$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: ikotzrHZydW3L1NG1oPuKaNkqHp9PohDpNzLsyHFxdg= Subject key identifier: C4:6B:FC:71:AC:44:48:2C:B9:A2:90:CB:1D:BB:63:E2:DA:48:14:A8 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 018F Signing time: Sat 31 May 2025 03:14:06 +0000 Manifest this update: Sat 31 May 2025 03:14:06 +0000 Manifest next update: Sat 07 Jun 2025 03:14:06 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: +LUiMGsCabRPHHE/pTynEOQrMEDpYtudX4mS4XnF1og=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: May 31 03:14:06 2025 GMT Not After : Jun 7 03:14:06 2025 GMT Subject: CN=683a73fe-f5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7f:29:cc:a1:6e:13:f6:73:fb:18:63:a1:19: 78:03:c4:ff:bc:84:27:c3:2b:4a:b0:ed:a5:78:e0: ad:f6:6b:9f:65:c8:01:b2:34:99:7b:ea:fe:91:12: e7:b0:7e:13:bd:ec:56:02:7e:80:52:14:fa:de:81: fb:1b:86:21:b3:20:56:d3:ce:c1:c0:59:99:b8:7b: 39:2b:d0:ab:3d:19:07:ab:25:ad:ee:f8:d3:1d:36: 73:20:18:15:b8:6d:4a:9c:6a:ef:23:95:0a:2c:66: 67:45:f1:ef:c5:10:37:1b:cf:0f:ca:48:25:7e:73: 38:5a:f9:c5:ab:6d:e6:97:76:64:62:55:e6:0b:2a: df:42:f2:11:b8:ce:29:9d:ae:80:90:d4:f4:25:96: ac:21:64:f3:c0:19:c3:8b:a1:1f:49:97:03:25:83: 14:b3:e6:97:cd:64:5d:ed:39:b7:f9:11:56:44:b8: 5f:bc:c5:fe:b2:b1:4a:43:ee:05:e2:ff:3d:2e:33: 1b:e9:62:59:ff:ed:c9:7b:89:ae:64:6e:83:15:23: 9a:71:62:0a:62:03:48:38:5e:16:c9:6f:27:b4:43: 54:8e:1b:4d:58:34:1b:a5:26:6c:c9:20:48:28:66: 8b:52:3a:5c:30:d7:e2:68:e8:d1:1a:9e:c4:f7:08: 9e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:6B:FC:71:AC:44:48:2C:B9:A2:90:CB:1D:BB:63:E2:DA:48:14:A8 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:95:52:82:36:5f:aa:47:0e:ea:a0:49:73:5b:30:c9:d8:3f: 35:d1:c7:36:68:28:b6:f6:7a:44:e9:60:cb:51:ca:1d:70:1d: aa:97:6a:96:00:1e:ab:d8:eb:07:20:b4:6f:b8:d7:66:00:ab: 02:85:f4:dc:5b:19:d6:3d:c5:d1:24:2a:a2:e5:08:36:e0:41: 7d:f8:a9:2c:ef:8d:88:4e:62:0b:b1:9b:35:96:92:9d:2a:b4: 45:98:ea:3d:38:52:27:f9:c5:c8:4b:28:ab:cb:6e:14:6a:db: d2:50:63:43:e0:73:7a:d1:71:e5:83:aa:a5:ac:cd:39:37:cd: 72:be:83:e6:a7:0e:ae:ba:3b:d0:b0:fb:4f:0e:31:01:d7:c1: 6a:91:ea:0f:37:fe:67:d6:c9:f3:2b:81:ed:f1:18:74:d0:4c: 1e:00:33:83:c0:80:8a:67:79:93:ae:44:29:03:94:74:07:ad: e9:54:33:b5:72:52:39:d4:f5:5a:16:68:e3:49:69:9e:f6:54: e0:0e:e9:9d:32:51:b2:dd:50:35:2d:4e:02:eb:6e:d8:9d:99: 59:c8:6b:13:7e:d6:43:15:8d:81:cb:98:41:2b:e3:cf:26:f3: 47:76:1b:e8:e4:2b:36:76:03:31:a1:b8:22:73:80:e4:af:f6: 61:62:d3:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUwNTMxMDMxNDA2WhcNMjUwNjA3MDMxNDA2WjAYMRYwFAYD VQQDEw02ODNhNzNmZS1mNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX8pzKFuE/Zz+xhjoRl4A8T/vIQnwytKsO2leOCt9mufZcgBsjSZe+r+kRLn sH4TvexWAn6AUhT63oH7G4YhsyBW087BwFmZuHs5K9CrPRkHqyWt7vjTHTZzIBgV uG1KnGrvI5UKLGZnRfHvxRA3G88PykglfnM4WvnFq23ml3ZkYlXmCyrfQvIRuM4p na6AkNT0JZasIWTzwBnDi6EfSZcDJYMUs+aXzWRd7Tm3+RFWRLhfvMX+srFKQ+4F 4v89LjMb6WJZ/+3Je4muZG6DFSOacWIKYgNIOF4WyW8ntENUjhtNWDQbpSZsySBI KGaLUjpcMNfiaOjRGp7E9wieEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMRr/HGs REgsuaKQyx27Y+LaSBSoMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBclVKCNl+qRw7qoElzWzDJ2D810cc2aCi29npE6WDLUcodcB2ql2qW AB6r2OsHILRvuNdmAKsChfTcWxnWPcXRJCqi5Qg24EF9+Kks742ITmILsZs1lpKd KrRFmOo9OFIn+cXISyiry24UatvSUGND4HN60XHlg6qlrM05N81yvoPmpw6uujvQ sPtPDjEB18FqkeoPN/5n1snzK4Ht8Rh00EweADODwICKZ3mTrkQpA5R0B63pVDO1 clI51PVaFmjjSWme9lTgDumdMlGy3VA1LU4C627YnZlZyGsTftZDFY2By5hBK+PP JvNHdhvo5Cs2dgMxobgic4Dkr/ZhYtN5 -----END CERTIFICATE-----Generated at Sat May 31 15:21:30 2025 by rpki-client