$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: bvS/m8kykd64m0osLCsVlFgg3UfPQ7NMZCEOuCF9xSU= Subject key identifier: 22:A3:70:22:CB:AC:CD:6E:B9:74:88:45:29:2D:A2:F4:56:6C:E3:5D Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 1268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 124F Signing time: Mon 30 Jun 2025 17:19:40 +0000 Manifest this update: Mon 30 Jun 2025 17:19:39 +0000 Manifest next update: Mon 07 Jul 2025 17:19:39 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: dwzvE4V6CzZ9jwlxRo4LjfZAW5m8pA/RK0KpMGVtQU0=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: U6ij5hk5FRfd6jZqWoSf+8Wvzol5Qvpq3+ctiHWpCug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4712 (0x1268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Jun 30 17:19:39 2025 GMT Not After : Jul 7 17:19:39 2025 GMT Subject: CN=6862c72b-8a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:74:1f:26:0a:10:0b:f1:0e:61:9e:d1:18: 33:f5:d9:09:e4:50:55:13:97:49:a2:9d:98:f6:a1: 39:cb:46:40:4f:e8:fd:79:d7:b4:56:e4:52:32:7a: dd:d8:a1:92:6f:58:fb:48:13:fc:cb:07:af:48:c2: 79:15:47:f9:80:04:62:38:c7:e6:c8:04:87:62:c5: cf:98:aa:44:cc:ad:56:e5:04:11:29:dd:d2:e9:3f: ee:ae:97:f7:d8:12:99:a3:59:c3:b2:ae:6b:ab:31: 9b:86:a4:21:ee:da:75:f1:30:e6:74:b6:a9:3f:aa: df:d3:b3:5f:e6:ac:99:a0:12:08:48:fa:c0:85:96: fa:25:b0:b8:b3:94:1f:6f:58:34:f7:91:d3:0a:0c: ce:3d:86:2d:54:8c:8f:d7:45:25:73:9a:87:d8:3d: 8a:91:70:eb:bd:31:d2:bc:74:bb:4c:a6:67:95:f9: 06:b5:fb:49:fc:9c:6d:ef:94:5a:ec:df:0c:e0:75: d0:9c:d1:bc:3b:e4:2b:eb:e6:00:b5:77:ac:a9:7f: 9a:c7:08:ab:ee:50:ed:74:36:6c:1e:92:63:ce:a0: 99:28:a0:f7:62:b7:5f:ff:42:7d:a1:f7:fb:0c:71: 54:9b:0d:7a:c4:83:08:42:ec:cf:8f:c8:3e:26:b5: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A3:70:22:CB:AC:CD:6E:B9:74:88:45:29:2D:A2:F4:56:6C:E3:5D X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:2b:c3:06:c7:20:ba:de:09:82:fe:a9:01:d5:25:f2:1b:fb: bb:b7:40:31:ee:37:b4:b5:2b:19:23:71:92:ae:ff:d8:14:09: 70:cf:4e:31:b8:50:dd:1e:af:e6:9f:59:7d:c2:58:be:06:df: d5:9c:56:e3:cd:58:7f:24:65:22:d3:93:b7:dd:82:7e:7d:2b: 27:a0:ba:3c:87:bc:f3:8e:b2:30:1f:b5:21:12:ef:d6:44:15: ef:75:8d:70:2e:e3:d4:8b:60:e1:b8:8c:8a:23:c4:71:88:9d: 39:d5:e0:aa:4f:3f:0d:2a:8a:20:c6:2d:a1:de:91:c0:57:cc: 04:e5:90:a8:c3:71:05:63:b0:cb:91:f5:1a:c2:10:4f:8a:7e: 35:14:20:a4:de:66:f6:60:d8:51:80:0b:46:63:c4:25:ed:c1: 0e:a9:bc:dd:48:85:a0:17:89:29:07:33:62:c8:ba:de:43:ac: bd:2c:52:4b:d9:a7:ab:78:a5:81:5a:d9:12:a3:26:6f:04:94: 3d:dd:5d:0c:70:3c:e2:bc:46:3a:98:7f:06:9e:d0:e3:68:d5: 6a:56:87:ef:c4:a8:fd:60:ec:02:7a:f6:d6:db:8e:2d:0f:bc: eb:b8:e6:51:a9:47:2f:33:6e:88:76:72:91:b2:4d:2e:fd:aa: c6:b2:fd:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjUwNjMwMTcxOTM5WhcNMjUwNzA3MTcxOTM5WjAYMRYwFAYD VQQDEw02ODYyYzcyYi04YTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkJ0HyYKEAvxDmGe0Rgz9dkJ5FBVE5dJop2Y9qE5y0ZAT+j9ede0VuRSMnrd 2KGSb1j7SBP8ywevSMJ5FUf5gARiOMfmyASHYsXPmKpEzK1W5QQRKd3S6T/urpf3 2BKZo1nDsq5rqzGbhqQh7tp18TDmdLapP6rf07Nf5qyZoBIISPrAhZb6JbC4s5Qf b1g095HTCgzOPYYtVIyP10Ulc5qH2D2KkXDrvTHSvHS7TKZnlfkGtftJ/Jxt75Ra 7N8M4HXQnNG8O+Qr6+YAtXesqX+axwir7lDtdDZsHpJjzqCZKKD3Yrdf/0J9off7 DHFUmw16xIMIQuzPj8g+JrUkxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKjcCLL rM1uuXSIRSktovRWbONdMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUK8MGxyC63gmC/qkB1SXyG/u7t0Ax7je0tSsZI3GSrv/YFAlwz04x uFDdHq/mn1l9wli+Bt/VnFbjzVh/JGUi05O33YJ+fSsnoLo8h7zzjrIwH7UhEu/W RBXvdY1wLuPUi2DhuIyKI8RxiJ051eCqTz8NKoogxi2h3pHAV8wE5ZCow3EFY7DL kfUawhBPin41FCCk3mb2YNhRgAtGY8Ql7cEOqbzdSIWgF4kpBzNiyLreQ6y9LFJL 2aereKWBWtkSoyZvBJQ93V0McDzivEY6mH8GntDjaNVqVofvxKj9YOwCevbW244t D7zruOZRqUcvM26IdnKRsk0u/arGsv34 -----END CERTIFICATE-----Generated at Mon Jun 30 19:22:13 2025 by rpki-client