$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: Z62cP6VHshjGWLhPzHdOl2LeOaxKwPgFcfSzwPWU6n0= Subject key identifier: 77:4D:1E:89:44:AE:8C:7F:3E:44:92:11:25:4F:6E:36:55:00:8B:82 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 01B2 Signing time: Thu 07 Aug 2025 03:37:22 +0000 Manifest this update: Thu 07 Aug 2025 03:37:22 +0000 Manifest next update: Thu 14 Aug 2025 03:37:22 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: aKhmE0cZU8iGngrXUJkys7xMweHqNbMiR9OnlAkbFPw=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Aug 7 03:37:22 2025 GMT Not After : Aug 14 03:37:22 2025 GMT Subject: CN=68941f72-cc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a6:de:98:74:47:a7:d1:35:50:43:c8:42:22: 37:36:ab:83:0a:44:af:ae:1d:6e:c9:f6:30:6b:39: 4d:20:53:b2:e9:4d:ab:92:17:ac:72:75:d3:58:fb: 2c:53:57:ef:ce:f4:6a:20:ff:f9:cb:93:b0:41:29: 56:71:d1:aa:61:fc:62:52:a1:c3:61:bb:f3:d7:59: 3d:20:e2:9c:3a:19:20:2a:9c:97:49:e8:a3:77:66: 69:fe:84:d1:e2:96:41:94:be:21:33:1d:00:70:fd: 8e:11:6a:b6:a3:8e:fb:0c:c8:b1:ee:0b:84:a4:2f: 7f:9c:2e:d5:68:69:cc:e6:d3:ed:62:bd:60:b3:5c: 03:f8:6c:25:dc:87:1b:a9:b6:19:eb:0c:4e:ac:26: 41:94:88:4c:a3:83:ec:05:16:84:51:76:e7:d8:f1: fd:00:24:d5:48:a8:3c:a4:8f:0d:22:fe:7c:16:ac: e3:af:da:9b:61:18:7a:9d:ca:c1:0f:43:fc:10:fa: 9f:99:f4:6c:34:6f:cf:d1:32:9f:fc:57:32:df:24: 09:97:a9:95:2d:5b:e2:e3:5e:36:99:83:2d:fb:9e: 66:11:ba:80:fd:b5:e5:90:e7:02:b8:3c:ef:2a:bc: fe:24:b2:1b:28:6f:7c:53:81:be:34:2f:34:44:00: 6c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:4D:1E:89:44:AE:8C:7F:3E:44:92:11:25:4F:6E:36:55:00:8B:82 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:57:6c:b7:45:98:37:b2:7c:7c:a5:be:34:ac:28:b6:a0:59: 39:b8:bd:c3:95:e0:6e:eb:f8:3e:85:16:04:da:ed:a4:9f:d4: aa:f7:da:b9:6d:0f:55:1f:1e:29:25:65:3e:3a:83:e0:75:be: 1d:e1:95:cd:13:46:70:6f:d1:b2:80:66:eb:45:ea:4a:99:6d: d2:fb:f9:c4:0c:c4:9b:46:6c:55:f4:04:23:8a:19:d1:8c:06: 67:93:c6:1a:4e:2f:21:50:93:0e:85:62:5b:f4:9c:27:d4:cc: 57:56:f0:39:51:1c:ec:54:0e:86:62:c6:92:42:e9:6c:3c:67: 9e:22:65:59:f8:9a:94:fd:22:40:38:d8:77:37:cd:94:64:24: c0:56:5a:71:f1:a5:fa:29:4d:22:24:9a:c2:0b:ff:7b:a7:e8: 30:2c:e5:2f:b4:80:13:22:cc:07:91:78:89:d6:23:60:ef:db: df:05:07:42:e1:da:d0:53:35:81:da:f1:94:e7:81:df:fe:d7: 87:da:6b:06:94:fe:e0:a9:f9:cb:06:3e:fa:3a:88:14:3b:f3: 36:26:89:5d:33:cc:3e:d5:1e:c7:39:58:69:7b:da:b2:88:f0: f8:69:48:93:e2:f6:8d:a0:76:16:ac:8e:29:99:50:46:2b:1a: 4f:aa:97:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUwODA3MDMzNzIyWhcNMjUwODE0MDMzNzIyWjAYMRYwFAYD VQQDEw02ODk0MWY3Mi1jYzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8KbemHRHp9E1UEPIQiI3NquDCkSvrh1uyfYwazlNIFOy6U2rkhescnXTWPss U1fvzvRqIP/5y5OwQSlWcdGqYfxiUqHDYbvz11k9IOKcOhkgKpyXSeijd2Zp/oTR 4pZBlL4hMx0AcP2OEWq2o477DMix7guEpC9/nC7VaGnM5tPtYr1gs1wD+Gwl3Icb qbYZ6wxOrCZBlIhMo4PsBRaEUXbn2PH9ACTVSKg8pI8NIv58Fqzjr9qbYRh6ncrB D0P8EPqfmfRsNG/P0TKf/Fcy3yQJl6mVLVvi4142mYMt+55mEbqA/bXlkOcCuDzv Krz+JLIbKG98U4G+NC80RABsfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdNHolE rox/PkSSESVPbjZVAIuCMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLV2y3RZg3snx8pb40rCi2oFk5uL3DleBu6/g+hRYE2u2kn9Sq99q5 bQ9VHx4pJWU+OoPgdb4d4ZXNE0Zwb9GygGbrRepKmW3S+/nEDMSbRmxV9AQjihnR jAZnk8YaTi8hUJMOhWJb9Jwn1MxXVvA5URzsVA6GYsaSQulsPGeeImVZ+JqU/SJA ONh3N82UZCTAVlpx8aX6KU0iJJrCC/97p+gwLOUvtIATIswHkXiJ1iNg79vfBQdC 4drQUzWB2vGU54Hf/teH2msGlP7gqfnLBj76OogUO/M2JoldM8w+1R7HOVhpe9qy iPD4aUiT4vaNoHYWrI4pmVBGKxpPqpeQ -----END CERTIFICATE-----Generated at Fri Aug 8 13:03:08 2025 by rpki-client