$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft File: Qf4dQTWrLWdiPnYIM5hGitT6odw.mft (raw, json) Hash identifier: 3HFyGnvyU4NNhexnF9Ark9To9u5JHhAiepQQpvOszAI= Subject key identifier: D9:E7:F3:2A:5D:43:AC:65:BE:A1:7A:A4:86:BA:9B:AF:F6:40:50:04 Authority key identifier: 41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC Certificate issuer: /CN=A911B5D7/serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC Certificate serial: 1CEF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft Manifest number: 1CB0 Signing time: Tue 28 Jul 2026 16:17:28 +0000 Manifest this update: Tue 28 Jul 2026 16:17:27 +0000 Manifest next update: Tue 04 Aug 2026 16:17:27 +0000 Files and hashes: 1: Qf4dQTWrLWdiPnYIM5hGitT6odw.crl (hash: olR1n1nm8DcXo5VLp6AC0wgflJ2/w9lkO3COl7Tf9x8=) 2: E007C458C1F111F0BF3C4B61C4F9AE02.roa (hash: 5s6wPVYQGH5s3qyYU5XWxXqoobJzGy5t477auxbm+wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7407 (0x1cef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5D7, serialNumber=41FE1D4135AB2D67623E76083398468AD4FAA1DC Validity Not Before: Jul 28 16:17:27 2026 GMT Not After : Aug 4 16:17:27 2026 GMT Subject: CN=6a68d618-ff1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:46:f9:fc:0a:88:59:80:43:4d:63:8b:bc: cd:f8:f8:5f:8c:79:25:ba:0c:86:ec:a5:58:27:ff: fe:b1:11:49:5f:60:bd:5b:e3:3a:7c:49:35:c2:d9: 7a:5c:78:16:c4:22:0a:c0:e4:4c:ab:c3:69:bc:1d: bb:2e:0e:83:08:0b:56:39:6e:33:94:68:a3:21:6b: f0:89:52:a8:de:8f:1e:c4:2d:5c:8e:b4:5d:fa:08: 09:5e:d6:2f:50:d2:71:05:f3:20:8b:c0:79:00:2d: 94:ea:8d:bf:8e:97:2b:da:cc:c6:95:3c:47:d2:65: 27:f2:0e:4d:5c:ab:34:b9:ae:9f:13:b1:d2:7f:b8: ca:f5:49:d3:09:f0:e6:8d:23:4f:25:b5:4f:9e:da: 26:47:88:e3:8b:7c:43:90:df:1f:b3:6d:cb:ae:57: c8:4f:4e:3d:12:b5:f8:71:8c:56:0a:21:7d:67:83: 3c:3f:77:64:d7:a8:e9:c0:96:15:cc:20:4a:4a:24: 0e:0e:fb:2f:02:93:e1:a9:9f:c7:d6:ea:08:ca:9a: 7f:e1:7a:aa:01:37:0f:6c:00:81:f2:25:5b:3c:b9: f7:27:2d:b3:79:5a:cd:2f:ae:bc:e1:e5:79:fe:45: fb:8e:34:52:26:a5:77:0d:a9:ef:f4:d9:bf:92:15: 23:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E7:F3:2A:5D:43:AC:65:BE:A1:7A:A4:86:BA:9B:AF:F6:40:50:04 X509v3 Authority Key Identifier: keyid:41:FE:1D:41:35:AB:2D:67:62:3E:76:08:33:98:46:8A:D4:FA:A1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qf4dQTWrLWdiPnYIM5hGitT6odw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5D7/25872BBE03B411E7B811AA14C4F9AE02/Qf4dQTWrLWdiPnYIM5hGitT6odw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:14:68:de:90:4a:ee:40:f3:85:47:dd:a1:5b:86:a3:ed:9d: 