$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: owDvg0vtFcH9xHAqEYyI7UnM22ETFsI2i5XpanlddsU= Subject key identifier: 7D:34:48:1A:03:6A:0F:63:79:16:8D:B3:D9:3E:3B:27:C1:9C:6E:80 Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 01FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 01F9 Signing time: Sat 19 Jul 2025 02:35:09 +0000 Manifest this update: Sat 19 Jul 2025 02:35:08 +0000 Manifest next update: Sat 26 Jul 2025 02:35:08 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: G0KmikobOF7/oeuKa080LgABGa07Y4ch5T+H0Oj6QMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 507 (0x1fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Jul 19 02:35:08 2025 GMT Not After : Jul 26 02:35:08 2025 GMT Subject: CN=687b045c-fc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:1a:ce:8a:c2:a4:b7:f4:7e:6a:f4:7c:eb: 0b:97:a8:6a:f2:ef:c0:02:f3:e1:6e:bc:3c:55:01: f2:eb:52:db:6e:4f:54:fd:d1:9b:73:f1:27:1c:e5: 44:01:60:24:e2:78:41:27:0b:fe:25:78:f5:b6:1c: bf:b8:56:88:6c:be:d5:82:e0:00:96:be:d7:c5:4e: 2a:7d:ea:59:41:4a:5d:4b:75:3f:9f:76:75:33:30: 8a:6f:91:05:24:d9:d7:b6:c3:3d:5b:7e:fe:fb:0a: 0a:54:d5:2a:e3:4e:f9:c1:86:09:fb:99:35:5a:3f: 98:ac:9c:0f:2c:be:73:31:da:85:b1:d1:ea:06:3c: 35:6e:34:6e:95:3b:a6:84:b9:5a:99:f3:31:c6:dd: c5:22:03:85:f7:7a:8d:d9:9b:53:c6:a8:bb:e3:9f: 4b:e0:7b:4f:0a:c2:26:68:26:09:3b:02:36:de:bd: d6:b2:81:6c:8b:5b:db:5c:d5:b9:80:f4:19:74:0e: 9a:09:8f:11:d7:40:1f:b5:6d:90:e4:b4:83:1f:ef: 78:8c:3b:b1:5e:ce:71:4b:cf:a1:57:c5:6a:d3:c7: 24:ac:7e:37:fa:d9:d5:4e:63:90:71:97:3f:2a:31: ec:c6:d5:5c:32:59:0e:21:2a:9f:ea:09:15:8b:e7: e1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:34:48:1A:03:6A:0F:63:79:16:8D:B3:D9:3E:3B:27:C1:9C:6E:80 X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:38:8e:f9:1e:7c:f8:c2:4f:50:7d:cd:d0:c4:65:be:1c:59: 74:31:c0:6e:24:96:84:c1:11:ba:ea:28:85:f9:cb:eb:1c:85: f0:40:68:3f:d4:44:06:0d:a9:fa:65:a6:e2:f8:18:7e:8e:29: b0:a9:d8:6d:8a:f5:ad:17:5e:19:c1:a8:c6:0e:c2:7d:65:d9: 1c:a4:69:95:54:e7:75:10:b6:32:ac:84:9f:6b:33:e4:07:f0: 80:94:15:7b:f7:a8:c5:4c:35:08:26:16:cd:f2:17:d2:27:be: 01:52:1e:68:3e:2e:01:fe:b0:a2:c1:3c:aa:2f:be:5e:cc:0c: cb:a6:31:1f:5d:7e:6e:20:e3:f7:b4:bb:7c:ca:29:d7:78:14: c0:b2:21:ac:04:72:a4:fa:14:73:d7:cb:4d:c3:60:92:22:c2: bc:8e:cd:3f:36:37:0a:94:9a:92:5e:2b:85:81:9f:08:a5:e0: 8c:e4:c9:e4:77:73:f3:d3:d6:75:46:9e:eb:1b:8f:de:b7:4d: 6b:d6:26:55:88:33:68:93:a0:13:3c:00:98:cf:bb:e3:b4:5e: e9:91:db:20:8f:21:54:be:cf:ae:0b:58:e0:79:97:69:07:0c: 07:8b:b2:9b:1c:2e:7e:87:56:16:6c:59:f0:ee:81:c9:23:fa: 45:d2:1d:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUwNzE5MDIzNTA4WhcNMjUwNzI2MDIzNTA4WjAYMRYwFAYD VQQDEw02ODdiMDQ1Yy1mYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkkazorCpLf0fmr0fOsLl6hq8u/AAvPhbrw8VQHy61Lbbk9U/dGbc/EnHOVE AWAk4nhBJwv+JXj1thy/uFaIbL7VguAAlr7XxU4qfepZQUpdS3U/n3Z1MzCKb5EF JNnXtsM9W37++woKVNUq4075wYYJ+5k1Wj+YrJwPLL5zMdqFsdHqBjw1bjRulTum hLlamfMxxt3FIgOF93qN2ZtTxqi7459L4HtPCsImaCYJOwI23r3WsoFsi1vbXNW5 gPQZdA6aCY8R10AftW2Q5LSDH+94jDuxXs5xS8+hV8Vq08ckrH43+tnVTmOQcZc/ KjHsxtVcMlkOISqf6gkVi+fhQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH00SBoD ag9jeRaNs9k+OyfBnG6AMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQOI75Hnz4wk9Qfc3QxGW+HFl0McBuJJaEwRG66iiF+cvrHIXwQGg/ 1EQGDan6Zabi+Bh+jimwqdhtivWtF14ZwajGDsJ9ZdkcpGmVVOd1ELYyrISfazPk B/CAlBV796jFTDUIJhbN8hfSJ74BUh5oPi4B/rCiwTyqL75ezAzLpjEfXX5uIOP3 tLt8yinXeBTAsiGsBHKk+hRz18tNw2CSIsK8js0/NjcKlJqSXiuFgZ8IpeCM5Mnk d3Pz09Z1Rp7rG4/et01r1iZViDNok6ATPACYz7vjtF7pkdsgjyFUvs+uC1jgeZdp BwwHi7KbHC5+h1YWbFnw7oHJI/pF0h0n -----END CERTIFICATE-----Generated at Sun Jul 20 07:41:47 2025 by rpki-client