$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft File: QELCSQ19r-wzIDFu1ap04L7Kqak.mft (raw, json) Hash identifier: zPBFTLm05ONPRu6aGV40241+xOKZodaownbMcKXH1U4= Subject key identifier: 1C:45:C0:EF:C9:B3:42:B3:9F:A2:E7:27:EF:D0:CD:BD:7F:BE:39:22 Authority key identifier: 40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 Certificate issuer: /CN=A91A7169/serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft Manifest number: 0127 Signing time: Tue 05 Aug 2025 05:35:41 +0000 Manifest this update: Tue 05 Aug 2025 05:35:41 +0000 Manifest next update: Tue 12 Aug 2025 05:35:41 +0000 Files and hashes: 1: QELCSQ19r-wzIDFu1ap04L7Kqak.crl (hash: A1tETwducBUegYDUKKxUn7kkiiAT5T/dvKcBQB94QgQ=) 2: FCF99042301011EFBC350682C4F9AE02.roa (hash: L2/9JjFiWgQt59AFuV+uoqbPdz+ScN9QlotCi7wxs3k=) 3: 3B8DEBA06FD511F0BF33C829C4F9AE02.roa (hash: TD3x6cqMZ5LdB5sZi2QZSzPZxBxaRneEmC2qFVxnzxU=) 4: 72E97B3A1BDB11F0B77B1344C4F9AE02.roa (hash: dLZr6fxQD9+vNX/nMzjBW+2uiS4zZgIOchhbHeELI7w=) 5: 3D937A30EBB211EEA93D9B14C4F9AE02.roa (hash: JSKm415YB8eOJLzvxbfdTcDB2ReV3b5+7ihxYSCGy2A=) 6: 3C0376CC6FD511F0BF33C829C4F9AE02.roa (hash: tcVwqZZLgzM/JYa8wH8nV+ejGoZFhH0k2MAzqkTeLmo=) 7: 3E0BA21CEBB211EEA93D9B14C4F9AE02.roa (hash: VzDNl+e9c187NG+xNBhGjgSyuKcXiIbT9dvqTK6Jcdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7169, serialNumber=4042C2490D7DAFEC3320316ED5AA74E0BECAA9A9 Validity Not Before: Aug 5 05:35:41 2025 GMT Not After : Aug 12 05:35:41 2025 GMT Subject: CN=6891982d-0f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ee:13:2d:70:57:b3:d3:51:c1:c6:3c:af:c7: 3b:71:5c:8a:e0:4d:e1:1a:d1:04:c0:be:b6:fe:49: f8:00:06:52:c4:35:f1:2f:50:4c:ee:5a:39:75:36: 7c:94:fe:a9:6b:bc:93:90:f1:50:35:5f:9d:97:c9: 0b:c1:6f:80:2f:80:b0:5b:f2:3d:d0:5a:1a:82:90: f5:48:b3:69:a8:d9:8f:a4:45:cd:84:3d:95:04:bf: 9f:53:0e:96:b6:20:33:0c:10:fb:0d:63:59:ce:0b: fb:23:79:d3:a2:ce:df:bf:00:3f:68:8b:b9:b5:67: e9:f8:0f:7b:5c:e2:7f:e5:aa:a9:60:26:79:2d:1e: cd:b5:fd:30:24:66:5d:50:5c:46:2f:b8:dd:7a:f9: 28:6d:b1:db:e9:c4:a4:de:9b:8c:cc:11:22:fb:ac: 0b:c2:52:ab:48:9e:a9:b7:77:b2:51:0e:71:bd:26: 53:b4:cc:e5:70:90:c7:6e:93:48:2a:9a:8e:9c:03: 40:44:61:52:b3:7e:f4:cc:4c:9e:2f:af:6f:11:e3: 33:7b:1f:c3:e4:73:f1:0d:47:6f:eb:19:ed:94:22: bf:f3:35:69:60:fd:da:3a:70:00:e1:ec:b4:d7:75: 5a:aa:d2:93:43:49:6f:1f:31:ad:b5:cf:19:e4:ba: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:45:C0:EF:C9:B3:42:B3:9F:A2:E7:27:EF:D0:CD:BD:7F:BE:39:22 X509v3 Authority Key Identifier: