$ rpki-client -vvf rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft File: QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft (raw, json) Hash identifier: +7hHiur4gLXILiolWhMwZQbHf9ewg82Gr1sD6dsiWps= Subject key identifier: 0E:FB:7E:A9:A3:EA:6F:92:79:DA:33:40:90:9F:80:16:16:30:53:8F Authority key identifier: 41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 Certificate issuer: /CN=A91F95E2/serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Certificate serial: 0477 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft Manifest number: 0473 Signing time: Wed 17 Sep 2025 00:31:52 +0000 Manifest this update: Wed 17 Sep 2025 00:31:51 +0000 Manifest next update: Wed 24 Sep 2025 00:31:51 +0000 Files and hashes: 1: QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl (hash: 9ZP8itqxTq7KBubMa4EFutL3me/Im9QhXMM3uPCLq5g=) 2: 6229E2DC5C7911EC8C7BD812C4F9AE02.roa (hash: wGbE0YkCiIM+SIF6UsXM2Y8Q1BpBKgQHBXubgyLVuBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1143 (0x477) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F95E2, serialNumber=410597D5B00043E20AA2409E3271ED4F41E131C7 Validity Not Before: Sep 17 00:31:51 2025 GMT Not After : Sep 24 00:31:51 2025 GMT Subject: CN=68ca0178-11a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:50:76:e3:0c:00:89:8a:ca:78:b9:c3:93: 8f:fb:5a:fb:cf:4d:f2:33:dd:50:dc:3a:92:5e:5c: 65:16:e1:cc:07:79:ed:0b:4c:12:00:8d:5c:5a:b5: 69:82:30:d3:38:25:84:57:19:47:a8:9a:ac:02:86: 10:7f:ec:37:d9:71:9f:41:68:fe:a8:c4:9a:68:b0: 6f:57:cf:cf:57:83:29:26:2e:5c:6a:45:0f:31:5c: 2b:3d:e9:04:37:68:25:52:96:b7:df:f2:2e:8c:32: 54:a3:56:ea:e1:10:8f:56:f1:a3:90:87:c4:ff:df: 04:80:8e:da:51:5d:a0:bd:66:36:dc:c6:da:33:2a: 22:1d:14:87:21:df:40:18:ad:ec:f7:27:bb:d1:0b: 66:66:76:dd:25:56:3b:09:1c:5b:1b:d3:0b:b8:01: 54:13:52:eb:5e:7c:14:12:d5:3a:d6:a3:e7:61:51: c6:9f:e4:4d:be:08:12:b9:a2:29:52:31:c5:f9:79: 01:58:e0:7d:5f:8e:b4:97:91:ac:1b:c9:17:21:81: 6d:ae:86:7c:3a:31:5f:d6:40:e5:27:00:60:fc:39: f5:10:5f:88:54:d9:db:0f:8b:ca:67:0e:69:97:00: 38:58:77:e8:be:26:e7:23:08:4d:b9:a2:be:d4:16: c8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FB:7E:A9:A3:EA:6F:92:79:DA:33:40:90:9F:80:16:16:30:53:8F X509v3 Authority Key Identifier: keyid:41:05:97:D5:B0:00:43:E2:0A:A2:40:9E:32:71:ED:4F:41:E1:31:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQWX1bAAQ-IKokCeMnHtT0HhMcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F95E2/118545FA5C7511EC89ABFA0BC4F9AE02/QQWX1bAAQ-IKokCeMnHtT0HhMcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:e1:73:5d:29:36:6f:ea:dc:5a:07:e8:3a:e9:de:bd:08:88: