$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: B9DfFfRN/2MLVf6HH+W5fegt8Y2OCd96WuCfCKF2psg= Subject key identifier: 40:37:84:30:B0:00:F8:6C:CF:3B:A7:B0:92:91:8F:36:56:2F:92:48 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 127A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 1261 Signing time: Mon 04 Aug 2025 17:18:29 +0000 Manifest this update: Mon 04 Aug 2025 17:18:28 +0000 Manifest next update: Mon 11 Aug 2025 17:18:28 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: Z0tUUdFPd4CmJ4d9OpiSruMiqrwmwtfcb/q0VJVbTOg=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: U6ij5hk5FRfd6jZqWoSf+8Wvzol5Qvpq3+ctiHWpCug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4730 (0x127a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Aug 4 17:18:28 2025 GMT Not After : Aug 11 17:18:28 2025 GMT Subject: CN=6890eb65-6348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:8b:22:42:f3:7c:62:cf:ec:f0:f6:0b:42: 72:70:56:3f:ae:76:64:89:33:9a:bd:46:49:c8:e5: ef:bd:ee:2d:26:3e:b8:80:77:8a:8b:81:94:c7:ac: 13:ed:cf:87:33:2c:88:d4:1f:fb:33:de:52:c6:ba: 08:b9:d4:36:c0:d8:05:a3:b1:9b:10:1f:b6:1e:dd: f4:72:51:11:7f:36:09:6c:58:3f:42:bb:a4:01:c5: 93:4a:94:a7:28:5e:ac:50:f0:bd:f1:ff:d6:67:4b: ae:f7:d9:21:bc:32:e4:35:41:7d:cc:d1:a0:8a:27: a5:0d:31:49:07:20:f4:7f:44:e5:23:e4:52:bc:df: dd:c2:37:6d:af:b1:6b:18:87:14:bf:c3:e2:16:6f: b7:24:bd:b6:3f:62:4a:84:60:f1:c9:9b:d7:3f:2e: 1f:9e:ed:60:7b:30:d3:88:67:cf:a7:df:2f:19:71: b8:6c:75:a8:fa:e3:45:0e:a7:a0:76:0b:02:67:6d: 3e:c8:af:11:a2:d1:45:87:fd:f3:ef:5a:a1:d5:80: 7d:49:08:5f:39:ab:ce:53:42:6c:34:69:58:8c:de: 55:4c:08:28:98:35:f1:5c:72:d7:68:ea:65:61:ca: ab:e2:bc:12:f3:bd:8a:3f:26:c1:cd:fb:e1:dc:87: b8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:37:84:30:B0:00:F8:6C:CF:3B:A7:B0:92:91:8F:36:56:2F:92:48 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:97:06:c1:d5:07:50:41:d6:d0:ca:99:25:75:f7:87:35:ca: 5e:7b:b9:86:89:73:78:84:ce:7d:b4:5d:69:36:53:60:18:ec: 26:38:9b:f2:42:27:57:b7:a2:b5:d9:63:60:07:b3:ad:02:7d: 71:75:08:9f:81:04:ab:cd:47:a9:d0:d8:dc:96:cc:d6:87:9e: 05:b8:19:f1:b0:48:db:32:16:3b:9d:fd:b6:99:6b:d2:5c:dd: ab:c8:e1:a9:da:23:30:e7:5e:85:87:75:80:9c:9a:ed:20:c8: 0a:62:b3:ab:d1:8f:d8:35:c6:c0:46:35:4a:98:c1:1d:60:76: 09:2e:a1:55:20:6b:c3:c0:97:3c:b0:bd:41:d6:7c:45:6c:f3: ba:01:12:b2:c3:67:0b:f7:c4:3b:0e:9b:91:b2:62:aa:03:d6: 14:b4:57:79:0b:b7:0d:68:c5:71:e6:15:9a:8d:5d:74:18:c0: a2:31:23:e6:eb:2d:9c:1d:15:fd:2b:0e:c2:98:10:17:db:47: 2e:5c:ef:68:f3:e2:d2:87:08:d8:67:9a:a7:a2:ec:f5:70:00: 8a:b8:cf:c2:b8:f3:96:11:50:b9:29:70:68:65:9d:98:d6:d2: ab:2f:35:02:c8:01:98:6a:59:21:0c:06:a4:ec:28:af:ab:a1: b6:23:d1:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjUwODA0MTcxODI4WhcNMjUwODExMTcxODI4WjAYMRYwFAYD VQQDEw02ODkwZWI2NS02MzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXeLIkLzfGLP7PD2C0JycFY/rnZkiTOavUZJyOXvve4tJj64gHeKi4GUx6wT 7c+HMyyI1B/7M95SxroIudQ2wNgFo7GbEB+2Ht30clERfzYJbFg/QrukAcWTSpSn KF6sUPC98f/WZ0uu99khvDLkNUF9zNGgiielDTFJByD0f0TlI+RSvN/dwjdtr7Fr GIcUv8PiFm+3JL22P2JKhGDxyZvXPy4fnu1gezDTiGfPp98vGXG4bHWo+uNFDqeg dgsCZ20+yK8RotFFh/3z71qh1YB9SQhfOavOU0JsNGlYjN5VTAgomDXxXHLXaOpl Ycqr4rwS872KPybBzfvh3Ie4RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEA3hDCw APhszzunsJKRjzZWL5JIMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMlwbB1QdQQdbQypkldfeHNcpee7mGiXN4hM59tF1pNlNgGOwmOJvy QidXt6K12WNgB7OtAn1xdQifgQSrzUep0NjclszWh54FuBnxsEjbMhY7nf22mWvS XN2ryOGp2iMw516Fh3WAnJrtIMgKYrOr0Y/YNcbARjVKmMEdYHYJLqFVIGvDwJc8 sL1B1nxFbPO6ARKyw2cL98Q7DpuRsmKqA9YUtFd5C7cNaMVx5hWajV10GMCiMSPm 6y2cHRX9Kw7CmBAX20cuXO9o8+LShwjYZ5qnouz1cACKuM/CuPOWEVC5KXBoZZ2Y 1tKrLzUCyAGYalkhDAak7Civq6G2I9EG -----END CERTIFICATE-----Generated at Wed Aug 6 11:10:23 2025 by rpki-client