$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: lZxUx9SNw0mVdSUh1Y1XIoH6nRhoIuTIZ/0Rh/jt6EY= Subject key identifier: 8C:47:44:86:DD:1B:53:63:F4:ED:DA:15:DA:7E:82:8A:B5:60:F8:ED Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 0218 Signing time: Wed 17 Sep 2025 02:33:41 +0000 Manifest this update: Wed 17 Sep 2025 02:33:40 +0000 Manifest next update: Wed 24 Sep 2025 02:33:40 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: 1KGWdZtewL93KXoP/JV/OK/XBtvxZawuZvvGiN0x+2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:33:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: Sep 17 02:33:40 2025 GMT Not After : Sep 24 02:33:40 2025 GMT Subject: CN=68ca1e05-aef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:ab:51:d1:a4:f3:20:52:b0:e6:5b:d5:88: a2:82:15:73:a9:4d:08:ef:4d:b9:eb:22:00:24:0c: d5:e2:61:1b:26:7b:b0:62:6f:fa:79:f3:a0:d1:ad: f4:0b:5e:5e:2e:5d:d3:8f:ac:18:67:97:7d:f7:18: 0c:a0:07:2c:7c:c4:ed:a6:7a:f3:b2:21:59:01:10: 7e:e0:ac:1c:8b:ff:51:b4:35:57:7e:a0:dc:02:33: e3:05:4a:c7:9e:9d:9e:86:cd:9e:7f:b3:41:bd:de: f2:b8:1f:c3:94:6e:ed:43:31:24:02:4e:97:34:a3: d1:4a:e7:61:a7:27:f0:97:e7:4f:c0:f4:b9:bf:9f: 69:0b:e8:b9:72:51:46:94:32:7e:c6:01:76:0f:fe: 5c:f2:8b:df:92:e5:23:16:c4:a7:c9:6c:2c:ba:6e: 2b:3f:2f:9b:c4:1e:68:0a:45:77:31:cd:f6:5e:0b: 7e:43:95:d3:b9:70:f3:c0:7c:86:1b:56:64:d4:e3: 17:79:cd:70:cf:07:e4:9a:44:e3:77:aa:a2:97:cb: d4:fd:e8:25:26:5e:66:95:ac:5a:a2:19:5c:fc:5a: e0:eb:da:a8:bc:f9:ad:1a:9f:28:d3:33:e6:72:d0: d9:f2:a8:da:90:4f:cd:63:b2:ba:d5:9a:af:fe:e3: 97:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:47:44:86:DD:1B:53:63:F4:ED:DA:15:DA:7E:82:8A:B5:60:F8:ED X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0a:0e:52:da:59:6a:a4:92:23:3f:a3:b4:91:b5:28:cb:01: a6:5f:66:a6:76:d1:c5:bd:85:77:93:88:e3:44:f0:5b:fa:9d: c1:63:c2:49:e4:24:83:f8:06:ea:4b:b6:de:99:74:f4:35:e8: bc:c8:74:36:0d:c2:1e:df:36:9f:fd:df:92:3e:6b:8c:e8:10: 9e:3e:09:e5:32:8d:b0:21:09:b0:1f:a1:ea:a2:9c:3f:6d:d9: 8f:64:df:d9:b4:4c:9e:36:af:60:25:cf:0a:8a:25:cc:f4:d6: 47:64:8f:62:a1:31:ec:b7:7e:c5:8e:92:e4:b4:58:c2:ff:a8: 3e:b0:7a:5b:c6:62:c8:5d:08:67:bf:a4:25:67:e7:e8:b1:ca: 27:27:c7:c4:77:1b:08:0e:07:c1:f2:66:0b:a1:11:c3:38:ce: 6e:fc:18:53:43:76:3a:d3:d5:4f:20:14:91:c2:a2:c6:96:9f: e9:11:eb:ff:d5:9c:ab:29:d0:51:39:c1:6e:92:64:f7:ed:d8: dc:07:7c:6f:fe:e7:4e:17:25:59:27:d1:0d:cf:d2:c2:64:bd: c8:58:46:9a:07:41:c5:ef:6a:0c:34:71:0e:54:83:cf:59:8a: e2:22:a9:7f:18:e7:a7:ab:de:f8:3e:ca:1c:b2:dd:4f:12:ed: 9d:1f:29:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUwOTE3MDIzMzQwWhcNMjUwOTI0MDIzMzQwWjAYMRYwFAYD VQQDEw02OGNhMWUwNS1hZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVurUdGk8yBSsOZb1YiighVzqU0I70256yIAJAzV4mEbJnuwYm/6efOg0a30 C15eLl3Tj6wYZ5d99xgMoAcsfMTtpnrzsiFZARB+4Kwci/9RtDVXfqDcAjPjBUrH np2ehs2ef7NBvd7yuB/DlG7tQzEkAk6XNKPRSudhpyfwl+dPwPS5v59pC+i5clFG lDJ+xgF2D/5c8ovfkuUjFsSnyWwsum4rPy+bxB5oCkV3Mc32Xgt+Q5XTuXDzwHyG G1Zk1OMXec1wzwfkmkTjd6qil8vU/eglJl5mlaxaohlc/Frg69qovPmtGp8o0zPm ctDZ8qjakE/NY7K61Zqv/uOXywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIxHRIbd G1Nj9O3aFdp+goq1YPjtMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfCg5S2llqpJIjP6O0kbUoywGmX2amdtHFvYV3k4jjRPBb+p3BY8JJ 5CSD+AbqS7bemXT0Nei8yHQ2DcIe3zaf/d+SPmuM6BCePgnlMo2wIQmwH6Hqopw/ bdmPZN/ZtEyeNq9gJc8KiiXM9NZHZI9ioTHst37FjpLktFjC/6g+sHpbxmLIXQhn v6QlZ+fosconJ8fEdxsIDgfB8mYLoRHDOM5u/BhTQ3Y609VPIBSRwqLGlp/pEev/ 1ZyrKdBROcFukmT37djcB3xv/udOFyVZJ9ENz9LCZL3IWEaaB0HF72oMNHEOVIPP WYriIql/GOenq974Psocst1PEu2dHynR -----END CERTIFICATE-----Generated at Thu Sep 18 21:55:17 2025 by rpki-client