$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: JgF6Gjzuw75IWkcNu8x1RbcOzko43J1uNHq9ouAw7Wk= Subject key identifier: C1:C2:A9:CB:0C:93:4C:DE:57:72:99:CB:A9:D5:AD:FF:79:4A:29:DB Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 1272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 1259 Signing time: Sun 20 Jul 2025 17:09:13 +0000 Manifest this update: Sun 20 Jul 2025 17:09:13 +0000 Manifest next update: Sun 27 Jul 2025 17:09:13 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: VIuN9JL1VFATH4xwpcyAE/PkIwKvx2HQVuJp1Bif57c=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: U6ij5hk5FRfd6jZqWoSf+8Wvzol5Qvpq3+ctiHWpCug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4722 (0x1272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Jul 20 17:09:13 2025 GMT Not After : Jul 27 17:09:13 2025 GMT Subject: CN=687d22b9-3714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:04:80:44:54:1f:e9:c6:46:72:37:81:5c:b2: e7:d1:04:30:13:50:10:09:3a:85:f9:25:cf:28:61: ec:89:7a:26:64:93:09:be:2f:a1:e1:e6:c6:32:f2: e8:75:b6:86:ff:ca:c1:39:40:6e:e2:d0:63:05:03: ec:cb:8e:67:64:55:23:de:93:ee:f7:ca:99:18:5b: 96:c0:4f:f3:a7:24:dd:65:1e:c9:8d:31:fb:54:32: 8b:a7:1e:ef:86:da:1b:f3:fc:a0:10:99:e8:75:12: 4a:db:ff:cd:61:77:10:93:20:63:8a:af:ce:73:c1: 22:bf:6f:21:a1:54:9d:96:45:fc:39:bf:02:bb:52: 29:57:66:7d:a6:28:b9:aa:7d:b0:34:f5:fb:0c:1d: 51:c5:bb:3a:73:85:56:98:fe:df:ba:9a:6b:57:96: d6:c9:cf:15:4f:bd:18:46:b2:6b:c2:bf:78:86:6a: f5:3a:85:b9:18:1b:96:7f:7c:ad:73:42:42:28:32: aa:79:67:be:ec:af:69:90:51:05:fe:4c:27:40:89: 75:58:77:b5:96:6f:de:c7:36:c8:ba:d2:ed:fc:13: c0:8b:7c:40:f4:65:1a:2b:2c:ac:6f:9f:78:b5:3d: 9c:81:33:74:2d:24:39:d4:f2:64:fd:5f:4d:1b:71: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C2:A9:CB:0C:93:4C:DE:57:72:99:CB:A9:D5:AD:FF:79:4A:29:DB X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:b2:c9:10:2d:cf:e9:d7:d2:42:f5:1a:36:b9:4a:05:a3:ff: 9b:5e:35:03:5f:7a:aa:bd:ca:ef:52:25:b4:37:da:47:81:3a: 1d:df:d9:fb:18:d4:b6:2e:d5:84:1a:10:f0:11:41:9d:61:6a: b0:32:98:74:28:79:fc:01:9d:d2:70:bb:91:a4:23:12:a7:fa: a8:41:21:00:e0:58:6d:99:ae:a8:4b:ce:27:d5:88:e4:d6:41: 06:32:e7:3c:d4:f2:c3:fe:01:4e:bf:c4:f2:86:7d:38:a7:49: 43:e9:21:9d:21:1d:97:91:04:8e:e6:a7:45:5e:fe:a7:35:5b: 21:68:45:3e:f5:a9:4c:31:d2:e3:33:cf:de:89:d2:55:3e:96: d0:9d:14:31:cf:4a:7f:80:0f:27:a2:08:79:08:00:34:13:69: 64:a0:ac:bb:57:f8:8e:73:08:9f:ed:94:eb:21:56:a9:79:b3: 90:8f:54:0d:db:87:0b:0a:49:c4:c0:13:50:e0:b3:17:6f:1b: 7c:96:07:b6:b9:82:ec:9b:b4:45:1b:7f:92:bc:97:43:50:3a: 90:71:27:83:e0:72:f5:78:a6:50:7d:91:58:6d:fd:21:26:1a: cb:2f:1d:c5:9b:f7:9a:3d:07:05:8c:cc:2b:2f:04:e5:8d:34: 65:65:41:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjUwNzIwMTcwOTEzWhcNMjUwNzI3MTcwOTEzWjAYMRYwFAYD VQQDEw02ODdkMjJiOS0zNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgSARFQf6cZGcjeBXLLn0QQwE1AQCTqF+SXPKGHsiXomZJMJvi+h4ebGMvLo dbaG/8rBOUBu4tBjBQPsy45nZFUj3pPu98qZGFuWwE/zpyTdZR7JjTH7VDKLpx7v htob8/ygEJnodRJK2//NYXcQkyBjiq/Oc8Eiv28hoVSdlkX8Ob8Cu1IpV2Z9pii5 qn2wNPX7DB1Rxbs6c4VWmP7fupprV5bWyc8VT70YRrJrwr94hmr1OoW5GBuWf3yt c0JCKDKqeWe+7K9pkFEF/kwnQIl1WHe1lm/exzbIutLt/BPAi3xA9GUaKyysb594 tT2cgTN0LSQ51PJk/V9NG3GtkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHCqcsM k0zeV3KZy6nVrf95SinbMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1sskQLc/p19JC9Ro2uUoFo/+bXjUDX3qqvcrvUiW0N9pHgTod39n7 GNS2LtWEGhDwEUGdYWqwMph0KHn8AZ3ScLuRpCMSp/qoQSEA4Fhtma6oS84n1Yjk 1kEGMuc81PLD/gFOv8Tyhn04p0lD6SGdIR2XkQSO5qdFXv6nNVshaEU+9alMMdLj M8/eidJVPpbQnRQxz0p/gA8nogh5CAA0E2lkoKy7V/iOcwif7ZTrIVapebOQj1QN 24cLCknEwBNQ4LMXbxt8lge2uYLsm7RFG3+SvJdDUDqQcSeD4HL1eKZQfZFYbf0h JhrLLx3Fm/eaPQcFjMwrLwTljTRlZUG7 -----END CERTIFICATE-----Generated at Mon Jul 21 23:59:35 2025 by rpki-client