a6:bc:f9:f4:e2:92:ca:f7:6c:11:ca:de:a2:51:95:f8:5e:0c: 72:45:b1:31:53:8c:09:c9:3d:c2:9b:bc:73:38:0d:0b:9b:ac: e8:fe:14:25:46:3f:1b:0a:65:cb:cf:a3:e8:83:3c:ed:88:32: 77:5c:f8:62:ee:b7:54:9d:df:f0:20:8b:17:10:12:6d:7d:0f: 00:75:b4:7f:a6:93:ac:b7:f7:95:90:59:13:f5:21:40:be:0a: d8:a0:72:d4:94:4c:65:43:d9:b7:59:f4:10:12:df:6f:5f:fd: eb:8e:b5:5e:d8:e3:d7:f4:1b:f5:d1:81:af:ee:60:04:26:45: 41:9d:bc:be:dc:a5:27:b3:21:a9:cd:5d:bb:cf:f4:6e:79:9a: b5:9d:65:f8:ca:e0:0f:a3:3d:45:2e:af:d1:aa:7b:37:d3:8e: 58:eb:67:ef:2f:da:2a:95:5d:13:7a:f5:36:e5:55:b4:b8:be: a8:0b:a8:a6:0c:8b:7d:1a:65:4d:ae:d7:f2:32:90:bf:33:c4: e7:2c:cf:88:c0:22:98:35:5a:90:24:54:2e:46:56:2b:8e:95: 45:4b:0b:ba:eb:c8:eb:5c:fb:6f:fb:2c:e6:85:60:b1:e4:42: d9:f6:25:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk1RTIxMTAvBgNVBAUTKDQxMDU5N0Q1QjAwMDQzRTIwQUEyNDA5RTMyNzFFRDRG NDFFMTMxQzcwHhcNMjUwOTE3MDAzMTUxWhcNMjUwOTI0MDAzMTUxWjAYMRYwFAYD VQQDEw02OGNhMDE3OC0xMWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kZQduMMAImKyni5w5OP+1r7z03yM91Q3DqSXlxlFuHMB3ntC0wSAI1cWrVp gjDTOCWEVxlHqJqsAoYQf+w32XGfQWj+qMSaaLBvV8/PV4MpJi5cakUPMVwrPekE N2glUpa33/IujDJUo1bq4RCPVvGjkIfE/98EgI7aUV2gvWY23MbaMyoiHRSHId9A GK3s9ye70QtmZnbdJVY7CRxbG9MLuAFUE1LrXnwUEtU61qPnYVHGn+RNvggSuaIp UjHF+XkBWOB9X460l5GsG8kXIYFtroZ8OjFf1kDlJwBg/Dn1EF+IVNnbD4vKZw5p lwA4WHfovibnIwhNuaK+1BbIdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA77fqmj 6m+SedozQJCfgBYWMFOPMB8GA1UdIwQYMBaAFEEFl9WwAEPiCqJAnjJx7U9B4THH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTVFMi8xMTg1NDVGQTVD NzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEtSUtva0NlTW5IdFQwSGhN Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FRV1gxYkFBUS1JS29rQ2VNbkh0VDBIaE1jYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTVFMi8xMTg1NDVGQTVDNzUxMUVDODlBQkZBMEJDNEY5QUUwMi9RUVdYMWJBQVEt SUtva0NlTW5IdFQwSGhNY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm4XNdKTZv6txaB+g66d69CIimvPn04pLK92wRyt6iUZX4XgxyRbEx U4wJyT3Cm7xzOA0Lm6zo/hQlRj8bCmXLz6PogzztiDJ3XPhi7rdUnd/wIIsXEBJt fQ8AdbR/ppOst/eVkFkT9SFAvgrYoHLUlExlQ9m3WfQQEt9vX/3rjrVe2OPX9Bv1 0YGv7mAEJkVBnby+3KUnsyGpzV27z/RueZq1nWX4yuAPoz1FLq/Rqns3045Y62fv L9oqlV0TevU25VW0uL6oC6imDIt9GmVNrtfyMpC/M8TnLM+IwCKYNVqQJFQuRlYr jpVFSwu668jrXPtv+yzmhWCx5ELZ9iWi -----END CERTIFICATE-----Generated at Thu Sep 18 23:28:17 2025 by rpki-client