$ rpki-client -vvf rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft File: QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft (raw, json) Hash identifier: JkTWVU9u4O07r47etHKbtPakz0H9BGRxiw6wHKdVyqU= Subject key identifier: D4:B4:1B:BC:74:18:3F:FB:44:6F:B5:18:2E:13:A2:B2:CE:05:A2:E3 Authority key identifier: 41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C Certificate issuer: /CN=A9111C49/serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft Manifest number: 01C2 Signing time: Sun 07 Sep 2025 03:21:53 +0000 Manifest this update: Sun 07 Sep 2025 03:21:52 +0000 Manifest next update: Sun 14 Sep 2025 03:21:52 +0000 Files and hashes: 1: QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl (hash: NMC+GAQdG6ScxNKDaWEeVOFMz6spQOq9WK2Oh6HlKKM=) 2: 5BE1A39CDFF411EDAF183A6BC4F9AE02.roa (hash: kSko0IDUfwmI+eYoz/fG8AvnBwnpICm84IEH409J6Ko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 03:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111C49, serialNumber=410D8E68431818774B30B19BE5CEF53D47190B2C Validity Not Before: Sep 7 03:21:52 2025 GMT Not After : Sep 14 03:21:52 2025 GMT Subject: CN=68bcfa50-28ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:09:27:6a:2c:bf:f9:2c:ba:21:53:3f:2e:58: 90:54:d9:27:3f:13:99:0a:3b:27:8a:72:72:87:41: 22:f5:69:d8:88:33:0f:aa:4a:df:09:e5:43:f1:ac: 30:eb:ad:e4:2c:df:f3:9a:a0:ba:7b:09:4b:3e:a9: 7e:98:fa:6c:85:da:b1:59:ab:8f:c2:b0:df:c8:39: 88:a2:54:3f:80:f0:52:da:f2:a4:6d:9e:69:18:8d: 2a:e6:69:1d:a7:84:0f:35:29:78:e7:cd:98:08:ac: 09:d8:2a:fc:83:52:ef:f4:65:0a:9e:33:32:42:90: 51:57:9c:c9:6d:f8:6d:41:61:97:e0:e1:0b:4f:2f: 42:35:39:77:0c:76:7e:15:26:8c:7a:5b:67:a2:fe: a9:e4:a5:1f:a8:e5:34:3b:de:98:00:3c:91:7d:b5: d0:ab:29:47:d1:e7:8e:f6:81:ae:0f:d9:6c:96:77: b9:4f:04:41:25:93:f5:66:ca:1c:c9:4d:80:a7:8f: 8d:ad:b6:b7:52:4b:f3:c9:d9:d9:3e:b7:a7:d8:64: 5a:a4:2b:2e:50:2a:e5:8b:3c:98:15:68:2c:22:65: 9e:0f:7e:90:41:dd:30:f5:4a:29:e8:ed:18:5d:8e: 84:f6:f3:9c:b3:72:b8:68:78:15:e9:a1:52:15:0f: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B4:1B:BC:74:18:3F:FB:44:6F:B5:18:2E:13:A2:B2:CE:05:A2:E3 X509v3 Authority Key Identifier: keyid:41:0D:8E:68:43:18:18:77:4B:30:B1:9B:E5:CE:F5:3D:47:19:0B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQ2OaEMYGHdLMLGb5c71PUcZCyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111C49/7A7F1972DFF111EDB0CAEB69C4F9AE02/QQ2OaEMYGHdLMLGb5c71PUcZCyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:62:f9:a7:e0:cd:27:7e:7e:f1:47:ff:b2:31:45:01:f9:58: 