$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: DYdu931PMdXh2VGbJzvhqAOGYB+fD9uL3KIcI0rIgKE= Subject key identifier: ED:CE:FA:A7:CF:65:13:D7:CD:F3:7D:C3:43:08:2A:81:17:47:62:E2 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 0464 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 0460 Signing time: Mon 11 Aug 2025 00:19:43 +0000 Manifest this update: Mon 11 Aug 2025 00:19:42 +0000 Manifest next update: Mon 18 Aug 2025 00:19:42 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: kfZnpQz6z7+XZ0XnkJY67K5rr17VbIxyps0d/Pq+pzc=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1124 (0x464) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Aug 11 00:19:42 2025 GMT Not After : Aug 18 00:19:42 2025 GMT Subject: CN=6899371e-013d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a2:79:4d:b9:98:ac:38:8a:15:dc:f3:4a:2d: 84:a7:68:d4:de:de:fa:cd:d9:3b:2d:01:32:21:d1: 6c:bc:e4:45:da:2d:99:5f:a3:4d:fa:24:f9:54:fd: 66:72:57:f7:7d:4b:a7:f1:93:bd:c7:81:3f:61:27: b5:1d:cf:07:42:08:9a:9d:1a:e7:67:e7:4d:56:46: 4e:19:b1:68:75:c3:49:06:a3:bb:46:6a:68:f3:85: 17:36:9f:3f:6c:d2:59:64:17:d9:a7:ba:cb:b3:0a: d7:08:6e:4e:a1:8e:31:e2:4a:49:77:d8:6d:56:bc: 68:27:33:02:a5:0c:e7:c0:66:97:b1:9b:e8:fa:4c: 28:10:ec:bb:6c:0b:ed:87:40:ff:a6:bc:3c:ec:dd: 97:50:51:86:95:b6:e9:8a:47:85:ba:b3:9f:99:59: 8b:cb:89:d0:68:fc:58:58:ac:14:fe:f5:54:a9:eb: 47:a6:94:a5:95:46:22:e0:74:35:e9:99:a3:c4:12: ba:f3:4b:f3:d5:de:91:1f:6c:38:76:4d:91:c8:ba: 82:54:a7:be:68:e8:b8:96:94:93:9c:fe:8b:97:8c: 82:44:72:85:e1:a6:a7:f9:ff:f0:11:cc:e3:18:0f: 22:ba:7e:bc:84:38:85:50:84:74:86:2e:2b:aa:a8: 9a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:FA:A7:CF:65:13:D7:CD:F3:7D:C3:43:08:2A:81:17:47:62:E2 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:a2:bc:3c:3a:e2:b7:4f:6c:be:de:be:c4:7a:fd:12:c1:f5: a7:35:98:74:e8:83:a3:28:34:cf:3e:56:9d:4f:9f:1f:a4:23: 11:ad:c9:a7:27:fd:8a:87:e7:59:39:40:ac:c3:f6:82:a4:a7: f6:fa:56:8f:c4:c2:b3:92:b1:16:68:3b:47:46:c6:c0:60:eb: 6b:97:1b:81:66:d7:d2:72:b8:8e:43:6a:93:f9:f8:02:59:bb: 31:07:2b:e8:12:45:a4:6b:60:2c:c4:6f:92:ea:b7:28:6f:37: bc:92:6e:b0:a8:95:b5:de:cf:59:88:1d:2b:c9:f4:4a:cc:2d: 95:ed:94:37:6e:3c:57:29:89:21:49:47:80:04:23:8d:f7:e6: 41:e6:db:6e:53:f8:82:61:ad:3f:4a:25:77:ed:31:2f:38:a7: 64:3a:5d:46:7f:17:4b:12:5d:6c:e6:ee:f3:65:12:8c:89:17: c8:ee:bc:0f:f7:9a:6d:9a:39:51:db:d4:61:ac:8f:cf:c6:b5: 78:bf:ca:48:b5:bd:77:cd:c8:71:d5:7d:3f:af:00:b0:0d:d1: 6b:30:bd:e8:94:bc:6c:48:a7:2b:2e:2c:45:96:f9:5c:0c:55: f7:25:37:1b:28:3c:b6:b1:be:ea:88:e0:17:db:e8:22:a1:c7: 2a:19:18:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjUwODExMDAxOTQyWhcNMjUwODE4MDAxOTQyWjAYMRYwFAYD VQQDEw02ODk5MzcxZS0wMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56J5TbmYrDiKFdzzSi2Ep2jU3t76zdk7LQEyIdFsvORF2i2ZX6NN+iT5VP1m clf3fUun8ZO9x4E/YSe1Hc8HQgianRrnZ+dNVkZOGbFodcNJBqO7Rmpo84UXNp8/ bNJZZBfZp7rLswrXCG5OoY4x4kpJd9htVrxoJzMCpQznwGaXsZvo+kwoEOy7bAvt h0D/prw87N2XUFGGlbbpikeFurOfmVmLy4nQaPxYWKwU/vVUqetHppSllUYi4HQ1 6ZmjxBK680vz1d6RH2w4dk2RyLqCVKe+aOi4lpSTnP6Ll4yCRHKF4aan+f/wEczj GA8iun68hDiFUIR0hi4rqqiamQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3O+qfP ZRPXzfN9w0MIKoEXR2LiMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgorw8OuK3T2y+3r7Eev0SwfWnNZh06IOjKDTPPladT58fpCMRrcmn J/2Kh+dZOUCsw/aCpKf2+laPxMKzkrEWaDtHRsbAYOtrlxuBZtfScriOQ2qT+fgC WbsxByvoEkWka2AsxG+S6rcobze8km6wqJW13s9ZiB0ryfRKzC2V7ZQ3bjxXKYkh SUeABCON9+ZB5ttuU/iCYa0/SiV37TEvOKdkOl1GfxdLEl1s5u7zZRKMiRfI7rwP 95ptmjlR29RhrI/PxrV4v8pItb13zchx1X0/rwCwDdFrML3olLxsSKcrLixFlvlc DFX3JTcbKDy2sb7qiOAX2+gioccqGRgr -----END CERTIFICATE-----Generated at Mon Aug 11 10:05:00 2025 by rpki-client