$ rpki-client -vvf rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft File: QMCQUT8kAYkgsVHapVRJwV3IS-s.mft (raw, json) Hash identifier: pKarpH0KL1ptNFicdzA4lrD87KAXs8XEGKzkGd0okWY= Subject key identifier: 33:8A:A9:95:22:E7:64:35:7C:F2:BF:E3:F0:06:EA:63:DE:E5:23:13 Authority key identifier: 40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB Certificate issuer: /CN=A9111ED2/serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft Manifest number: 09E2 Signing time: Sun 24 Aug 2025 19:56:12 +0000 Manifest this update: Sun 24 Aug 2025 19:56:11 +0000 Manifest next update: Sun 31 Aug 2025 19:56:11 +0000 Files and hashes: 1: QMCQUT8kAYkgsVHapVRJwV3IS-s.crl (hash: RZ/NnwrU0jqvNNH8pN9ZdlvL3myn9SALXfKIo0H+mKo=) 2: 1E809CD0845111EAA961467EC4F9AE02.roa (hash: daFA8yMRnffIfjJ7fLZ41ES4LLpPtN0oWTU77ItHPkU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111ED2, serialNumber=40C090513F24018920B151DAA55449C15DC84BEB Validity Not Before: Aug 24 19:56:11 2025 GMT Not After : Aug 31 19:56:11 2025 GMT Subject: CN=68ab6e5b-5539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:79:18:1b:8a:f0:e6:03:4a:1b:f0:f7:a0: 44:4b:da:ec:65:0f:08:74:7c:d9:d2:01:ed:df:78: 6a:26:39:67:51:b5:93:84:13:02:63:32:1b:6c:48: a4:73:29:b5:9c:fc:28:d8:ff:a8:2a:18:f3:53:46: 71:66:25:b8:b5:77:73:db:ee:7a:91:d9:45:ed:ad: 12:7c:f0:3b:18:a0:c5:6e:07:a8:35:0f:d3:31:a1: aa:e8:44:95:93:8a:20:41:f8:d8:b6:cb:b6:0e:65: 00:4f:ff:b8:06:4c:45:e0:6d:13:8b:1c:48:98:10: 2a:ab:90:d2:6e:d6:34:ee:d0:a8:71:2e:26:69:6d: 84:46:e9:7d:75:0a:4a:b1:34:07:d1:39:26:1d:f1: e2:29:31:85:b9:e4:e9:b0:71:b1:a5:a2:50:b6:22: 37:8b:aa:13:a0:06:5c:cb:bb:57:a5:93:8a:fc:ef: 01:e4:16:1c:8c:60:78:22:f0:75:f8:2a:05:b3:71: 6e:43:8d:d8:15:a0:e3:87:46:6a:69:00:0f:4d:27: 30:ac:2e:53:7b:9a:85:02:d9:10:b6:a0:74:b9:ea: 52:d5:54:fd:0f:c3:56:21:ce:db:c8:23:a1:b1:23: 81:6f:22:bb:04:27:e1:6f:94:64:c3:75:12:f0:29: 1c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8A:A9:95:22:E7:64:35:7C:F2:BF:E3:F0:06:EA:63:DE:E5:23:13 X509v3 Authority Key Identifier: keyid:40:C0:90:51:3F:24:01:89:20:B1:51:DA:A5:54:49:C1:5D:C8:4B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QMCQUT8kAYkgsVHapVRJwV3IS-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111ED2/621E8610845011EA8047CE7DC4F9AE02/QMCQUT8kAYkgsVHapVRJwV3IS-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:78:e6:1a:35:f8:6c:c4:14:8b:64:f9:87:88:01:bc:0a:24: 