$ rpki-client -vvf rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft File: QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft (raw, json) Hash identifier: lK6ZwSylrEqprOqlnpUsgKhkPvoqB9QvvvroAn/hydI= Subject key identifier: 68:6D:3D:86:1A:DC:96:09:BF:AE:82:94:50:2E:87:43:5F:14:88:9E Authority key identifier: 41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 Certificate issuer: /CN=A912D306/serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Certificate serial: 34AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft Manifest number: 34A2 Signing time: Wed 02 Jul 2025 14:40:06 +0000 Manifest this update: Wed 02 Jul 2025 14:40:06 +0000 Manifest next update: Wed 09 Jul 2025 14:40:06 +0000 Files and hashes: 1: QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl (hash: 8sk/MwGaq14WvNHxLUx5rPkWgAkvuT0lkNH6zsy5Sx0=) 2: ABE8518A18DA11F08FC68386C4F9AE02.roa (hash: 1QZz1HDQ1jRfLspLePE9D1zwt8zFnYwF7eP5N5O/9vg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13485 (0x34ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D306, serialNumber=410F0FE97BE9D9ED0756CD4D7636B93F8F238B31 Validity Not Before: Jul 2 14:40:06 2025 GMT Not After : Jul 9 14:40:06 2025 GMT Subject: CN=686544c6-59fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:6e:3e:51:8d:38:06:71:a1:36:b3:d1:03: 4d:6d:42:eb:54:53:ba:6d:f3:b4:f7:91:da:e5:a4: 45:3b:10:fa:87:56:9e:77:c3:b5:9d:56:15:a3:20: 73:66:66:fc:c7:3b:d1:bd:6f:c4:fe:e4:c0:1b:42: a0:bb:bb:4d:13:60:89:47:78:79:ba:d9:fe:e7:45: 9e:0f:ec:ae:f5:10:42:79:a5:86:32:6d:8d:ae:5b: e8:e9:9e:a0:58:ad:75:ad:8a:1a:7d:35:b2:99:6e: a8:7d:e2:04:ab:b9:a3:08:64:07:1a:f6:42:87:5c: d2:0b:fc:29:2c:85:70:f6:2c:cc:b9:48:b6:27:38: 76:94:25:5c:53:c9:b6:d4:eb:d9:ce:5f:50:f2:ca: 28:3c:d0:e1:69:ae:08:c1:7e:89:72:e6:ed:c0:98: 97:58:53:44:bb:f5:fe:ca:5b:1e:30:d2:8b:dd:33: b3:fb:70:3b:3c:be:83:ad:c7:4b:c2:4c:ff:51:23: 36:a0:e2:e3:46:5e:bc:80:dc:45:b0:97:54:7c:70: 22:09:05:5b:83:6c:42:77:39:6c:ce:91:22:c8:74: e9:84:50:47:bd:cc:40:38:6c:74:d8:f6:c0:af:28: a2:4b:ee:a0:3b:42:0c:83:73:d1:2e:e4:30:59:d0: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6D:3D:86:1A:DC:96:09:BF:AE:82:94:50:2E:87:43:5F:14:88:9E X509v3 Authority Key Identifier: keyid:41:0F:0F:E9:7B:E9:D9:ED:07:56:CD:4D:76:36:B9:3F:8F:23:8B:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D306/BCBD801C1D8D11E2B429B7EB08B02CD2/QQ8P6Xvp2e0HVs1Ndja5P48jizE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:1a:e0:62:27:88:8c:b1:67:a8:ad:f5:65:6b:8f:c5:12:bd: be:78:c1:95:82:dd:5e:1b:66:7d:2f:29:73:8f:b8:6f:df:d0: 4b:ce:11:f8:7f:2e:ed:a6:bf:b8:cc:43:a3:fc:3b:3f:dd:ea: 00:0f:7a:4b:20:9d:1f:41:d2:f9:44:e6:12:41:d3:ab:30:a9: 1e:58:91:c8:29:b7:fa:1a:5b:07:3a:ca:d3:25:66:d8:94:f4: 89:c6:ea:94:22:f2:53:ac:b4:ee:b0:7d:d9:d4:b3:f9:75:40: eb:f2:3a:22:f1:70:d2:b0:5f:d6:0e:0d:ee:a8:a2:dc:ee:9d: 62:cb:a6:b0:93:48:81:b9:2c:73:dc:33:0b:f0:99:e0:59:b6: 79:70:bf:7d:13:ae:37:e4:fe:45:aa:80:b3:43:9c:43:af:64: 2f:14:54:1e:7b:23:85:4a:cf:8a:4a:38:5a:fc:89:15:68:44: c4:d6:51:0a:74:fb:14:4d:74:f7:28:c4:99:6d:50:42:2e:54: e8:c8:39:2f:7f:99:fb:00:31:cb:84:60:1a:c1:60:1c:ea:c1: ce:34:0a:b3:0c:eb:10:e8:34:e3:06:78:21:2e:bc:ca:9a:a9: cf:77:7f:07:3b:03:d0:88:cf:94:e9:c8:4e:be:ff:c8:15:81: 54:52:80:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzMDYxMTAvBgNVBAUTKDQxMEYwRkU5N0JFOUQ5RUQwNzU2Q0Q0RDc2MzZCOTNG OEYyMzhCMzEwHhcNMjUwNzAyMTQ0MDA2WhcNMjUwNzA5MTQ0MDA2WjAYMRYwFAYD VQQDEw02ODY1NDRjNi01OWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC1uPlGNOAZxoTaz0QNNbULrVFO6bfO095Ha5aRFOxD6h1aed8O1nVYVoyBz Zmb8xzvRvW/E/uTAG0Kgu7tNE2CJR3h5utn+50WeD+yu9RBCeaWGMm2Nrlvo6Z6g WK11rYoafTWymW6ofeIEq7mjCGQHGvZCh1zSC/wpLIVw9izMuUi2Jzh2lCVcU8m2 1OvZzl9Q8sooPNDhaa4IwX6JcubtwJiXWFNEu/X+ylseMNKL3TOz+3A7PL6DrcdL wkz/USM2oOLjRl68gNxFsJdUfHAiCQVbg2xCdzlszpEiyHTphFBHvcxAOGx02PbA ryiiS+6gO0IMg3PRLuQwWdD/HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhtPYYa 3JYJv66ClFAuh0NfFIieMB8GA1UdIwQYMBaAFEEPD+l76dntB1bNTXY2uT+PI4sx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDMwNi9CQ0JEODAxQzFE OEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJlMEhWczFOZGphNVA0OGpp ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FROFA2WHZwMmUwSFZzMU5kamE1UDQ4aml6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDMwNi9CQ0JEODAxQzFEOEQxMUUyQjQyOUI3RUIwOEIwMkNEMi9RUThQNlh2cDJl MEhWczFOZGphNVA0OGppekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQGuBiJ4iMsWeorfVla4/FEr2+eMGVgt1eG2Z9Lylzj7hv39BLzhH4 fy7tpr+4zEOj/Ds/3eoAD3pLIJ0fQdL5ROYSQdOrMKkeWJHIKbf6GlsHOsrTJWbY lPSJxuqUIvJTrLTusH3Z1LP5dUDr8joi8XDSsF/WDg3uqKLc7p1iy6awk0iBuSxz 3DML8JngWbZ5cL99E6435P5FqoCzQ5xDr2QvFFQeeyOFSs+KSjha/IkVaETE1lEK dPsUTXT3KMSZbVBCLlToyDkvf5n7ADHLhGAawWAc6sHONAqzDOsQ6DTjBnghLrzK mqnPd38HOwPQiM+U6chOvv/IFYFUUoBZ -----END CERTIFICATE-----Generated at Thu Jul 3 01:27:38 2025 by rpki-client