$ rpki-client -vvf rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft File: QELW5jee2AQkizYN7Zhe9_VlIBE.mft (raw, json) Hash identifier: dYrxTh8w/uVIhUBD/hhGQV6zEp2n5kB5PNE2L1v+F70= Subject key identifier: 8D:49:79:7E:02:5B:39:51:7D:8F:6C:FA:32:53:5C:F1:A6:9A:9D:F1 Authority key identifier: 40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11 Certificate issuer: /CN=A9148465/serialNumber=4042D6E6379ED804248B360DED985EF7F5652011 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft Manifest number: 024D Signing time: Sat 19 Jul 2025 02:16:45 +0000 Manifest this update: Sat 19 Jul 2025 02:16:45 +0000 Manifest next update: Sat 26 Jul 2025 02:16:45 +0000 Files and hashes: 1: QELW5jee2AQkizYN7Zhe9_VlIBE.crl (hash: x6yDgx/EwSEO+W+2SV3JtczCpNauWnvTwfOWUDHjxcc=) 2: 7777513828C011EDBEC6D287C4F9AE02.roa (hash: KysVMiyZcH0HX0OV6c/BvTG9IGFmIflJ1zJN81z9Xf0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148465, serialNumber=4042D6E6379ED804248B360DED985EF7F5652011 Validity Not Before: Jul 19 02:16:45 2025 GMT Not After : Jul 26 02:16:45 2025 GMT Subject: CN=687b000d-3808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:dd:c9:25:b4:e3:18:d6:41:cf:44:f3:a6:45: 34:53:8e:44:23:c9:54:b2:b8:0a:28:53:6b:8d:01: 75:86:78:37:a3:29:c8:c3:ad:1c:fb:d0:e5:78:2e: c2:db:33:16:b6:b8:4a:0c:c0:08:f4:34:ff:28:ab: 5d:26:ef:20:07:8d:8f:01:d6:f1:e4:1e:15:6c:a4: 87:54:b1:85:7a:43:0b:49:ef:a7:b0:0d:d4:04:86: b2:3f:5e:ee:eb:4b:27:e0:4a:af:37:22:29:63:41: 9f:90:8d:77:f2:11:73:21:e5:ed:47:37:e5:c2:d2: 8b:5b:2a:67:d4:49:15:1c:98:3b:c1:87:34:89:0b: 9c:89:5d:8c:e9:e6:c8:56:4a:fe:e6:87:05:aa:c7: 52:99:68:45:30:ec:ca:24:ee:35:6e:ae:00:97:6c: 09:bd:76:e8:c5:21:4a:f4:7a:7d:54:58:2f:70:50: 94:4f:78:40:fc:5a:f2:e9:de:6c:63:45:61:e7:42: c9:bc:67:f0:3a:d2:a1:71:fd:34:ef:9d:23:ea:06: 71:64:71:25:4e:d6:be:f3:aa:78:20:ec:c5:e7:1d: d0:7b:9b:a6:b0:e6:e8:ca:0e:98:b1:48:49:ad:12: e2:0f:97:2e:22:77:5d:35:f8:ea:f9:6f:70:36:1e: 0e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:49:79:7E:02:5B:39:51:7D:8F:6C:FA:32:53:5C:F1:A6:9A:9D:F1 X509v3 Authority Key Identifier: keyid:40:42:D6:E6:37:9E:D8:04:24:8B:36:0D:ED:98:5E:F7:F5:65:20:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QELW5jee2AQkizYN7Zhe9_VlIBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148465/D60F027228BB11EDA59C3081C4F9AE02/QELW5jee2AQkizYN7Zhe9_VlIBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:5a:56:55:d4:61:58:3e:17:50:a6:8f:38:63:79:fe:d4:25: