$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: k63NuB8zQIVI2GhDjv0G0vph1idjeRhuJmd7S0k+1ho= Subject key identifier: 0F:19:A9:DE:64:3B:B2:0D:97:DA:5C:12:2D:2E:13:06:57:88:83:80 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 130A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 12EE Signing time: Tue 28 Apr 2026 17:08:07 +0000 Manifest this update: Tue 28 Apr 2026 17:08:06 +0000 Manifest next update: Tue 05 May 2026 17:08:06 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: HkSlUlMbRM9V5kiwLcAA0K3SwlUfkPUfYGTwp2zk3Eo=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: m5xuNZTplMCUcjHyNtIG3B2SyKlaJh5IOTk259XuenA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 May 2026 17:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4874 (0x130a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Apr 28 17:08:06 2026 GMT Not After : May 5 17:08:06 2026 GMT Subject: CN=69f0e977-b66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:b3:21:be:9a:3e:57:34:10:56:38:0f:ae: 8d:2c:45:37:43:55:3c:2b:38:98:19:5c:ea:29:f9: cf:89:94:5d:fc:5c:3b:20:bb:65:6d:d3:0a:65:fa: a0:9d:13:bd:07:5a:ee:e9:f2:8b:69:83:6c:14:8e: c8:e5:2f:f8:ed:ec:f3:dc:64:86:f0:5a:b5:a8:d7: 41:33:4c:ae:1a:ab:57:03:46:7f:4e:3e:25:f0:1e: b7:9f:39:41:96:0e:21:d1:43:0d:38:df:c3:e9:3f: c2:a8:be:cf:c3:f8:cf:e5:39:bc:e4:42:e4:a2:5e: c9:25:07:f0:3a:4f:82:80:6d:84:bf:d6:89:d5:73: 16:4f:25:c7:1e:8d:2c:d2:6b:2a:d8:d2:33:2f:c2: 48:86:f0:70:6c:e0:83:f1:52:de:ca:44:f4:c2:a5: 62:36:a6:6e:f1:42:59:7f:d9:35:f1:ca:7b:53:d9: 48:35:72:ed:2f:8e:71:e2:ee:b0:fb:d6:7a:5d:d5: b3:c4:6a:54:ce:b7:5a:63:3a:b0:af:e9:34:1a:6e: 65:51:f0:bc:d0:fb:70:88:9c:53:15:52:4d:4b:6e: 32:fe:06:3d:d6:8b:eb:b3:de:8b:db:8f:ae:95:5b: d3:57:76:b1:a4:c2:21:e2:94:35:53:ce:7f:49:da: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:19:A9:DE:64:3B:B2:0D:97:DA:5C:12:2D:2E:13:06:57:88:83:80 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:17:f7:4d:cd:5d:38:af:c7:f5:ef:e0:3d:6f:f8:c2:43:46: 0b:02:af:1a:04:53:78:06:e5:87:46:e2:69:9f:b5:7e:1d:30: 94:20:13:6d:65:61:8e:32:51:bd:96:1a:2b:82:09:ba:25:4e: ff:a2:82:db:a8:45:ff:47:ac:93:e0:3b:cd:97:b6:d2:b1:ee: 1c:5f:75:41:70:71:08:f9:10:02:e9:c7:6c:15:1a:da:6b:f1: 82:1c:98:0e:06:d3:38:c4:41:24:e3:e4:a1:1c:1b:95:c1:ea: 8f:23:6c:e5:38:f6:3d:88:e5:fb:fb:3e:fb:16:91:be:23:0f: 7e:e5:3f:61:fe:8f:72:4a:e1:00:97:f0:37:70:39:8c:be:af: 17:2b:a1:d6:1a:e9:e7:99:f6:af:2e:b4:82:38:b6:04:71:ed: 52:0c:f8:f2:9e:fd:bf:b9:f8:c2:29:39:06:5c:1f:c4:e1:ff: b2:7f:4f:4c:ff:10:c2:e6:39:ed:30:60:6d:53:9f:01:67:c4: 9b:7c:d9:7e:b2:fb:5e:e2:77:25:0a:17:de:fb:fd:8c:70:a9: 27:6f:ff:ad:8e:12:72:67:f3:53:48:db:da:2e:3c:47:ea:97: 11:79:af:14:ba:41:aa:ae:ee:f0:48:aa:fc:ee:27:bb:20:cd: fb:5f:9c:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjYwNDI4MTcwODA2WhcNMjYwNTA1MTcwODA2WjAYMRYwFAYD VQQDEw02OWYwZTk3Ny1iNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaKzIb6aPlc0EFY4D66NLEU3Q1U8KziYGVzqKfnPiZRd/Fw7ILtlbdMKZfqg nRO9B1ru6fKLaYNsFI7I5S/47ezz3GSG8Fq1qNdBM0yuGqtXA0Z/Tj4l8B63nzlB lg4h0UMNON/D6T/CqL7Pw/jP5Tm85ELkol7JJQfwOk+CgG2Ev9aJ1XMWTyXHHo0s 0msq2NIzL8JIhvBwbOCD8VLeykT0wqViNqZu8UJZf9k18cp7U9lINXLtL45x4u6w +9Z6XdWzxGpUzrdaYzqwr+k0Gm5lUfC80PtwiJxTFVJNS24y/gY91ovrs96L24+u lVvTV3axpMIh4pQ1U85/Sdo2cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8Zqd5k O7INl9pcEi0uEwZXiIOAMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAhf3Tc1dOK/H9e/gPW/4wkNGCwKvGgRTeAblh0biaZ+1fh0wlCATbWVhjjJR vZYaK4IJuiVO/6KC26hF/0esk+A7zZe20rHuHF91QXBxCPkQAunHbBUa2mvxghyY DgbTOMRBJOPkoRwblcHqjyNs5Tj2PYjl+/s++xaRviMPfuU/Yf6PckrhAJfwN3A5 jL6vFyuh1hrp55n2ry60gji2BHHtUgz48p79v7n4wik5BlwfxOH/sn9PTP8QwuY5 7TBgbVOfAWfEm3zZfrL7XuJ3JQoX3vv9jHCpJ2//rY4ScmfzU0jb2i48R+qXEXmv FLpBqq7u8Eiq/O4nuyDN+1+cxA== -----END CERTIFICATE-----Generated at Wed Apr 29 18:00:06 2026 by rpki-client