$ rpki-client -vvf rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft File: QX1X3RxCy0uksVLTbbBby3iBM98.mft (raw, json) Hash identifier: 5jt6n/Y5UKgoJQyWZpCFM1W1srXFtf1AmcpGJlsClTI= Subject key identifier: 0F:4C:06:19:E7:BA:6F:75:C3:B8:FB:7E:F6:D2:E7:FD:54:65:AC:6A Authority key identifier: 41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF Certificate issuer: /CN=A9148848/serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft Manifest number: 01DF Signing time: Sat 31 May 2025 02:23:36 +0000 Manifest this update: Sat 31 May 2025 02:23:35 +0000 Manifest next update: Sat 07 Jun 2025 02:23:35 +0000 Files and hashes: 1: QX1X3RxCy0uksVLTbbBby3iBM98.crl (hash: RNZv7THLQQqMkHzn1Fqqya2ooLFXdI27hQ1Jp7eiRsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148848, serialNumber=417D57DD1C42CB4BA4B152D36DB05BCB788133DF Validity Not Before: May 31 02:23:35 2025 GMT Not After : Jun 7 02:23:35 2025 GMT Subject: CN=683a6828-3bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:32:7e:db:2c:7c:23:57:47:22:6d:af:61: 8b:42:0f:48:71:73:0b:66:d2:67:75:06:16:ae:b3: eb:e8:a4:3c:df:28:45:9c:34:ce:21:04:0c:a2:8b: 97:68:22:94:4e:db:99:69:d4:2b:9a:fd:89:aa:41: 1e:c2:66:45:d3:11:21:f2:43:bd:ff:6b:30:8e:86: 17:cf:12:5c:64:fc:3b:63:c4:34:92:49:19:76:f2: f3:e4:a2:0e:d1:10:92:dc:41:2a:27:3e:88:06:90: 17:c3:39:a0:04:c5:fc:93:b4:f5:f8:de:9f:56:1c: 50:1d:9f:c6:71:76:9d:53:aa:49:50:bc:a9:51:a5: f2:10:41:9a:80:55:27:e8:ca:a4:60:5d:ba:5d:3e: 61:96:b7:72:4a:3f:5c:0a:00:90:8c:8e:43:e3:49: 4f:3d:73:e1:73:7d:6d:78:3b:1f:8c:e9:64:af:de: d2:bb:da:59:6b:e1:50:0f:83:02:05:53:20:dd:d3: 5f:5a:f2:81:a0:9e:9a:a5:9d:f7:9a:60:b7:3f:8e: f3:73:7d:3f:c9:77:6d:bb:92:cd:ab:48:22:37:91: 57:bc:ae:0c:29:d4:d6:75:a2:b8:bb:92:87:64:19: 3f:e3:d4:f3:6e:80:f3:eb:dc:72:68:a1:19:77:4b: 99:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4C:06:19:E7:BA:6F:75:C3:B8:FB:7E:F6:D2:E7:FD:54:65:AC:6A X509v3 Authority Key Identifier: keyid:41:7D:57:DD:1C:42:CB:4B:A4:B1:52:D3:6D:B0:5B:CB:78:81:33:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QX1X3RxCy0uksVLTbbBby3iBM98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148848/7870E3C85D7D11EDB12F8D5AC4F9AE02/QX1X3RxCy0uksVLTbbBby3iBM98.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:01:b5:81:73:14:a9:7a:07:de:7f:59:d5:c2:50:37:a7:93: 85:6c:1d:f1:06:6a:a3:27:59:5e:19:9f:0a:3c:84:ac:53:3a: 3d:33:b3:41:0f:10:d9:f3:d0:dc:08:bb:62:f0:de:5e:00:4f: a9:ec:d3:e2:a6:6e:97:c9:b4:14:5d:a2:6e:70:2b:c3:99:79: 35:97:e1:ba:22:54:7f:fb:31:89:c9:20:28:f5:ee:bb:16:78: 3b:11:0d:b2:05:f7:9e:e9:02:df:9c:f1:18:26:03:5e:92:3e: 93:41:22:7a:2f:76:3a:22:39:e6:2c:6e:76:3d:39:e9:9e:88: 12:1d:82:6f:06:cc:01:16:61:d1:fc:c5:47:da:4b:bd:7c:d9: d2:ae:d6:28:88:f8:9a:cd:fb:92:dd:ac:aa:0a:93:dd:c8:54: 43:1c:08:cf:7c:9f:63:c1:8e:82:9a:2e:49:d9:14:dd:6b:56: 5a:fe:a9:11:f0:15:89:76:53:8a:09:7a:b5:e4:c3:43:1e:a6: 85:3b:74:a6:9a:e7:ee:3c:cf:eb:ce:0d:8a:12:e5:d5:92:4e: e0:b9:93:18:0c:33:e7:25:26:f2:74:33:1f:fb:0e:a2:f7:3f: 89:a3:2e:de:42:9a:d5:41:80:14:0e:88:a2:42:40:77:9c:f0: db:d9:71:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg4NDgxMTAvBgNVBAUTKDQxN0Q1N0REMUM0MkNCNEJBNEIxNTJEMzZEQjA1QkNC Nzg4MTMzREYwHhcNMjUwNTMxMDIyMzM1WhcNMjUwNjA3MDIyMzM1WjAYMRYwFAYD VQQDEw02ODNhNjgyOC0zYmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYAyftssfCNXRyJtr2GLQg9IcXMLZtJndQYWrrPr6KQ83yhFnDTOIQQMoouX aCKUTtuZadQrmv2JqkEewmZF0xEh8kO9/2swjoYXzxJcZPw7Y8Q0kkkZdvLz5KIO 0RCS3EEqJz6IBpAXwzmgBMX8k7T1+N6fVhxQHZ/GcXadU6pJULypUaXyEEGagFUn 6MqkYF26XT5hlrdySj9cCgCQjI5D40lPPXPhc31teDsfjOlkr97Su9pZa+FQD4MC BVMg3dNfWvKBoJ6apZ33mmC3P47zc30/yXdtu5LNq0giN5FXvK4MKdTWdaK4u5KH ZBk/49TzboDz69xyaKEZd0uZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9MBhnn um91w7j7fvbS5/1UZaxqMB8GA1UdIwQYMBaAFEF9V90cQstLpLFS022wW8t4gTPf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODg0OC83ODcwRTNDODVE N0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kwdWtzVkxUYmJCYnkzaUJN OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FYMVgzUnhDeTB1a3NWTFRiYkJieTNpQk05OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODg0OC83ODcwRTNDODVEN0QxMUVEQjEyRjhENUFDNEY5QUUwMi9RWDFYM1J4Q3kw dWtzVkxUYmJCYnkzaUJNOTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJAbWBcxSpegfef1nVwlA3p5OFbB3xBmqjJ1leGZ8KPISsUzo9M7NB DxDZ89DcCLti8N5eAE+p7NPipm6XybQUXaJucCvDmXk1l+G6IlR/+zGJySAo9e67 Fng7EQ2yBfee6QLfnPEYJgNekj6TQSJ6L3Y6IjnmLG52PTnpnogSHYJvBswBFmHR /MVH2ku9fNnSrtYoiPiazfuS3ayqCpPdyFRDHAjPfJ9jwY6Cmi5J2RTda1Za/qkR 8BWJdlOKCXq15MNDHqaFO3SmmufuPM/rzg2KEuXVkk7guZMYDDPnJSbydDMf+w6i 9z+Joy7eQprVQYAUDoiiQkB3nPDb2XE9 -----END CERTIFICATE-----Generated at Sat May 31 17:11:21 2025 by rpki-client