$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: 1axIHx6Nw9ZmFQNWshr0omRd94vkoGlgthHZbrfza78= Subject key identifier: 15:7D:28:DC:AE:23:C7:FA:58:8E:39:7D:EC:C3:EA:D6:16:10:3E:39 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 01D7 Signing time: Sun 19 Oct 2025 05:14:29 +0000 Manifest this update: Sun 19 Oct 2025 05:14:29 +0000 Manifest next update: Sun 26 Oct 2025 05:14:29 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: asxxjOtRenWt0SP7UiZN9bagZrMOGLzTlLn7qj/EArs=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Oct 19 05:14:29 2025 GMT Not After : Oct 26 05:14:29 2025 GMT Subject: CN=68f473b5-c976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:14:72:aa:ad:78:29:92:d3:9b:88:cd:e8: 67:87:ef:89:7b:57:53:b5:5a:a1:22:10:24:10:b2: bc:de:fb:a4:5f:9c:8a:37:37:3b:ea:79:08:84:59: e2:cf:39:44:14:ee:55:2a:55:a5:16:d1:07:78:13: 1d:3a:b1:9b:b0:d0:55:f2:0a:0d:16:ba:45:85:d9: eb:ec:37:63:5a:3c:f4:89:f5:8e:59:ce:9d:29:9d: 7f:50:ac:74:51:c8:70:e5:6e:5c:94:ea:af:9e:51: 32:00:fd:cd:dc:ec:8f:44:83:ca:f4:b7:8a:e5:a4: 6a:f6:7a:fa:41:64:95:98:82:68:03:5a:91:22:34: d5:42:6f:07:28:0e:d0:48:95:1d:f5:44:90:6c:f7: 49:0d:9b:b8:0e:13:93:5b:35:11:db:e1:c2:5e:b3: fc:99:53:1a:9b:30:4f:66:15:f4:cd:2d:d7:87:29: bd:3c:4d:39:21:79:77:99:8e:85:34:13:c8:c3:77: de:a0:1c:9d:04:13:d1:c2:c8:fe:5b:0d:2b:99:8e: 08:2d:0f:84:2d:8b:aa:58:cd:22:1d:d9:3e:12:c9: 9e:b4:5a:7f:66:94:30:0d:6b:a0:af:c6:20:98:40: 79:41:b2:02:d9:9a:ad:01:36:c0:67:87:bc:e1:46: 49:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7D:28:DC:AE:23:C7:FA:58:8E:39:7D:EC:C3:EA:D6:16:10:3E:39 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:06:a2:3d:96:f6:d1:61:f0:fb:e5:7c:9a:13:fb:9a:b8:2b: 7c:e5:43:01:e7:ff:be:10:e6:71:1c:e5:15:03:8c:25:14:13: a2:e8:1b:e3:9c:90:6f:cf:23:b0:b0:08:15:9c:08:e7:fd:44: d1:93:f6:d7:75:8e:97:3b:6e:3b:f5:a0:aa:33:63:8b:b0:68: 90:e1:7b:bb:91:51:04:04:1e:2f:5b:22:f2:5d:3f:57:f5:49: a0:2f:05:34:92:60:4e:8e:ef:06:ed:3e:7f:35:3b:82:b3:b4: 83:13:b3:55:42:5a:ff:f3:8e:ad:a8:eb:49:45:6b:70:df:64: fa:71:5a:66:df:5c:33:ed:dd:17:d5:6e:34:2c:82:2a:b4:bb: 4e:ef:cb:d6:c3:c4:d2:8c:28:10:4f:16:22:b5:25:82:42:a0: 00:dd:36:50:2a:88:92:b0:5f:de:9d:3a:fd:7c:25:60:69:1b: d1:e5:0e:56:da:84:56:25:f4:6b:3c:92:da:b9:77:a8:4e:60: 47:93:e5:c1:2d:f6:ad:0a:f7:8c:07:3f:b5:05:f4:c5:d4:23: 54:57:bd:cf:f2:0e:77:ad:68:15:41:a2:24:54:bc:f4:74:72: 96:b7:05:b9:19:d7:af:a4:c2:c8:13:eb:a5:72:49:56:ad:71: 7d:d4:16:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUxMDE5MDUxNDI5WhcNMjUxMDI2MDUxNDI5WjAYMRYwFAYD VQQDEw02OGY0NzNiNS1jOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtscUcqqteCmS05uIzehnh++Je1dTtVqhIhAkELK83vukX5yKNzc76nkIhFni zzlEFO5VKlWlFtEHeBMdOrGbsNBV8goNFrpFhdnr7DdjWjz0ifWOWc6dKZ1/UKx0 Uchw5W5clOqvnlEyAP3N3OyPRIPK9LeK5aRq9nr6QWSVmIJoA1qRIjTVQm8HKA7Q SJUd9USQbPdJDZu4DhOTWzUR2+HCXrP8mVMamzBPZhX0zS3Xhym9PE05IXl3mY6F NBPIw3feoBydBBPRwsj+Ww0rmY4ILQ+ELYuqWM0iHdk+EsmetFp/ZpQwDWugr8Yg mEB5QbIC2ZqtATbAZ4e84UZJmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBV9KNyu I8f6WI45fezD6tYWED45MB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5BqI9lvbRYfD75XyaE/uauCt85UMB5/++EOZxHOUVA4wlFBOi6Bvj nJBvzyOwsAgVnAjn/UTRk/bXdY6XO2479aCqM2OLsGiQ4Xu7kVEEBB4vWyLyXT9X 9UmgLwU0kmBOju8G7T5/NTuCs7SDE7NVQlr/846tqOtJRWtw32T6cVpm31wz7d0X 1W40LIIqtLtO78vWw8TSjCgQTxYitSWCQqAA3TZQKoiSsF/enTr9fCVgaRvR5Q5W 2oRWJfRrPJLauXeoTmBHk+XBLfatCveMBz+1BfTF1CNUV73P8g53rWgVQaIkVLz0 dHKWtwW5GdevpMLIE+ulcklWrXF91Bau -----END CERTIFICATE-----Generated at Mon Oct 20 18:37:26 2025 by rpki-client