$ rpki-client -vvf rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft File: QqwYh98sn_RowA68BlWa4XkLfUE.mft (raw, json) Hash identifier: J3GWBQ0+UAIvuyJp5wiIDo3o2BeKZrKpHizlGF7Fy3Y= Subject key identifier: D3:12:62:BB:9C:DA:4B:5A:BB:5A:49:11:88:A0:66:57:E6:17:20:DA Authority key identifier: 42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 Certificate issuer: /CN=A919EA3B/serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft Manifest number: 0181 Signing time: Tue 05 Aug 2025 04:03:49 +0000 Manifest this update: Tue 05 Aug 2025 04:03:48 +0000 Manifest next update: Tue 12 Aug 2025 04:03:48 +0000 Files and hashes: 1: QqwYh98sn_RowA68BlWa4XkLfUE.crl (hash: AdCr6rp2mFyd5/mRRzeLdhgxeUQ9V3Ii5Nt89GgLS1s=) 2: 2E7C802A261711EEB93AAC74C4F9AE02.roa (hash: GNgH54VuveRBqhIirbO5+23rkV4blzguEnK1jVi0hnU=) 3: 0218C21E261711EE9AEA7674C4F9AE02.roa (hash: uhmsph/UZ+El90Yxy7WpECGs3tuN2cOfnCiiAfNg+oE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EA3B, serialNumber=42AC1887DF2C9FF468C00EBC06559AE1790B7D41 Validity Not Before: Aug 5 04:03:48 2025 GMT Not After : Aug 12 04:03:48 2025 GMT Subject: CN=689182a4-391b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e0:45:9e:66:fd:d7:67:81:f2:46:30:2b:c7: c2:2b:5d:b7:29:0f:2f:2e:2d:78:5c:a2:f6:a6:e7: dc:89:22:db:1d:e5:4c:ad:76:6c:cc:66:10:78:0d: e7:5e:35:18:75:8f:21:eb:bd:9f:b5:de:d2:35:e3: 12:33:49:5d:aa:55:cf:6c:5e:2e:d6:64:59:81:71: 6c:d5:2c:14:23:e5:ea:94:d7:0c:6e:ab:43:ce:a9: be:f9:5a:06:2b:9b:03:8c:a8:20:a0:d6:fa:a0:6e: 9b:47:c1:75:4b:e5:2b:f6:c8:56:94:34:08:44:96: 47:5a:d3:a4:e1:d3:eb:cb:d5:1f:34:aa:da:3b:66: 42:51:ef:44:47:21:21:37:e1:5d:7c:5e:07:ff:87: 33:fa:46:47:86:36:04:19:62:2e:f9:7b:c7:03:ab: 56:89:1d:40:9a:e2:ff:a8:21:8e:0a:85:c0:e2:9d: 73:ae:46:c7:02:dd:e6:52:5f:67:1f:10:54:e9:4d: 0e:20:64:a1:76:32:77:72:59:8e:eb:d2:dc:46:50: c7:99:09:4c:24:0c:ab:7a:32:3b:7e:6f:fb:da:b4: 98:06:8b:c5:76:e9:0f:56:86:dc:82:b9:dc:2e:d2: 0c:f2:4d:e2:77:70:13:d0:15:bc:cd:7e:b5:57:4d: 35:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:12:62:BB:9C:DA:4B:5A:BB:5A:49:11:88:A0:66:57:E6:17:20:DA X509v3 Authority Key Identifier: keyid:42:AC:18:87:DF:2C:9F:F4:68:C0:0E:BC:06:55:9A:E1:79:0B:7D:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QqwYh98sn_RowA68BlWa4XkLfUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EA3B/89D0060A261611EEBE76105CC4F9AE02/QqwYh98sn_RowA68BlWa4XkLfUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:19:a0:d8:ed:2f:1d:f8:42:5d:11:01:e5:75:b4:76:48:ac: