$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: 9+7j63Z+FVHRnLqLdNrgbpSxYO2xEU9wOz4vllgXAYA= Subject key identifier: D1:F6:12:3A:0C:E2:2B:CC:92:C8:E0:11:31:E6:21:26:4A:B5:4F:A2 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 019F Signing time: Tue 01 Jul 2025 03:46:24 +0000 Manifest this update: Tue 01 Jul 2025 03:46:24 +0000 Manifest next update: Tue 08 Jul 2025 03:46:24 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: cZgYk2ctXAr0DsNmKwOzh+WiMy9M9MY/HG2+tsjUIm4=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Jul 1 03:46:24 2025 GMT Not After : Jul 8 03:46:24 2025 GMT Subject: CN=68635a10-69bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:d0:00:37:c0:e2:70:4f:d7:f6:96:81:47: 49:5c:6d:4d:67:29:67:04:9b:4f:17:4b:9b:6c:aa: 46:47:0d:ad:d9:00:be:75:19:a6:9a:59:c8:a4:e2: 75:ba:04:64:17:8c:fa:ee:ed:c0:51:f8:fa:da:cb: e7:db:2f:bf:90:82:cf:63:a4:36:be:00:89:43:87: 14:08:4a:23:9a:e4:05:09:aa:22:de:57:7f:55:74: bb:43:3b:b1:ae:e0:be:ab:86:34:07:c6:2d:ff:18: 17:80:9a:73:9e:44:7b:28:e8:20:68:60:29:c7:2a: bd:c7:6b:40:a5:31:15:7e:39:26:64:d9:20:e4:ef: 8e:06:70:db:a3:3c:dd:c3:1b:6d:0a:64:85:ba:fd: 91:6b:50:03:5a:96:48:8a:bb:19:1d:74:ce:68:fe: 1a:b5:cd:30:44:78:8f:1f:dd:c4:3e:7f:5e:58:a6: 7a:2c:3b:ce:5d:6c:ae:a4:97:52:7f:48:05:d8:04: 15:6c:ee:df:8f:90:d2:d1:5e:d3:b0:4f:cf:f4:fd: fb:5c:4e:a9:cb:c8:e5:97:5c:5f:c1:cd:07:d6:53: 79:9d:9a:4d:f7:38:32:dd:e0:88:dd:90:8c:67:bc: 6a:79:76:0f:ce:fb:b1:06:4d:c2:21:42:6a:44:22: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F6:12:3A:0C:E2:2B:CC:92:C8:E0:11:31:E6:21:26:4A:B5:4F:A2 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:58:26:63:86:0c:11:76:b5:b6:7d:ab:d6:0b:f1:34:3f:25: 9e:e4:a7:12:73:20:fd:64:e6:34:70:de:c8:ec:db:0b:ea:49: 42:50:cd:b8:0b:a0:8b:89:5e:e0:50:3b:3c:9c:44:15:f5:ee: 3c:ec:a5:ce:a2:33:3b:f7:48:99:aa:6e:19:0c:61:f8:ff:cb: 7b:66:8f:b2:61:a4:13:13:09:70:49:a6:0a:53:4c:84:22:1a: f4:9f:5b:ad:5e:4f:21:96:16:f8:d3:cc:e0:21:0c:c9:b2:fe: d9:d4:a6:56:e4:30:5c:cd:71:7e:38:82:48:b2:c8:c8:2b:14: 8f:0e:5d:93:90:78:ad:4a:25:6b:fa:9f:10:af:47:9b:cf:78: 83:d3:9d:97:0b:ba:e2:52:e1:cb:5b:14:d1:fd:c3:2e:bc:c6: fd:63:04:dc:bf:f2:ad:5e:e2:9a:cd:1b:ab:33:72:58:64:82: a0:34:54:5a:54:44:cf:c5:bf:1c:7d:b7:8e:70:d1:68:34:d1: 1d:d2:c4:fe:14:12:dd:b1:71:84:2b:db:79:8a:69:ca:20:30: 28:3a:c5:c6:b0:2d:ab:a2:ca:df:e7:8c:3e:c3:ad:47:5f:3b: 58:5b:31:c6:9a:10:8f:d6:90:7c:25:3a:00:1b:3d:42:9e:18: 89:ae:33:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUwNzAxMDM0NjI0WhcNMjUwNzA4MDM0NjI0WjAYMRYwFAYD VQQDEw02ODYzNWExMC02OWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr57QADfA4nBP1/aWgUdJXG1NZylnBJtPF0ubbKpGRw2t2QC+dRmmmlnIpOJ1 ugRkF4z67u3AUfj62svn2y+/kILPY6Q2vgCJQ4cUCEojmuQFCaoi3ld/VXS7Qzux ruC+q4Y0B8Yt/xgXgJpznkR7KOggaGApxyq9x2tApTEVfjkmZNkg5O+OBnDbozzd wxttCmSFuv2Ra1ADWpZIirsZHXTOaP4atc0wRHiPH93EPn9eWKZ6LDvOXWyupJdS f0gF2AQVbO7fj5DS0V7TsE/P9P37XE6py8jll1xfwc0H1lN5nZpN9zgy3eCI3ZCM Z7xqeXYPzvuxBk3CIUJqRCJpswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNH2EjoM 4ivMksjgETHmISZKtU+iMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDWCZjhgwRdrW2favWC/E0PyWe5KcScyD9ZOY0cN7I7NsL6klCUM24 C6CLiV7gUDs8nEQV9e487KXOojM790iZqm4ZDGH4/8t7Zo+yYaQTEwlwSaYKU0yE Ihr0n1utXk8hlhb408zgIQzJsv7Z1KZW5DBczXF+OIJIssjIKxSPDl2TkHitSiVr +p8Qr0ebz3iD052XC7riUuHLWxTR/cMuvMb9YwTcv/KtXuKazRurM3JYZIKgNFRa VETPxb8cfbeOcNFoNNEd0sT+FBLdsXGEK9t5imnKIDAoOsXGsC2rosrf54w+w61H XztYWzHGmhCP1pB8JToAGz1CnhiJrjOj -----END CERTIFICATE-----Generated at Wed Jul 2 11:48:40 2025 by rpki-client