$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: CilLp8UiOm2uPsSV5NipaC3ZLzAxdA/KvPrmbRa/pkY= Subject key identifier: 3D:AA:01:0E:2E:10:A3:6E:EC:B9:B0:87:F3:90:C9:A2:15:C5:22:4B Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 1311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 12F5 Signing time: Tue 12 May 2026 17:03:49 +0000 Manifest this update: Tue 12 May 2026 17:03:49 +0000 Manifest next update: Tue 19 May 2026 17:03:49 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: NzjeqmSEHV7TPtsZrYBxdQUELtBv8iLzsO1CVufRMu8=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: m5xuNZTplMCUcjHyNtIG3B2SyKlaJh5IOTk259XuenA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 17:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4881 (0x1311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: May 12 17:03:49 2026 GMT Not After : May 19 17:03:49 2026 GMT Subject: CN=6a035d75-db4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:1c:46:16:14:cc:3b:ba:81:f4:8f:c4:4f: 45:51:5b:f8:bc:cf:8c:8b:52:2c:4f:f6:9f:43:2d: 54:b3:bc:4e:87:2e:67:57:64:4d:9f:be:60:91:d9: 85:54:5f:3d:89:38:98:c8:0f:da:69:f9:e0:88:9b: ce:23:84:d1:b2:71:d2:e4:06:bf:bc:ad:cd:d0:b0: 61:57:ab:4a:a9:b3:5c:81:65:22:73:90:84:25:ba: 91:14:70:4f:d1:bb:07:98:7c:66:66:50:4b:e1:ad: 64:60:a0:3e:25:14:26:63:1a:d7:20:a3:fe:99:ad: 18:4f:df:87:93:e8:aa:22:00:4e:a7:c2:a9:dc:3c: 1c:e6:80:b7:48:90:82:04:54:c8:d5:23:99:e3:87: 39:55:85:ce:73:72:3b:34:ca:8c:05:e7:bc:9b:5e: 4e:dc:5b:9a:4c:8b:bb:c3:2f:0d:65:ba:28:cd:ad: ca:4e:d1:b6:d3:0b:52:a5:a3:0a:c9:e5:a3:77:9d: a6:2d:de:99:31:8a:5e:e4:d4:7c:ec:ed:16:d0:3a: ec:eb:ff:f1:40:a4:77:1f:39:6d:c7:f6:b1:b0:50: 1d:f3:5d:b6:8c:49:d5:f9:1e:b8:23:a2:9c:30:5f: 86:5d:68:8d:0a:7a:5d:cd:cc:b6:27:f1:3c:72:29: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AA:01:0E:2E:10:A3:6E:EC:B9:B0:87:F3:90:C9:A2:15:C5:22:4B X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:8c:bf:9d:63:b7:c5:94:b5:eb:a3:7e:59:3a:90:c4:ef:ca: 20:ab:05:32:d2:77:6f:0c:68:32:80:7e:b6:76:51:0f:4e:91: 5b:66:36:65:bb:c8:7c:62:84:64:ac:65:bd:31:94:2c:25:ca: ce:03:01:b2:cb:5f:47:59:d9:f3:6e:4d:66:a8:e2:53:8e:e4: c8:05:4a:75:d4:c5:f0:c6:81:55:ee:23:ef:a5:3b:95:65:2d: 9d:07:f3:cf:e9:d7:63:47:33:a6:2d:a5:4e:eb:70:a2:5c:46: c4:dc:43:74:db:07:2e:39:47:a5:6e:00:20:20:a2:ec:12:3e: a7:35:2d:27:58:fd:42:2e:9a:b0:de:89:33:c3:fc:d7:4c:56: f8:c7:56:8a:09:9c:40:89:ea:3e:03:34:7e:2c:17:e2:ee:25: e6:86:28:aa:b9:7b:95:a8:80:14:77:f1:ba:ef:5e:51:2b:73: ce:91:c9:8e:4b:3c:84:bd:65:de:a1:e5:d2:26:29:2d:b9:8f: 0b:0f:4b:06:9f:75:ab:9f:52:aa:da:b4:87:8f:c8:af:49:14: 2d:f4:ee:8b:cb:9b:04:41:e2:49:27:8e:b4:d5:f0:b1:fb:40: 43:d8:46:ac:58:f7:08:3d:d4:22:59:77:96:c7:80:ae:f5:69: 67:8f:0f:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICExEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjYwNTEyMTcwMzQ5WhcNMjYwNTE5MTcwMzQ5WjAYMRYwFAYD VQQDEw02YTAzNWQ3NS1kYjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIkcRhYUzDu6gfSPxE9FUVv4vM+Mi1IsT/afQy1Us7xOhy5nV2RNn75gkdmF VF89iTiYyA/aafngiJvOI4TRsnHS5Aa/vK3N0LBhV6tKqbNcgWUic5CEJbqRFHBP 0bsHmHxmZlBL4a1kYKA+JRQmYxrXIKP+ma0YT9+Hk+iqIgBOp8Kp3Dwc5oC3SJCC BFTI1SOZ44c5VYXOc3I7NMqMBee8m15O3FuaTIu7wy8NZbooza3KTtG20wtSpaMK yeWjd52mLd6ZMYpe5NR87O0W0Drs6//xQKR3Hzltx/axsFAd8122jEnV+R64I6Kc MF+GXWiNCnpdzcy2J/E8cimkhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD2qAQ4u EKNu7Lmwh/OQyaIVxSJLMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaYy/nWO3xZS166N+WTqQxO/KIKsFMtJ3bwxoMoB+tnZRD06RW2Y2ZbvIfGKE ZKxlvTGULCXKzgMBsstfR1nZ825NZqjiU47kyAVKddTF8MaBVe4j76U7lWUtnQfz z+nXY0czpi2lTutwolxGxNxDdNsHLjlHpW4AICCi7BI+pzUtJ1j9Qi6asN6JM8P8 10xW+MdWigmcQInqPgM0fiwX4u4l5oYoqrl7laiAFHfxuu9eUStzzpHJjks8hL1l 3qHl0iYpLbmPCw9LBp91q59Sqtq0h4/Ir0kULfTui8ubBEHiSSeOtNXwsftAQ9hG rFj3CD3UIll3lseArvVpZ48PPg== -----END CERTIFICATE-----Generated at Wed May 13 06:24:16 2026 by rpki-client