$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: GLTGBrNBS7HmBhHtO22c/yLtnSWuAzOrnac6vN9HkSc= Subject key identifier: C5:32:7A:C8:A9:3F:25:41:6F:4E:D1:1E:2C:FA:28:60:FF:BF:E0:F1 Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 0447 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 0443 Signing time: Sat 14 Jun 2025 23:59:09 +0000 Manifest this update: Sat 14 Jun 2025 23:59:08 +0000 Manifest next update: Sat 21 Jun 2025 23:59:08 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: emqDeQ7/sLFCI0TP6vhYV0aAqFs4V0CgsP4OQrRIKfU=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Jun 14 23:59:08 2025 GMT Not After : Jun 21 23:59:08 2025 GMT Subject: CN=684e0ccc-02ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:06:fe:51:44:5b:d9:af:15:33:f6:84:d4:76: 05:5d:9a:53:6f:7a:ea:25:ac:54:9b:43:0c:a0:b2: 5e:03:b9:3a:81:25:ee:07:e8:ec:03:34:ac:b3:59: 17:c4:a5:e1:cc:7a:f8:2e:fc:8b:b6:15:f8:4e:15: 05:91:9f:a6:98:7b:f7:07:e0:4c:89:35:fb:9e:1c: a0:f3:74:15:e8:02:ea:ad:6e:b4:2d:32:81:90:32: 78:98:86:1e:7d:e1:7e:d5:14:f2:8c:d7:c3:26:29: 90:91:d9:be:ab:96:f7:83:45:61:cb:5f:42:41:56: 39:b6:da:2d:bc:aa:e4:78:28:61:57:67:87:9f:c4: 8c:58:7c:db:39:41:e4:82:44:20:7b:6a:f3:39:66: 01:d1:f7:3b:b8:e2:d7:30:07:e8:eb:18:40:d6:c3: 22:4e:53:89:0a:70:8f:1f:fe:47:c9:da:2b:56:e8: 4d:73:31:87:3c:80:82:5c:3c:c1:8d:ca:b9:a0:8c: de:0b:f2:e5:a2:84:3e:f6:5c:c9:3f:79:cd:b6:1a: e0:b9:5a:85:0d:ae:c8:54:9c:f3:92:8a:4f:4f:3f: 3a:93:32:e0:f4:fd:51:43:9e:e3:ed:f7:fe:9a:56: 15:e9:8b:65:9d:0b:86:4c:dd:d5:20:aa:e8:e0:23: 94:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:32:7A:C8:A9:3F:25:41:6F:4E:D1:1E:2C:FA:28:60:FF:BF:E0:F1 X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:82:80:38:9d:af:4d:12:a9:d1:8a:0e:51:19:5d:18:77:67: 1a:73:60:ea:93:04:15:6f:bc:75:d8:7d:61:18:2d:15:a7:90: 41:f1:5b:56:b5:ce:a0:00:7c:0d:b0:c0:a5:d5:fe:3a:52:77: e0:e4:25:b6:8e:eb:b1:cd:62:bb:6a:ba:c5:bf:e1:d2:51:ba: 7e:38:3b:9a:ed:2c:ff:e4:78:31:6e:82:c7:c6:3b:87:c5:f1: 22:0b:a5:3d:54:c8:84:b1:d6:6e:15:0f:2c:d2:67:87:37:e3: 2a:23:1a:4c:12:21:87:3d:1a:d9:19:68:0a:3c:5c:ac:7e:e5: f5:85:18:1f:4c:16:db:61:2a:05:4e:8e:44:09:ad:68:9c:e2: f8:d4:e7:c8:d9:cb:e9:fb:60:b6:88:eb:cd:e8:4d:8e:3e:a7: cf:18:89:12:c9:56:c0:92:31:97:52:0f:00:c9:15:25:f9:09: 15:9a:b1:6e:17:a2:17:c8:70:7c:de:5a:2b:f5:13:0a:ad:30: db:7f:7a:bc:37:4a:a7:f4:5d:9e:3c:4b:68:ee:fd:ed:fc:07: 3e:ea:4d:36:6a:ee:70:df:5e:7a:c6:27:fc:8e:d8:26:cf:24: a0:67:4d:f3:75:2e:23:40:f8:93:5f:5a:ca:6a:cb:ef:de:f5: 22:98:a4:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjUwNjE0MjM1OTA4WhcNMjUwNjIxMjM1OTA4WjAYMRYwFAYD VQQDEw02ODRlMGNjYy0wMmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwb+UURb2a8VM/aE1HYFXZpTb3rqJaxUm0MMoLJeA7k6gSXuB+jsAzSss1kX xKXhzHr4LvyLthX4ThUFkZ+mmHv3B+BMiTX7nhyg83QV6ALqrW60LTKBkDJ4mIYe feF+1RTyjNfDJimQkdm+q5b3g0Vhy19CQVY5ttotvKrkeChhV2eHn8SMWHzbOUHk gkQge2rzOWYB0fc7uOLXMAfo6xhA1sMiTlOJCnCPH/5HydorVuhNczGHPICCXDzB jcq5oIzeC/LlooQ+9lzJP3nNthrguVqFDa7IVJzzkopPTz86kzLg9P1RQ57j7ff+ mlYV6YtlnQuGTN3VIKro4COUEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUyesip PyVBb07RHiz6KGD/v+DxMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUgoA4na9NEqnRig5RGV0Yd2cac2DqkwQVb7x12H1hGC0Vp5BB8VtW tc6gAHwNsMCl1f46Unfg5CW2juuxzWK7arrFv+HSUbp+ODua7Sz/5HgxboLHxjuH xfEiC6U9VMiEsdZuFQ8s0meHN+MqIxpMEiGHPRrZGWgKPFysfuX1hRgfTBbbYSoF To5ECa1onOL41OfI2cvp+2C2iOvN6E2OPqfPGIkSyVbAkjGXUg8AyRUl+QkVmrFu F6IXyHB83lor9RMKrTDbf3q8N0qn9F2ePEto7v3t/Ac+6k02au5w3156xif8jtgm zySgZ03zdS4jQPiTX1rKasvv3vUimKQ5 -----END CERTIFICATE-----Generated at Sun Jun 15 08:39:52 2025 by rpki-client