$ rpki-client -vvf rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft File: QstM8CH28_wMgcT98cl9dCEAMXs.mft (raw, json) Hash identifier: 7D2tlZa3a37u1lBn/Ezok5ze06JeQp/S8I6cX/CenRE= Subject key identifier: 1E:A3:29:7D:B5:63:D0:0E:B5:E1:76:DB:43:C7:CC:99:0B:3A:89:77 Authority key identifier: 42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B Certificate issuer: /CN=A9113B73/serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Certificate serial: 081E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft Manifest number: 0813 Signing time: Sun 26 Jul 2026 21:53:10 +0000 Manifest this update: Sun 26 Jul 2026 21:53:10 +0000 Manifest next update: Sun 02 Aug 2026 21:53:10 +0000 Files and hashes: 1: QstM8CH28_wMgcT98cl9dCEAMXs.crl (hash: fKLppKWIW4obiLtgDKg6uFQJe/1fapD7uu/NhyvfPsc=) 2: 038C732E874611EB83B41D39C4F9AE02.roa (hash: j8BYrRTXBbaeTTqgpqoP0f1iBbPMGpxA0WeG0MfgZmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:53:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2078 (0x81e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113B73, serialNumber=42CB4CF021F6F3FC0C81C4FDF1C97D742100317B Validity Not Before: Jul 26 21:53:10 2026 GMT Not After : Aug 2 21:53:10 2026 GMT Subject: CN=6a6681c6-91b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:b1:f5:5c:94:2f:86:1e:12:b3:00:77:ea: f7:6f:a4:e3:4d:1b:d5:9d:af:c5:3f:ef:3f:12:c2: b9:07:75:fb:1f:7e:5e:30:7d:b8:23:b6:d9:77:12: 73:b9:fe:f5:fa:84:8e:86:a4:ed:bf:a6:4e:99:0c: e5:29:43:95:8f:f9:18:63:8d:3a:55:7e:53:61:1c: e1:5b:f4:bf:a1:8d:fe:d5:46:3c:24:55:4d:05:0d: 5a:49:49:d1:0e:97:39:f9:0d:13:db:57:6a:48:6d: 9b:3c:9f:13:08:10:4a:a6:40:5c:8f:75:3b:4f:bf: 96:fc:76:c3:4c:97:2c:aa:e2:4a:f3:ee:65:2e:9b: 65:19:a0:52:4e:da:27:f2:24:17:02:2d:3b:5b:77: d5:28:55:fe:c3:e0:e0:a3:76:fc:23:cc:0b:aa:ce: 48:24:33:95:ec:7a:a0:73:97:cc:cb:98:d4:64:5f: 5d:86:a2:3c:cf:3d:dc:8e:b8:22:6b:b7:64:31:ab: 22:4c:e1:c4:ad:88:5a:c4:01:1c:bf:c3:4f:b6:d6: 98:cb:97:bd:25:73:2d:60:78:aa:23:52:32:2e:95: 45:38:40:3d:a1:d3:55:d4:b2:d4:5f:fe:c1:c8:15: ba:d6:13:88:cc:a7:1a:4b:0d:fd:38:f6:5d:f7:1a: 0f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A3:29:7D:B5:63:D0:0E:B5:E1:76:DB:43:C7:CC:99:0B:3A:89:77 X509v3 Authority Key Identifier: keyid:42:CB:4C:F0:21:F6:F3:FC:0C:81:C4:FD:F1:C9:7D:74:21:00:31:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QstM8CH28_wMgcT98cl9dCEAMXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113B73/BA6359822FE411EB8DB41B25C4F9AE02/QstM8CH28_wMgcT98cl9dCEAMXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ee:b9:8b:7f:a2:b6:7b:73:d4:9b:56:38:de:b2:2e:d1:d3: 