$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: ZfYkSWViL10Pi6hQ+kSSBWym/GlS2MDUEJAIfHPQfng= Subject key identifier: 4B:3D:25:1E:22:25:1E:66:43:3A:E7:EC:69:EA:A7:93:00:CC:01:9A Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 01D7 Signing time: Tue 13 May 2025 02:01:43 +0000 Manifest this update: Tue 13 May 2025 02:01:42 +0000 Manifest next update: Tue 20 May 2025 02:01:42 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: mkIPUlK2N+PqFnr2bGyStOI7XsIOw8kf1N46JlygTwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: May 13 02:01:42 2025 GMT Not After : May 20 02:01:42 2025 GMT Subject: CN=6822a807-637e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:28:5f:1f:17:fd:d9:84:9c:cc:b9:7c:6e:b6: 20:5e:6c:fc:58:e6:55:e3:3f:58:d1:e4:71:41:69: 3c:87:4e:ed:77:f8:db:ef:62:9d:ab:87:52:d2:9b: e4:c8:41:1b:d2:d8:1b:a5:77:e6:e8:84:63:36:48: c0:c4:d5:9f:8a:8a:89:f9:f7:da:81:5a:b7:6c:4a: e0:df:c8:2f:ac:3f:a8:c7:f3:5c:63:7d:fd:fb:90: 2e:48:30:30:46:22:3c:ca:94:cf:fb:3b:f2:3a:c8: f3:50:c8:1f:15:6e:b9:d9:bf:43:e8:26:af:cd:5c: 10:58:de:66:0d:2b:04:a2:84:2a:bd:75:a9:29:e6: cf:a7:4a:a5:df:90:75:75:a7:34:9f:49:67:7c:bb: df:28:7b:9f:9e:73:f4:81:0b:49:b7:56:8b:70:28: 25:63:24:eb:75:bb:40:89:a9:b6:c4:50:f7:f8:29: 1a:0e:8d:8e:2b:0d:21:8c:9d:42:8d:85:2d:12:b5: 17:f0:e8:72:59:3b:59:79:a3:0d:1f:d8:ac:c5:11: 35:8f:77:f7:fb:36:5b:10:31:4c:0f:1a:9d:aa:c1: 61:3a:50:b6:31:8d:59:92:e5:29:ed:d2:f1:db:dd: ef:8a:89:bb:63:ad:99:65:e7:6b:8b:c0:77:44:7d: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3D:25:1E:22:25:1E:66:43:3A:E7:EC:69:EA:A7:93:00:CC:01:9A X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ae:69:d0:91:af:b2:f9:f4:c1:ea:c9:3e:d9:c3:36:ef:38: b5:b8:3e:ba:85:46:97:13:ff:43:c0:c7:cc:18:c3:c8:3f:1c: 3f:29:a8:00:6c:57:c1:d6:02:60:e8:d2:29:3a:5b:a0:9f:b1: c5:5a:b5:ac:fb:9e:82:b2:6f:9c:fc:a9:e5:0e:28:cb:bc:4a: f3:33:fb:78:da:ae:c9:65:3a:84:39:47:54:25:08:f9:05:6d: 14:aa:24:32:3a:83:ae:c3:45:f1:4d:eb:cf:c1:45:b4:dc:53: 5b:f7:27:40:5b:8e:dc:33:c4:8f:ae:49:46:41:45:9e:e5:78: df:83:c0:a3:15:95:95:8b:55:13:94:19:56:29:c8:56:f1:eb: 5f:fc:af:41:05:ee:db:00:5b:de:87:25:2d:f1:7e:9b:9f:7c: 8d:20:ce:75:ac:9a:8d:66:b0:07:4e:e7:83:88:47:21:10:51: 79:41:e0:71:49:31:71:00:bc:84:6a:e8:f3:57:c4:af:96:60: 2f:e9:72:d9:5d:d8:92:ab:dd:c5:90:56:2f:da:3f:0f:07:63: 50:63:dd:5f:a7:09:32:b4:a6:eb:da:2f:db:d3:30:4d:ef:a7: 21:f8:06:5b:73:2e:ba:c6:f0:06:8b:a3:35:c0:1c:cc:9c:95: fe:d9:fc:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUwNTEzMDIwMTQyWhcNMjUwNTIwMDIwMTQyWjAYMRYwFAYD VQQDEw02ODIyYTgwNy02MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxChfHxf92YSczLl8brYgXmz8WOZV4z9Y0eRxQWk8h07td/jb72Kdq4dS0pvk yEEb0tgbpXfm6IRjNkjAxNWfioqJ+ffagVq3bErg38gvrD+ox/NcY339+5AuSDAw RiI8ypTP+zvyOsjzUMgfFW652b9D6CavzVwQWN5mDSsEooQqvXWpKebPp0ql35B1 dac0n0lnfLvfKHufnnP0gQtJt1aLcCglYyTrdbtAiam2xFD3+CkaDo2OKw0hjJ1C jYUtErUX8OhyWTtZeaMNH9isxRE1j3f3+zZbEDFMDxqdqsFhOlC2MY1ZkuUp7dLx 293viom7Y62ZZedri8B3RH0vvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs9JR4i JR5mQzrn7Gnqp5MAzAGaMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6rmnQka+y+fTB6sk+2cM27zi1uD66hUaXE/9DwMfMGMPIPxw/KagA bFfB1gJg6NIpOlugn7HFWrWs+56Csm+c/KnlDijLvErzM/t42q7JZTqEOUdUJQj5 BW0UqiQyOoOuw0XxTevPwUW03FNb9ydAW47cM8SPrklGQUWe5Xjfg8CjFZWVi1UT lBlWKchW8etf/K9BBe7bAFvehyUt8X6bn3yNIM51rJqNZrAHTueDiEchEFF5QeBx STFxALyEaujzV8SvlmAv6XLZXdiSq93FkFYv2j8PB2NQY91fpwkytKbr2i/b0zBN 76ch+AZbcy66xvAGi6M1wBzMnJX+2fy2 -----END CERTIFICATE-----Generated at Tue May 13 19:54:32 2025 by rpki-client