$ rpki-client -vvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft File: KQX7MhK9YWRvt69jPqGiV7w6Pew.mft (raw, json) Hash identifier: 3NE6RbCG1e24LXzwi1LIQhqDFNnxDFEbVLocYelVCbM= Subject key identifier: 30:AD:CA:7B:8E:CE:A7:91:99:2F:3A:93:4C:46:24:D6:45:8A:C8:A9 Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC Certificate issuer: /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Certificate serial: 3571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft Manifest number: 3568 Signing time: Tue 28 Jul 2026 14:46:24 +0000 Manifest this update: Tue 28 Jul 2026 14:46:23 +0000 Manifest next update: Tue 04 Aug 2026 14:46:23 +0000 Files and hashes: 1: KQX7MhK9YWRvt69jPqGiV7w6Pew.crl (hash: jCMzaJfXY0N7CxqTL89y7aXIy2r0a4q28xOiK+gDUO8=) 2: 4AF78A4AFEC611EF86B4765BC4F9AE02.roa (hash: DaUDfRkisbFjBhwxGgOMj8rF42Ao1F9Plt9FEElpL3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156971, serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Validity Not Before: Jul 28 14:46:23 2026 GMT Not After : Aug 4 14:46:23 2026 GMT Subject: CN=6a68c0c0-0865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:c2:73:df:fd:07:d5:0c:fd:07:6b:d1:2d: f0:a4:87:1a:6d:cf:60:3b:40:5d:f4:27:f0:58:f8: 62:ef:cf:8f:bb:bb:b1:6f:72:9a:bc:7c:47:19:cf: 69:11:56:ec:2e:71:02:24:e6:83:e6:c6:b4:98:ce: b4:4b:32:42:90:7e:49:d3:25:22:fd:98:bf:36:bd: 89:6c:1c:71:26:1e:3d:9e:59:2c:70:bb:2a:de:5a: 87:94:18:86:2d:9d:f5:ad:cd:47:44:88:42:40:c7: a8:7c:63:60:91:30:05:ab:97:d0:a7:a4:5f:98:e4: 56:7a:18:19:06:83:06:65:12:21:6d:ca:2e:11:9d: 54:d6:c6:98:22:c2:b8:fc:37:1e:d3:8d:5e:fe:04: 2e:48:9e:d7:88:77:a5:bf:b6:af:58:32:23:4f:bd: eb:8a:cc:ff:5f:37:1c:8d:23:c4:30:03:f3:e9:56: 58:84:ce:99:3d:3a:2c:fe:ea:ce:44:ea:dc:5d:08: 5c:60:cb:36:ca:c2:8c:8a:64:75:07:8a:8f:c6:8a: cf:60:5a:aa:81:fe:2e:3b:3e:08:81:29:c7:96:b0: 1a:ef:08:f6:f0:91:05:3f:6e:a4:27:a7:0c:62:f7: 5f:68:c6:ec:8d:b8:e4:e5:c0:fe:66:b5:b1:24:71: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AD:CA:7B:8E:CE:A7:91:99:2F:3A:93:4C:46:24:D6:45:8A:C8:A9 X509v3 Authority Key Identifier: keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:89:0e:ac:1c:5a:30:0c:14:68:b6:a2:6c:36:fe:ab:34:f4: 2d:ad:09:83:25:0d:b2:54:4d:b4:3a:0c:f9:c5:cb:20:a8:a5: 5f:f0:d4:4d:26:4f:ea:4f:8f:04:95:dd:8c:7d:cd:cf:79:e4: eb:ce:d1:d5:87:2f:f1:d5:c0:f6:53:db:98:d1:a3:c3:51:46: 05:13:2b:f8:32:5f:b5:ea:c3:d4:73:19:75:aa:44:9e:1f:8e: 82:d2:18:5f:5a:06:db:f1:7b:b3:d6:09:12:be:91:f2:60:1c: cc:9e:a8:f4:3e:ce:4c:b8:05:db:b7:b9:99:bc:bf:76:ff:c9: 38:db:4d:f9:c2:bd:e8:fc:05:5d:fd:22:f7:9c:82:e1:c9:3e: 51:d3:3a:2b:ad:71:e5:34:61:9c:90:1e:5b:ae:8f:6c:81:34: 2d:b3:92:ab:34:8a:4f:1d:46:8d:61:79:17:2f:15:be:d2:10: 5c:f6:38:20:a0:46:f7:2d:30:3b:4d:6f:16:2c:f8:fc:58:61: 52:be:74:40:6c:1d:86:51:c7:b8:23:f1:3c:fc:2b:ce:76:f4: e5:90:f7:b4:30:d2:db:0e:de:38:78:5a:38:c5:24:43:dc:50: 0d:9a:7b:6d:2d:d8:a9:09:cb:89:0b:7d:f5:af:90:0a:96:92: 5c:56:43:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5NzExMTAvBgNVBAUTKDI5MDVGQjMyMTJCRDYxNjQ2RkI3QUY2MzNFQTFBMjU3 QkMzQTNERUMwHhcNMjYwNzI4MTQ0NjIzWhcNMjYwODA0MTQ0NjIzWjAYMRYwFAYD VQQDEw02YTY4YzBjMC0wODY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvb3Cc9/9B9UM/Qdr0S3wpIcabc9gO0Bd9CfwWPhi78+Pu7uxb3KavHxHGc9p EVbsLnECJOaD5sa0mM60SzJCkH5J0yUi/Zi/Nr2JbBxxJh49nlkscLsq3lqHlBiG LZ31rc1HRIhCQMeofGNgkTAFq5fQp6RfmORWehgZBoMGZRIhbcouEZ1U1saYIsK4 /Dce041e/gQuSJ7XiHelv7avWDIjT73risz/XzccjSPEMAPz6VZYhM6ZPTos/urO ROrcXQhcYMs2ysKMimR1B4qPxorPYFqqgf4uOz4IgSnHlrAa7wj28JEFP26kJ6cM YvdfaMbsjbjk5cD+ZrWxJHHBhwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCtynuO zqeRmS86k0xGJNZFisipMB8GA1UdIwQYMBaAFCkF+zISvWFkb7evYz6hole8Oj3s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njk3MS80OEMyMjE4NjFE OTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlXUnZ0NjlqUHFHaVY3dzZQ ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRWDdNaEs5WVdSdnQ2OWpQcUdpVjd3NlBldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njk3MS80OEMyMjE4NjFEOTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlX UnZ0NjlqUHFHaVY3dzZQZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArIkOrBxaMAwUaLaibDb+qzT0La0JgyUNslRNtDoM+cXLIKilX/DUTSZP6k+P BJXdjH3Nz3nk687R1Ycv8dXA9lPbmNGjw1FGBRMr+DJfterD1HMZdapEnh+OgtIY X1oG2/F7s9YJEr6R8mAczJ6o9D7OTLgF27e5mby/dv/JONtN+cK96PwFXf0i95yC 4ck+UdM6K61x5TRhnJAeW66PbIE0LbOSqzSKTx1GjWF5Fy8VvtIQXPY4IKBG9y0w O01vFiz4/FhhUr50QGwdhlHHuCPxPPwrznb05ZD3tDDS2w7eOHhaOMUkQ9xQDZp7 bS3YqQnLiQt99a+QCpaSXFZDHQ== -----END CERTIFICATE-----Generated at Wed Jul 29 08:18:27 2026 by rpki-client