bf:33:fb:9a:be:ea:6d:50:ad:b6:f6:78:35:75:d8:e1:3b:0e: ae:e4:15:3d:e6:67:21:98:90:86:b0:49:fb:d8:ad:3e:f7:30: 5d:fd:60:b4:70:b1:83:36:ab:7d:dd:db:f0:be:a6:bb:71:8d: 7a:30:49:19:87:38:15:55:e5:f5:35:e1:55:73:70:cc:84:e6: e5:bc:eb:d9:0c:23:fd:f6:1d:a5:9c:2f:be:3e:64:49:57:2e: 8d:ad:76:fb:d1:13:6e:a3:49:0c:c1:e8:51:11:23:80:60:f7: b4:ad:8a:03:a1:d9:bd:6e:f0:de:2a:49:85:ae:92:13:2e:69: 03:08:67:db:dc:9f:c0:de:31:b5:a9:b9:1d:6d:f9:87:48:12: 87:56:f8:d1:cc:6d:ff:ec:e8:b8:5f:6c:66:b7:3e:a6:4a:df: 76:a8:c9:15:77:2d:dc:a2:45:ef:29:5d:31:9b:0f:75:cb:d4: cf:b4:af:d5:c5:94:6b:5c:e6:29:0c:26:a8:03:e5:ef:97:9b: 77:19:a1:ff:e0:52:66:cc:66:92:41:9a:16:79:ae:59:58:ae: 9e:d0:6e:69:d2:c4:18:b5:1f:2e:a7:24:ec:84:89:3a:56:80: 27:20:88:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NjUxMTAvBgNVBAUTKDQwNDJENkU2Mzc5RUQ4MDQyNDhCMzYwREVEOTg1RUY3 RjU2NTIwMTEwHhcNMjUwNzE5MDIxNjQ1WhcNMjUwNzI2MDIxNjQ1WjAYMRYwFAYD VQQDEw02ODdiMDAwZC0zODA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAot3JJbTjGNZBz0TzpkU0U45EI8lUsrgKKFNrjQF1hng3oynIw60c+9DleC7C 2zMWtrhKDMAI9DT/KKtdJu8gB42PAdbx5B4VbKSHVLGFekMLSe+nsA3UBIayP17u 60sn4EqvNyIpY0GfkI138hFzIeXtRzflwtKLWypn1EkVHJg7wYc0iQuciV2M6ebI Vkr+5ocFqsdSmWhFMOzKJO41bq4Al2wJvXboxSFK9Hp9VFgvcFCUT3hA/Fry6d5s Y0Vh50LJvGfwOtKhcf00750j6gZxZHElTta+86p4IOzF5x3Qe5umsOboyg6YsUhJ rRLiD5cuInddNfjq+W9wNh4OdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1JeX4C WzlRfY9s+jJTXPGmmp3xMB8GA1UdIwQYMBaAFEBC1uY3ntgEJIs2De2YXvf1ZSAR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ2NS9ENjBGMDI3MjI4 QkIxMUVEQTU5QzMwODFDNEY5QUUwMi9RRUxXNWplZTJBUWtpellON1poZTlfVmxJ QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FFTFc1amVlMkFRa2l6WU43WmhlOV9WbElCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ2NS9ENjBGMDI3MjI4QkIxMUVEQTU5QzMwODFDNEY5QUUwMi9RRUxXNWplZTJB UWtpellON1poZTlfVmxJQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBWlZV1GFYPhdQpo84Y3n+1CW/M/uavuptUK229ng1ddjhOw6u5BU9 5mchmJCGsEn72K0+9zBd/WC0cLGDNqt93dvwvqa7cY16MEkZhzgVVeX1NeFVc3DM hOblvOvZDCP99h2lnC++PmRJVy6NrXb70RNuo0kMwehRESOAYPe0rYoDodm9bvDe KkmFrpITLmkDCGfb3J/A3jG1qbkdbfmHSBKHVvjRzG3/7Oi4X2xmtz6mSt92qMkV dy3cokXvKV0xmw91y9TPtK/VxZRrXOYpDCaoA+Xvl5t3GaH/4FJmzGaSQZoWea5Z WK6e0G5p0sQYtR8upyTshIk6VoAnIIg0 -----END CERTIFICATE-----Generated at Sun Jul 20 03:44:26 2025 by rpki-client