$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: t96ymQnJMjbeAiELPfnJ7sg7yYMMP18O9MN8a/M3Az8= Subject key identifier: 19:16:7C:4C:05:EA:15:E9:90:98:A6:DD:01:8E:5F:C6:18:CC:CF:B6 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 0450 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 044C Signing time: Thu 03 Jul 2025 00:34:25 +0000 Manifest this update: Thu 03 Jul 2025 00:34:24 +0000 Manifest next update: Thu 10 Jul 2025 00:34:24 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: PK5pn3NrzsiprWc3mfBMJpi/BQmnRAt4fN0QtlKo4J4=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1104 (0x450) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Jul 3 00:34:24 2025 GMT Not After : Jul 10 00:34:24 2025 GMT Subject: CN=6865d010-071e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1e:40:e5:92:b0:ae:39:9a:30:08:ce:09:e7: ce:c5:03:8b:0c:9f:12:2b:40:ea:66:09:80:72:e4: 67:39:d3:a1:d6:a3:5a:c8:36:bf:c0:04:25:20:e8: ba:72:ff:8b:60:74:0d:c9:ab:3c:b6:7c:81:4b:9d: cf:a6:6f:c6:bc:24:e5:d9:e0:33:ab:9e:45:6f:4b: 18:3d:b2:b6:e4:71:4f:6f:36:fb:44:ba:dc:79:cc: 1a:b7:9b:a4:a3:fb:23:71:55:bb:4a:3e:90:d7:b8: 2b:b8:07:30:9f:41:ac:1b:6d:64:d0:2a:a9:7b:1e: cb:80:40:d0:7e:99:60:3c:2f:b1:de:5b:a4:aa:0b: f4:2a:20:45:e8:7a:27:14:c1:ae:d3:7a:ad:6b:49: 2d:ad:ce:c7:46:bc:3e:c8:c1:11:40:60:e1:c7:56: 34:c6:92:ff:ff:e3:8e:dd:d2:67:83:e3:a8:94:a0: 21:21:52:5b:0b:b8:83:95:c6:bf:8e:b7:b0:c9:43: 80:17:2b:27:53:7f:04:23:6c:73:13:b8:13:4f:fa: 01:85:1b:10:6e:82:5c:34:cd:41:85:22:0b:41:f9: 42:24:ba:8a:0c:a2:89:13:43:f4:e5:54:d0:85:69: ab:0b:27:16:b0:bc:4c:72:e3:ee:25:2a:11:0b:d3: 6a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:16:7C:4C:05:EA:15:E9:90:98:A6:DD:01:8E:5F:C6:18:CC:CF:B6 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:a1:76:99:8c:b1:99:a9:30:83:50:88:8a:57:b6:11:8c:da: b3:f8:74:c5:57:c7:24:23:a3:d0:de:53:cc:e3:9e:7b:12:a4: ae:36:f2:4e:b1:e7:e7:4e:b0:ac:24:65:4f:64:92:1a:16:35: 7a:7e:3b:68:47:79:70:66:32:eb:23:47:34:26:60:8b:23:81: 3a:62:6c:5c:87:26:6d:56:9d:9e:ab:88:02:c4:d0:ba:75:13: 8c:94:02:9f:5a:ce:f3:b0:b5:68:52:77:c7:2e:82:dd:3b:b7: 7a:af:37:16:45:0a:99:cc:39:9e:e4:b8:21:92:66:41:f1:bb: bb:0a:0d:30:86:33:33:05:a5:0e:2e:93:86:9d:a1:c4:3d:c5: f0:d7:1b:44:8b:da:1a:52:d0:d0:e4:42:22:64:09:b8:96:32: 5c:05:54:5b:a9:c9:10:94:5d:83:88:07:de:e7:aa:26:56:bd: 7f:db:b7:90:a6:3b:ed:6f:44:64:bf:e4:2e:34:91:6b:26:df: d6:50:4d:24:92:18:f1:90:4b:20:b6:fb:f7:9c:5b:93:76:ea: b9:26:bf:b9:5b:49:56:e3:14:30:3d:95:a2:a0:d0:15:4d:6b: df:2a:03:f4:b7:90:42:8b:7f:58:c8:1b:ec:9e:15:a0:28:be: 91:d4:c5:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjUwNzAzMDAzNDI0WhcNMjUwNzEwMDAzNDI0WjAYMRYwFAYD VQQDEw02ODY1ZDAxMC0wNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5R5A5ZKwrjmaMAjOCefOxQOLDJ8SK0DqZgmAcuRnOdOh1qNayDa/wAQlIOi6 cv+LYHQNyas8tnyBS53Ppm/GvCTl2eAzq55Fb0sYPbK25HFPbzb7RLrcecwat5uk o/sjcVW7Sj6Q17gruAcwn0GsG21k0Cqpex7LgEDQfplgPC+x3lukqgv0KiBF6Hon FMGu03qta0ktrc7HRrw+yMERQGDhx1Y0xpL//+OO3dJng+OolKAhIVJbC7iDlca/ jrewyUOAFysnU38EI2xzE7gTT/oBhRsQboJcNM1BhSILQflCJLqKDKKJE0P05VTQ hWmrCycWsLxMcuPuJSoRC9NqwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBkWfEwF 6hXpkJim3QGOX8YYzM+2MB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfoXaZjLGZqTCDUIiKV7YRjNqz+HTFV8ckI6PQ3lPM4557EqSuNvJO sefnTrCsJGVPZJIaFjV6fjtoR3lwZjLrI0c0JmCLI4E6YmxchyZtVp2eq4gCxNC6 dROMlAKfWs7zsLVoUnfHLoLdO7d6rzcWRQqZzDme5LghkmZB8bu7Cg0whjMzBaUO LpOGnaHEPcXw1xtEi9oaUtDQ5EIiZAm4ljJcBVRbqckQlF2DiAfe56omVr1/27eQ pjvtb0Rkv+QuNJFrJt/WUE0kkhjxkEsgtvv3nFuTduq5Jr+5W0lW4xQwPZWioNAV TWvfKgP0t5BCi39YyBvsnhWgKL6R1MUf -----END CERTIFICATE-----Generated at Thu Jul 3 07:14:11 2025 by rpki-client