$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: yh8JWNXlN0u2B6S4l76A6LbPOlm3Ix0iJvgyQ3cNiz4= Subject key identifier: 22:D2:44:49:1D:89:32:98:45:B5:BD:88:83:D6:1D:3E:F4:B3:9E:01 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 12F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 12D7 Signing time: Sat 14 Mar 2026 16:51:27 +0000 Manifest this update: Sat 14 Mar 2026 16:51:26 +0000 Manifest next update: Sat 21 Mar 2026 16:51:26 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: CG8oBf7K1/U73cQMO01q7ySPtAZu4uNsx1uInyx87RA=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: m5xuNZTplMCUcjHyNtIG3B2SyKlaJh5IOTk259XuenA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 16:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4851 (0x12f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Mar 14 16:51:26 2026 GMT Not After : Mar 21 16:51:26 2026 GMT Subject: CN=69b5920e-c6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:06:d4:55:f1:7a:8b:cd:03:fe:b0:d9:19:51: 7f:ec:e7:90:90:45:d1:92:e2:46:00:e3:9d:c2:37: 72:29:79:69:31:7c:90:bf:a5:a3:e4:2b:1f:4e:a6: 25:f2:33:18:b3:a0:e1:2c:60:65:14:53:85:13:f4: 69:da:45:7a:15:5e:9a:76:3a:2f:77:86:eb:92:91: 0d:40:1e:27:ff:ca:4d:ea:6f:88:fa:d3:0e:d3:14: f5:21:0a:a1:7b:ce:fd:a2:af:e6:7c:a9:de:64:99: 62:7b:23:d5:ab:0a:f2:06:b0:5f:a8:34:f9:2f:b8: b0:22:27:a5:17:14:6a:80:46:c3:21:7b:68:4b:22: f4:e6:91:a6:36:1a:72:02:c8:66:ff:d9:8e:9f:0b: 75:4a:38:66:f7:54:af:bb:57:60:a2:c2:b3:a7:aa: 40:c8:7d:28:ed:84:9d:d1:b0:03:2e:b5:96:2a:f9: 30:fe:29:c5:7c:52:4b:03:18:4c:9f:55:50:2f:83: a3:50:87:79:f8:77:b8:4a:7b:7c:a9:90:41:f2:ef: c2:41:56:dc:cc:85:e5:61:c5:52:2c:75:6b:42:dc: d5:5f:75:5e:7f:43:ec:6e:0e:7b:73:d1:83:06:b8: 86:f1:b3:91:d5:ad:23:d5:bc:65:3c:2e:6c:08:c0: 1c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D2:44:49:1D:89:32:98:45:B5:BD:88:83:D6:1D:3E:F4:B3:9E:01 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cb:c5:f9:83:ba:ed:68:bd:16:84:2c:5e:3d:28:32:22:65: e8:f1:a0:5a:b2:3a:a7:78:65:00:e1:94:04:1c:e8:bd:34:f8: b0:1e:66:50:14:2a:ab:b3:89:7d:31:f6:e5:82:99:51:63:f1: dd:29:af:25:56:41:72:4b:c5:e9:87:4f:68:81:79:2a:dd:e2: db:9b:a2:04:42:25:99:a3:54:9a:96:34:87:9b:2c:44:6b:36: c9:62:58:5d:07:6c:6f:e2:55:67:d4:fb:51:9a:86:3c:c7:83: 67:40:05:46:59:18:49:75:ee:3e:3b:2b:c3:60:3e:5d:4e:49: 40:14:cd:0c:82:89:a5:78:6e:7b:f4:5b:b5:56:fa:e7:d5:57: 14:f5:be:09:1e:03:93:b5:e7:e7:3c:48:a6:8c:f8:5d:0c:85: 90:23:67:0a:d3:65:1c:21:c4:65:fc:4f:01:63:9e:49:84:f5: 06:0a:b4:da:e6:16:2d:61:d6:ee:fe:b4:32:73:91:bc:d6:19: ed:c6:b9:33:8f:67:59:5c:c6:c1:da:5e:65:59:93:5b:43:67: 7a:a6:ee:2e:44:32:03:f3:e1:38:a3:78:22:e9:e7:06:3e:5e: 89:61:d7:3c:99:a4:a0:eb:02:ca:2c:43:6e:22:6b:7a:ae:26: ad:c0:eb:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjYwMzE0MTY1MTI2WhcNMjYwMzIxMTY1MTI2WjAYMRYwFAYD VQQDEw02OWI1OTIwZS1jNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgbUVfF6i80D/rDZGVF/7OeQkEXRkuJGAOOdwjdyKXlpMXyQv6Wj5CsfTqYl 8jMYs6DhLGBlFFOFE/Rp2kV6FV6adjovd4brkpENQB4n/8pN6m+I+tMO0xT1IQqh e879oq/mfKneZJlieyPVqwryBrBfqDT5L7iwIielFxRqgEbDIXtoSyL05pGmNhpy Ashm/9mOnwt1Sjhm91Svu1dgosKzp6pAyH0o7YSd0bADLrWWKvkw/inFfFJLAxhM n1VQL4OjUId5+He4Snt8qZBB8u/CQVbczIXlYcVSLHVrQtzVX3Vef0Psbg57c9GD BriG8bOR1a0j1bxlPC5sCMAc8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCLSREkd iTKYRbW9iIPWHT70s54BMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgcvF+YO67Wi9FoQsXj0oMiJl6PGgWrI6p3hlAOGUBBzovTT4sB5mUBQqq7OJ fTH25YKZUWPx3SmvJVZBckvF6YdPaIF5Kt3i25uiBEIlmaNUmpY0h5ssRGs2yWJY XQdsb+JVZ9T7UZqGPMeDZ0AFRlkYSXXuPjsrw2A+XU5JQBTNDIKJpXhue/RbtVb6 59VXFPW+CR4Dk7Xn5zxIpoz4XQyFkCNnCtNlHCHEZfxPAWOeSYT1Bgq02uYWLWHW 7v60MnORvNYZ7ca5M49nWVzGwdpeZVmTW0NneqbuLkQyA/PhOKN4IunnBj5eiWHX PJmkoOsCyixDbiJreq4mrcDrNg== -----END CERTIFICATE-----Generated at Sun Mar 15 10:06:35 2026 by rpki-client