72:11:72:73:b2:d3:da:e9:a6:63:34:b5:6e:aa:50:49:71:dc: 93:e1:88:89:a9:67:49:57:1e:54:62:6b:3b:df:2d:51:a7:5e: bc:d5:4d:c6:ec:1e:c8:6e:fe:12:d0:b6:9d:1b:c8:16:c1:ee: ee:81:43:02:22:41:63:df:b5:c4:a2:c5:3c:f0:c7:34:a5:77: 41:34:14:42:6c:a0:c6:a1:cd:6f:0c:6c:4b:35:8e:c3:38:e5: 54:2e:ab:13:30:19:00:35:7f:f3:f2:5f:89:e3:23:c7:6f:c6: 74:6b:39:f0:a2:d4:1e:54:4b:57:43:2b:67:89:dd:12:81:91: 3a:63:95:d8:dd:dc:2d:a1:2d:64:64:14:dc:9c:d7:fd:8b:da: da:b6:d9:16:8f:89:c1:f7:8b:76:3c:d7:bc:4b:32:6d:23:30: d2:55:33:b9:52:f4:24:47:ca:4b:6a:65:ee:c7:1f:05:77:8a: 96:d7:42:37:29:17:2d:b0:86:0c:79:77:4c:a9:47:1e:4a:ba: 18:20:28:26:77:e5:88:8b:e3:8a:98:0e:65:cf:be:1f:81:bb: 10:56:91:fb:60:ee:11:90:b6:9f:24:d8:ff:b8:3a:cb:bf:77: d5:ff:11:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTNCNzMxMTAvBgNVBAUTKDQyQ0I0Q0YwMjFGNkYzRkMwQzgxQzRGREYxQzk3RDc0 MjEwMDMxN0IwHhcNMjYwNzI2MjE1MzEwWhcNMjYwODAyMjE1MzEwWjAYMRYwFAYD VQQDEw02YTY2ODFjNi05MWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyux9VyUL4YeErMAd+r3b6TjTRvVna/FP+8/EsK5B3X7H35eMH24I7bZdxJz uf71+oSOhqTtv6ZOmQzlKUOVj/kYY406VX5TYRzhW/S/oY3+1UY8JFVNBQ1aSUnR Dpc5+Q0T21dqSG2bPJ8TCBBKpkBcj3U7T7+W/HbDTJcsquJK8+5lLptlGaBSTton 8iQXAi07W3fVKFX+w+Dgo3b8I8wLqs5IJDOV7Hqgc5fMy5jUZF9dhqI8zz3cjrgi a7dkMasiTOHErYhaxAEcv8NPttaYy5e9JXMtYHiqI1IyLpVFOEA9odNV1LLUX/7B yBW61hOIzKcaSw39OPZd9xoPLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6jKX21 Y9AOteF220PHzJkLOol3MB8GA1UdIwQYMBaAFELLTPAh9vP8DIHE/fHJfXQhADF7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0I3My9CQTYzNTk4MjJG RTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhfd01nY1Q5OGNsOWRDRUFN WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FzdE04Q0gyOF93TWdjVDk4Y2w5ZENFQU1Ycy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx M0I3My9CQTYzNTk4MjJGRTQxMUVCOERCNDFCMjVDNEY5QUUwMi9Rc3RNOENIMjhf d01nY1Q5OGNsOWRDRUFNWHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm+65i3+itntz1JtWON6yLtHTchFyc7LT2ummYzS1bqpQSXHck+GIialnSVce VGJrO98tUadevNVNxuweyG7+EtC2nRvIFsHu7oFDAiJBY9+1xKLFPPDHNKV3QTQU QmygxqHNbwxsSzWOwzjlVC6rEzAZADV/8/JfieMjx2/GdGs58KLUHlRLV0MrZ4nd EoGROmOV2N3cLaEtZGQU3JzX/Yva2rbZFo+JwfeLdjzXvEsybSMw0lUzuVL0JEfK S2pl7scfBXeKltdCNykXLbCGDHl3TKlHHkq6GCAoJnfliIvjipgOZc++H4G7EFaR +2DuEZC2nyTY/7g6y7931f8R/g== -----END CERTIFICATE-----Generated at Tue Jul 28 21:53:13 2026 by rpki-client