$ rpki-client -vvf rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft File: qelaQWvM7v2G6i-gGcJeTXa46dk.mft (raw, json) Hash identifier: 3qssbSKFXm9An+C+9mLfR96kZf2uJ3HQfnz4AdoP/jw= Subject key identifier: 02:43:33:3C:3B:47:FD:EC:F7:54:CC:4C:5E:E9:F9:9F:BF:64:A9:09 Authority key identifier: A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 Certificate issuer: /CN=A911C676/serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Certificate serial: 12A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft Manifest number: 1290 Signing time: Tue 04 Nov 2025 17:11:27 +0000 Manifest this update: Tue 04 Nov 2025 17:11:27 +0000 Manifest next update: Tue 11 Nov 2025 17:11:27 +0000 Files and hashes: 1: qelaQWvM7v2G6i-gGcJeTXa46dk.crl (hash: g1vkWSEGO5zmfyyzAT5Jtd1r/s+Ww1XFU/PsLaq0ptU=) 2: EFA0015E593911EFA8EAD43CC4F9AE02.roa (hash: U6ij5hk5FRfd6jZqWoSf+8Wvzol5Qvpq3+ctiHWpCug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4777 (0x12a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C676, serialNumber=A9E95A416BCCEEFD86EA2FA019C25E4D76B8E9D9 Validity Not Before: Nov 4 17:11:27 2025 GMT Not After : Nov 11 17:11:27 2025 GMT Subject: CN=690a33bf-25d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8e:8d:95:21:0d:42:4d:1c:ed:d2:69:c1:d2: eb:d5:f9:e3:cb:ca:11:14:28:8e:8a:78:8c:5c:a4: 8e:37:81:ee:41:a0:59:cf:2f:21:61:ea:df:19:0c: 75:08:d1:12:16:bb:37:24:61:89:b3:44:cf:37:0f: 2a:8d:4e:51:c6:6c:8f:b3:4e:a6:20:57:26:b3:56: af:81:53:9d:09:c5:3a:36:24:8d:97:1c:29:70:f3: e2:09:48:c8:be:38:42:46:1d:70:0f:8a:1d:32:4b: bd:3b:af:6e:a2:3e:0c:11:38:eb:c2:ee:48:fa:23: 8f:63:1b:4b:d7:82:52:0e:90:16:19:2b:25:60:c0: 4a:23:c0:04:0d:73:eb:35:a9:8a:a6:fe:96:b6:74: 43:6a:d4:4c:ec:91:50:59:8a:4b:1a:25:31:c6:5a: fb:0e:17:a3:9f:c8:90:9b:86:42:69:43:54:0d:40: 62:66:fc:c8:df:39:05:e0:11:a8:5c:6e:66:8b:d2: d6:08:14:b2:a8:09:4e:08:06:ee:d9:9e:f4:58:2e: bb:83:d3:c8:c2:43:bb:f3:1a:44:3c:80:f1:c9:ad: 2a:b1:d7:49:3d:a6:27:08:41:d5:01:2a:01:6f:50: 8a:75:20:01:02:74:0a:fe:17:9c:27:7e:42:6c:3e: c2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:43:33:3C:3B:47:FD:EC:F7:54:CC:4C:5E:E9:F9:9F:BF:64:A9:09 X509v3 Authority Key Identifier: keyid:A9:E9:5A:41:6B:CC:EE:FD:86:EA:2F:A0:19:C2:5E:4D:76:B8:E9:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qelaQWvM7v2G6i-gGcJeTXa46dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C676/CD38AB16DDD911E8AF451F0AC4F9AE02/qelaQWvM7v2G6i-gGcJeTXa46dk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:ce:47:7d:f9:bf:85:5a:09:99:d6:c7:4e:c9:8e:b3:1f:a2: 