$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft File: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft (raw, json) Hash identifier: SSuiystqFurmO8f4e4jh3TT0UC3J+OMJ3kmkRV4NE6w= Subject key identifier: AC:E8:17:B6:9C:4B:5F:8B:AB:42:7E:5C:B0:D8:48:91:9E:83:87:91 Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E Certificate issuer: /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft Manifest number: D6 Signing time: Thu 03 Jul 2025 05:48:36 +0000 Manifest this update: Thu 03 Jul 2025 05:48:36 +0000 Manifest next update: Thu 10 Jul 2025 05:48:36 +0000 Files and hashes: 1: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl (hash: P3o9v3aNjAHriUTWaF6BRBf7IsSf33vPuSS1Fba+6tU=) 2: 3F9C6E6619B811EF8628ED1FC4F9AE02.roa (hash: W33rXxSlvsCWhMMJptogBjvzdgDQoYwJi+V5ipdn5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4475, serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Validity Not Before: Jul 3 05:48:36 2025 GMT Not After : Jul 10 05:48:36 2025 GMT Subject: CN=686619b4-1179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:b2:ad:3d:7b:42:42:aa:71:53:fa:82:19: d6:75:5f:a8:ff:64:9a:56:32:1a:48:79:db:ad:8b: 32:95:23:8e:d8:90:a0:d9:98:84:f7:87:61:87:b8: 36:05:63:1c:49:60:3d:f8:69:6e:ed:80:b9:2e:f4: f8:98:b1:47:66:18:e2:24:0f:40:c2:7e:0f:e6:d5: 14:0d:01:a4:c4:d1:e7:dd:c3:40:ae:f9:ea:c6:f2: db:6d:d7:c4:2a:14:eb:b1:ad:70:54:e4:c3:f9:28: a0:8e:9e:71:78:ce:d8:5b:85:ce:b0:4d:69:a1:ca: 13:80:ae:94:f4:54:7a:52:4f:8b:35:45:71:c8:cf: 1c:86:e5:02:a4:d9:51:6e:47:f8:3b:0a:96:50:9f: 51:bf:5a:5d:17:32:f2:d6:18:06:17:a9:e5:b1:df: 37:18:ca:90:c1:b7:38:60:a6:77:7a:fe:e6:2b:77: 98:3d:29:88:82:8b:fc:6f:1f:9c:34:e8:f6:d8:7b: c2:9b:bb:e7:47:a3:29:8d:a6:4a:0a:5b:4f:28:bf: 09:60:d3:c7:2f:3e:c6:e1:5b:3f:73:5e:28:0b:5d: ed:05:ad:f2:b2:c4:12:91:d8:21:f1:aa:47:70:bf: 22:e7:c7:8d:d0:67:08:a8:06:15:db:4a:ed:97:30: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E8:17:B6:9C:4B:5F:8B:AB:42:7E:5C:B0:D8:48:91:9E:83:87:91 X509v3 Authority Key Identifier: keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a2:45:e7:85:2c:be:99:ae:ea:75:ad:6f:2b:c9:21:5c:3f: 8c:1a:32:0c:a3:3e:04:7e:5b:7f:a2:19:4b:d7:ff:62:0b:b2: 9d:f8:21:30:5f:27:0d:b9:6d:0c:ed:f2:94:80:06:c9:a6:d4: e5:cd:b1:20:5c:20:35:64:10:72:c4:53:53:82:ed:ee:96:4d: e8:23:73:23:e6:b3:ab:32:25:41:84:32:4a:a4:c4:fa:06:b2: 1e:3c:6c:8a:51:ac:fe:b4:22:ea:af:ab:d5:54:5e:bf:ad:5d: 92:bd:a3:56:65:d4:c5:7f:3c:28:4d:86:b7:78:6b:78:aa:7b: 69:c2:bf:57:ce:19:c1:04:5d:67:b8:bd:d4:c8:0b:eb:97:ce: 4a:39:1b:cb:c9:37:cb:af:44:f8:7f:d2:f6:76:25:29:b7:ec: 3a:11:a4:09:4b:bb:ba:70:0b:ec:6f:b2:09:3f:57:16:f4:1e: 44:29:b0:ee:b7:2f:9b:d2:5f:f0:e6:5f:05:db:b2:37:b5:ce: 01:94:b9:52:1d:3c:b0:b4:f0:3e:a7:99:5d:59:5d:e0:4e:b3: 8e:54:5e:f9:45:e8:2d:ad:3e:98:96:06:f0:2b:73:e7:d5:fa: 5b:fb:0a:af:00:86:48:1d:09:30:e7:1c:69:4a:ac:e4:74:2b: f9:41:b6:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NzUxMTAvBgNVBAUTKDQxMDQzREFDMTg5RTIyRkY3RjVBRUQ4MTA3QTMyMzJG NDE5MEFGM0UwHhcNMjUwNzAzMDU0ODM2WhcNMjUwNzEwMDU0ODM2WjAYMRYwFAYD VQQDEw02ODY2MTliNC0xMTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6qyrT17QkKqcVP6ghnWdV+o/2SaVjIaSHnbrYsylSOO2JCg2ZiE94dhh7g2 BWMcSWA9+Glu7YC5LvT4mLFHZhjiJA9Awn4P5tUUDQGkxNHn3cNArvnqxvLbbdfE KhTrsa1wVOTD+Sigjp5xeM7YW4XOsE1pocoTgK6U9FR6Uk+LNUVxyM8chuUCpNlR bkf4OwqWUJ9Rv1pdFzLy1hgGF6nlsd83GMqQwbc4YKZ3ev7mK3eYPSmIgov8bx+c NOj22HvCm7vnR6MpjaZKCltPKL8JYNPHLz7G4Vs/c14oC13tBa3yssQSkdgh8apH cL8i58eN0GcIqAYV20rtlzBC9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzoF7ac S1+Lq0J+XLDYSJGeg4eRMB8GA1UdIwQYMBaAFEEEPawYniL/f1rtgQejIy9BkK8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ3NS84MzI0NzBEQzE4 Q0YxMUVGOEUzRjI0NTdDNEY5QUUwMi9RUVE5ckJpZUl2OV9XdTJCQjZNakwwR1Fy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRUTlyQmllSXY5X1d1MkJCNk1qTDBHUXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ3NS84MzI0NzBEQzE4Q0YxMUVGOEUzRjI0NTdDNEY5QUUwMi9RUVE5ckJpZUl2 OV9XdTJCQjZNakwwR1FyejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0okXnhSy+ma7qda1vK8khXD+MGjIMoz4Eflt/ohlL1/9iC7Kd+CEw XycNuW0M7fKUgAbJptTlzbEgXCA1ZBByxFNTgu3ulk3oI3Mj5rOrMiVBhDJKpMT6 BrIePGyKUaz+tCLqr6vVVF6/rV2SvaNWZdTFfzwoTYa3eGt4qntpwr9XzhnBBF1n uL3UyAvrl85KORvLyTfLr0T4f9L2diUpt+w6EaQJS7u6cAvsb7IJP1cW9B5EKbDu ty+b0l/w5l8F27I3tc4BlLlSHTywtPA+p5ldWV3gTrOOVF75RegtrT6YlgbwK3Pn 1fpb+wqvAIZIHQkw5xxpSqzkdCv5QbZg -----END CERTIFICATE-----Generated at Thu Jul 3 12:14:29 2025 by rpki-client