$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft File: QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json) Hash identifier: fR2aE9xTsNPHjWDRtR5mH07zVrQwBMmaPXUISk66Y5I= Subject key identifier: 2E:CD:D2:34:36:1E:50:8C:96:30:BD:2E:3E:D5:13:AE:4F:11:BD:3A Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Certificate serial: 0696 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft Manifest number: 0691 Signing time: Sat 14 Jun 2025 21:57:58 +0000 Manifest this update: Sat 14 Jun 2025 21:57:58 +0000 Manifest next update: Sat 21 Jun 2025 21:57:58 +0000 Files and hashes: 1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: 9iYviOKXJYL34IXlveNNkGDtA1FW2j4bfvqRwI03Nw4=) 2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: f7Qn0qXwPKUSx1AKDqHdBuBm3lykdUVyid+XDevm250=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1686 (0x696) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Validity Not Before: Jun 14 21:57:58 2025 GMT Not After : Jun 21 21:57:58 2025 GMT Subject: CN=684df066-e7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b7:da:7b:02:fe:a9:99:72:b3:9d:c5:6e:ff: 30:dd:6e:e8:bb:67:be:e1:3d:30:9a:5e:85:e1:14: b8:83:f6:b6:6a:4d:6a:ab:29:4c:ad:81:70:8f:95: ff:06:f8:6f:6e:7d:da:77:45:cc:d7:29:18:90:ec: 71:02:76:cc:e1:dd:09:e8:96:a5:6d:f6:2b:25:3b: 92:e8:67:8b:45:09:64:15:f6:81:e2:22:6a:a9:be: 5a:67:cb:be:13:ef:5c:32:b2:95:8d:a4:92:d9:61: 70:61:75:1d:f7:c2:1a:a9:e0:f7:28:ef:5d:15:e6: 5d:7c:e1:7c:46:ca:30:37:0a:60:57:8a:7e:dc:c0: 46:7a:6b:ed:c7:06:52:7d:28:ea:b0:eb:4d:24:31: cb:69:18:99:b5:2d:05:a9:6d:cb:5a:72:4f:85:78: b1:dd:c8:52:ba:8e:de:41:fd:44:68:5f:57:0f:11: 37:ef:24:f7:00:db:a6:a5:cc:f5:0b:75:1b:2c:3f: 55:24:a0:e0:f5:5e:6b:73:3f:27:4a:80:61:2d:e6: 51:87:85:f6:77:0d:3e:bb:d3:6d:9a:16:66:36:0f: 7c:5b:65:fd:24:95:f6:0a:00:e1:a0:bd:39:c4:9c: a4:96:9d:83:11:04:b4:d8:11:62:5d:59:a3:63:44: 75:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CD:D2:34:36:1E:50:8C:96:30:BD:2E:3E:D5:13:AE:4F:11:BD:3A X509v3 Authority Key Identifier: keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:30:c1:ab:4b:79:b4:7b:67:12:d1:b8:3a:c4:71:97:56:4d: 90:5d:ff:fd:e0:21:0b:29:ac:af:a4:d5:48:06:a4:40:73:54: d6:74:ae:8b:4a:71:04:af:32:26:af:ec:2a:ae:12:6d:f4:9b: 53:4b:2d:bd:b7:d0:22:38:f7:ee:0b:5e:df:d5:b8:e8:9a:4b: 2a:af:f0:b0:6c:f7:8d:4b:2c:61:29:90:8f:b1:db:11:6b:33: 32:bd:b9:b3:4e:cb:a6:27:9a:96:d5:ea:2f:29:23:56:72:2c: 6c:a8:09:13:8e:b7:51:ca:42:95:5d:56:14:d0:d8:65:1a:c9: 8b:47:2b:30:ff:2f:e9:18:54:84:ce:67:10:86:33:3e:51:ad: ac:ed:58:ce:d0:71:67:e4:95:df:a4:f8:31:e8:1f:de:24:05: e1:48:e0:79:8a:bb:3a:dd:40:15:6d:4d:95:00:e7:9f:ea:6d: ba:e2:ae:91:b9:96:27:98:e7:35:72:80:00:42:bc:1b:1c:8d: 1d:e9:6d:4f:a3:2f:c7:6b:e4:16:8e:8d:26:2c:c3:6a:99:ae: 46:9c:06:2a:9a:f0:09:30:bb:c5:1f:af:46:c0:1d:7a:bc:b4: 73:03:12:ed:51:18:2f:5d:0d:1a:5f:d5:ab:62:1f:80:7e:2b: 72:f3:88:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1 MzM3Q0E0ODUwHhcNMjUwNjE0MjE1NzU4WhcNMjUwNjIxMjE1NzU4WjAYMRYwFAYD VQQDEw02ODRkZjA2Ni1lN2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbfaewL+qZlys53Fbv8w3W7ou2e+4T0wml6F4RS4g/a2ak1qqylMrYFwj5X/ Bvhvbn3ad0XM1ykYkOxxAnbM4d0J6JalbfYrJTuS6GeLRQlkFfaB4iJqqb5aZ8u+ E+9cMrKVjaSS2WFwYXUd98IaqeD3KO9dFeZdfOF8RsowNwpgV4p+3MBGemvtxwZS fSjqsOtNJDHLaRiZtS0FqW3LWnJPhXix3chSuo7eQf1EaF9XDxE37yT3ANumpcz1 C3UbLD9VJKDg9V5rcz8nSoBhLeZRh4X2dw0+u9NtmhZmNg98W2X9JJX2CgDhoL05 xJyklp2DEQS02BFiXVmjY0R17QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7N0jQ2 HlCMljC9Lj7VE65PEb06MB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBE R3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDMMGrS3m0e2cS0bg6xHGXVk2QXf/94CELKayvpNVIBqRAc1TWdK6L SnEErzImr+wqrhJt9JtTSy29t9AiOPfuC17f1bjomksqr/CwbPeNSyxhKZCPsdsR azMyvbmzTsumJ5qW1eovKSNWcixsqAkTjrdRykKVXVYU0NhlGsmLRysw/y/pGFSE zmcQhjM+Ua2s7VjO0HFn5JXfpPgx6B/eJAXhSOB5irs63UAVbU2VAOef6m264q6R uZYnmOc1coAAQrwbHI0d6W1Poy/Ha+QWjo0mLMNqma5GnAYqmvAJMLvFH69GwB16 vLRzAxLtURgvXQ0aX9WrYh+Afity84jQ -----END CERTIFICATE-----Generated at Sun Jun 15 09:52:42 2025 by rpki-client