$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: AwriS6+ImG6xVVZ+G9PvLj5m7IvYTb95Ip7c7A+4Lio= Subject key identifier: 6C:7A:F8:A8:EE:9F:FB:78:63:5A:4E:91:45:13:79:8F:14:0F:46:09 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 0198 Signing time: Tue 17 Jun 2025 02:33:55 +0000 Manifest this update: Tue 17 Jun 2025 02:33:55 +0000 Manifest next update: Tue 24 Jun 2025 02:33:55 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: Q/ln6A1wv7C314ErHe3VC2kW+hvXoR4O1Lc6uVzBPJ0=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:33:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Jun 17 02:33:55 2025 GMT Not After : Jun 24 02:33:55 2025 GMT Subject: CN=6850d413-2689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:71:de:37:5f:b3:48:f0:cf:e6:4d:89:23: 09:0b:39:73:9f:fa:95:12:b1:d9:3a:4f:64:00:c1: d7:29:90:99:0b:bb:0d:19:58:e5:ef:74:d5:7b:3b: 08:9d:6a:7f:ac:ee:7f:4e:e7:51:ba:db:6f:7c:8b: a2:41:8e:35:0b:1a:6f:be:99:5d:fb:d8:6e:e9:a8: d8:a9:00:18:45:e8:d5:da:34:11:e4:44:0c:75:63: 64:87:f0:9f:2d:a8:b3:ef:a7:e8:79:b1:75:34:88: 86:eb:24:c5:64:20:d8:72:73:9a:a2:8f:43:7c:d7: 9e:1d:3a:a9:a7:fb:ab:9d:cc:70:1d:47:fb:86:b4: 8a:eb:53:1b:78:21:93:5e:ec:f8:71:33:87:b2:15: 78:e3:49:8a:2c:76:72:75:d2:03:7c:4b:ae:5d:e8: 12:ac:4d:af:bc:73:1f:cc:3d:91:3f:b1:2c:89:8d: f6:27:d2:1b:74:0d:35:5e:f9:35:57:7d:1b:24:47: e5:0d:3c:5b:5a:7a:75:8c:bc:d8:96:2c:97:f3:2d: 61:bd:7e:02:6f:5f:0f:e7:f6:eb:f8:04:51:74:3a: c2:bf:11:21:9c:f9:90:03:2f:20:09:63:91:bb:56: 4b:34:d1:31:29:f6:ea:e1:e5:9e:c3:c5:6d:80:31: 82:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7A:F8:A8:EE:9F:FB:78:63:5A:4E:91:45:13:79:8F:14:0F:46:09 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ad:78:79:ea:d8:f1:f2:3d:45:b8:c4:9b:a8:e8:ae:80:95: 7a:70:0a:60:35:78:9c:63:70:99:79:b7:af:2e:17:2b:92:e4: ff:ad:ef:de:d2:e8:a2:32:43:89:9b:52:6f:d5:09:ce:d0:6e: 42:0e:db:81:af:4d:be:3a:35:01:4e:62:14:a0:50:47:c0:e3: 31:c8:14:16:77:49:36:e9:b9:ff:d6:b4:09:59:1e:7d:ec:a3: ea:a3:04:cc:35:a7:35:0a:a4:0d:b4:dd:06:09:5a:9a:8b:e7: 56:d8:f8:13:78:59:40:87:b0:33:30:de:a2:5e:47:5a:77:3d: 17:c5:9b:fb:be:71:14:01:ab:80:0c:89:de:dd:95:22:25:58: 4c:4d:68:4e:09:81:5e:19:79:dc:7b:9f:bd:d1:09:20:b4:3a: d3:b3:b0:0a:19:fd:18:19:4b:86:d5:c8:ea:fe:a5:a8:f0:14: 7b:9a:11:f4:5e:14:1c:4b:8f:32:fc:d1:01:0e:86:1c:12:cd: 6f:72:ef:6e:e9:65:39:6a:99:6a:cd:f1:4b:a6:d2:8d:70:da: 95:8b:88:4d:ea:cd:78:7a:05:ce:f7:9d:46:f1:6e:c0:ae:f1: 49:6b:92:c9:fe:82:50:a1:f7:89:7c:c6:17:0c:bc:91:d1:57: 48:b0:60:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUwNjE3MDIzMzU1WhcNMjUwNjI0MDIzMzU1WjAYMRYwFAYD VQQDEw02ODUwZDQxMy0yNjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsahx3jdfs0jwz+ZNiSMJCzlzn/qVErHZOk9kAMHXKZCZC7sNGVjl73TVezsI nWp/rO5/TudRuttvfIuiQY41Cxpvvpld+9hu6ajYqQAYRejV2jQR5EQMdWNkh/Cf Laiz76foebF1NIiG6yTFZCDYcnOaoo9DfNeeHTqpp/urncxwHUf7hrSK61MbeCGT Xuz4cTOHshV440mKLHZyddIDfEuuXegSrE2vvHMfzD2RP7EsiY32J9IbdA01Xvk1 V30bJEflDTxbWnp1jLzYliyX8y1hvX4Cb18P5/br+ARRdDrCvxEhnPmQAy8gCWOR u1ZLNNExKfbq4eWew8VtgDGCoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGx6+Kju n/t4Y1pOkUUTeY8UD0YJMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyrXh56tjx8j1FuMSbqOiugJV6cApgNXicY3CZebevLhcrkuT/re/e 0uiiMkOJm1Jv1QnO0G5CDtuBr02+OjUBTmIUoFBHwOMxyBQWd0k26bn/1rQJWR59 7KPqowTMNac1CqQNtN0GCVqai+dW2PgTeFlAh7AzMN6iXkdadz0XxZv7vnEUAauA DIne3ZUiJVhMTWhOCYFeGXnce5+90QkgtDrTs7AKGf0YGUuG1cjq/qWo8BR7mhH0 XhQcS48y/NEBDoYcEs1vcu9u6WU5aplqzfFLptKNcNqVi4hN6s14egXO951G8W7A rvFJa5LJ/oJQofeJfMYXDLyR0VdIsGCL -----END CERTIFICATE-----Generated at Tue Jun 17 19:43:45 2025 by rpki-client