$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: skf9YoO2p7hG3rI2mdxfqgZsvjRd3LvhfprYK6bwoTw= Subject key identifier: 5A:47:CE:F1:03:4C:79:BB:68:0D:17:57:0D:54:54:F9:D1:01:16:86 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 01BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 01BA Signing time: Sat 23 Aug 2025 03:12:01 +0000 Manifest this update: Sat 23 Aug 2025 03:12:01 +0000 Manifest next update: Sat 30 Aug 2025 03:12:01 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: zo+u8Xtqze+BR7J88CES8RaBLIv2+jSw3sfr6JychY0=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 446 (0x1be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Aug 23 03:12:01 2025 GMT Not After : Aug 30 03:12:01 2025 GMT Subject: CN=68a93181-b0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:77:38:f8:2e:3a:88:a3:6c:4e:ff:c9:82: 91:10:47:8c:6a:22:e5:db:d0:a5:bb:f9:75:9a:4e: b8:2a:f6:df:c6:39:0c:74:d6:8d:3f:ba:c1:48:53: 0b:c0:3f:7d:cc:83:1a:63:09:c9:69:2c:a8:27:7f: 55:e5:80:2a:10:58:de:24:9b:7c:c5:3f:64:0a:fe: 9c:ad:61:09:36:0f:a9:81:bc:89:8e:9b:63:9d:09: 09:05:a7:b0:d8:ce:e2:36:ab:e2:2e:2b:2b:2e:7f: 7b:f6:2e:70:04:ab:f3:16:41:98:a1:25:f0:22:b3: 8d:be:0c:52:51:24:81:06:09:05:de:0b:3b:6c:db: 85:9a:52:4a:c0:f4:74:1e:cb:74:de:54:e1:c4:dc: cd:45:0d:ab:7b:7a:24:b7:14:55:b1:bc:bd:3b:c6: 53:f4:03:05:50:da:75:96:d2:4f:34:fd:96:63:48: e5:e5:0a:a6:d3:6a:2e:72:12:64:91:de:2f:b6:e2: 3c:64:af:6b:8f:38:a0:d5:bb:aa:6c:ea:61:70:fd: 0d:08:95:6d:d3:2c:5c:78:7e:7a:df:2b:0e:ec:6a: 86:f9:3c:2b:41:b1:6c:df:06:58:ce:a5:3e:bd:4f: 0b:dc:8c:8d:11:6e:af:56:a4:61:9d:8d:ea:61:25: 1b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:47:CE:F1:03:4C:79:BB:68:0D:17:57:0D:54:54:F9:D1:01:16:86 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:78:ae:ee:4b:4a:d9:8c:9d:a3:f6:ab:76:3f:00:e0:66:fe: 46:6e:87:e3:ca:48:82:46:2e:b6:90:9b:8b:44:dc:b5:95:d3: 24:39:5d:22:55:0c:43:e8:81:f9:bc:34:9d:4b:fd:b5:0a:71: 72:c3:ec:f4:88:59:45:fa:19:81:d9:2d:a7:f1:da:37:20:58: db:75:e7:3f:08:26:7d:09:70:a8:bf:f8:4f:18:df:df:78:63: f3:82:89:3d:4c:8f:f1:f1:ea:b4:7a:1b:57:5d:20:a3:48:c4: b8:29:b8:21:e3:c9:22:fc:fc:18:11:49:be:69:03:9f:c7:34: ac:8b:f3:1d:69:84:be:c9:52:4b:e6:34:45:ae:d2:33:63:9d: d6:0d:70:12:f9:66:f7:5d:e5:0e:8b:1c:1d:be:f5:47:21:87: 67:48:df:38:a3:7c:e7:c4:3d:e3:5a:63:ec:5c:fc:d0:d1:f1: 48:5c:be:10:ce:ab:94:98:96:b8:24:b5:6c:18:ec:32:fe:3b: a7:ce:9c:10:0c:8e:c7:e2:e5:da:3c:53:57:4e:ec:f6:65:85: 6b:17:70:e5:aa:dc:0a:24:93:ba:4b:8e:eb:c1:8a:94:d9:1c: 46:5e:be:9d:b3:e3:2e:d2:09:d0:a5:e4:83:2a:5f:ee:48:a6: f1:24:bd:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUwODIzMDMxMjAxWhcNMjUwODMwMDMxMjAxWjAYMRYwFAYD VQQDEw02OGE5MzE4MS1iMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqFN3OPguOoijbE7/yYKREEeMaiLl29Clu/l1mk64KvbfxjkMdNaNP7rBSFML wD99zIMaYwnJaSyoJ39V5YAqEFjeJJt8xT9kCv6crWEJNg+pgbyJjptjnQkJBaew 2M7iNqviLisrLn979i5wBKvzFkGYoSXwIrONvgxSUSSBBgkF3gs7bNuFmlJKwPR0 Hst03lThxNzNRQ2re3oktxRVsby9O8ZT9AMFUNp1ltJPNP2WY0jl5Qqm02ouchJk kd4vtuI8ZK9rjzig1buqbOphcP0NCJVt0yxceH563ysO7GqG+TwrQbFs3wZYzqU+ vU8L3IyNEW6vVqRhnY3qYSUbIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFpHzvED THm7aA0XVw1UVPnRARaGMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSeK7uS0rZjJ2j9qt2PwDgZv5GbofjykiCRi62kJuLRNy1ldMkOV0i VQxD6IH5vDSdS/21CnFyw+z0iFlF+hmB2S2n8do3IFjbdec/CCZ9CXCov/hPGN/f eGPzgok9TI/x8eq0ehtXXSCjSMS4Kbgh48ki/PwYEUm+aQOfxzSsi/MdaYS+yVJL 5jRFrtIzY53WDXAS+Wb3XeUOixwdvvVHIYdnSN84o3znxD3jWmPsXPzQ0fFIXL4Q zquUmJa4JLVsGOwy/junzpwQDI7H4uXaPFNXTuz2ZYVrF3DlqtwKJJO6S47rwYqU 2RxGXr6ds+Mu0gnQpeSDKl/uSKbxJL29 -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:32 2025 by rpki-client