$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: 2EpTBPmRT85MR6oHheZAAOJaDPA4ury4S0XdXxBVw2k= Subject key identifier: 16:C8:4A:33:EE:1D:FC:F2:8A:24:B0:DF:34:86:71:34:E2:6C:3C:34 Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 020B Signing time: Sat 23 Aug 2025 02:19:35 +0000 Manifest this update: Sat 23 Aug 2025 02:19:34 +0000 Manifest next update: Sat 30 Aug 2025 02:19:34 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: Ep4gql7ZgdVTqwS2zs9Pz69W7Zvi8rYaV7x9EqPiMlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Aug 23 02:19:34 2025 GMT Not After : Aug 30 02:19:34 2025 GMT Subject: CN=68a92537-f007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:50:c6:02:27:c5:6c:a1:ab:87:c4:2f:bb: 46:c9:8c:6d:49:41:6a:f4:30:27:f5:f4:da:a1:7e: 6d:b8:42:ac:d7:6e:1e:d8:2c:89:40:c4:d7:37:ad: 24:9d:bd:ca:61:f0:47:4c:ab:29:99:cd:79:45:4b: d6:bd:d7:6b:c2:53:8b:f4:36:19:57:c6:11:59:00: 69:fb:f1:8d:d3:7c:3c:09:78:66:d9:08:6d:5c:d3: cc:86:44:f7:69:62:66:18:e4:33:5d:18:b2:d1:1c: 43:65:38:27:4b:f9:d5:c5:da:d0:f4:be:9d:93:e7: bb:48:82:21:b0:44:d3:83:50:ab:4a:a9:9f:b2:3b: 3f:24:72:ed:b4:d7:e5:62:12:91:07:94:38:84:5f: 4c:03:c9:ff:13:da:fa:29:44:87:b5:48:4c:10:5a: 1c:88:41:27:1c:38:a4:6a:23:62:a9:2c:2d:30:bb: 61:ed:d2:12:a0:c6:7c:91:52:95:7e:f4:e2:75:74: 99:3b:85:e9:20:42:e3:a5:2d:24:a6:b2:f7:bb:ff: c8:2a:e8:b7:ac:90:01:73:ff:41:8e:33:0a:02:4b: e8:d5:f9:49:38:fe:e9:18:bb:91:bd:27:d2:75:0f: 97:03:ae:38:e4:c3:ae:50:4b:8f:88:ca:b7:3f:48: 37:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:C8:4A:33:EE:1D:FC:F2:8A:24:B0:DF:34:86:71:34:E2:6C:3C:34 X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:49:b6:db:e3:0b:84:96:7a:8c:49:bd:cc:82:ec:d9:f0:de: 78:8e:ca:15:50:f5:67:b1:ca:80:ab:aa:96:84:d2:d4:62:bb: e9:9a:7b:25:18:b8:16:e0:82:f2:ae:f4:90:ed:f5:f8:f5:25: 14:79:ff:65:89:a5:56:df:9e:81:1a:1c:bf:a0:88:92:0e:d6: b9:b4:d9:d2:60:d8:40:5c:87:25:c1:db:29:a6:fc:5d:c3:b1: 22:70:07:32:96:4a:f5:eb:56:0f:e6:9d:73:a9:e2:f4:1f:00: ad:3b:a6:84:3d:1b:1d:de:e3:af:b0:fa:e1:d7:30:76:d2:fa: eb:c0:9a:a6:a5:bb:c5:13:d0:d9:91:f9:06:c1:c3:e3:de:60: 2a:bb:d0:24:8b:ab:5f:80:da:7b:6c:d2:68:76:7d:5c:32:11: 42:14:cd:06:f3:44:3f:f4:3d:14:fe:37:cf:f2:89:bb:82:4c: 65:d1:ef:e7:e1:ea:ac:bb:1a:ea:55:e0:c0:aa:e8:b5:cb:c3: 4d:80:75:d8:5d:b9:c3:1f:0a:46:6f:ed:bd:d5:64:21:0e:2c: 06:ac:f0:60:60:af:dd:b2:64:90:5d:1e:41:cd:13:ee:e4:b0: 21:2d:ef:bb:dd:fc:e7:a6:0b:09:e7:64:89:7f:ad:9c:30:fd: 27:1f:5e:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUwODIzMDIxOTM0WhcNMjUwODMwMDIxOTM0WjAYMRYwFAYD VQQDEw02OGE5MjUzNy1mMDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjtQxgInxWyhq4fEL7tGyYxtSUFq9DAn9fTaoX5tuEKs124e2CyJQMTXN60k nb3KYfBHTKspmc15RUvWvddrwlOL9DYZV8YRWQBp+/GN03w8CXhm2QhtXNPMhkT3 aWJmGOQzXRiy0RxDZTgnS/nVxdrQ9L6dk+e7SIIhsETTg1CrSqmfsjs/JHLttNfl YhKRB5Q4hF9MA8n/E9r6KUSHtUhMEFociEEnHDikaiNiqSwtMLth7dISoMZ8kVKV fvTidXSZO4XpIELjpS0kprL3u//IKui3rJABc/9BjjMKAkvo1flJOP7pGLuRvSfS dQ+XA6445MOuUEuPiMq3P0g3KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbISjPu HfzyiiSw3zSGcTTibDw0MB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClSbbb4wuElnqMSb3MguzZ8N54jsoVUPVnscqAq6qWhNLUYrvpmnsl GLgW4ILyrvSQ7fX49SUUef9liaVW356BGhy/oIiSDta5tNnSYNhAXIclwdsppvxd w7EicAcylkr161YP5p1zqeL0HwCtO6aEPRsd3uOvsPrh1zB20vrrwJqmpbvFE9DZ kfkGwcPj3mAqu9Aki6tfgNp7bNJodn1cMhFCFM0G80Q/9D0U/jfP8om7gkxl0e/n 4eqsuxrqVeDAqui1y8NNgHXYXbnDHwpGb+291WQhDiwGrPBgYK/dsmSQXR5BzRPu 5LAhLe+73fznpgsJ52SJf62cMP0nH17/ -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:39 2025 by rpki-client