$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft File: QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json) Hash identifier: Y+U0QAVrvz5zS641aMI8LIuVMijFS8n14LJJD0SK00U= Subject key identifier: 6A:92:30:B7:0A:0C:91:F3:BC:AD:E2:63:7C:5D:C7:B0:73:48:FD:0B Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft Manifest number: 0681 Signing time: Wed 14 May 2025 22:19:51 +0000 Manifest this update: Wed 14 May 2025 22:19:50 +0000 Manifest next update: Wed 21 May 2025 22:19:50 +0000 Files and hashes: 1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: +xPyK+piOORHB9AeGUDdec8bYQ1Bqmsmvp4MbL1n5aQ=) 2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: f7Qn0qXwPKUSx1AKDqHdBuBm3lykdUVyid+XDevm250=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Validity Not Before: May 14 22:19:50 2025 GMT Not After : May 21 22:19:50 2025 GMT Subject: CN=68251706-f33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d5:ce:1d:aa:01:2e:85:87:76:72:58:d0:0d: 20:86:12:f0:d6:b7:92:34:6e:6f:22:2d:06:8b:f7: e4:0b:d7:fa:df:91:cc:07:79:41:40:11:ba:a8:bb: 75:bb:dc:84:cc:45:c0:06:67:bd:1a:1a:b2:0e:cc: 3d:e6:d5:80:57:ac:87:eb:79:80:0f:10:36:56:11: 35:11:cc:9c:ba:08:60:1d:96:74:4c:ed:a3:42:e5: a2:ee:c9:f1:2f:f2:56:a2:71:ad:c1:a6:89:a8:99: 61:c0:14:4e:5c:3b:05:9b:bf:be:5e:3c:9f:de:b8: ec:24:4c:d3:8c:30:07:3e:67:43:74:19:fa:cb:fa: 33:33:13:10:fb:09:fb:30:e8:44:67:1c:b9:2f:d3: b9:0b:cc:3c:4c:cb:bf:e1:a8:64:d5:75:2a:7c:fd: 81:33:ba:62:15:83:b6:39:43:83:41:34:e9:33:08: 7c:2b:ae:e7:6e:c2:c2:50:11:92:8e:50:68:bb:70: 6c:6d:3e:36:6c:0a:e1:52:46:dd:50:2f:de:ee:bd: 9e:c1:6b:07:e5:69:79:7b:af:c6:63:3f:22:36:65: 32:f8:ba:64:e4:3f:37:45:fd:dd:e6:0a:cc:6c:03: e3:b7:18:68:57:d4:60:da:ef:bb:3a:f9:95:5d:c8: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:92:30:B7:0A:0C:91:F3:BC:AD:E2:63:7C:5D:C7:B0:73:48:FD:0B X509v3 Authority Key Identifier: keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:32:75:91:a0:79:bb:3b:6e:52:c9:94:8e:72:8f:73:21:f6: 7f:c7:ab:71:72:5d:be:4a:6b:2c:0d:bf:a0:93:1d:22:bf:e0: ab:b9:4c:f7:42:59:ef:d4:2d:80:cf:0e:9c:65:05:ad:73:b1: b4:31:b5:97:d6:97:bd:5d:a4:79:95:28:3e:f7:f2:bd:e7:61: f9:76:f6:da:80:3c:ab:af:67:55:95:1a:af:db:44:ff:b3:af: 5f:f0:e9:8a:49:ed:d9:d0:65:93:a9:98:f2:65:bc:a6:e3:0c: 02:5e:48:1c:eb:78:8e:62:ff:33:89:ff:35:e8:39:71:6e:8b: 46:f8:1a:68:61:63:50:d5:0e:94:64:02:d5:ce:ef:01:50:fa: 53:56:af:8f:b7:eb:10:59:2a:50:cc:08:c3:72:83:b1:1f:4c: 91:5b:78:a4:88:b0:4c:31:ac:97:99:81:c2:3a:94:17:46:b0: 72:a9:92:25:b6:9d:3c:a4:3c:f7:9e:5e:36:15:3f:9a:e9:1d: e0:f3:5b:3e:ac:90:1f:ae:43:9b:12:45:fd:1b:27:e4:1a:c5: 03:22:35:8e:59:87:7c:9c:9b:16:cf:1d:6b:f1:a0:a6:b5:5b: b3:ca:11:7a:0d:df:f1:bb:c4:05:30:4c:41:7d:b4:d6:ae:59: 40:0c:2e:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1 MzM3Q0E0ODUwHhcNMjUwNTE0MjIxOTUwWhcNMjUwNTIxMjIxOTUwWjAYMRYwFAYD VQQDEw02ODI1MTcwNi1mMzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdXOHaoBLoWHdnJY0A0ghhLw1reSNG5vIi0Gi/fkC9f635HMB3lBQBG6qLt1 u9yEzEXABme9GhqyDsw95tWAV6yH63mADxA2VhE1EcycughgHZZ0TO2jQuWi7snx L/JWonGtwaaJqJlhwBROXDsFm7++Xjyf3rjsJEzTjDAHPmdDdBn6y/ozMxMQ+wn7 MOhEZxy5L9O5C8w8TMu/4ahk1XUqfP2BM7piFYO2OUODQTTpMwh8K67nbsLCUBGS jlBou3BsbT42bArhUkbdUC/e7r2ewWsH5Wl5e6/GYz8iNmUy+Lpk5D83Rf3d5grM bAPjtxhoV9Rg2u+7OvmVXcirewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqSMLcK DJHzvK3iY3xdx7BzSP0LMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBE R3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMMnWRoHm7O25SyZSOco9zIfZ/x6txcl2+SmssDb+gkx0iv+CruUz3 Qlnv1C2Azw6cZQWtc7G0MbWX1pe9XaR5lSg+9/K952H5dvbagDyrr2dVlRqv20T/ s69f8OmKSe3Z0GWTqZjyZbym4wwCXkgc63iOYv8zif816DlxbotG+BpoYWNQ1Q6U ZALVzu8BUPpTVq+Pt+sQWSpQzAjDcoOxH0yRW3ikiLBMMayXmYHCOpQXRrByqZIl tp08pDz3nl42FT+a6R3g81s+rJAfrkObEkX9GyfkGsUDIjWOWYd8nJsWzx1r8aCm tVuzyhF6Dd/xu8QFMExBfbTWrllADC4l -----END CERTIFICATE-----Generated at Thu May 15 06:44:39 2025 by rpki-client