$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft File: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft (raw, json) Hash identifier: wIkNHOcR24VdUg/Uw9RD73+2/rJ4WTWhGCcisNppDYY= Subject key identifier: 30:81:F3:37:3A:32:67:E0:AE:FE:3A:93:F0:FB:95:58:3D:2D:A4:BB Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E Certificate issuer: /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft Manifest number: DF Signing time: Mon 21 Jul 2025 05:40:08 +0000 Manifest this update: Mon 21 Jul 2025 05:40:07 +0000 Manifest next update: Mon 28 Jul 2025 05:40:07 +0000 Files and hashes: 1: QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl (hash: kqgKo4MCFSEWGQ6Re587ztpGhU8eX5fIb27/+H0ot+g=) 2: 3F9C6E6619B811EF8628ED1FC4F9AE02.roa (hash: W33rXxSlvsCWhMMJptogBjvzdgDQoYwJi+V5ipdn5y8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4475, serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E Validity Not Before: Jul 21 05:40:07 2025 GMT Not After : Jul 28 05:40:07 2025 GMT Subject: CN=687dd2b8-ec50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:72:64:f2:2b:84:ae:4e:8b:d7:ab:b9:76: 7c:84:53:e6:77:8e:d1:18:56:4d:5f:33:86:34:17: 88:31:46:1c:3a:64:b3:b8:73:95:1e:41:be:63:17: 2f:21:c2:c6:4e:ae:a7:3c:3e:43:c3:b0:f0:f8:10: 44:0a:f4:c3:d0:f0:69:19:e5:fb:24:73:65:75:b5: d0:2c:64:2c:89:33:f9:4d:b6:27:97:e8:e2:ae:aa: 6a:8e:85:1a:f7:68:7c:00:b4:b0:bd:7d:5b:74:4b: ab:ff:a4:95:7f:ba:a5:5a:ed:fe:a8:25:27:81:28: 18:28:be:4e:ab:e0:92:66:76:fe:a2:14:b5:f2:14: a2:54:55:0f:03:55:0c:64:36:34:92:8f:57:97:ab: f3:7a:21:bb:55:92:4d:23:e2:9c:a9:fc:b3:f3:f5: 3a:9e:4c:53:e8:5a:04:5c:0a:3a:75:8d:ca:27:88: 91:95:97:98:ae:3d:cb:eb:94:6a:9b:88:52:b2:db: c0:cc:6d:c3:61:2d:51:a5:fe:49:3b:d9:09:a1:df: 48:52:6b:df:04:71:27:96:a9:48:95:7b:97:fa:4b: 92:3d:22:92:68:c8:98:70:be:9e:62:13:42:be:12: 18:00:62:a1:09:39:75:a5:f1:ac:ca:0d:16:58:1c: a5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:81:F3:37:3A:32:67:E0:AE:FE:3A:93:F0:FB:95:58:3D:2D:A4:BB X509v3 Authority Key Identifier: keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f1:fd:2b:87:6c:e1:97:69:a1:5d:ce:48:25:99:8e:56:51: b9:7f:24:a8:f6:a0:f7:e8:55:4e:04:dd:8b:96:3e:13:63:e3: b3:28:59:a4:59:28:a4:30:45:7c:e9:37:5c:ff:49:e2:8b:b9: 0b:c9:3e:96:8a:40:4b:ab:c7:34:b4:e1:36:2d:3d:7f:5f:8a: 0e:8a:c2:5b:04:47:1c:8f:08:a1:10:9e:d2:54:24:ec:ce:8f: 28:8d:ac:b7:8b:6d:78:96:77:39:90:be:6c:1f:41:91:f6:f1: b4:75:8a:be:3d:e3:a5:da:1d:8e:f9:40:20:97:6c:6b:f4:43: 93:dc:9e:cf:47:c6:a5:70:f1:06:d6:12:62:e1:2c:47:2f:09: 58:a8:4a:55:32:78:bf:ca:f0:a8:df:17:d2:94:6a:cd:ae:12: 9e:44:2a:42:82:a3:cc:29:45:60:74:6c:7d:dd:77:03:0f:a5: a3:35:54:b1:1a:36:9a:3e:8c:d4:86:43:84:5b:bc:4f:a0:a3: 4c:a7:0a:09:e7:7d:f6:02:bd:ed:5e:6f:33:40:b4:39:2e:aa: 42:0d:1d:d6:61:c0:35:3f:b8:04:ab:83:d5:06:90:ea:7c:ff: 63:e6:b0:a7:d6:b9:37:cc:9e:91:d2:56:c5:57:7f:de:41:22: 80:9e:ba:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0NzUxMTAvBgNVBAUTKDQxMDQzREFDMTg5RTIyRkY3RjVBRUQ4MTA3QTMyMzJG NDE5MEFGM0UwHhcNMjUwNzIxMDU0MDA3WhcNMjUwNzI4MDU0MDA3WjAYMRYwFAYD VQQDEw02ODdkZDJiOC1lYzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAprRyZPIrhK5Oi9eruXZ8hFPmd47RGFZNXzOGNBeIMUYcOmSzuHOVHkG+Yxcv IcLGTq6nPD5Dw7Dw+BBECvTD0PBpGeX7JHNldbXQLGQsiTP5TbYnl+jirqpqjoUa 92h8ALSwvX1bdEur/6SVf7qlWu3+qCUngSgYKL5Oq+CSZnb+ohS18hSiVFUPA1UM ZDY0ko9Xl6vzeiG7VZJNI+Kcqfyz8/U6nkxT6FoEXAo6dY3KJ4iRlZeYrj3L65Rq m4hSstvAzG3DYS1Rpf5JO9kJod9IUmvfBHEnlqlIlXuX+kuSPSKSaMiYcL6eYhNC vhIYAGKhCTl1pfGsyg0WWBylkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCB8zc6 Mmfgrv46k/D7lVg9LaS7MB8GA1UdIwQYMBaAFEEEPawYniL/f1rtgQejIy9BkK8+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQ3NS84MzI0NzBEQzE4 Q0YxMUVGOEUzRjI0NTdDNEY5QUUwMi9RUVE5ckJpZUl2OV9XdTJCQjZNakwwR1Fy ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRUTlyQmllSXY5X1d1MkJCNk1qTDBHUXJ6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDQ3NS84MzI0NzBEQzE4Q0YxMUVGOEUzRjI0NTdDNEY5QUUwMi9RUVE5ckJpZUl2 OV9XdTJCQjZNakwwR1FyejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm8f0rh2zhl2mhXc5IJZmOVlG5fySo9qD36FVOBN2Llj4TY+OzKFmk WSikMEV86Tdc/0nii7kLyT6WikBLq8c0tOE2LT1/X4oOisJbBEccjwihEJ7SVCTs zo8ojay3i214lnc5kL5sH0GR9vG0dYq+PeOl2h2O+UAgl2xr9EOT3J7PR8alcPEG 1hJi4SxHLwlYqEpVMni/yvCo3xfSlGrNrhKeRCpCgqPMKUVgdGx93XcDD6WjNVSx GjaaPozUhkOEW7xPoKNMpwoJ5332Ar3tXm8zQLQ5LqpCDR3WYcA1P7gEq4PVBpDq fP9j5rCn1rk3zJ6R0lbFV3/eQSKAnroF -----END CERTIFICATE-----Generated at Mon Jul 21 13:24:55 2025 by rpki-client