$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft File: QhgvX3GliYTOiFmuYKTKynP-g2E.mft (raw, json) Hash identifier: vedfHK4KXZ5DYzP7x0huOqWaYXS7JMn918tBgKRv2Fk= Subject key identifier: 46:F1:C5:EB:F8:BB:4B:4A:65:13:7A:9F:64:5E:56:51:43:76:88:DB Authority key identifier: 42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 Certificate issuer: /CN=A916EF5E/serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Certificate serial: 10AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft Manifest number: 27A2 Signing time: Tue 28 Jul 2026 16:43:01 +0000 Manifest this update: Tue 28 Jul 2026 16:43:01 +0000 Manifest next update: Tue 04 Aug 2026 16:43:01 +0000 Files and hashes: 1: QhgvX3GliYTOiFmuYKTKynP-g2E.crl (hash: jdnKN7tjVL8iOsIj1iDURell4hC7ajeMVpdMCFyHDi0=) 2: 258F8662BBDF11ED8CE89144C4F9AE02.roa (hash: 9GKBxAqwPTAO+hWMiV5oav3VDxVKz2FMAbeDwl8q3ik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4271 (0x10af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=42182F5F71A58984CE8859AE60A4CACA73FE8361 Validity Not Before: Jul 28 16:43:01 2026 GMT Not After : Aug 4 16:43:01 2026 GMT Subject: CN=6a68dc15-e7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:54:99:67:53:0a:1c:23:2d:9b:da:c9:f4:9f: a2:5f:db:a7:32:84:c2:96:48:b8:f5:56:d4:42:c5: b0:e3:bc:bc:b8:45:2b:d3:06:64:f7:b6:77:e2:d3: 66:50:4c:31:32:34:a3:ae:fe:9b:b7:67:d4:fa:91: bb:e0:d8:8f:b3:88:6a:eb:8b:9e:55:e1:7a:b4:b6: 41:51:e5:2c:66:9a:30:55:5d:7c:cd:d2:85:8e:95: 1f:d3:85:e1:21:1f:ed:04:fe:75:b5:5d:64:ef:5b: 3f:ab:53:a4:6b:03:5c:bc:9e:4c:d0:21:4f:98:11: f0:77:18:86:67:f6:c6:03:b1:03:2e:94:40:83:83: a1:56:de:f9:b4:4d:e2:dc:68:73:a8:66:b5:65:c6: 59:9f:e5:92:de:0f:b8:35:cb:6f:61:fd:3e:f5:4d: 1e:1d:e2:b9:ec:51:23:f9:d3:10:21:21:83:86:7b: 79:d6:9e:a4:b1:95:0b:54:da:30:15:35:22:8f:88: 8e:0a:d9:62:d4:eb:6f:bb:87:f5:9d:30:16:07:5c: b0:75:3c:97:14:2c:a1:83:a8:4e:15:ce:0f:17:2a: e0:e0:27:3d:79:ed:c1:56:90:59:34:6c:ea:f7:be: e8:8c:5c:ba:15:52:9e:32:42:0b:84:e0:68:ca:9f: 49:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F1:C5:EB:F8:BB:4B:4A:65:13:7A:9F:64:5E:56:51:43:76:88:DB X509v3 Authority Key Identifier: keyid:42:18:2F:5F:71:A5:89:84:CE:88:59:AE:60:A4:CA:CA:73:FE:83:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QhgvX3GliYTOiFmuYKTKynP-g2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/QhgvX3GliYTOiFmuYKTKynP-g2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:6d:df:28:9f:8d:81:a8:10:22:57:e0:09:9b:2b:ca:7d:62: 01:5a:6f:e9:06:27:af:dc:df:d5:84:3c:72:3b:e3:fb:88:e4: 6a:b6:1e:5e:f6:0d:a2:d0:f7:fb:fa:9d:35:7c:ce:71:f2:46: 19:84:3f:f0:23:a4:85:ed:dd:8d:29:2a:35:16:b7:cb:a6:fb: 17:0c:21:d4:c9:e5:ce:c2:93:cf:13:24:c5:1c:e4:34:d0:7a: 8b:6f:7c:e2:02:e2:95:7a:ab:d7:7f:2a:ea:92:c3:cc:0c:b6: 5a:71:eb:40:a4:6e:8c:88:c2:86:3f:b7:a8:49:e3:b4:4e:da: eb:72:1d:f0:a4:ac:54:e0:3e:35:d8:50:8e:bf:2d:46:a2:f3: 4b:76:ad:36:0d:2c:f3:b3:1d:95:d1:de:74:f6:7c:51:25:29: db:ae:1a:84:9c:29:ba:5a:fb:c0:16:9e:1d:27:e2:91:d0:21: eb:dc:d4:6a:c1:c1:0e:e4:d8:4d:11:1a:3b:f9:ae:a9:20:d7: 77:e2:bb:86:a7:14:1d:30:93:20:44:3d:e3:f0:18:c1:1f:d5: 30:a6:3e:7d:0a:0c:db:fb:00:6f:8a:c8:48:06:f4:32:20:fe: d5:24:07:3e:d9:04:a5:6d:fa:43:54:89:57:c7:21:c9:f2:e7: e9:21:2b:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDQyMTgyRjVGNzFBNTg5ODRDRTg4NTlBRTYwQTRDQUNB NzNGRTgzNjEwHhcNMjYwNzI4MTY0MzAxWhcNMjYwODA0MTY0MzAxWjAYMRYwFAYD VQQDEw02YTY4ZGMxNS1lN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FSZZ1MKHCMtm9rJ9J+iX9unMoTClki49VbUQsWw47y8uEUr0wZk97Z34tNm UEwxMjSjrv6bt2fU+pG74NiPs4hq64ueVeF6tLZBUeUsZpowVV18zdKFjpUf04Xh IR/tBP51tV1k71s/q1OkawNcvJ5M0CFPmBHwdxiGZ/bGA7EDLpRAg4OhVt75tE3i 3GhzqGa1ZcZZn+WS3g+4NctvYf0+9U0eHeK57FEj+dMQISGDhnt51p6ksZULVNow FTUij4iOCtli1Otvu4f1nTAWB1ywdTyXFCyhg6hOFc4PFyrg4Cc9ee3BVpBZNGzq 977ojFy6FVKeMkILhOBoyp9JKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEbxxev4 u0tKZRN6n2ReVlFDdojbMB8GA1UdIwQYMBaAFEIYL19xpYmEzohZrmCkyspz/oNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZVE9pRm11WUtUS3luUC1n MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FoZ3ZYM0dsaVlUT2lGbXVZS1RLeW5QLWcyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9RaGd2WDNHbGlZ VE9pRm11WUtUS3luUC1nMkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWG3fKJ+NgagQIlfgCZsryn1iAVpv6QYnr9zf1YQ8cjvj+4jkarYeXvYNotD3 +/qdNXzOcfJGGYQ/8COkhe3djSkqNRa3y6b7Fwwh1MnlzsKTzxMkxRzkNNB6i298 4gLilXqr138q6pLDzAy2WnHrQKRujIjChj+3qEnjtE7a63Id8KSsVOA+NdhQjr8t RqLzS3atNg0s87MdldHedPZ8USUp264ahJwpulr7wBaeHSfikdAh69zUasHBDuTY TREaO/muqSDXd+K7hqcUHTCTIEQ94/AYwR/VMKY+fQoM2/sAb4rISAb0MiD+1SQH PtkEpW36Q1SJV8chyfLn6SErQw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:44:30 2026 by rpki-client