dd:f0:a2:93:66:63:82:91:db:97:51:bf:88:01:80:e2:fa:1a: 7c:86:23:9d:81:ac:bc:f7:a2:59:a9:89:4a:29:c0:b5:5f:7f: d6:ca:98:5f:0b:73:d6:5e:6b:51:9a:92:8d:c1:76:76:67:f9: 24:c4:f5:12:e5:3c:63:f2:7c:9b:b9:b6:0a:fc:12:1a:f5:62: b7:ba:d4:d6:fd:56:b6:96:d7:f8:69:d8:12:8b:f9:b5:fa:e7: 03:4c:08:c4:b0:83:ab:f4:61:be:f6:78:64:31:d1:bd:2f:01: d1:cd:23:2b:4e:5c:c9:b3:8d:5e:82:be:38:a9:4b:d1:9f:51: 6a:28:db:5e:02:55:3e:68:a0:c8:6e:3a:c2:f8:90:8c:69:2e: 0d:2e:90:f1:ee:37:48:83:7e:71:eb:66:22:1d:b8:1f:b4:cc: da:36:1b:9c:10:4b:f9:45:11:16:e2:97:20:5e:c6:03:45:2f: 34:a9:05:89:c7:23:45:16:b7:b7:dc:d7:ee:09:e4:3c:c3:a2: fe:5e:3e:f9:4c:c4:bc:03:88:13:6e:0d:21:f8:ab:4e:43:c5: 06:a2:5e:bc:28:7b:d7:54:98:6f:a1:40:a6:0e:e6:10:10:5b: b4:c5:16:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBM0IxMTAvBgNVBAUTKDQyQUMxODg3REYyQzlGRjQ2OEMwMEVCQzA2NTU5QUUx NzkwQjdENDEwHhcNMjUwODA1MDQwMzQ4WhcNMjUwODEyMDQwMzQ4WjAYMRYwFAYD VQQDEw02ODkxODJhNC0zOTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOBFnmb912eB8kYwK8fCK123KQ8vLi14XKL2pufciSLbHeVMrXZszGYQeA3n XjUYdY8h672ftd7SNeMSM0ldqlXPbF4u1mRZgXFs1SwUI+XqlNcMbqtDzqm++VoG K5sDjKggoNb6oG6bR8F1S+Ur9shWlDQIRJZHWtOk4dPry9UfNKraO2ZCUe9ERyEh N+FdfF4H/4cz+kZHhjYEGWIu+XvHA6tWiR1AmuL/qCGOCoXA4p1zrkbHAt3mUl9n HxBU6U0OIGShdjJ3clmO69LcRlDHmQlMJAyrejI7fm/72rSYBovFdukPVobcgrnc LtIM8k3id3AT0BW8zX61V001/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMSYruc 2ktau1pJEYigZlfmFyDaMB8GA1UdIwQYMBaAFEKsGIffLJ/0aMAOvAZVmuF5C31B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUEzQi84OUQwMDYwQTI2 MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25fUm93QTY4QmxXYTRYa0xm VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Fxd1loOThzbl9Sb3dBNjhCbFdhNFhrTGZVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUEzQi84OUQwMDYwQTI2MTYxMUVFQkU3NjEwNUNDNEY5QUUwMi9RcXdZaDk4c25f Um93QTY4QmxXYTRYa0xmVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwGaDY7S8d+EJdEQHldbR2SKzd8KKTZmOCkduXUb+IAYDi+hp8hiOd gay896JZqYlKKcC1X3/WyphfC3PWXmtRmpKNwXZ2Z/kkxPUS5Txj8nybubYK/BIa 9WK3utTW/Va2ltf4adgSi/m1+ucDTAjEsIOr9GG+9nhkMdG9LwHRzSMrTlzJs41e gr44qUvRn1FqKNteAlU+aKDIbjrC+JCMaS4NLpDx7jdIg35x62YiHbgftMzaNhuc EEv5RREW4pcgXsYDRS80qQWJxyNFFre33NfuCeQ8w6L+Xj75TMS8A4gTbg0h+KtO Q8UGol68KHvXVJhvoUCmDuYQEFu0xRaK -----END CERTIFICATE-----Generated at Thu Aug 7 05:10:20 2025 by rpki-client