$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft File: QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json) Hash identifier: 3qLtFMYeMBUEkrxwPZte4lM84rnFixjadYfVlYCcQuU= Subject key identifier: 60:E5:58:BC:F6:79:BC:3D:F2:30:4E:FA:69:67:62:ED:5E:C2:53:C2 Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Certificate serial: 069F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft Manifest number: 069A Signing time: Wed 02 Jul 2025 22:29:36 +0000 Manifest this update: Wed 02 Jul 2025 22:29:35 +0000 Manifest next update: Wed 09 Jul 2025 22:29:35 +0000 Files and hashes: 1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: WD+OC9rsmgIPmHqAajg4wQIztu2Oghq7BKHFSHgpJPg=) 2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: f7Qn0qXwPKUSx1AKDqHdBuBm3lykdUVyid+XDevm250=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1695 (0x69f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Validity Not Before: Jul 2 22:29:35 2025 GMT Not After : Jul 9 22:29:35 2025 GMT Subject: CN=6865b2cf-a3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:28:a7:e8:8d:82:a1:d3:cf:f9:8c:8b:b4:87: 98:e2:9a:fb:a3:00:de:e4:57:ff:71:e0:81:0f:4f: bd:30:63:a2:ec:b7:2a:49:46:3d:a1:6e:4d:75:62: e7:d1:e7:db:c1:65:24:af:05:d2:b4:5a:27:7e:13: d2:ec:0c:8a:b8:e4:cd:60:e1:39:f0:d8:4c:37:06: a9:a1:71:83:fd:e5:ab:67:84:c2:05:e8:44:6a:1a: ee:73:b1:5c:9a:60:e0:d8:85:d5:59:cb:1c:37:d3: 09:72:8b:7b:82:3e:ff:ed:2e:a0:bb:91:1a:30:dc: 3e:75:08:71:48:89:40:b9:b6:8e:6d:b0:ef:47:ba: f0:42:21:1d:08:b8:a2:8b:ab:91:00:89:ad:56:1f: fb:15:aa:be:fe:1d:a6:47:29:7f:50:e9:db:1a:d9: 6a:fc:3a:74:b2:3e:95:1d:75:a9:b6:63:3c:34:e0: a0:b9:42:c0:b1:6b:fa:fe:e2:62:d0:93:0c:49:d1: eb:a3:e8:6b:f2:0c:73:0f:23:c5:25:5d:08:8e:35: 8a:51:21:48:ac:dd:f2:78:9b:0a:4f:b1:8a:a3:e7: df:3f:ce:35:38:95:28:29:a0:4a:c3:4a:d0:d3:18: b6:de:f5:40:33:ff:73:11:87:6f:04:36:46:18:3f: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E5:58:BC:F6:79:BC:3D:F2:30:4E:FA:69:67:62:ED:5E:C2:53:C2 X509v3 Authority Key Identifier: keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:f6:ea:12:9e:44:2b:ab:82:c8:d6:c2:a0:c5:dd:7a:04:db: 0a:fd:6a:e9:e3:7e:9d:ce:90:c5:3b:9b:63:99:81:19:1a:03: 05:b1:2f:4d:05:59:40:fe:5b:d4:40:a0:27:17:24:9e:98:21: f7:4e:88:89:86:3a:b8:d8:20:9b:0e:08:a2:70:a5:4c:3b:f0: 64:13:db:83:b0:4c:b2:53:94:18:99:24:04:42:dd:48:d5:8f: 49:4c:63:28:31:f2:0f:fe:53:c4:02:c3:4b:dc:91:cd:43:27: 37:50:49:ce:aa:fd:a8:85:0d:99:23:eb:25:d9:16:bd:1f:45: ee:36:52:e0:2c:8f:b3:81:23:05:8f:49:7f:3c:ce:83:52:10: f3:25:88:ce:70:39:8c:38:fa:2a:a0:88:93:e4:b7:da:ab:14: 85:15:d5:5f:be:bf:0b:a2:00:fe:e2:91:f2:60:90:4f:e8:88: 31:8d:da:b6:5d:8e:26:28:c4:90:71:62:9a:b2:f5:f9:f4:d5: e9:5d:d8:38:31:4c:85:fa:1e:57:40:8d:bd:6a:c4:9e:6c:84: 04:07:cf:97:c0:e8:5b:b8:fd:42:e9:ae:f1:0f:26:47:b5:44: c5:b9:0b:64:aa:1a:68:cb:ea:17:c2:3d:a3:0f:ae:49:81:00: d4:91:89:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1 MzM3Q0E0ODUwHhcNMjUwNzAyMjIyOTM1WhcNMjUwNzA5MjIyOTM1WjAYMRYwFAYD VQQDEw02ODY1YjJjZi1hM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Sin6I2CodPP+YyLtIeY4pr7owDe5Ff/ceCBD0+9MGOi7LcqSUY9oW5NdWLn 0efbwWUkrwXStFonfhPS7AyKuOTNYOE58NhMNwapoXGD/eWrZ4TCBehEahruc7Fc mmDg2IXVWcscN9MJcot7gj7/7S6gu5EaMNw+dQhxSIlAubaObbDvR7rwQiEdCLii i6uRAImtVh/7Faq+/h2mRyl/UOnbGtlq/Dp0sj6VHXWptmM8NOCguULAsWv6/uJi 0JMMSdHro+hr8gxzDyPFJV0IjjWKUSFIrN3yeJsKT7GKo+ffP841OJUoKaBKw0rQ 0xi23vVAM/9zEYdvBDZGGD9uAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDlWLz2 ebw98jBO+mlnYu1ewlPCMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBE R3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBx9uoSnkQrq4LI1sKgxd16BNsK/Wrp436dzpDFO5tjmYEZGgMFsS9N BVlA/lvUQKAnFySemCH3ToiJhjq42CCbDgiicKVMO/BkE9uDsEyyU5QYmSQEQt1I 1Y9JTGMoMfIP/lPEAsNL3JHNQyc3UEnOqv2ohQ2ZI+sl2Ra9H0XuNlLgLI+zgSMF j0l/PM6DUhDzJYjOcDmMOPoqoIiT5LfaqxSFFdVfvr8LogD+4pHyYJBP6Igxjdq2 XY4mKMSQcWKasvX59NXpXdg4MUyF+h5XQI29asSebIQEB8+XwOhbuP1C6a7xDyZH tUTFuQtkqhpoy+oXwj2jD65JgQDUkYnV -----END CERTIFICATE-----Generated at Thu Jul 3 08:14:26 2025 by rpki-client