0a:51:2e:aa:b3:f0:a8:5a:08:ee:3f:91:9e:33:bf:f3:67:50: 32:0e:28:92:02:bc:af:24:76:2a:28:b6:a5:9b:ff:fe:8c:ae: 70:45:f7:11:bb:77:c5:21:4d:e2:ac:e6:bd:c6:69:9e:30:07: 13:36:74:36:5f:8a:57:df:75:eb:71:d2:30:c1:a1:83:dd:79: 25:51:30:b4:e6:d0:8f:f7:b5:62:c1:4c:86:3a:51:4c:de:21: 03:1c:f3:b7:42:5b:2b:e0:9d:1a:03:58:ae:4a:b8:b5:8d:21: cd:de:5a:db:4a:43:42:5b:21:9a:a8:16:41:ed:0e:cc:d2:e2: 77:c7:83:e5:3b:d5:9f:84:c0:f8:46:3f:5d:f2:15:11:47:e5: 25:6d:a1:25:df:82:fb:3a:02:0a:e1:55:a4:f9:13:37:69:4d: 9c:da:70:b1:85:82:bd:ba:f2:eb:60:40:d0:39:9c:e5:e0:9a: 49:1f:61:36:fa:3b:aa:72:9e:78:4b:65:4b:94:fb:b6:c0:a1: ec:04:23:8b:92:89:d7:0b:ab:f8:8d:49:6c:67:85:a7:c0:e0: 7b:b3:54:2b:c4:a8:d2:00:98:55:bf:31:df:28:7c:db:07:7e: 86:af:8d:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFDNDkxMTAvBgNVBAUTKDQxMEQ4RTY4NDMxODE4Nzc0QjMwQjE5QkU1Q0VGNTNE NDcxOTBCMkMwHhcNMjUwOTA3MDMyMTUyWhcNMjUwOTE0MDMyMTUyWjAYMRYwFAYD VQQDEw02OGJjZmE1MC0yOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Aknaiy/+Sy6IVM/LliQVNknPxOZCjsninJyh0Ei9WnYiDMPqkrfCeVD8aww 663kLN/zmqC6ewlLPql+mPpshdqxWauPwrDfyDmIolQ/gPBS2vKkbZ5pGI0q5mkd p4QPNSl4582YCKwJ2Cr8g1Lv9GUKnjMyQpBRV5zJbfhtQWGX4OELTy9CNTl3DHZ+ FSaMeltnov6p5KUfqOU0O96YADyRfbXQqylH0eeO9oGuD9lslne5TwRBJZP1Zsoc yU2Ap4+Nrba3UkvzydnZPren2GRapCsuUCrlizyYFWgsImWeD36QQd0w9Uop6O0Y XY6E9vOcs3K4aHgV6aFSFQ8eywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNS0G7x0 GD/7RG+1GC4TorLOBaLjMB8GA1UdIwQYMBaAFEENjmhDGBh3SzCxm+XO9T1HGQss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUM0OS83QTdGMTk3MkRG RjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdIZExNTEdiNWM3MVBVY1pD eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRMk9hRU1ZR0hkTE1MR2I1YzcxUFVjWkN5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUM0OS83QTdGMTk3MkRGRjExMUVEQjBDQUVCNjlDNEY5QUUwMi9RUTJPYUVNWUdI ZExNTEdiNWM3MVBVY1pDeXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPYvmn4M0nfn7xR/+yMUUB+VgKUS6qs/CoWgjuP5GeM7/zZ1AyDiiS AryvJHYqKLalm//+jK5wRfcRu3fFIU3irOa9xmmeMAcTNnQ2X4pX33XrcdIwwaGD 3XklUTC05tCP97ViwUyGOlFM3iEDHPO3Qlsr4J0aA1iuSri1jSHN3lrbSkNCWyGa qBZB7Q7M0uJ3x4PlO9WfhMD4Rj9d8hURR+UlbaEl34L7OgIK4VWk+RM3aU2c2nCx hYK9uvLrYEDQOZzl4JpJH2E2+juqcp54S2VLlPu2wKHsBCOLkonXC6v4jUlsZ4Wn wOB7s1QrxKjSAJhVvzHfKHzbB36Gr40v -----END CERTIFICATE-----Generated at Sun Sep 7 14:22:34 2025 by rpki-client