79:52:6b:7e:83:c9:25:84:cf:06:98:ea:8d:9b:97:40:14:a7: 47:ba:f0:51:94:f9:f4:dd:2d:70:e0:91:46:3e:13:a7:d6:df: 76:e6:1c:af:b4:20:f8:1f:4f:08:e3:5a:3f:67:4e:00:f9:8d: f1:f1:dd:ff:16:f3:65:71:54:b2:f5:c7:1d:a2:39:5c:ef:6a: 59:18:ff:b8:8a:76:22:4f:99:b4:3f:ba:66:e7:b0:50:ed:69: 00:cb:bc:82:bc:25:4d:7b:e7:78:5d:d8:db:c2:ee:f4:81:e8: db:97:87:ce:a4:a6:5a:80:58:2e:f6:3c:0f:1c:37:75:69:04: 2a:1e:6c:7a:8f:10:21:e8:42:95:b2:f1:aa:a2:86:92:1b:71: c9:f3:2f:41:50:89:b2:ed:a5:4e:78:ff:2b:c5:a6:49:7a:94: a4:81:b3:77:ea:b9:a5:10:5c:30:89:aa:53:72:80:d2:43:08: 7f:79:e9:87:d8:fd:9a:28:84:3e:81:8f:d3:02:74:8c:21:ac: 99:21:71:4d:29:d0:2d:d2:9f:c4:cf:78:99:4a:91:cd:1f:67: e4:06:1a:0d:48:7e:db:24:68:d8:33:ee:cd:9c:46:93:ef:b9: 49:3b:d5:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2NzYxMTAvBgNVBAUTKEE5RTk1QTQxNkJDQ0VFRkQ4NkVBMkZBMDE5QzI1RTRE NzZCOEU5RDkwHhcNMjUxMTA0MTcxMTI3WhcNMjUxMTExMTcxMTI3WjAYMRYwFAYD VQQDEw02OTBhMzNiZi0yNWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqY6NlSENQk0c7dJpwdLr1fnjy8oRFCiOiniMXKSON4HuQaBZzy8hYerfGQx1 CNESFrs3JGGJs0TPNw8qjU5RxmyPs06mIFcms1avgVOdCcU6NiSNlxwpcPPiCUjI vjhCRh1wD4odMku9O69uoj4METjrwu5I+iOPYxtL14JSDpAWGSslYMBKI8AEDXPr NamKpv6WtnRDatRM7JFQWYpLGiUxxlr7Dhejn8iQm4ZCaUNUDUBiZvzI3zkF4BGo XG5mi9LWCBSyqAlOCAbu2Z70WC67g9PIwkO78xpEPIDxya0qsddJPaYnCEHVASoB b1CKdSABAnQK/hecJ35CbD7C4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJDMzw7 R/3s91TMTF7p+Z+/ZKkJMB8GA1UdIwQYMBaAFKnpWkFrzO79huovoBnCXk12uOnZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzY3Ni9DRDM4QUIxNkRE RDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2Mkc2aS1nR2NKZVRYYTQ2 ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FlbGFRV3ZNN3YyRzZpLWdHY0plVFhhNDZkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzY3Ni9DRDM4QUIxNkRERDkxMUU4QUY0NTFGMEFDNEY5QUUwMi9xZWxhUVd2TTd2 Mkc2aS1nR2NKZVRYYTQ2ZGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAzkd9+b+FWgmZ1sdOyY6zH6J5Umt+g8klhM8GmOqNm5dAFKdHuvBR lPn03S1w4JFGPhOn1t925hyvtCD4H08I41o/Z04A+Y3x8d3/FvNlcVSy9ccdojlc 72pZGP+4inYiT5m0P7pm57BQ7WkAy7yCvCVNe+d4Xdjbwu70gejbl4fOpKZagFgu 9jwPHDd1aQQqHmx6jxAh6EKVsvGqooaSG3HJ8y9BUImy7aVOeP8rxaZJepSkgbN3 6rmlEFwwiapTcoDSQwh/eemH2P2aKIQ+gY/TAnSMIayZIXFNKdAt0p/Ez3iZSpHN H2fkBhoNSH7bJGjYM+7NnEaT77lJO9WB -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:03 2025 by rpki-client