3b:9b:8f:5c:c3:86:3a:81:7d:c4:49:d1:6f:97:df:d3:d2:fa: 57:a5:f4:38:a9:7a:d1:ec:3e:79:7c:e3:a7:57:ca:64:a0:39: 41:f3:e7:b8:5d:23:70:7c:95:f1:38:60:f4:90:ae:70:3e:1d: bf:53:fe:26:1a:6c:57:5a:2f:f3:db:78:23:78:c7:25:7d:8d: ab:42:d4:86:d6:99:af:db:f7:ad:e4:b6:c3:6c:04:2a:2e:8d: ea:be:6f:eb:d3:78:e4:ab:b5:55:09:f3:18:55:7e:6d:1b:53: c6:53:ae:5a:80:12:0f:2d:7e:88:00:50:f9:35:aa:95:ba:d3: 35:69:28:df:22:c3:db:67:74:a5:98:11:78:5b:2b:fa:28:3c: db:05:e2:0f:cd:61:5b:ff:92:9c:1d:7f:66:5a:b4:c1:e5:eb: b1:18:ca:57:94:3e:91:6f:51:31:4d:8f:d4:b6:97:b5:2c:4a: e2:f5:11:27:e8:af:79:61:4c:83:7a:f7:d0:34:de:94:8a:46: c8:9b:16:5e:ea:5b:42:ab:e4:45:10:fe:2f:36:c2:e3:84:b5: b4:50:35:6c:72:a6:50:e5:fc:78:ef:03:11:e4:5f:d5:1e:d1: cb:18:b4:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFFRDIxMTAvBgNVBAUTKDQwQzA5MDUxM0YyNDAxODkyMEIxNTFEQUE1NTQ0OUMx NURDODRCRUIwHhcNMjUwODI0MTk1NjExWhcNMjUwODMxMTk1NjExWjAYMRYwFAYD VQQDEw02OGFiNmU1Yi01NTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEl5GBuK8OYDShvw96BES9rsZQ8IdHzZ0gHt33hqJjlnUbWThBMCYzIbbEik cym1nPwo2P+oKhjzU0ZxZiW4tXdz2+56kdlF7a0SfPA7GKDFbgeoNQ/TMaGq6ESV k4ogQfjYtsu2DmUAT/+4BkxF4G0TixxImBAqq5DSbtY07tCocS4maW2ERul9dQpK sTQH0TkmHfHiKTGFueTpsHGxpaJQtiI3i6oToAZcy7tXpZOK/O8B5BYcjGB4IvB1 +CoFs3FuQ43YFaDjh0ZqaQAPTScwrC5Te5qFAtkQtqB0uepS1VT9D8NWIc7byCOh sSOBbyK7BCfhb5Rkw3US8CkcuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOKqZUi 52Q1fPK/4/AG6mPe5SMTMB8GA1UdIwQYMBaAFEDAkFE/JAGJILFR2qVUScFdyEvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUVEMi82MjFFODYxMDg0 NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZa2dzVkhhcFZSSndWM0lT LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FNQ1FVVDhrQVlrZ3NWSGFwVlJKd1YzSVMtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUVEMi82MjFFODYxMDg0NTAxMUVBODA0N0NFN0RDNEY5QUUwMi9RTUNRVVQ4a0FZ a2dzVkhhcFZSSndWM0lTLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAheOYaNfhsxBSLZPmHiAG8CiQ7m49cw4Y6gX3ESdFvl9/T0vpXpfQ4 qXrR7D55fOOnV8pkoDlB8+e4XSNwfJXxOGD0kK5wPh2/U/4mGmxXWi/z23gjeMcl fY2rQtSG1pmv2/et5LbDbAQqLo3qvm/r03jkq7VVCfMYVX5tG1PGU65agBIPLX6I AFD5NaqVutM1aSjfIsPbZ3SlmBF4Wyv6KDzbBeIPzWFb/5KcHX9mWrTB5euxGMpX lD6Rb1ExTY/Utpe1LEri9REn6K95YUyDevfQNN6UikbImxZe6ltCq+RFEP4vNsLj hLW0UDVscqZQ5fx47wMR5F/VHtHLGLSr -----END CERTIFICATE-----Generated at Sun Aug 24 22:21:02 2025 by rpki-client