$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft File: QQmhbhhypDGvWRhmVbtg1TN8pIU.mft (raw, json) Hash identifier: cwX/pAV3rpRn8v47Fcn+G+m8zBxnze0WDqUEQXxlLtg= Subject key identifier: E3:2C:CA:3C:3D:7F:5C:E7:1A:A4:B8:AA:62:E4:00:90:82:7C:59:1D Authority key identifier: 41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 Certificate issuer: /CN=A91AE309/serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Certificate serial: 06B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft Manifest number: 06B3 Signing time: Wed 20 Aug 2025 22:12:14 +0000 Manifest this update: Wed 20 Aug 2025 22:12:14 +0000 Manifest next update: Wed 27 Aug 2025 22:12:14 +0000 Files and hashes: 1: QQmhbhhypDGvWRhmVbtg1TN8pIU.crl (hash: Yyuy8ewdG1JArDL71cbpGsIuZB7hBkqxVxEgpeIH8to=) 2: E036A33A724711EBAC3F0059C4F9AE02.roa (hash: f7Qn0qXwPKUSx1AKDqHdBuBm3lykdUVyid+XDevm250=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:12:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1720 (0x6b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE309, serialNumber=4109A16E1872A431AF59186655BB60D5337CA485 Validity Not Before: Aug 20 22:12:14 2025 GMT Not After : Aug 27 22:12:14 2025 GMT Subject: CN=68a6483e-1bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:f7:25:ba:28:03:bf:39:fe:d8:f9:3d:e8: 80:4c:af:1a:26:4f:80:78:59:6c:88:a9:32:00:5e: 14:8c:43:b9:f5:33:e2:8c:29:a0:b5:21:24:eb:ef: 05:3d:a4:98:96:a1:cd:ab:a9:68:7d:85:e7:77:f8: 61:34:33:b6:4f:ea:09:5e:42:90:14:f5:ab:cf:1a: e1:2a:95:79:69:bf:bd:d2:87:bf:18:7d:59:01:66: 10:0c:77:e8:57:4a:c1:03:89:11:bf:6d:19:15:20: af:96:49:f8:27:a2:da:68:c1:66:4a:30:62:13:45: 16:3d:d4:74:5d:f0:a7:b5:57:3b:8a:63:7e:fb:8f: cd:40:ac:33:a3:66:47:c7:50:e2:ed:09:38:ac:07: a7:4b:f6:8a:e7:bc:da:49:b1:78:c3:74:9e:df:5e: 47:6a:88:e6:5e:53:1e:62:17:6f:b6:c5:3c:2d:4d: 8d:b9:45:35:d1:62:ac:ea:ca:31:ed:d8:86:11:bc: d4:ad:6a:b9:98:92:81:ba:0c:67:b6:8b:16:9f:4d: f3:e4:16:ab:29:f6:0b:28:3f:99:b3:93:6d:6f:96: 37:ae:c4:80:9e:12:fc:e9:05:6d:13:2f:6b:f7:2c: 84:95:ce:a6:59:df:86:aa:a8:bd:76:76:85:67:47: 4b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2C:CA:3C:3D:7F:5C:E7:1A:A4:B8:AA:62:E4:00:90:82:7C:59:1D X509v3 Authority Key Identifier: keyid:41:09:A1:6E:18:72:A4:31:AF:59:18:66:55:BB:60:D5:33:7C:A4:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQmhbhhypDGvWRhmVbtg1TN8pIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE309/BDB42F36724611EB8AEDDC58C4F9AE02/QQmhbhhypDGvWRhmVbtg1TN8pIU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:68:d2:35:4c:55:c2:25:27:e0:97:2f:96:68:9a:18:56:70: