$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: 7XFp+2+igrk2JraFc3zvjzccFSdBoGhYNE5Px8F0fYM= Subject key identifier: D0:D9:14:23:64:27:29:F6:35:9A:5A:A1:D5:5B:C1:42:A9:B1:2B:9F Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 01A8 Signing time: Sat 19 Jul 2025 03:28:11 +0000 Manifest this update: Sat 19 Jul 2025 03:28:10 +0000 Manifest next update: Sat 26 Jul 2025 03:28:10 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: +dEaWHW2klzL6QEAo32qOPQ930G+L8+pUQgIZaOO3Gg=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Jul 19 03:28:10 2025 GMT Not After : Jul 26 03:28:10 2025 GMT Subject: CN=687b10cb-9be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9b:dc:bf:84:da:50:06:55:b1:b3:6e:6e:ae: 9b:30:fa:d4:83:c4:f1:97:6d:bf:bd:0c:61:12:53: 83:a1:77:2e:70:f0:3e:95:49:6e:78:52:b6:42:69: 48:31:7b:4e:e9:19:e9:95:d8:13:e3:5d:35:09:1b: 4b:2d:83:9f:92:80:a1:cc:01:00:43:ec:10:51:17: 80:4e:f8:92:74:c0:ba:2d:c3:e3:e0:64:e3:0e:c9: 8c:59:0e:79:39:37:45:f3:96:68:43:77:c7:52:07: 6d:6b:55:9e:2f:3f:44:8d:47:6b:a4:e0:8b:68:a4: ae:e7:bd:f0:fa:e8:bc:cc:13:7a:09:57:59:e1:a9: 7c:62:ce:05:0b:96:2f:04:26:e0:f1:1d:f7:42:ab: 3d:65:00:eb:bb:ad:69:07:df:70:2e:00:4e:dd:98: 3e:93:42:f6:7a:b7:72:09:d5:a6:25:10:26:77:58: 5c:bd:03:c4:26:ea:43:a0:ff:09:fb:a4:b0:cb:f9: 48:29:0a:b1:dc:b2:4e:fe:04:0c:4f:a8:1e:ce:2a: 01:08:a5:8d:d8:c3:fa:9e:74:05:c6:a0:a0:c3:c9: 11:d9:cc:1c:75:18:49:4f:4a:6d:f4:e0:9b:7e:ac: ba:cc:a4:06:e3:b5:63:5e:ca:7f:25:fb:31:2d:0a: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D9:14:23:64:27:29:F6:35:9A:5A:A1:D5:5B:C1:42:A9:B1:2B:9F X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:27:cc:10:b6:9e:70:d8:2c:45:e0:ce:9e:5d:25:a7:24:e8: 9e:44:ad:ac:1a:2c:87:07:b7:ea:67:fb:9f:b9:fd:be:cb:f2: d8:30:a9:4a:4e:c8:fc:b1:6c:a6:a4:5c:a3:e0:2e:be:91:04: e1:d0:14:01:ad:76:72:1b:eb:67:f9:49:87:24:ce:32:8a:2c: e5:dc:44:c1:c1:42:73:cf:13:97:9b:2d:57:16:78:55:53:8a: 85:48:1a:64:57:a7:e3:f4:37:86:91:21:de:27:d4:4f:50:be: 7f:4a:bb:6b:c8:45:ba:59:7c:1c:4d:c4:8d:a7:d9:90:ba:f2: c1:aa:dc:ff:34:ff:bd:5c:c5:02:35:9f:35:4b:94:81:a8:a0: a5:0a:bd:33:e4:17:4b:ff:54:8f:64:6d:2b:ce:b2:17:97:47: 87:bd:f8:36:65:63:66:37:70:b1:db:fc:a8:ad:d7:06:89:b9: aa:fe:8e:81:53:30:5f:a7:14:1a:17:73:70:d5:74:23:da:22: d9:48:10:20:54:9f:48:f8:32:9e:82:09:5b:90:2f:bd:63:7c: a6:52:2f:3c:76:6c:99:75:c5:aa:6d:c1:2d:ce:5d:04:ba:79: c2:f0:0c:29:b8:8c:76:75:c6:ca:67:2a:fa:7d:b8:e1:83:68: 87:8e:54:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUwNzE5MDMyODEwWhcNMjUwNzI2MDMyODEwWjAYMRYwFAYD VQQDEw02ODdiMTBjYi05YmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJvcv4TaUAZVsbNubq6bMPrUg8Txl22/vQxhElODoXcucPA+lUlueFK2QmlI MXtO6RnpldgT4101CRtLLYOfkoChzAEAQ+wQUReATviSdMC6LcPj4GTjDsmMWQ55 OTdF85ZoQ3fHUgdta1WeLz9EjUdrpOCLaKSu573w+ui8zBN6CVdZ4al8Ys4FC5Yv BCbg8R33Qqs9ZQDru61pB99wLgBO3Zg+k0L2erdyCdWmJRAmd1hcvQPEJupDoP8J +6Swy/lIKQqx3LJO/gQMT6gezioBCKWN2MP6nnQFxqCgw8kR2cwcdRhJT0pt9OCb fqy6zKQG47VjXsp/JfsxLQrNWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDZFCNk Jyn2NZpaodVbwUKpsSufMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTJ8wQtp5w2CxF4M6eXSWnJOieRK2sGiyHB7fqZ/ufuf2+y/LYMKlK Tsj8sWympFyj4C6+kQTh0BQBrXZyG+tn+UmHJM4yiizl3ETBwUJzzxOXmy1XFnhV U4qFSBpkV6fj9DeGkSHeJ9RPUL5/SrtryEW6WXwcTcSNp9mQuvLBqtz/NP+9XMUC NZ81S5SBqKClCr0z5BdL/1SPZG0rzrIXl0eHvfg2ZWNmN3Cx2/yordcGibmq/o6B UzBfpxQaF3Nw1XQj2iLZSBAgVJ9I+DKegglbkC+9Y3ymUi88dmyZdcWqbcEtzl0E unnC8AwpuIx2dcbKZyr6fbjhg2iHjlRX -----END CERTIFICATE-----Generated at Sun Jul 20 02:39:24 2025 by rpki-client