15:80:45:e1:70:09:c6:74:2d:8b:31:ad:f4:24:c9:8b:29:ef: 1c:37:cb:6b:bf:7e:e4:55:ef:50:dd:b2:c1:7a:b0:e5:9f:f4: 64:de:76:9a:17:7b:b1:14:20:73:0a:7e:18:a5:da:d2:2e:6f: a9:c1:14:dc:9a:5a:ab:8d:d2:6a:32:f5:52:cd:18:3a:45:e9: 25:77:08:ad:fa:6d:0b:5f:45:21:97:26:f7:64:43:93:61:46: 7e:3d:21:5d:eb:8c:12:7e:57:8f:20:6d:ea:ba:1c:d0:56:8a: 5e:2c:c8:bc:b5:8e:cc:7a:44:d3:2c:ec:c1:56:28:5a:05:2a: 54:42:5d:40:50:87:db:45:fb:db:65:4d:bb:45:2f:37:a4:67: 6a:68:39:fc:f1:da:39:e2:14:28:99:30:97:b5:2a:ca:d4:d7: 7e:c4:1d:61:65:d6:b1:9c:4f:0f:98:c4:44:15:9b:d2:40:7d: bb:86:04:f4:b2:01:8d:77:9e:2f:cf:18:4e:0b:b5:30:69:e9: 1b:5f:76:3f:69:f1:d9:10:77:cd:5a:da:e0:47:09:5a:00:02: 8d:58:8a:72:19:7d:e2:97:0b:53:5b:a3:88:d0:4f:f3:82:6a: ef:89:94:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1RDcxMTAvBgNVBAUTKDQxRkUxRDQxMzVBQjJENjc2MjNFNzYwODMzOTg0NjhB RDRGQUExREMwHhcNMjYwNzI4MTYxNzI3WhcNMjYwODA0MTYxNzI3WjAYMRYwFAYD VQQDEw02YTY4ZDYxOC1mZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+JG+fwKiFmAQ01ji7zN+PhfjHklugyG7KVYJ//+sRFJX2C9W+M6fEk1wtl6 XHgWxCIKwORMq8NpvB27Lg6DCAtWOW4zlGijIWvwiVKo3o8exC1cjrRd+ggJXtYv UNJxBfMgi8B5AC2U6o2/jpcr2szGlTxH0mUn8g5NXKs0ua6fE7HSf7jK9UnTCfDm jSNPJbVPntomR4jji3xDkN8fs23LrlfIT049ErX4cYxWCiF9Z4M8P3dk16jpwJYV zCBKSiQODvsvApPhqZ/H1uoIypp/4XqqATcPbACB8iVbPLn3Jy2zeVrNL6684eV5 /kX7jjRSJqV3Danv9Nm/khUjIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnn8ypd Q6xlvqF6pIa6m6/2QFAEMB8GA1UdIwQYMBaAFEH+HUE1qy1nYj52CDOYRorU+qHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVENy8yNTg3MkJCRTAz QjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxXZGlQbllJTTVoR2l0VDZv ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FmNGRRVFdyTFdkaVBuWUlNNWhHaXRUNm9kdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVENy8yNTg3MkJCRTAzQjQxMUU3QjgxMUFBMTRDNEY5QUUwMi9RZjRkUVRXckxX ZGlQbllJTTVoR2l0VDZvZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMhRo3pBK7kDzhUfdoVuGo+2dFYBF4XAJxnQtizGt9CTJiynvHDfLa79+5FXv UN2ywXqw5Z/0ZN52mhd7sRQgcwp+GKXa0i5vqcEU3Jpaq43SajL1Us0YOkXpJXcI rfptC19FIZcm92RDk2FGfj0hXeuMEn5XjyBt6roc0FaKXizIvLWOzHpE0yzswVYo WgUqVEJdQFCH20X722VNu0UvN6Rnamg5/PHaOeIUKJkwl7UqytTXfsQdYWXWsZxP D5jERBWb0kB9u4YE9LIBjXeeL88YTgu1MGnpG192P2nx2RB3zVra4EcJWgACjViK chl94pcLU1ujiNBP84Jq74mUqQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:38:31 2026 by rpki-client