$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: LxZFGIC6NSBKg3ekhsr2FcH6Cj+fbIpLXe7KMKFYfjI= Subject key identifier: 24:CB:AB:C1:93:16:0F:33:42:00:66:C2:E2:3D:14:69:BF:D9:B2:99 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 0466 Signing time: Sat 23 Aug 2025 00:22:43 +0000 Manifest this update: Sat 23 Aug 2025 00:22:43 +0000 Manifest next update: Sat 30 Aug 2025 00:22:43 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: XbPjuoK28DGw2rKx4Y8IFuM+ri5jkU95QwijE4pv5Tc=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Aug 23 00:22:43 2025 GMT Not After : Aug 30 00:22:43 2025 GMT Subject: CN=68a909d3-befd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:4e:86:10:8a:35:c6:80:bc:5a:ab:91:6e: c3:8f:c2:2b:ad:fd:5d:32:d9:15:9d:d9:d8:6a:d4: 27:9b:05:d0:94:1f:0a:1a:d0:7c:7c:2c:10:db:4d: a8:c0:1e:4a:16:3c:eb:42:15:31:1a:1d:d1:ec:97: b6:cd:64:2b:04:1a:56:df:94:c1:e6:f1:07:cb:fc: f1:e0:f5:ca:11:2b:ca:f3:66:5f:11:83:51:de:6c: c1:91:51:20:36:15:b3:b5:17:50:19:ad:27:9f:af: 6c:4e:a1:39:de:a3:e1:75:2c:f1:e3:d0:ee:aa:ef: 2e:e0:da:a6:93:71:72:4f:6e:5d:9a:d9:6d:ae:09: c4:fe:e6:21:9e:23:03:f2:57:a1:e3:47:27:1c:a0: aa:51:bb:49:8a:de:f2:48:27:83:23:b6:74:92:76: 3a:f2:fc:d0:5f:e5:0a:a7:b2:e2:00:c6:e4:22:11: 91:84:cb:db:78:d3:c7:68:82:a0:ec:d9:bb:33:02: 8d:87:bb:07:d8:3b:48:06:79:f9:68:ba:ac:40:4d: fb:f6:35:00:2f:90:78:14:9c:42:22:a5:f8:d5:28: 6f:4f:a5:f9:78:50:4d:36:3e:10:b5:e1:4f:d8:d3: 57:94:81:f4:c6:60:01:67:6b:dc:5a:5e:fc:55:fa: b8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CB:AB:C1:93:16:0F:33:42:00:66:C2:E2:3D:14:69:BF:D9:B2:99 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:12:05:e2:43:af:d4:69:4c:ba:e9:eb:2d:e0:e7:92:05:0b: 49:3b:fc:58:9e:c9:3e:27:dd:51:ee:7a:99:20:11:f6:66:66: 2b:fd:c8:8d:3f:24:3c:bd:8c:64:c6:ae:70:9d:f3:6f:98:22: 81:60:dd:47:2f:33:1d:2c:99:e2:71:37:99:d9:95:35:d6:3c: ad:92:93:0d:e1:c1:ba:fb:f4:ea:80:7c:f7:3b:a1:c7:da:a7: b7:22:5c:dd:be:99:ae:b4:fa:93:e4:45:34:07:0f:31:c2:c2: 40:b6:db:96:73:75:8d:e8:e1:6c:e7:a4:cf:8b:e4:b8:4c:9a: 88:40:b9:e6:ae:61:c5:ff:35:e7:fa:8a:2e:0d:ce:01:8c:9d: 58:70:88:6f:48:56:98:41:ce:e7:cf:ca:58:b1:53:9f:2a:4f: 3e:4e:33:9a:64:e0:9b:af:53:75:c8:95:ed:f0:b1:c0:9c:db: f8:1b:09:04:a6:82:1b:20:a8:6a:1c:00:d2:6f:9b:f1:a4:66: d2:fc:28:3a:d0:21:5b:fb:57:d4:dc:82:8d:1a:44:c7:4a:82: a2:27:5c:81:38:38:2f:da:ae:91:e1:8c:aa:50:26:f4:75:0b: c3:d6:68:13:c6:89:fe:49:8a:14:3d:12:58:e4:73:5f:4f:3d: f7:f5:aa:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjUwODIzMDAyMjQzWhcNMjUwODMwMDAyMjQzWjAYMRYwFAYD VQQDEw02OGE5MDlkMy1iZWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvshOhhCKNcaAvFqrkW7Dj8Irrf1dMtkVndnYatQnmwXQlB8KGtB8fCwQ202o wB5KFjzrQhUxGh3R7Je2zWQrBBpW35TB5vEHy/zx4PXKESvK82ZfEYNR3mzBkVEg NhWztRdQGa0nn69sTqE53qPhdSzx49Duqu8u4Nqmk3FyT25dmtltrgnE/uYhniMD 8leh40cnHKCqUbtJit7ySCeDI7Z0knY68vzQX+UKp7LiAMbkIhGRhMvbeNPHaIKg 7Nm7MwKNh7sH2DtIBnn5aLqsQE379jUAL5B4FJxCIqX41ShvT6X5eFBNNj4QteFP 2NNXlIH0xmABZ2vcWl78Vfq4DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTLq8GT Fg8zQgBmwuI9FGm/2bKZMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQEgXiQ6/UaUy66est4OeSBQtJO/xYnsk+J91R7nqZIBH2ZmYr/ciN PyQ8vYxkxq5wnfNvmCKBYN1HLzMdLJnicTeZ2ZU11jytkpMN4cG6+/TqgHz3O6HH 2qe3IlzdvpmutPqT5EU0Bw8xwsJAttuWc3WN6OFs56TPi+S4TJqIQLnmrmHF/zXn +oouDc4BjJ1YcIhvSFaYQc7nz8pYsVOfKk8+TjOaZOCbr1N1yJXt8LHAnNv4GwkE poIbIKhqHADSb5vxpGbS/Cg60CFb+1fU3IKNGkTHSoKiJ1yBODgv2q6R4YyqUCb0 dQvD1mgTxon+SYoUPRJY5HNfTz339arJ -----END CERTIFICATE-----Generated at Sun Aug 24 03:08:23 2025 by rpki-client