f8:89:51:76:53:34:de:38:24:12:4e:ca:0d:25:03:8b:26:e2: 70:76:77:0b:82:96:97:a9:35:a9:b0:af:7e:e7:f6:47:dc:3f: 47:d9:fb:fc:3d:a5:9f:6d:42:36:51:1e:67:01:c3:0e:ca:cf: 4a:8d:53:62:d9:7b:f9:d4:a4:70:2b:5d:ca:dc:ba:e6:e8:0f: f0:26:89:13:76:58:02:c7:ee:97:af:16:9e:ca:68:4c:b2:d5: fc:06:69:bb:cb:fd:fe:d4:c9:38:04:6c:62:d7:7c:d6:d1:8f: 0d:bc:bd:55:4e:9d:9f:06:2a:d5:ea:3e:fc:f9:ad:0d:90:58: b8:1d:44:4b:7f:29:4a:6a:86:f6:06:0c:ab:ee:d0:58:43:6a: 1a:20:6e:cf:5d:d6:ec:aa:34:0f:f9:f9:c3:33:d1:38:ed:b4: 56:1d:f6:66:5c:c2:26:65:bf:11:26:85:31:d5:07:84:07:b3: ab:06:70:cb:32:64:21:04:2f:51:34:94:a1:3d:9d:aa:d8:29: fc:62:12:0b:ee:59:2e:b4:fb:5c:cf:6f:ed:49:94:41:3f:5a: 9a:9d:a4:7f:ed:72:9e:45:f1:cc:20:c1:7e:3c:12:20:e2:8c: 06:a5:1d:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUzMDkxMTAvBgNVBAUTKDQxMDlBMTZFMTg3MkE0MzFBRjU5MTg2NjU1QkI2MEQ1 MzM3Q0E0ODUwHhcNMjUwODIwMjIxMjE0WhcNMjUwODI3MjIxMjE0WjAYMRYwFAYD VQQDEw02OGE2NDgzZS0xYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCr3JbooA785/tj5PeiATK8aJk+AeFlsiKkyAF4UjEO59TPijCmgtSEk6+8F PaSYlqHNq6lofYXnd/hhNDO2T+oJXkKQFPWrzxrhKpV5ab+90oe/GH1ZAWYQDHfo V0rBA4kRv20ZFSCvlkn4J6LaaMFmSjBiE0UWPdR0XfCntVc7imN++4/NQKwzo2ZH x1Di7Qk4rAenS/aK57zaSbF4w3Se315HaojmXlMeYhdvtsU8LU2NuUU10WKs6sox 7diGEbzUrWq5mJKBugxntosWn03z5BarKfYLKD+Zs5Ntb5Y3rsSAnhL86QVtEy9r 9yyElc6mWd+Gqqi9dnaFZ0dLYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMsyjw9 f1znGqS4qmLkAJCCfFkdMB8GA1UdIwQYMBaAFEEJoW4YcqQxr1kYZlW7YNUzfKSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTMwOS9CREI0MkYzNjcy NDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBER3ZXUmhtVmJ0ZzFUTjhw SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRbWhiaGh5cERHdldSaG1WYnRnMVROOHBJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTMwOS9CREI0MkYzNjcyNDYxMUVCOEFFRERDNThDNEY5QUUwMi9RUW1oYmhoeXBE R3ZXUmhtVmJ0ZzFUTjhwSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBaNI1TFXCJSfgly+WaJoYVnD4iVF2UzTeOCQSTsoNJQOLJuJwdncL gpaXqTWpsK9+5/ZH3D9H2fv8PaWfbUI2UR5nAcMOys9KjVNi2Xv51KRwK13K3Lrm 6A/wJokTdlgCx+6XrxaeymhMstX8Bmm7y/3+1Mk4BGxi13zW0Y8NvL1VTp2fBirV 6j78+a0NkFi4HURLfylKaob2Bgyr7tBYQ2oaIG7PXdbsqjQP+fnDM9E47bRWHfZm XMImZb8RJoUx1QeEB7OrBnDLMmQhBC9RNJShPZ2q2Cn8YhIL7lkutPtcz2/tSZRB P1qanaR/7XKeRfHMIMF+PBIg4owGpR0n -----END CERTIFICATE-----Generated at Fri Aug 22 16:31:39 2025 by rpki-client