$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft File: PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json) Hash identifier: 8QTHLk5dftbXYoL9LBHjOezKDRLFTHse3bLPXBkO1u4= Subject key identifier: 17:FC:78:95:93:EA:A2:85:82:78:36:A5:D4:69:B0:3B:F5:CF:AB:BC Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E Certificate issuer: /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Certificate serial: 3561 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft Manifest number: 3561 Signing time: Tue 28 Jul 2026 14:42:40 +0000 Manifest this update: Tue 28 Jul 2026 14:42:39 +0000 Manifest next update: Tue 04 Aug 2026 14:42:39 +0000 Files and hashes: 1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: pC6OXaoY0ebOYo1Mj9BlNg1efXtexo80fxcZ7jnyKa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13665 (0x3561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E Validity Not Before: Jul 28 14:42:39 2026 GMT Not After : Aug 4 14:42:39 2026 GMT Subject: CN=6a68bfe0-1da0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:af:5c:d5:9c:e5:87:65:bc:fb:3c:12:aa:21: 23:e7:49:f5:82:1e:c8:b4:8c:69:aa:0c:b3:ff:b7: a7:96:17:ee:b8:80:c8:68:fe:7b:52:10:2d:a1:e4: a9:92:3c:90:57:67:45:78:c3:90:13:35:0b:49:d7: c4:a6:a8:e8:76:e5:9f:bd:04:b2:32:99:0e:33:2e: b7:c0:79:d6:f2:7f:fe:be:70:8d:0e:ec:74:31:0e: 0f:d2:7c:7d:11:ed:1c:52:af:c8:4a:43:97:2b:1f: 0d:06:01:8c:3f:7e:17:34:8d:19:4f:77:69:b1:46: fc:9d:93:38:55:ec:36:5b:1f:ff:8d:91:8d:04:e9: 8d:c2:04:cc:15:5a:19:3c:ac:7b:b4:04:12:8a:47: ac:16:53:01:ef:df:f4:50:6f:b7:11:ef:9b:57:ae: 00:c0:ce:8f:d5:b2:dc:14:43:20:53:12:bc:ab:c3: ad:ec:ef:67:15:17:1e:ec:c8:36:53:9d:c6:03:b3: 38:41:6f:63:bf:d2:f3:e6:6c:d9:28:e3:2a:4d:74: 3a:e9:2f:13:63:99:39:66:ab:7d:bb:11:5f:ec:47: f0:3f:4d:74:60:76:b5:cd:b1:52:0d:55:56:b6:3a: a5:d2:36:07:95:70:bc:d5:ff:19:44:d1:10:d0:1e: cd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FC:78:95:93:EA:A2:85:82:78:36:A5:D4:69:B0:3B:F5:CF:AB:BC X509v3 Authority Key Identifier: keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:23:7f:0b:ec:e5:af:ce:2c:b2:9e:76:c8:82:7a:fb:f6:54: c4:8a:ed:c2:1a:9c:29:a6:08:2c:a3:ed:9f:c1:60:95:d9:25: b6:ae:96:2e:71:44:d3:c1:9f:1f:8d:14:e8:3a:b7:79:54:68: d5:cb:8e:08:c6:a4:aa:86:d1:57:60:e9:53:a7:f4:f5:ce:4e: 71:bd:b9:f6:25:58:d0:5b:ba:9e:ba:e5:46:01:5e:e0:dd:19: bb:e3:8a:51:e7:26:0d:0b:2f:cf:e1:13:e2:f9:22:e1:17:46: f7:31:14:3f:c8:f1:91:3e:b6:50:05:d2:ad:f4:87:14:0f:6e: f2:99:9e:2e:cc:4c:18:ba:05:1a:0e:9e:ae:f7:b1:7f:7c:e3: ab:f0:ce:26:12:4c:e5:06:0d:a5:f2:b0:78:cd:0a:55:e4:95: 64:5d:fd:11:79:97:26:a3:78:e3:11:ca:52:3b:3b:d1:27:84: df:09:77:fb:84:ec:01:45:32:7c:b2:0a:eb:35:ad:e7:f2:93: 13:c9:2d:62:f0:ed:11:44:7f:f8:98:2e:c2:a5:db:10:64:ed: 2d:89:2f:3e:47:f2:ab:65:41:47:6f:21:ff:7f:5a:55:8f:09: ab:6e:fe:0f:b1:56:b9:ab:d2:1e:7d:cf:b1:79:48:05:26:35: 72:1c:9d:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBNzQxMTAvBgNVBAUTKDNFQTRENzAyOTBDQ0FBRkU1RENDOUM1REE1RjVCRTI3 RkVEREU0NUUwHhcNMjYwNzI4MTQ0MjM5WhcNMjYwODA0MTQ0MjM5WjAYMRYwFAYD VQQDEw02YTY4YmZlMC0xZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAma9c1Zzlh2W8+zwSqiEj50n1gh7ItIxpqgyz/7enlhfuuIDIaP57UhAtoeSp kjyQV2dFeMOQEzULSdfEpqjoduWfvQSyMpkOMy63wHnW8n/+vnCNDux0MQ4P0nx9 Ee0cUq/ISkOXKx8NBgGMP34XNI0ZT3dpsUb8nZM4Vew2Wx//jZGNBOmNwgTMFVoZ PKx7tAQSikesFlMB79/0UG+3Ee+bV64AwM6P1bLcFEMgUxK8q8Ot7O9nFRce7Mg2 U53GA7M4QW9jv9Lz5mzZKOMqTXQ66S8TY5k5Zqt9uxFf7EfwP010YHa1zbFSDVVW tjql0jYHlXC81f8ZRNEQ0B7NKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBf8eJWT 6qKFgng2pdRpsDv1z6u8MB8GA1UdIwQYMBaAFD6k1wKQzKr+XcycXaX1vif+3eRe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE3NC82MTAxQjVCNjFE OEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2NWR6SnhkcGZXLUpfN2Q1 RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BxVFhBcERNcXY1ZHpKeGRwZlctSl83ZDVGNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE3NC82MTAxQjVCNjFEOEYxMUUyODQ3QzVGRUUwOEIwMkNEMi9QcVRYQXBETXF2 NWR6SnhkcGZXLUpfN2Q1RjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfyN/C+zlr84ssp52yIJ6+/ZUxIrtwhqcKaYILKPtn8Fgldkltq6WLnFE08Gf H40U6Dq3eVRo1cuOCMakqobRV2DpU6f09c5Ocb259iVY0Fu6nrrlRgFe4N0Zu+OK UecmDQsvz+ET4vki4RdG9zEUP8jxkT62UAXSrfSHFA9u8pmeLsxMGLoFGg6ervex f3zjq/DOJhJM5QYNpfKweM0KVeSVZF39EXmXJqN44xHKUjs70SeE3wl3+4TsAUUy fLIK6zWt5/KTE8ktYvDtEUR/+JguwqXbEGTtLYkvPkfyq2VBR28h/39aVY8Jq27+ D7FWuavSHn3PsXlIBSY1chydCw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:07:15 2026 by rpki-client