$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json) Hash identifier: kL5XQrJgT+UKZhhf47CytTZ/y7aQNnWffjLsQMxlvoM= Subject key identifier: 16:3D:0B:91:A1:38:2A:37:6A:15:8F:1F:1A:F5:AF:20:75:59:C0:47 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 0187 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft Manifest number: 014C Signing time: Fri 05 Sep 2025 05:19:26 +0000 Manifest this update: Fri 05 Sep 2025 05:19:26 +0000 Manifest next update: Fri 12 Sep 2025 05:19:26 +0000 Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: RENXR/dZBu9A/XszUPpcT8NVlLdYIiEt3UWry6fALNc=) 2: FCF99042301011EFBC350682C4F9AE02.roa (hash: L2/9JjFiWgQt59AFuV+uoqbPdz+ScN9QlotCi7wxs3k=) 3: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (hash: TD3x6cqMZ5LdB5sZi2QZSzPZxBxaRneEmC2qFVxnzxU=) 4: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: govSB7bwBcjLhKLkQmAfX8Kv8Fg3iLmAfWNtXCpGOvc=) 5: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: dLZr6fxQD9+vNX/nMzjBW+2uiS4zZgIOchhbHeELI7w=) 6: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: N/ID+SY0JAy45rWeP36Bw1B7q4m3VaCJNW1Sv52Yw6c=) 7: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (hash: tcVwqZZLgzM/JYa8wH8nV+ejGoZFhH0k2MAzqkTeLmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Sep 5 05:19:26 2025 GMT Not After : Sep 12 05:19:26 2025 GMT Subject: CN=68ba72de-2d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:69:e2:6f:82:59:54:27:c7:e4:13:3e:2d: 3a:03:54:cf:03:37:3b:0d:d1:5e:d9:14:20:2f:be: 9e:99:45:33:f9:ce:2b:bf:f6:4f:9f:8b:2a:46:8c: aa:9e:27:de:7a:e1:35:7f:05:31:55:8e:ab:52:8d: a8:9f:9f:93:87:6d:d4:84:d6:e9:d8:93:46:af:8b: 1d:6b:c5:a3:d9:3a:f6:18:d9:09:d5:30:8d:59:ab: db:cd:49:7a:37:98:a0:ce:19:69:61:b0:4b:6c:3a: 2c:fe:fa:88:f4:ca:63:84:c7:75:4d:7f:03:d1:fa: ad:dd:5e:93:58:9a:c7:3b:ed:4f:0c:64:02:b7:21: 1f:30:9e:2c:e4:29:13:3e:1e:dc:9e:20:22:7d:54: 49:fb:fd:1d:d3:c4:51:e0:7b:e4:7d:cd:a7:cd:a4: 00:c9:d0:78:6a:b3:86:ab:3c:09:e2:6f:02:d2:64: c1:c8:3d:93:45:54:0c:b1:a5:0c:ef:11:06:ab:02: f0:3d:ea:11:da:04:3e:01:f3:1f:e5:22:50:b9:c6: a4:a9:af:0c:09:03:28:5a:f2:e0:76:7b:c4:49:c6: 89:18:f6:28:79:06:f8:de:b7:6b:fb:1a:8e:80:ff: 60:43:32:7a:d0:5c:15:85:59:91:52:be:15:16:d1: af:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3D:0B:91:A1:38:2A:37:6A:15:8F:1F:1A:F5:AF:20:75:59:C0:47 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:93:0f:75:b0:79:2f:a0:6a:21:e4:e8:38:5d:a4:b7:9c:21: b7:2f:a0:05:3b:2e:70:b5:45:6d:28:bb:83:44:31:de:7a:8f: 68:e2:36:52:6f:fd:91:3e:69:7d:12:90:c0:38:c0:75:d1:5d: 6d:da:1e:83:44:f9:46:fa:04:00:ac:a9:76:ec:92:74:03:e2: 27:fb:b9:eb:29:03:80:03:dc:e2:47:35:19:42:40:59:c4:6c: 4f:19:a8:9a:24:53:a2:cd:53:f1:5a:88:b5:28:5b:0f:a2:ff: a1:62:30:ed:e9:18:14:17:07:4b:d5:b0:60:c4:73:fe:8b:42: 6d:2f:a7:1a:7b:88:af:7c:c3:82:f9:d0:ba:5e:c8:c5:d9:ff: e8:cc:ec:38:bc:b4:b1:06:3d:96:0c:72:0f:b4:70:ab:75:80: d5:15:84:73:19:de:2f:cb:0a:21:07:d2:6a:bf:db:b4:0f:2d: ad:69:0b:d2:0f:51:57:f3:6d:cb:5c:0b:91:1e:ee:b7:77:7b: b0:fa:f9:36:c6:ea:e1:05:14:25:62:64:38:c6:e2:31:d7:c0: d3:f1:63:7f:92:b8:17:e5:c9:e4:02:36:b8:ff:f8:c7:c5:5f: 3e:20:ae:0c:36:c4:08:94:6b:c8:9e:67:e0:ae:a4:38:41:92: 4f:d7:45:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjUwOTA1MDUxOTI2WhcNMjUwOTEyMDUxOTI2WjAYMRYwFAYD VQQDEw02OGJhNzJkZS0yZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbxp4m+CWVQnx+QTPi06A1TPAzc7DdFe2RQgL76emUUz+c4rv/ZPn4sqRoyq nifeeuE1fwUxVY6rUo2on5+Th23UhNbp2JNGr4sda8Wj2Tr2GNkJ1TCNWavbzUl6 N5igzhlpYbBLbDos/vqI9MpjhMd1TX8D0fqt3V6TWJrHO+1PDGQCtyEfMJ4s5CkT Ph7cniAifVRJ+/0d08RR4Hvkfc2nzaQAydB4arOGqzwJ4m8C0mTByD2TRVQMsaUM 7xEGqwLwPeoR2gQ+AfMf5SJQucakqa8MCQMoWvLgdnvEScaJGPYoeQb43rdr+xqO gP9gQzJ60FwVhVmRUr4VFtGvHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBY9C5Gh OCo3ahWPHxr1ryB1WcBHMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXIt d3pJREZ1MWFwMDRMN0txYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbkw91sHkvoGoh5Og4XaS3nCG3L6AFOy5wtUVtKLuDRDHeeo9o4jZS b/2RPml9EpDAOMB10V1t2h6DRPlG+gQArKl27JJ0A+In+7nrKQOAA9ziRzUZQkBZ xGxPGaiaJFOizVPxWoi1KFsPov+hYjDt6RgUFwdL1bBgxHP+i0JtL6cae4ivfMOC +dC6XsjF2f/ozOw4vLSxBj2WDHIPtHCrdYDVFYRzGd4vywohB9Jqv9u0Dy2taQvS D1FX823LXAuRHu63d3uw+vk2xurhBRQlYmQ4xuIx18DT8WN/krgX5cnkAja4//jH xV8+IK4MNsQIlGvInmfgrqQ4QZJP10Vz -----END CERTIFICATE-----Generated at Sat Sep 6 22:51:55 2025 by rpki-client