$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft File: QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json) Hash identifier: VsPaklSschji+04NBm8nnh6rf4svP8C7u+Jh0O61gcU= Subject key identifier: 06:E8:6E:55:54:F0:A7:0B:87:AF:C2:9D:4B:29:8D:D8:BF:DD:49:DC Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Certificate serial: 06B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft Manifest number: 06B4 Signing time: Fri 22 Aug 2025 22:16:50 +0000 Manifest this update: Fri 22 Aug 2025 22:16:50 +0000 Manifest next update: Fri 29 Aug 2025 22:16:50 +0000 Files and hashes: 1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: HQGBNIFN2kxdoAGfO4RK+28AQhp5r2zoq0y+2CpsJ5k=) 2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: f7Qn0qXwPKUSx1AKDqHdBuBm3lykdUVyid+XDevm250=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1721 (0x6b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Validity Not Before: Aug 22 22:16:50 2025 GMT Not After : Aug 29 22:16:50 2025 GMT Subject: CN=68a8ec52-1c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:cb:94:dc:4f:ec:88:1d:fb:d9:d6:a0:e6: 4a:ce:cd:62:06:2a:34:94:37:50:0c:ee:46:77:5f: 8b:29:4e:36:17:d4:43:48:98:8a:b7:d8:fa:0e:38: 66:47:8b:94:53:71:c2:58:c4:2a:53:5e:fb:1a:62: 30:fa:81:20:9f:1c:8d:ef:2f:a6:66:fa:51:37:ff: 4b:db:92:c1:83:ae:3e:75:1e:63:15:b7:86:e8:bb: b5:83:be:c6:fc:4b:e7:ca:cf:37:22:88:f5:1e:5c: 5d:d0:4d:2f:b3:c1:a4:0f:7c:01:67:2f:08:ed:9e: 81:f1:26:67:0c:3a:53:d4:f4:82:e6:d7:0f:91:6f: 02:14:3d:71:15:00:fb:3f:35:b5:9b:09:dd:b9:f4: bb:e7:f0:f4:85:31:79:5d:70:b1:fd:ff:ce:3f:5d: f1:c7:2b:7e:32:86:59:85:0c:c8:b0:a0:14:4b:f5: 0d:c3:a0:18:8d:85:00:e2:bb:75:eb:37:7d:7a:c1: 67:1f:2a:ef:ac:cf:d8:6b:88:5c:85:5c:c3:5d:12: 85:ea:54:97:97:3e:4e:0b:b5:b3:fd:0e:f1:f2:a8: 5b:49:12:22:1f:39:ec:da:98:ca:28:81:f7:23:14: 6f:88:11:f3:c0:6f:a3:5f:0d:9b:46:9f:e4:99:68: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E8:6E:55:54:F0:A7:0B:87:AF:C2:9D:4B:29:8D:D8:BF:DD:49:DC X509v3 Authority Key Identifier: keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:40:35:82:97:94:51:4f:18:1b:83:42:b6:7a:4f:dc:be:2c: f9:9e:18:32:c2:6c:c8:0d:6a:3c:52:e6:c9:b4:78:02:21:ed: ca:d6:dc:e9:6d:11:dd:c2:ad:b9:17:aa:56:8f:70:23:11:7b: 05:65:55:4a:b7:d8:ed:4a:ce:35:59:39:6d:e5:91:18:d7:3e: dd:6f:97:5c:92:2c:3d:61:d5:e6:ef:69:a6:a7:c7:86:80:c1: 28:12:ff:a4:50:b6:85:9e:b4:06:7f:cd:03:1e:6f:e1:c2:d5: c6:7e:14:19:2b:d7:69:73:8e:f3:dd:03:a1:63:06:15:62:21: 14:53:1f:16:a7:8e:e7:c0:c2:ae:2d:46:67:86:ad:b3:2a:3a: 99:31:d3:17:62:1e:74:1b:a2:0c:f1:f9:e1:06:13:c4:f1:93: 82:ee:a1:a3:71:54:5f:d6:27:dc:b9:1c:4f:e8:bc:83:7c:ea: 46:be:07:2c:f1:98:41:ad:78:1e:7f:1a:d0:09:e0:6d:63:cc: 87:07:7c:5a:4e:ae:df:99:12:bc:b9:b2:14:56:b4:8a:1b:8f: 59:61:75:cb:99:b5:53:d2:a3:4a:5d:c6:d2:d3:c0:41:ab:64: 93:22:82:d3:20:3a:f4:17:c5:0b:21:1a:c4:2c:47:bd:f5:53: 4b:78:e9:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1 MzM3Q0E0ODUwHhcNMjUwODIyMjIxNjUwWhcNMjUwODI5MjIxNjUwWjAYMRYwFAYD VQQDEw02OGE4ZWM1Mi0xYzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8zLlNxP7Igd+9nWoOZKzs1iBio0lDdQDO5Gd1+LKU42F9RDSJiKt9j6Djhm R4uUU3HCWMQqU177GmIw+oEgnxyN7y+mZvpRN/9L25LBg64+dR5jFbeG6Lu1g77G /Evnys83Ioj1Hlxd0E0vs8GkD3wBZy8I7Z6B8SZnDDpT1PSC5tcPkW8CFD1xFQD7 PzW1mwndufS75/D0hTF5XXCx/f/OP13xxyt+MoZZhQzIsKAUS/UNw6AYjYUA4rt1 6zd9esFnHyrvrM/Ya4hchVzDXRKF6lSXlz5OC7Wz/Q7x8qhbSRIiHzns2pjKKIH3 IxRviBHzwG+jXw2bRp/kmWg75wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAboblVU 8KcLh6/CnUspjdi/3UncMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBE R3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmQDWCl5RRTxgbg0K2ek/cviz5nhgywmzIDWo8UubJtHgCIe3K1tzp bRHdwq25F6pWj3AjEXsFZVVKt9jtSs41WTlt5ZEY1z7db5dckiw9YdXm72mmp8eG gMEoEv+kULaFnrQGf80DHm/hwtXGfhQZK9dpc47z3QOhYwYVYiEUUx8Wp47nwMKu LUZnhq2zKjqZMdMXYh50G6IM8fnhBhPE8ZOC7qGjcVRf1ifcuRxP6LyDfOpGvgcs 8ZhBrXgefxrQCeBtY8yHB3xaTq7fmRK8ubIUVrSKG49ZYXXLmbVT0qNKXcbS08BB q2STIoLTIDr0F8ULIRrELEe99VNLeOkp -----END CERTIFICATE-----Generated at Sat Aug 23 19:37:17 2025 by rpki-client