$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: 7p28x6EGOhSg0/XbZngU8zQO1B0ljdfHQkk2OWXofGQ= Subject key identifier: 47:F8:C7:04:43:47:70:4D:AE:96:15:03:3F:0A:B4:90:B9:B6:33:74 Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 01F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 01F0 Signing time: Thu 03 Jul 2025 02:33:57 +0000 Manifest this update: Thu 03 Jul 2025 02:33:56 +0000 Manifest next update: Thu 10 Jul 2025 02:33:56 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: iVGF2OYN1l+j2QbzcZF8xNGRGqwe9hVnw10m3TlXl98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 498 (0x1f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Jul 3 02:33:56 2025 GMT Not After : Jul 10 02:33:56 2025 GMT Subject: CN=6865ec15-f9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:5f:10:a2:c5:5c:b5:c3:b1:f7:4d:50:14: cd:1d:e0:79:04:26:9c:29:a6:82:61:4c:c8:fb:a7: 41:00:c0:11:b4:a5:8d:6f:bf:2c:07:db:f4:75:bb: 21:f0:0e:3b:66:ac:cc:13:74:b9:89:0c:04:38:71: d1:62:22:60:e7:20:c3:8e:2d:0f:f1:74:22:5d:c7: 53:68:89:c6:9d:31:8b:69:9e:29:0a:35:62:e3:1c: 12:4b:68:87:78:23:e4:0a:eb:19:5e:b3:79:3b:d8: 96:d5:b8:1f:de:85:1e:c1:22:bd:0b:aa:85:60:d0: 92:16:d3:0e:7b:74:39:a8:c8:e5:40:86:02:fb:04: d5:f3:69:6d:e3:21:25:31:f0:95:49:3e:9a:99:3d: ed:e0:c1:e5:a3:fb:ca:4d:8d:e1:94:06:4c:3a:36: e9:ab:04:3b:8c:2e:ae:8d:87:f7:44:e2:45:d7:91: 27:dd:0d:99:79:92:07:c9:d6:98:3c:1d:db:a3:d5: 8a:b6:5d:5a:10:2b:d0:5e:52:fa:68:19:33:54:90: ab:09:be:48:71:51:04:a8:ba:98:16:1c:2c:fb:26: 27:85:4c:c7:a5:2e:d4:04:0e:db:b5:d2:03:60:a1: 4a:37:6f:2b:0b:d3:64:d1:27:dd:aa:c3:a2:03:24: 05:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F8:C7:04:43:47:70:4D:AE:96:15:03:3F:0A:B4:90:B9:B6:33:74 X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:68:ce:91:64:65:b1:bd:e8:d9:9b:0d:dd:eb:df:f0:15:79: 86:db:24:2f:4e:1c:ef:57:d2:5e:4e:27:3f:2d:f5:4a:9b:f7: 49:5d:aa:47:a6:22:fb:ee:6c:2d:46:72:85:b1:0f:bc:07:34: be:d8:53:81:32:51:54:d5:7d:c0:a3:1a:1b:da:3e:18:f1:8c: 80:1a:cf:51:c8:58:85:94:8a:d2:c4:0e:e7:aa:40:85:ea:5e: cb:f2:36:a3:07:fd:6c:91:2f:64:76:ef:12:4f:30:5f:e1:b6: 33:04:79:19:49:1f:45:28:be:34:f9:b6:18:e8:40:9a:63:b4: a2:6f:f5:3c:8b:3f:eb:ad:80:0f:0d:88:82:78:45:4e:d5:37: ee:9e:97:a0:7a:8d:00:7a:4b:90:c9:e2:2c:ed:9a:6f:69:4c: f2:41:5b:cc:f6:eb:a9:be:4f:5a:44:12:2f:2d:1a:5d:dd:df: 9b:cc:e8:9b:a5:70:b8:9a:0a:cc:1b:7b:24:6e:04:e8:17:4a: fa:09:6f:4b:8e:34:8a:09:ad:fa:05:3f:27:27:c4:16:2c:ef: 51:29:5d:09:ba:33:b7:58:7b:02:82:de:30:8b:c5:2b:e6:13: 42:8a:bc:e8:f9:cb:69:cf:0c:8f:8e:f6:9e:ca:6d:aa:99:7d: 99:7c:49:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUwNzAzMDIzMzU2WhcNMjUwNzEwMDIzMzU2WjAYMRYwFAYD VQQDEw02ODY1ZWMxNS1mOWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1JfEKLFXLXDsfdNUBTNHeB5BCacKaaCYUzI+6dBAMARtKWNb78sB9v0dbsh 8A47ZqzME3S5iQwEOHHRYiJg5yDDji0P8XQiXcdTaInGnTGLaZ4pCjVi4xwSS2iH eCPkCusZXrN5O9iW1bgf3oUewSK9C6qFYNCSFtMOe3Q5qMjlQIYC+wTV82lt4yEl MfCVST6amT3t4MHlo/vKTY3hlAZMOjbpqwQ7jC6ujYf3ROJF15En3Q2ZeZIHydaY PB3bo9WKtl1aECvQXlL6aBkzVJCrCb5IcVEEqLqYFhws+yYnhUzHpS7UBA7btdID YKFKN28rC9Nk0SfdqsOiAyQFxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEf4xwRD R3BNrpYVAz8KtJC5tjN0MB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByaM6RZGWxvejZmw3d69/wFXmG2yQvThzvV9JeTic/LfVKm/dJXapH piL77mwtRnKFsQ+8BzS+2FOBMlFU1X3Aoxob2j4Y8YyAGs9RyFiFlIrSxA7nqkCF 6l7L8jajB/1skS9kdu8STzBf4bYzBHkZSR9FKL40+bYY6ECaY7Sib/U8iz/rrYAP DYiCeEVO1Tfunpegeo0AekuQyeIs7ZpvaUzyQVvM9uupvk9aRBIvLRpd3d+bzOib pXC4mgrMG3skbgToF0r6CW9LjjSKCa36BT8nJ8QWLO9RKV0JujO3WHsCgt4wi8Ur 5hNCirzo+ctpzwyPjvaeym2qmX2ZfEmx -----END CERTIFICATE-----Generated at Thu Jul 3 05:05:13 2025 by rpki-client