:f9: 80:6d:af:74:86:4e:0a:f6:98:97:86:4e:9f:e4:b1: 96:06:f8:75:d8:17:cd:09:59:46:31:5b:0c:72:88: 8c:35:df:6b:08:88:ce:8c:2a:af:75:27:8e:e1:01: b9:d3:04:a8:41:e7:8c:a8:9c:46:fc:a5:93:46:08: f8:e8:b1:b8:a0:9d:ef:34:72:ec:4d:da:18:85:53: 19:48:4c:63:c1:eb:f2:e0:3f:08:5b:34:64:20:8f: 76:0f:ca:e4:98:10:d3:6b:8c:31:75:b1:9e:53:ea: e9:30:83:4b:ca:e2:65:af:48:ff:44:62:82:fe:a7: 39:bf:88:fd:48:0d:1c:7f:90:85:8d:07:19:54:59: a5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:98:42:15:EB:E0:2F:3D:1B:F2:C4:1C:60:B6:E3:8D:43:DB:F8:35 X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:8a:33:64:b4:e0:eb:6e:a8:7a:8a:82:4b:94:5e:4a:ae:c6: 0d:56:fb:f1:0b:55:39:f6:c9:8b:91:f5:45:51:bd:f6:48:dd: e3:72:00:9a:bc:b8:68:06:eb:39:67:60:ff:f2:de:e6:08:ae: db:f3:c5:14:53:57:a7:04:01:fa:a5:82:ff:5d:b9:44:83:4a: f2:3a:55:e0:5e:63:0b:39:c9:35:c9:90:f3:b4:8c:26:9f:04: c0:b3:87:7d:ca:5b:8d:aa:f0:6c:cc:3f:8a:72:71:67:01:10: 9e:95:33:f4:48:78:c7:52:b6:41:9b:bf:41:e1:3f:dd:cd:87: 98:6c:a0:ac:13:15:d3:84:5f:cb:32:eb:e0:70:6f:55:fa:29: 49:92:b4:bb:1f:4b:90:d0:4b:fd:84:9b:1d:49:5d:08:7a:79: 78:f3:7b:af:f5:05:56:fa:2a:54:e3:4e:71:99:2f:33:8a:36: c7:ab:51:ce:e4:e8:a7:28:4a:2a:11:fb:dd:ad:86:e8:db:64: ee:96:27:1f:81:93:fb:b4:fb:eb:02:ff:bb:e2:97:12:9f:a1: 94:35:bc:b4:f8:ab:45:cf:01:68:8c:99:1d:7f:ad:cf:b7:1c: b9:22:0d:5f:5a:aa:5f:37:a4:0e:5f:c5:05:7d:e7:f4:40:37: 0a:d1:f8:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUwODA5MDIzOTM1WhcNMjUwODE2MDIzOTM1WjAYMRYwFAYD VQQDEw02ODk2YjRlNy0xZDFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1FzpSOHnUvji7JayUESaEI4skbf7X+0eU/KW/zXrUyFcPlsGSRqFT6Q8pDg zGgf+wd/s6El06Ap7JRiDfYTMnHlPvCNwFBZeXGd730hOExyYN7nxjO2gyucBVfP o7flT0MyISDVMcVUGKhQwZZ3k05TrInep/mAba90hk4K9piXhk6f5LGWBvh12BfN CVlGMVsMcoiMNd9rCIjOjCqvdSeO4QG50wSoQeeMqJxG/KWTRgj46LG4oJ3vNHLs TdoYhVMZSExjwevy4D8IWzRkII92D8rkmBDTa4wxdbGeU+rpMINLyuJlr0j/RGKC /qc5v4j9SA0cf5CFjQcZVFmlNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEmYQhXr 4C89G/LEHGC2441D2/g1MB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsijNktODrbqh6ioJLlF5KrsYNVvvxC1U59smLkfVFUb32SN3jcgCa vLhoBus5Z2D/8t7mCK7b88UUU1enBAH6pYL/XblEg0ryOlXgXmMLOck1yZDztIwm nwTAs4d9yluNqvBszD+KcnFnARCelTP0SHjHUrZBm79B4T/dzYeYbKCsExXThF/L MuvgcG9V+ilJkrS7H0uQ0Ev9hJsdSV0Ienl483uv9QVW+ipU405xmS8zijbHq1HO 5OinKEoqEfvdrYbo22TulicfgZP7tPvrAv+74pcSn6GUNby0+KtFzwFojJkdf63P txy5Ig1fWqpfN6QOX8UFfef0QDcK0fiO -----END CERTIFICATE-----Generated at Sun Aug 10 04:14:23 2025 by rpki-client