$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft File: QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json) Hash identifier: S5KgTr0da+R6Dh6NG01sQrdvDflbXpVcpLvPCgLU78Y= Subject key identifier: 18:99:9E:CE:21:F9:66:14:E6:DB:AF:E2:CC:36:76:CC:D4:0C:F7:B3 Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Certificate serial: 09E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft Manifest number: 09E1 Signing time: Fri 22 Aug 2025 20:03:42 +0000 Manifest this update: Fri 22 Aug 2025 20:03:41 +0000 Manifest next update: Fri 29 Aug 2025 20:03:41 +0000 Files and hashes: 1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: bi9DwHKcEMMEW68rT/41G+gswN5NNILRPSmZDiFAKYM=) 2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: daFA8yMRnffIfjJ7fLZ41ES4LLpPtN0oWTU77ItHPkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2537 (0x9e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Validity Not Before: Aug 22 20:03:41 2025 GMT Not After : Aug 29 20:03:41 2025 GMT Subject: CN=68a8cd1d-4bff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:f7:6e:71:2d:f7:ba:2b:4d:31:3a:b0:1b: fe:c1:ed:97:a1:af:09:76:0d:ee:4a:11:e9:77:d1: 9b:1b:71:0f:b2:3f:ef:b1:e5:c8:19:92:e7:7d:50: 95:ca:47:40:4d:c2:40:c0:dc:34:ad:a3:5c:ee:86: 13:89:68:52:dd:26:1b:0b:7e:e2:ea:cb:d6:5f:3d: 8a:cb:71:14:04:5e:68:72:1a:70:b5:41:5c:0b:ef: f9:b3:d6:77:f2:31:36:ef:9e:1e:93:6e:1a:18:11: 49:e2:d5:98:db:36:29:65:b7:35:1b:22:e0:b0:9d: cb:9e:2e:b2:21:7a:26:e3:88:f5:1e:8f:e9:18:40: b3:e0:23:63:13:bf:9c:d2:f2:81:3a:19:b2:9f:21: e3:95:f9:16:8e:dc:7b:81:78:f6:60:f9:c3:63:22: 6c:f3:fe:f0:40:e1:07:e1:89:76:7e:2e:e1:d0:9b: 49:ba:8c:34:9b:da:84:96:31:fe:00:08:b2:0d:96: 6b:c7:2b:aa:27:a6:62:19:5d:8c:44:76:6e:19:54: 51:57:0a:4f:c5:97:12:ac:32:d6:32:df:43:be:19: 7d:a0:01:4d:35:82:f7:a0:08:ab:4c:ef:29:6d:c5: e7:47:9d:9c:4a:d9:b5:4a:db:49:9a:b4:df:f9:db: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:9E:CE:21:F9:66:14:E6:DB:AF:E2:CC:36:76:CC:D4:0C:F7:B3 X509v3 Authority Key Identifier: keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:16:ba:84:ec:e8:31:73:18:a2:29:99:7e:3c:2e:cc:9e:dd: 51:f5:e2:ed:84:83:b3:66:00:e1:1d:54:95:3e:2e:42:c2:38: 79:14:58:d9:81:88:b5:05:93:14:fb:0f:8d:46:ff:b2:fd:9a: d2:99:1c:17:58:b2:bb:0a:76:e8:39:83:c7:4f:82:6f:68:fd: 0f:89:66:67:00:da:36:59:48:11:3f:9b:fc:ef:48:f6:d5:31: 90:d0:0b:05:75:31:a9:2b:52:8b:38:e6:ea:6c:8b:74:49:98: 73:bf:91:06:a0:25:03:f0:0c:35:fa:cd:b7:9c:1b:22:be:e8: 5c:84:a9:00:2e:38:b3:ed:41:ff:39:2d:82:68:3a:bb:3d:57: 40:89:bb:b7:8a:eb:a8:9f:91:80:df:cc:58:63:de:8f:9a:32: e5:8b:ff:fd:20:33:98:18:de:4d:9d:7c:c4:b6:63:8d:bd:c7: 16:22:b4:b1:f9:ed:80:95:d9:31:47:a4:6c:34:df:40:aa:f8: 2c:63:8f:e4:49:cf:5f:45:dd:cb:f2:0f:58:5a:99:8a:fe:80: 66:c0:67:2e:20:39:ed:67:e5:7f:26:3c:40:a5:95:68:dd:28: ca:49:70:a5:5c:57:f7:81:70:7a:09:eb:b2:ac:b5:c1:50:9a: 17:a5:b5:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRDIxMTAvBgNVBAUTKDQwQzA5MDUxM0YyNDAxODkyMEIxNTFEQUE1NTQ0OUMx NURDODRCRUIwHhcNMjUwODIyMjAwMzQxWhcNMjUwODI5MjAwMzQxWjAYMRYwFAYD VQQDEw02OGE4Y2QxZC00YmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpn3bnEt97orTTE6sBv+we2Xoa8Jdg3uShHpd9GbG3EPsj/vseXIGZLnfVCV ykdATcJAwNw0raNc7oYTiWhS3SYbC37i6svWXz2Ky3EUBF5ochpwtUFcC+/5s9Z3 8jE2754ek24aGBFJ4tWY2zYpZbc1GyLgsJ3Lni6yIXom44j1Ho/pGECz4CNjE7+c 0vKBOhmynyHjlfkWjtx7gXj2YPnDYyJs8/7wQOEH4Yl2fi7h0JtJuow0m9qEljH+ AAiyDZZrxyuqJ6ZiGV2MRHZuGVRRVwpPxZcSrDLWMt9Dvhl9oAFNNYL3oAirTO8p bcXnR52cStm1SttJmrTf+duqSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiZns4h +WYU5tuv4sw2dszUDPezMB8GA1UdIwQYMBaAFEDAkFE/JAGJILFR2qVUScFdyEvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVEMi82MjFFODYxMDg0 NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZa2dzVkhhcFZSSndWM0lT LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FNQ1FVVDhrQVlrZ3NWSGFwVlJKd1YzSVMtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVEMi82MjFFODYxMDg0NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZ a2dzVkhhcFZSSndWM0lTLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8FrqE7OgxcxiiKZl+PC7Mnt1R9eLthIOzZgDhHVSVPi5Cwjh5FFjZ gYi1BZMU+w+NRv+y/ZrSmRwXWLK7CnboOYPHT4JvaP0PiWZnANo2WUgRP5v870j2 1TGQ0AsFdTGpK1KLOObqbIt0SZhzv5EGoCUD8Aw1+s23nBsivuhchKkALjiz7UH/ OS2CaDq7PVdAibu3iuuon5GA38xYY96PmjLli//9IDOYGN5NnXzEtmONvccWIrSx +e2AldkxR6RsNN9AqvgsY4/kSc9fRd3L8g9YWpmK/oBmwGcuIDntZ+V/JjxApZVo 3SjKSXClXFf3gXB6CeuyrLXBUJoXpbXa -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:23 2025 by rpki-client