$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: +kqMuMiphs2etiQLJs1OLLU9M21WSrBYDG75kAVqM4k= Subject key identifier: 5A:87:FB:54:8F:A2:E1:B0:5E:C3:6B:FA:A9:47:49:E7:12:48:86:B7 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 125F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 1246 Signing time: Thu 12 Jun 2025 17:04:08 +0000 Manifest this update: Thu 12 Jun 2025 17:04:08 +0000 Manifest next update: Thu 19 Jun 2025 17:04:08 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: tb8eAN3aMIQN+K99wiDLjjo7gJ2Cr0y9NkQDh8t0W1E=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: U6ij5hk5FRfd6jZqWoSf+8Wvzol5Qvpq3+ctiHWpCug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4703 (0x125f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Jun 12 17:04:08 2025 GMT Not After : Jun 19 17:04:08 2025 GMT Subject: CN=684b0888-e771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:0a:d9:6d:5b:73:f3:15:f0:05:86:9e:fa:46: b9:de:43:4c:3f:7b:4f:01:42:c7:f3:48:47:c2:f9: 43:86:a5:63:2c:5d:ab:b9:86:a1:5f:0d:33:4c:80: 99:2b:67:74:60:58:d3:53:3b:f1:ee:75:36:c6:89: 0a:42:d5:6f:34:25:f5:24:a0:f3:ab:30:4e:a8:83: a7:29:ab:75:a3:ec:6f:65:7a:e8:1f:c6:76:a7:4d: 50:52:5d:14:28:1e:09:c2:8c:70:73:b2:09:c6:70: 80:b0:5b:b2:af:36:6a:4a:56:08:0e:61:03:fc:de: c1:76:31:f3:95:71:39:e1:86:3f:df:54:14:31:f7: 6a:3b:df:a2:78:9e:13:a8:ea:80:a4:e7:e6:52:b8: 1d:4b:49:8f:b5:93:43:1f:3b:ba:b5:99:75:59:e7: 6c:75:6a:0d:1c:ab:b8:a2:7a:11:36:ef:39:bc:7d: 3f:bd:e4:2d:98:e5:fd:a0:ce:d8:56:8f:ef:ca:8a: 34:5b:42:20:62:a1:cf:d2:05:55:c5:92:92:79:18: 5c:01:21:81:75:79:6b:5d:24:46:4d:66:56:7a:3b: f4:0a:6e:e5:65:50:d3:62:26:33:ff:96:b9:dd:4e: 62:01:db:eb:17:0c:c0:3b:72:94:d8:ad:65:61:ee: 6c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:87:FB:54:8F:A2:E1:B0:5E:C3:6B:FA:A9:47:49:E7:12:48:86:B7 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:32:50:6f:f6:97:62:bd:82:fe:4d:61:12:b3:e3:4b:b1:8a: c8:39:b7:5a:85:52:d2:81:6c:41:cd:a3:76:62:08:62:90:9e: fd:9b:cf:b8:f6:49:bb:9b:ce:cd:b3:f2:d6:bf:af:f0:f4:98: 6f:3d:c2:da:cd:e4:f2:5c:2b:2f:77:37:dd:a8:c5:63:f7:59: 0b:5d:96:85:0a:af:1b:cb:78:5b:f7:e7:f1:1d:91:7f:f6:2a: 9d:79:a8:da:ff:5c:68:5b:2d:ef:8e:6f:6b:24:06:52:6c:d0: cc:73:5f:82:4a:9e:a2:f2:25:36:2e:ac:cd:a5:2f:af:58:7c: 47:4c:ec:ca:c8:c0:59:14:86:27:7a:a1:99:7f:b7:86:0c:51: ac:bc:ff:18:4f:dc:39:eb:a4:c3:32:9a:99:8a:3d:34:e2:02: 5d:0b:7b:9d:7a:8d:02:78:83:d8:38:61:b4:02:39:3f:85:c0: 1b:a5:49:c4:74:24:a5:3b:4b:5a:26:65:77:33:6b:04:50:66: c9:52:c1:9b:36:b7:15:9e:ec:a3:8d:56:af:5a:02:c8:17:e3: ef:17:d6:bb:e0:ee:70:1f:34:c9:31:4a:a6:f6:ee:e9:d4:95: 57:58:84:cb:2c:5a:f6:ba:95:37:93:fc:db:03:ab:3b:fa:e3: 64:e1:b2:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjUwNjEyMTcwNDA4WhcNMjUwNjE5MTcwNDA4WjAYMRYwFAYD VQQDEw02ODRiMDg4OC1lNzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ArZbVtz8xXwBYae+ka53kNMP3tPAULH80hHwvlDhqVjLF2ruYahXw0zTICZ K2d0YFjTUzvx7nU2xokKQtVvNCX1JKDzqzBOqIOnKat1o+xvZXroH8Z2p01QUl0U KB4Jwoxwc7IJxnCAsFuyrzZqSlYIDmED/N7BdjHzlXE54YY/31QUMfdqO9+ieJ4T qOqApOfmUrgdS0mPtZNDHzu6tZl1WedsdWoNHKu4onoRNu85vH0/veQtmOX9oM7Y Vo/vyoo0W0IgYqHP0gVVxZKSeRhcASGBdXlrXSRGTWZWejv0Cm7lZVDTYiYz/5a5 3U5iAdvrFwzAO3KU2K1lYe5s3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqH+1SP ouGwXsNr+qlHSecSSIa3MB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtMlBv9pdivYL+TWESs+NLsYrIObdahVLSgWxBzaN2YghikJ79m8+4 9km7m87Ns/LWv6/w9JhvPcLazeTyXCsvdzfdqMVj91kLXZaFCq8by3hb9+fxHZF/ 9iqdeaja/1xoWy3vjm9rJAZSbNDMc1+CSp6i8iU2LqzNpS+vWHxHTOzKyMBZFIYn eqGZf7eGDFGsvP8YT9w566TDMpqZij004gJdC3udeo0CeIPYOGG0Ajk/hcAbpUnE dCSlO0taJmV3M2sEUGbJUsGbNrcVnuyjjVavWgLIF+PvF9a74O5wHzTJMUqm9u7p 1JVXWITLLFr2upU3k/zbA6s7+uNk4bIm -----END CERTIFICATE-----Generated at Sat Jun 14 17:37:48 2025 by rpki-client