$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: BcKoIJj7lLfepPMDYgH/umcQAuaghLgIiS3dyo0P5QI= Subject key identifier: B0:20:B0:68:4F:B6:03:89:06:D8:B6:7C:09:85:06:F3:DC:DA:87:94 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 12F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 12DC Signing time: Tue 24 Mar 2026 16:57:12 +0000 Manifest this update: Tue 24 Mar 2026 16:57:11 +0000 Manifest next update: Tue 31 Mar 2026 16:57:11 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: G2caUblaqEOZdP1moAyfCJC0wDmZcDKUTdTiDRG8OVs=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: m5xuNZTplMCUcjHyNtIG3B2SyKlaJh5IOTk259XuenA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4856 (0x12f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Mar 24 16:57:11 2026 GMT Not After : Mar 31 16:57:11 2026 GMT Subject: CN=69c2c268-7d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:84:57:6d:7f:5c:dd:a7:dd:34:8a:d3:21: 35:b8:02:13:26:bc:70:ca:ee:7f:ea:e7:f9:13:99: da:62:ed:39:bd:48:94:55:0d:6f:33:5f:3a:99:02: 07:7d:e6:78:de:f3:0d:58:85:62:d1:32:e6:a0:db: 06:9c:ac:63:7b:9f:05:2b:4b:93:91:d9:85:ad:57: ae:9e:ea:be:94:26:73:b0:f9:9e:f7:78:ea:87:a9: f8:4b:2e:e5:84:74:ba:62:92:9c:7e:74:8c:fd:49: 53:5c:5e:e2:e1:6e:6e:29:97:c8:4c:5f:16:ec:b7: 68:f2:eb:e0:5a:d3:b7:70:7a:7d:e8:5b:e4:11:75: ee:01:43:a0:a2:33:b8:3b:0a:1d:d8:43:3b:bc:a9: df:63:02:c9:25:6c:c6:30:67:e8:e6:7c:60:91:eb: 7b:6e:d5:60:76:9c:61:ad:14:37:8b:3c:1e:9b:b0: 46:1e:95:89:a9:7a:a0:f4:f5:fa:91:0a:dd:4a:3a: c5:9a:90:4e:5e:99:b8:9f:a2:3e:fb:5f:92:2d:b5: 2c:08:59:68:19:53:93:b2:0c:8b:02:af:9a:70:e4: 5d:aa:32:9b:02:93:63:27:ec:7e:25:a0:4c:47:3e: 99:4e:5e:c6:ab:c7:7d:56:c6:83:23:e8:82:4d:59: 24:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:20:B0:68:4F:B6:03:89:06:D8:B6:7C:09:85:06:F3:DC:DA:87:94 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:44:a0:e5:4b:7f:e5:c4:2b:c3:d7:b8:f4:e0:c6:d5:55:53: 5d:e2:5e:2b:88:3c:66:9e:6c:ed:e9:e1:af:5d:ff:66:4a:aa: 5a:76:d7:1f:af:0c:6f:a6:17:fe:88:17:0e:f3:30:e4:03:45: 3c:90:51:78:ef:c5:e6:be:df:c8:72:df:8d:63:60:16:97:8d: 6b:d4:a3:ca:b7:2e:9e:c8:f2:25:59:0e:ff:7c:df:90:2f:3d: f6:c2:e8:1c:b1:1e:0f:ac:51:3c:30:e7:58:ac:57:7c:b0:74: d4:6d:b2:c5:09:6b:67:2c:b7:68:f1:c8:77:9f:6f:14:b1:8f: 51:58:f1:da:d5:b8:73:aa:71:6b:19:a8:e0:4d:d9:3a:12:05: 79:ae:29:10:bb:38:7b:83:9d:4f:87:24:b5:dc:e1:41:a8:82: af:1e:92:fa:5b:19:f4:d8:fb:1b:06:1f:6a:ad:0b:84:e6:e3: 52:5f:1e:a0:34:0e:14:01:28:7e:cc:25:40:45:9c:42:fb:1f: 1e:0e:f9:a6:30:f8:46:d1:2c:2f:81:a0:b4:f1:de:40:69:ff: 6e:13:29:1c:30:57:55:06:d1:20:54:69:47:36:ce:50:5e:6f: 00:23:31:65:50:45:3d:2d:f3:4a:26:4a:dc:93:ca:7d:b7:e4: 89:c5:ee:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjYwMzI0MTY1NzExWhcNMjYwMzMxMTY1NzExWjAYMRYwFAYD VQQDEw02OWMyYzI2OC03ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscaEV21/XN2n3TSK0yE1uAITJrxwyu5/6uf5E5naYu05vUiUVQ1vM186mQIH feZ43vMNWIVi0TLmoNsGnKxje58FK0uTkdmFrVeunuq+lCZzsPme93jqh6n4Sy7l hHS6YpKcfnSM/UlTXF7i4W5uKZfITF8W7Ldo8uvgWtO3cHp96FvkEXXuAUOgojO4 Owod2EM7vKnfYwLJJWzGMGfo5nxgket7btVgdpxhrRQ3izwem7BGHpWJqXqg9PX6 kQrdSjrFmpBOXpm4n6I++1+SLbUsCFloGVOTsgyLAq+acORdqjKbApNjJ+x+JaBM Rz6ZTl7Gq8d9VsaDI+iCTVkkUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLAgsGhP tgOJBti2fAmFBvPc2oeUMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAikSg5Ut/5cQrw9e49ODG1VVTXeJeK4g8Zp5s7enhr13/ZkqqWnbXH68Mb6YX /ogXDvMw5ANFPJBReO/F5r7fyHLfjWNgFpeNa9SjyrcunsjyJVkO/3zfkC899sLo HLEeD6xRPDDnWKxXfLB01G2yxQlrZyy3aPHId59vFLGPUVjx2tW4c6pxaxmo4E3Z OhIFea4pELs4e4OdT4cktdzhQaiCrx6S+lsZ9Nj7GwYfaq0LhObjUl8eoDQOFAEo fswlQEWcQvsfHg75pjD4RtEsL4GgtPHeQGn/bhMpHDBXVQbRIFRpRzbOUF5vACMx ZVBFPS3zSiZK3JPKfbfkicXujg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:07:58 2026 by rpki-client