$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: WLOaCD493m/guC7+2HJX8xd/xSGX4aXvYCP0bDRrD3o= Subject key identifier: 8F:6B:E4:A4:92:7A:D7:19:CD:6B:C7:E9:35:B9:EF:80:2F:7A:00:6C Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 0459 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 0455 Signing time: Mon 21 Jul 2025 00:26:23 +0000 Manifest this update: Mon 21 Jul 2025 00:26:23 +0000 Manifest next update: Mon 28 Jul 2025 00:26:23 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: zGJNQnX7Uah9y7FfUXj1V0UYrnnq5ZKeUpf8JFmZlus=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1113 (0x459) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Jul 21 00:26:23 2025 GMT Not After : Jul 28 00:26:23 2025 GMT Subject: CN=687d892f-1f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:63:de:5c:35:c6:02:9c:91:41:03:31:d3:b6: 2a:3b:52:6f:52:b3:cd:ce:57:61:b7:1e:4c:d1:14: 79:4e:5d:b4:ed:8f:fe:53:5b:d1:a7:c7:52:ad:2e: 60:cf:0d:b9:36:57:d9:1e:3a:e9:f6:02:be:d7:b8: bf:78:42:f0:04:4d:00:92:8c:b5:d1:34:ea:e0:91: fc:84:f8:d8:b6:a6:b8:34:00:27:8a:a9:28:88:4b: c5:e4:18:9e:7d:fb:a2:f5:62:be:df:1a:16:01:e7: 89:80:87:bf:f4:9d:11:fa:01:f6:67:54:e2:85:a2: 88:12:d1:74:8f:84:3d:35:21:6c:9f:81:fa:29:88: 9b:67:03:53:9d:f0:d5:b8:3b:8e:50:87:e4:20:fe: 0d:e7:e4:b9:bf:93:be:22:3b:d8:0c:f7:58:f3:71: e9:a6:6a:04:62:c8:2e:df:fb:75:62:9c:ac:9c:cc: f1:24:c7:72:95:eb:ff:78:d1:27:95:22:d8:28:46: 07:15:aa:b2:0e:de:19:c2:99:6a:c3:58:af:c7:2a: 90:b1:75:16:e0:19:21:1f:29:1a:72:f5:25:28:9f: ef:9f:e0:3f:72:b3:bc:12:bd:4b:95:cf:5a:d7:4f: c5:3c:1e:26:b5:34:a7:d6:d1:6c:c9:b7:ed:a4:97: fa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6B:E4:A4:92:7A:D7:19:CD:6B:C7:E9:35:B9:EF:80:2F:7A:00:6C X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:da:4b:a0:cc:74:a6:b2:ff:d9:cb:c6:14:00:56:6c:82:2f: 0c:e5:a7:79:f3:c7:b7:7f:d2:c1:5e:96:1e:23:d1:8e:c4:c0: 91:33:e3:73:fd:75:4c:f9:eb:e0:1d:d4:7c:0c:80:34:63:b5: 65:97:6c:9e:c5:35:30:d9:d8:d5:a2:05:08:b7:83:90:85:5d: b6:96:18:aa:f7:6f:0a:07:02:8d:d9:a2:da:ed:08:ad:09:69: 9c:b9:50:b8:6f:21:73:3a:e4:60:bf:29:ff:75:37:e4:53:d4: 60:90:a4:5f:ee:25:34:84:07:fd:58:28:a2:88:91:38:63:dc: 9e:66:ef:03:fb:57:da:4e:2d:cb:9e:c1:e2:10:f5:04:a4:f2: 0d:6d:61:00:1a:59:61:e0:4c:85:66:20:90:d5:4c:44:87:14: 88:d8:5f:ca:df:72:37:47:57:0e:a3:98:d9:d5:52:b3:aa:c2: 86:82:76:22:64:24:01:f3:20:d1:9c:93:e6:f4:f7:0f:25:1f: b0:47:5b:30:d8:01:53:4c:12:9d:68:de:43:c8:41:0c:d3:d5: ad:5c:28:79:f9:df:5e:ea:d9:d3:e8:a8:90:a4:ba:25:83:61: 84:9b:bb:0a:cc:db:e7:db:1b:89:61:9f:6d:84:f4:e8:26:af: 55:f7:ca:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjUwNzIxMDAyNjIzWhcNMjUwNzI4MDAyNjIzWjAYMRYwFAYD VQQDEw02ODdkODkyZi0xZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72PeXDXGApyRQQMx07YqO1JvUrPNzldhtx5M0RR5Tl207Y/+U1vRp8dSrS5g zw25NlfZHjrp9gK+17i/eELwBE0Akoy10TTq4JH8hPjYtqa4NAAniqkoiEvF5Bie ffui9WK+3xoWAeeJgIe/9J0R+gH2Z1TihaKIEtF0j4Q9NSFsn4H6KYibZwNTnfDV uDuOUIfkIP4N5+S5v5O+IjvYDPdY83HppmoEYsgu3/t1YpysnMzxJMdylev/eNEn lSLYKEYHFaqyDt4Zwplqw1ivxyqQsXUW4BkhHykacvUlKJ/vn+A/crO8Er1Llc9a 10/FPB4mtTSn1tFsybftpJf6OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9r5KSS etcZzWvH6TW574AvegBsMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK2kugzHSmsv/Zy8YUAFZsgi8M5ad588e3f9LBXpYeI9GOxMCRM+Nz /XVM+evgHdR8DIA0Y7Vll2yexTUw2djVogUIt4OQhV22lhiq928KBwKN2aLa7Qit CWmcuVC4byFzOuRgvyn/dTfkU9RgkKRf7iU0hAf9WCiiiJE4Y9yeZu8D+1faTi3L nsHiEPUEpPINbWEAGllh4EyFZiCQ1UxEhxSI2F/K33I3R1cOo5jZ1VKzqsKGgnYi ZCQB8yDRnJPm9PcPJR+wR1sw2AFTTBKdaN5DyEEM09WtXCh5+d9e6tnT6KiQpLol g2GEm7sKzNvn2xuJYZ9thPToJq9V98qi -----END CERTIFICATE-----Generated at Mon Jul 21 09:09:42 2025 by rpki-client