$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: kXDvPDDPJFCw7WTH7AlogiUOxdSvfDAndFYGqtMwTcw= Subject key identifier: 13:73:13:92:6A:63:FD:A9:8B:55:3B:16:2D:66:AD:30:AC:2E:F7:C1 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 1283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 126A Signing time: Fri 22 Aug 2025 17:14:55 +0000 Manifest this update: Fri 22 Aug 2025 17:14:54 +0000 Manifest next update: Fri 29 Aug 2025 17:14:54 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: gUb7u2ZVUVobCyTzyCU53ypa1UBbDLYTvnB+h1Cry44=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: U6ij5hk5FRfd6jZqWoSf+8Wvzol5Qvpq3+ctiHWpCug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4739 (0x1283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Aug 22 17:14:54 2025 GMT Not After : Aug 29 17:14:54 2025 GMT Subject: CN=68a8a58e-2c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6f:76:d3:23:10:96:06:ad:ca:77:cc:77:17: 2c:de:f0:53:01:41:a5:fc:09:6c:a9:a7:f6:9e:78: 6e:e6:c6:74:fc:a0:3c:34:e1:e7:76:c0:3b:24:5b: ba:06:b7:c8:bd:80:bb:52:97:d7:1a:88:10:b0:57: a0:51:b2:b1:b7:24:4d:f9:1e:19:ce:83:fc:46:bb: 26:ca:66:b6:42:55:74:f6:8e:02:37:3e:fe:cc:a1: 2d:d9:12:e2:9e:d3:3a:49:dc:0f:69:00:8f:c2:67: 82:6d:f4:43:39:cc:f4:c9:69:13:ca:a2:d7:0d:a0: 49:0c:dc:13:00:1d:38:c5:d9:0b:f4:2b:a0:97:1e: 4d:88:5c:d5:0e:77:64:36:2c:41:64:ee:4b:77:11: 2d:95:54:28:05:51:37:8d:3d:a0:e1:2c:4a:3f:c8: 9d:af:7a:6c:73:10:01:fd:12:39:3f:08:c3:89:97: e6:2a:fa:1b:3b:56:a2:56:2a:b3:f6:ee:2e:7b:08: 57:c7:76:43:4c:fc:73:a0:46:ec:b3:52:8f:ce:bd: b2:71:20:1c:f1:be:ef:8c:58:a7:d4:70:9d:89:f2: d8:28:64:bf:20:d2:3b:3e:15:78:21:ae:8f:ed:ae: 13:b6:50:e9:ef:26:29:5a:45:0b:4c:eb:1b:ad:9e: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:73:13:92:6A:63:FD:A9:8B:55:3B:16:2D:66:AD:30:AC:2E:F7:C1 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:86:5a:cb:fe:1e:5b:74:0d:3d:15:70:96:12:03:78:aa:52: fa:d4:56:49:6e:2e:77:02:55:a8:65:94:2e:26:32:33:4c:29: 7b:58:59:8a:41:20:b4:64:d2:77:6a:31:0d:d3:1c:a0:37:da: 89:53:94:a7:1a:d1:8b:3b:db:d2:43:5f:6c:ba:83:f0:2e:e7: 3d:05:47:e3:f4:f0:a8:d4:68:fb:4b:60:7a:96:0f:00:12:4e: 94:2f:34:92:5e:1d:78:09:15:45:83:65:97:16:11:18:b8:17: 98:0b:77:d3:58:42:2d:ad:5c:4f:37:e8:86:b0:7f:68:75:4f: 9c:ec:53:e8:96:01:99:de:87:b0:a6:39:f4:99:8b:9d:d3:6d: 00:f2:6a:47:4c:73:6e:f8:b4:c2:ef:a1:2d:90:72:86:c6:86: 3d:53:e6:53:48:e2:dd:e9:69:fb:44:6e:19:45:01:39:e5:d8: 60:f6:95:0c:17:d8:87:b4:e7:b5:1b:5f:70:fc:8b:1c:2f:41: b0:d7:44:98:df:78:8d:a1:ab:fd:c3:67:d8:95:ed:f3:33:12: 1d:65:24:85:6b:37:71:09:6c:84:b8:80:6f:6c:f0:90:31:4d: bb:7c:3b:30:84:1a:c8:47:3f:df:2b:3e:60:e0:56:a5:07:77: 7c:64:9c:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjUwODIyMTcxNDU0WhcNMjUwODI5MTcxNDU0WjAYMRYwFAYD VQQDEw02OGE4YTU4ZS0yYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAom920yMQlgatynfMdxcs3vBTAUGl/Alsqaf2nnhu5sZ0/KA8NOHndsA7JFu6 BrfIvYC7UpfXGogQsFegUbKxtyRN+R4ZzoP8Rrsmyma2QlV09o4CNz7+zKEt2RLi ntM6SdwPaQCPwmeCbfRDOcz0yWkTyqLXDaBJDNwTAB04xdkL9Cuglx5NiFzVDndk NixBZO5LdxEtlVQoBVE3jT2g4SxKP8idr3pscxAB/RI5PwjDiZfmKvobO1aiViqz 9u4uewhXx3ZDTPxzoEbss1KPzr2ycSAc8b7vjFin1HCdifLYKGS/INI7PhV4Ia6P 7a4TtlDp7yYpWkULTOsbrZ5ZYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNzE5Jq Y/2pi1U7Fi1mrTCsLvfBMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3hlrL/h5bdA09FXCWEgN4qlL61FZJbi53AlWoZZQuJjIzTCl7WFmK QSC0ZNJ3ajEN0xygN9qJU5SnGtGLO9vSQ19suoPwLuc9BUfj9PCo1Gj7S2B6lg8A Ek6ULzSSXh14CRVFg2WXFhEYuBeYC3fTWEItrVxPN+iGsH9odU+c7FPolgGZ3oew pjn0mYud020A8mpHTHNu+LTC76EtkHKGxoY9U+ZTSOLd6Wn7RG4ZRQE55dhg9pUM F9iHtOe1G19w/IscL0Gw10SY33iNoav9w2fYle3zMxIdZSSFazdxCWyEuIBvbPCQ MU27fDswhBrIRz/fKz5g4FalB3d8ZJxB -----END CERTIFICATE-----Generated at Sat Aug 23 18:40:17 2025 by rpki-client