$ rpki-client -vvf rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft File: QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft (raw, json) Hash identifier: NCe4sM8LC2cbundJfBFfsY8fPXP3LTAXLxoWH200zkc= Subject key identifier: DC:C3:BE:2D:66:50:B6:E8:C9:0C:73:82:94:32:F9:29:78:69:7F:E6 Authority key identifier: 41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E Certificate issuer: /CN=A91144AB/serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Certificate serial: 3485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft Manifest number: 3485 Signing time: Sat 31 May 2025 14:47:45 +0000 Manifest this update: Sat 31 May 2025 14:47:44 +0000 Manifest next update: Sat 07 Jun 2025 14:47:44 +0000 Files and hashes: 1: QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl (hash: eAzMNwxH5xjyOTWhKfxS/6lR8Jkw3b8ZGkmUsa9433Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13445 (0x3485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144AB, serialNumber=4176F10918C9B18D2DEF8B7C66FC5A3A6582231E Validity Not Before: May 31 14:47:44 2025 GMT Not After : Jun 7 14:47:44 2025 GMT Subject: CN=683b1690-071d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:13:f2:82:7c:c2:dc:96:ad:bf:51:8b:d3: 67:e7:26:23:39:1b:3a:98:90:83:9b:fc:54:2e:aa: 1f:4c:a6:c6:03:87:fc:97:47:44:eb:db:ea:b3:35: b2:99:5f:3f:3c:5a:a7:a9:76:3b:b7:12:10:9c:41: 3a:bd:b2:46:96:cb:8c:df:3e:9f:d3:14:ff:5a:82: 77:28:6e:97:b7:6c:4d:75:b9:2c:78:c2:79:32:f0: 2a:24:80:19:8e:f8:8c:b8:7b:22:d0:7c:ae:f4:eb: 6d:6b:1c:f8:73:a0:49:ef:f0:84:a0:9b:a0:91:93: 5f:e5:f0:22:00:a6:4a:5a:99:1f:c4:d2:6e:48:d2: f0:88:2e:d5:8e:0c:9c:c1:e5:da:93:48:d2:4f:36: c5:00:f4:28:e7:83:cf:3f:8c:7e:3c:f7:eb:4e:94: ed:39:58:aa:bd:51:a4:cc:27:2d:e3:2f:af:f7:b4: a4:55:e5:b9:ff:56:c9:6b:c4:50:a9:57:bd:78:28: 1a:0b:4f:bc:93:9a:10:4d:7f:03:ca:08:91:82:e6: 3c:e4:a7:0c:8d:02:1c:6e:97:d1:d4:da:8c:34:71: 99:ae:2f:6e:1f:07:43:00:d8:8d:f6:9a:6f:c7:67: 85:55:db:37:39:d1:36:7e:e6:f6:d3:c5:cd:3c:bf: 59:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C3:BE:2D:66:50:B6:E8:C9:0C:73:82:94:32:F9:29:78:69:7F:E6 X509v3 Authority Key Identifier: keyid:41:76:F1:09:18:C9:B1:8D:2D:EF:8B:7C:66:FC:5A:3A:65:82:23:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144AB/5E0AA9A21D9511E2B4EE337D08B02CD2/QXbxCRjJsY0t74t8ZvxaOmWCIx4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f6:d1:7c:05:7e:d7:ae:96:70:46:6e:ea:bc:14:1a:d2:d2: 46:e4:d5:6f:9b:9f:33:23:77:b4:8b:25:25:2e:0f:a8:ff:0a: 60:02:b1:b8:35:31:a4:2f:87:d5:a3:bf:e8:ec:bf:50:e0:12: 00:43:d5:26:d4:c6:db:53:4a:b0:f8:28:97:7b:ed:32:4e:ac: 34:ab:47:99:5e:6d:0f:ce:e5:a4:24:8d:03:cb:36:c1:cb:5e: 2a:a1:5e:98:d3:c1:bb:2a:62:fc:6b:05:60:3d:4e:6d:ca:19: c6:c5:ff:9a:87:7e:19:8c:95:9b:7a:16:e6:71:82:6b:8b:59: b6:8d:62:42:28:43:e7:bc:51:32:e1:7e:ae:f5:f2:a4:14:f5: af:fd:04:31:55:a7:79:a1:cb:89:17:cc:11:22:68:c0:35:b9: c6:4c:11:ce:65:ee:12:4f:a6:cd:10:b4:1b:1f:35:e9:ee:89: fd:ba:59:8c:18:0e:16:ee:5b:13:53:d0:13:4c:0e:be:b0:60: e8:f3:9b:0b:2a:1d:0d:36:07:92:c1:39:48:b5:c1:59:c6:4a: 83:6e:fe:d0:e3:b5:97:02:0f:14:1d:95:1b:ce:1e:f3:e7:42: c1:9b:b1:db:6c:c0:89:b5:35:b4:40:3d:75:26:b4:53:5a:ee: f2:d8:a8:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ0QUIxMTAvBgNVBAUTKDQxNzZGMTA5MThDOUIxOEQyREVGOEI3QzY2RkM1QTNB NjU4MjIzMUUwHhcNMjUwNTMxMTQ0NzQ0WhcNMjUwNjA3MTQ0NzQ0WjAYMRYwFAYD VQQDEw02ODNiMTY5MC0wNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVsT8oJ8wtyWrb9Ri9Nn5yYjORs6mJCDm/xULqofTKbGA4f8l0dE69vqszWy mV8/PFqnqXY7txIQnEE6vbJGlsuM3z6f0xT/WoJ3KG6Xt2xNdbkseMJ5MvAqJIAZ jviMuHsi0Hyu9Ottaxz4c6BJ7/CEoJugkZNf5fAiAKZKWpkfxNJuSNLwiC7Vjgyc weXak0jSTzbFAPQo54PPP4x+PPfrTpTtOViqvVGkzCct4y+v97SkVeW5/1bJa8RQ qVe9eCgaC0+8k5oQTX8DygiRguY85KcMjQIcbpfR1NqMNHGZri9uHwdDANiN9ppv x2eFVds3OdE2fub208XNPL9ZEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzDvi1m ULboyQxzgpQy+Sl4aX/mMB8GA1UdIwQYMBaAFEF28QkYybGNLe+LfGb8WjplgiMe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDRBQi81RTBBQTlBMjFE OTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZMHQ3NHQ4WnZ4YU9tV0NJ eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYYnhDUmpKc1kwdDc0dDhadnhhT21XQ0l4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDRBQi81RTBBQTlBMjFEOTUxMUUyQjRFRTMzN0QwOEIwMkNEMi9RWGJ4Q1JqSnNZ MHQ3NHQ4WnZ4YU9tV0NJeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq9tF8BX7XrpZwRm7qvBQa0tJG5NVvm58zI3e0iyUlLg+o/wpgArG4 NTGkL4fVo7/o7L9Q4BIAQ9Um1MbbU0qw+CiXe+0yTqw0q0eZXm0PzuWkJI0DyzbB y14qoV6Y08G7KmL8awVgPU5tyhnGxf+ah34ZjJWbehbmcYJri1m2jWJCKEPnvFEy 4X6u9fKkFPWv/QQxVad5ocuJF8wRImjANbnGTBHOZe4ST6bNELQbHzXp7on9ulmM GA4W7lsTU9ATTA6+sGDo85sLKh0NNgeSwTlItcFZxkqDbv7Q47WXAg8UHZUbzh7z 50LBm7HbbMCJtTW0QD11JrRTWu7y2Kg3 -----END CERTIFICATE-----Generated at Sat May 31 17:30:24 2025 by rpki-client