$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json) Hash identifier: gOko864XwYCQlhEtD6LOelupfscrLjws0mH1XUDrcrI= Subject key identifier: ED:1B:A9:37:34:03:C0:F2:56:38:49:62:78:B5:7E:BC:D3:C1:5D:5F Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 013B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft Manifest number: 0118 Signing time: Sat 19 Jul 2025 05:26:52 +0000 Manifest this update: Sat 19 Jul 2025 05:26:51 +0000 Manifest next update: Sat 26 Jul 2025 05:26:51 +0000 Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: BwxnEZJHynpGSnZGmqyHpn390WpjG/Iqy74FuqdkuIU=) 2: FCF99042301011EFBC350682C4F9AE02.roa (hash: vPFMqrSUjzYIWWD5OrrbcLDLskBcQKIeZfMaAZKS9a8=) 3: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: +Z/kBpjd094bd4RPdB+3s1pTzlQka6jZPNCpN7x0eWA=) 4: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: JSKm415YB8eOJLzvxbfdTcDB2ReV3b5+7ihxYSCGy2A=) 5: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: VzDNl+e9c187NG+xNBhGjgSyuKcXiIbT9dvqTK6Jcdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Jul 19 05:26:51 2025 GMT Not After : Jul 26 05:26:51 2025 GMT Subject: CN=687b2c9c-34c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:19:36:45:61:be:e4:dc:d3:4d:ce:ba:b5: 32:4c:f5:18:5f:bd:e3:00:6e:4a:4c:f8:90:b4:e0: fe:23:15:a4:45:22:5d:3f:22:bb:89:1f:8d:dd:30: 90:4a:9a:21:6a:d2:c8:7c:af:f9:c5:a9:75:cd:70: b9:0f:03:3e:c0:ec:12:dd:2c:6a:eb:5d:f2:1f:3b: 0d:dc:8c:06:9d:d0:90:2b:52:34:74:fa:07:b8:68: 1b:12:28:1e:31:fe:c9:61:58:5e:c8:f6:7e:52:64: f6:20:7f:60:c7:31:e0:9f:4d:a6:22:1e:5a:c1:93: d1:03:de:e2:86:e1:bc:4b:7a:49:a5:ec:71:49:9f: 6f:07:91:83:4d:2f:8a:26:19:9e:4a:6c:d9:77:82: 92:16:c7:f3:7b:e7:49:d4:3c:01:bc:89:e1:02:dd: 2b:dc:80:42:e4:44:0c:48:a6:4b:5e:6d:15:d3:de: 2c:24:a5:1b:2d:fe:64:8d:95:37:09:65:49:4d:60: a9:14:02:64:a7:4a:aa:3b:ec:b5:89:80:a4:82:2b: c9:14:40:7c:4a:38:5f:d9:ca:6d:d7:8d:63:c9:9b: 58:e2:a6:d7:94:0f:a9:f7:75:34:ff:9c:be:5c:3b: 98:a9:6c:38:ee:64:7f:d3:c8:1a:a0:95:84:f2:2b: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1B:A9:37:34:03:C0:F2:56:38:49:62:78:B5:7E:BC:D3:C1:5D:5F X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:49:13:c3:56:ef:b0:cc:bf:b9:30:04:cf:44:ef:69:e8:00: 19:52:d0:7c:35:91:04:f9:59:f9:1f:09:42:90:b2:ce:27:91: 21:fd:cc:5a:3e:7c:31:c2:07:63:e0:97:03:ab:d6:c9:cb:fa: aa:dc:22:4e:2d:dc:4f:3a:6d:d0:03:c9:ca:bd:ff:95:02:8b: 49:01:93:a4:e8:b4:e6:6b:fd:01:c4:e4:d0:8c:83:75:13:e4: dd:50:d1:7d:02:2f:a6:dd:ce:0d:79:49:67:6d:38:c4:19:e8: 57:02:87:6f:db:e0:6b:12:89:1f:24:ad:4c:0b:11:4b:31:c0: a1:78:8a:1e:1b:48:18:f7:36:a7:b0:73:09:f4:85:dd:93:91: 17:de:02:bf:0b:6f:b4:a2:81:3d:d4:7c:d2:98:41:eb:cb:ba: 5e:1a:79:f4:88:fb:11:c6:b5:c6:eb:74:e0:03:b1:d6:c7:1f: 84:d2:da:6a:39:6d:ff:1a:36:ad:9c:fb:04:72:f1:52:e4:22: cd:27:98:5f:f3:7f:79:df:ca:28:73:5d:ff:07:3d:91:03:29: 4c:40:3b:55:d8:09:d9:6a:a2:d8:72:2a:b6:3f:24:d2:20:6b: e7:f7:1d:48:53:b1:c9:81:4d:a3:51:6d:a2:6f:3b:27:f8:5e: 2f:e0:44:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjUwNzE5MDUyNjUxWhcNMjUwNzI2MDUyNjUxWjAYMRYwFAYD VQQDEw02ODdiMmM5Yy0zNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscYZNkVhvuTc003OurUyTPUYX73jAG5KTPiQtOD+IxWkRSJdPyK7iR+N3TCQ SpohatLIfK/5xal1zXC5DwM+wOwS3Sxq613yHzsN3IwGndCQK1I0dPoHuGgbEige Mf7JYVheyPZ+UmT2IH9gxzHgn02mIh5awZPRA97ihuG8S3pJpexxSZ9vB5GDTS+K JhmeSmzZd4KSFsfze+dJ1DwBvInhAt0r3IBC5EQMSKZLXm0V094sJKUbLf5kjZU3 CWVJTWCpFAJkp0qqO+y1iYCkgivJFEB8Sjhf2cpt141jyZtY4qbXlA+p93U0/5y+ XDuYqWw47mR/08gaoJWE8iuRKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO0bqTc0 A8DyVjhJYni1frzTwV1fMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXIt d3pJREZ1MWFwMDRMN0txYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAySRPDVu+wzL+5MATPRO9p6AAZUtB8NZEE+Vn5HwlCkLLOJ5Eh/cxa Pnwxwgdj4JcDq9bJy/qq3CJOLdxPOm3QA8nKvf+VAotJAZOk6LTma/0BxOTQjIN1 E+TdUNF9Ai+m3c4NeUlnbTjEGehXAodv2+BrEokfJK1MCxFLMcCheIoeG0gY9zan sHMJ9IXdk5EX3gK/C2+0ooE91HzSmEHry7peGnn0iPsRxrXG63TgA7HWxx+E0tpq OW3/GjatnPsEcvFS5CLNJ5hf839538ooc13/Bz2RAylMQDtV2AnZaqLYciq2PyTS IGvn9x1IU7HJgU2jUW2ibzsn+F4v4ERJ -----END CERTIFICATE-----Generated at Sun Jul 20 11:14:37 2025 by rpki-client