keyid:40:42:C2:49:0D:7D:AF:EC:33:20:31:6E:D5:AA:74:E0:BE:CA:A9:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QELCSQ19r-wzIDFu1ap04L7Kqak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6233DD3EEBAE11EE8A0ED964C4F9AE02/QELCSQ19r-wzIDFu1ap04L7Kqak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:d8:f9:75:63:b5:15:e8:85:f2:b2:cf:8a:78:52:d7:a6:16: cd:0d:86:7c:35:02:45:34:5a:12:19:ff:b7:42:34:89:53:5d: 77:ff:ce:18:f4:18:2a:63:20:d4:b0:26:bc:c5:8c:a7:61:ba: 15:fd:a3:48:7e:02:70:28:cc:21:56:96:fa:7b:a4:61:62:90: 11:31:52:40:1e:0c:4e:4a:f5:16:7a:ef:16:27:b2:56:83:74: d6:5f:d2:27:b2:c2:ee:81:3d:7a:c6:9e:47:f9:65:33:e9:a6: a7:14:8a:55:0a:e5:86:e5:c4:c0:62:8d:1c:1f:bd:16:5d:5e: 43:91:19:e7:19:43:fc:3a:08:b3:38:3b:2e:ea:25:5b:11:de: 07:53:91:fb:3c:a4:6e:82:ca:cf:61:e5:f3:50:b9:c6:51:fa: 36:84:84:47:71:e6:ce:39:f7:22:94:0f:0e:c8:45:00:63:ea: a1:2c:86:46:e5:80:d6:84:1c:58:27:e2:e9:d1:6f:da:ec:5a: 33:e0:e6:b7:c4:80:f7:3e:30:3e:98:38:a8:d1:ed:4f:c7:f7: d6:45:7a:4a:d0:89:95:71:36:eb:d9:34:e1:cc:41:2b:b1:dc: c5:ba:28:8f:f5:c2:57:a4:53:48:8c:d2:90:94:c3:40:66:c3: 48:29:e6:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNjkxMTAvBgNVBAUTKDQwNDJDMjQ5MEQ3REFGRUMzMzIwMzE2RUQ1QUE3NEUw QkVDQUE5QTkwHhcNMjUwODA1MDUzNTQxWhcNMjUwODEyMDUzNTQxWjAYMRYwFAYD VQQDEw02ODkxOTgyZC0wZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApu4TLXBXs9NRwcY8r8c7cVyK4E3hGtEEwL62/kn4AAZSxDXxL1BM7lo5dTZ8 lP6pa7yTkPFQNV+dl8kLwW+AL4CwW/I90FoagpD1SLNpqNmPpEXNhD2VBL+fUw6W tiAzDBD7DWNZzgv7I3nTos7fvwA/aIu5tWfp+A97XOJ/5aqpYCZ5LR7Ntf0wJGZd UFxGL7jdevkobbHb6cSk3puMzBEi+6wLwlKrSJ6pt3eyUQ5xvSZTtMzlcJDHbpNI KpqOnANARGFSs370zEyeL69vEeMzex/D5HPxDUdv6xntlCK/8zVpYP3aOnAA4ey0 13VaqtKTQ0lvHzGttc8Z5LqFHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxFwO/J s0Kzn6LnJ+/Qzb1/vjkiMB8GA1UdIwQYMBaAFEBCwkkNfa/sMyAxbtWqdOC+yqmp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE2OS82MjMzREQzRUVC QUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXItd3pJREZ1MWFwMDRMN0tx YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FFTENTUTE5ci13eklERnUxYXAwNEw3S3Fhay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE2OS82MjMzREQzRUVCQUUxMUVFOEEwRUQ5NjRDNEY5QUUwMi9RRUxDU1ExOXIt d3pJREZ1MWFwMDRMN0txYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQ2Pl1Y7UV6IXyss+KeFLXphbNDYZ8NQJFNFoSGf+3QjSJU113/84Y 9BgqYyDUsCa8xYynYboV/aNIfgJwKMwhVpb6e6RhYpARMVJAHgxOSvUWeu8WJ7JW g3TWX9InssLugT16xp5H+WUz6aanFIpVCuWG5cTAYo0cH70WXV5DkRnnGUP8Ogiz ODsu6iVbEd4HU5H7PKRugsrPYeXzULnGUfo2hIRHcebOOfcilA8OyEUAY+qhLIZG 5YDWhBxYJ+Lp0W/a7Foz4Oa3xID3PjA+mDio0e1Px/fWRXpK0ImVcTbr2TThzEEr sdzFuiiP9cJXpFNIjNKQlMNAZsNIKeY0 -----END CERTIFICATE-----Generated at Wed Aug 6 00:47:50 2025 by rpki-client