$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: wN2HHzbOETAddPgFTNy//BnXCqoUJPAnX7UK3oPHBcc= Subject key identifier: DC:F0:69:44:B3:42:F7:E3:63:D1:4D:91:9D:20:CA:A6:23:67:E7:83 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 128B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 1272 Signing time: Sat 06 Sep 2025 17:13:12 +0000 Manifest this update: Sat 06 Sep 2025 17:13:11 +0000 Manifest next update: Sat 13 Sep 2025 17:13:11 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: k+S5+E4gpTucIUZTtZ8H3IPuYuB5ZFF+o5nb+wfC2EY=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: U6ij5hk5FRfd6jZqWoSf+8Wvzol5Qvpq3+ctiHWpCug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4747 (0x128b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Sep 6 17:13:11 2025 GMT Not After : Sep 13 17:13:11 2025 GMT Subject: CN=68bc6ba7-5c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:33:24:ff:8d:46:a5:ee:d2:0c:7d:dd:a0:2a: 51:37:e9:f2:1f:bd:be:a8:f2:bd:9b:68:dc:00:72: 6a:a3:ac:0c:b6:09:dd:0c:f7:1e:d7:00:61:c9:ea: 53:a2:47:32:1a:a0:56:90:5a:ed:d7:8a:da:5b:ae: 52:78:2e:73:79:48:6e:f6:8c:69:6e:54:42:39:96: a9:db:67:93:b1:bc:d8:2d:a3:70:84:41:ff:a5:2c: de:e3:90:24:58:3b:dc:2b:b1:d6:39:14:03:0d:b0: 6e:19:ef:ea:8f:bc:f6:cd:10:a0:6d:c9:00:8a:d5: 77:11:70:f3:08:88:12:70:0a:db:cb:39:1f:bb:62: da:d0:b7:5b:d3:d7:1e:9e:47:00:ee:5e:23:c3:f5: 44:cd:eb:74:0a:d5:cf:26:10:39:4e:86:2c:c6:8f: 55:12:18:78:5d:e0:ac:6d:93:4a:12:b5:de:0a:45: 7b:a5:62:c8:40:07:40:b2:b3:f8:37:64:d5:1b:30: 22:bd:d0:ea:cb:45:f2:04:f4:60:84:58:9c:4f:5a: 5c:67:52:db:5f:86:79:34:c6:08:30:f7:2e:9d:38: f4:2a:83:1c:e5:3e:bb:65:2a:63:72:f8:1e:61:1b: f8:32:9e:4a:2d:99:73:c5:79:3f:66:76:5b:33:01: e7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F0:69:44:B3:42:F7:E3:63:D1:4D:91:9D:20:CA:A6:23:67:E7:83 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:fb:70:fb:56:c4:60:cc:eb:08:3e:bc:88:a5:df:0d:c0:08: 37:5f:87:d6:ff:90:fb:ef:59:0b:6f:79:8d:bc:4d:25:36:70: f6:93:21:a7:27:fa:70:12:cd:1d:d4:11:80:40:57:ce:65:c9: 39:2b:be:19:c4:ab:f8:29:25:0b:2b:c0:a6:ea:37:55:49:bf: cd:36:5f:c1:c6:41:3c:90:ad:33:41:d9:f6:36:ce:75:94:b4: bb:25:2b:e8:6f:2d:6e:fa:12:94:b2:74:fa:d3:46:cb:ec:81: 0c:76:92:39:70:78:2e:31:2f:20:9b:6a:dc:39:b3:74:d3:21: 65:ba:09:0d:81:14:ff:e3:a9:cb:7c:81:20:15:e2:d7:b2:25: a9:cd:4b:76:30:82:3d:e0:46:7f:a0:4e:51:ee:a7:b5:24:23: e7:4d:0a:f2:0d:46:1b:7c:d8:3d:54:ce:e4:0b:64:1f:d8:f5: e7:03:b8:36:9e:1e:3f:59:e6:6c:0d:8e:22:5a:78:00:34:b8: 46:5d:e3:a1:c2:15:c4:1f:c2:1b:99:ec:cf:87:43:70:83:5f: ea:e5:94:64:e9:ee:a9:94:21:ae:61:43:32:8f:98:f6:74:2e: c4:19:f8:93:1a:18:43:dd:aa:38:b4:fa:91:40:96:83:fa:e5: 0e:7e:52:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjUwOTA2MTcxMzExWhcNMjUwOTEzMTcxMzExWjAYMRYwFAYD VQQDEw02OGJjNmJhNy01YzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTMk/41Gpe7SDH3doCpRN+nyH72+qPK9m2jcAHJqo6wMtgndDPce1wBhyepT okcyGqBWkFrt14raW65SeC5zeUhu9oxpblRCOZap22eTsbzYLaNwhEH/pSze45Ak WDvcK7HWORQDDbBuGe/qj7z2zRCgbckAitV3EXDzCIgScArbyzkfu2La0Ldb09ce nkcA7l4jw/VEzet0CtXPJhA5ToYsxo9VEhh4XeCsbZNKErXeCkV7pWLIQAdAsrP4 N2TVGzAivdDqy0XyBPRghFicT1pcZ1LbX4Z5NMYIMPcunTj0KoMc5T67ZSpjcvge YRv4Mp5KLZlzxXk/ZnZbMwHnmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzwaUSz QvfjY9FNkZ0gyqYjZ+eDMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ+3D7VsRgzOsIPryIpd8NwAg3X4fW/5D771kLb3mNvE0lNnD2kyGn J/pwEs0d1BGAQFfOZck5K74ZxKv4KSULK8Cm6jdVSb/NNl/BxkE8kK0zQdn2Ns51 lLS7JSvoby1u+hKUsnT600bL7IEMdpI5cHguMS8gm2rcObN00yFlugkNgRT/46nL fIEgFeLXsiWpzUt2MII94EZ/oE5R7qe1JCPnTQryDUYbfNg9VM7kC2Qf2PXnA7g2 nh4/WeZsDY4iWngANLhGXeOhwhXEH8IbmezPh0Nwg1/q5ZRk6e6plCGuYUMyj5j2 dC7EGfiTGhhD3ao4tPqRQJaD+uUOflLS -----END CERTIFICATE-----Generated at Mon Sep 8 06:30:06 2025 by rpki-client