$ rpki-client -vvf rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft File: tQk3XiWpXStZwZWBw8Y1topJES0.mft (raw, json) Hash identifier: vTqp+pB7fEW4kKLWUxaH+UbAfFRaqhDAPeM8mTsj4Ts= Subject key identifier: 73:F4:8F:F9:2D:90:41:C0:F5:C7:EF:19:64:57:FE:95:4D:C8:0E:E6 Authority key identifier: B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D Certificate issuer: /CN=A917E754/serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D Certificate serial: 3572 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft Manifest number: 3568 Signing time: Tue 28 Jul 2026 15:22:46 +0000 Manifest this update: Tue 28 Jul 2026 15:22:46 +0000 Manifest next update: Tue 04 Aug 2026 15:22:46 +0000 Files and hashes: 1: tQk3XiWpXStZwZWBw8Y1topJES0.crl (hash: 4BuCXli1rL33Wqhcfx7MV1RJr4xNlNtlQOYg+H0dmaI=) 2: 2F79F386050511EA87CC7D42C4F9AE02.roa (hash: bvmOeL2YXx3nWwBQZ93HrV/AoxQKQL3Er6wwEPR+cds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:22:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13682 (0x3572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E754, serialNumber=B509375E25A95D2B59C19581C3C635B68A49112D Validity Not Before: Jul 28 15:22:46 2026 GMT Not After : Aug 4 15:22:46 2026 GMT Subject: CN=6a68c946-95fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cc:97:c4:f2:81:86:22:f4:29:20:90:6f:82: 65:62:b6:9a:18:fd:1f:19:65:da:22:b7:54:a4:cf: a4:5e:3e:41:8d:d7:38:73:72:2e:0e:e2:b5:bb:19: 66:ab:e8:ef:9d:fe:1c:78:0d:67:64:81:eb:0e:5b: 9c:36:70:91:e4:41:57:12:e3:56:2a:4e:14:8d:2e: ad:e4:ac:e5:0a:a7:be:eb:4b:b2:62:7f:2a:78:e6: d6:ee:ad:61:f0:8b:75:dc:94:e5:ea:82:ab:67:ae: bf:43:ca:45:20:00:48:f8:a5:a4:4b:07:ca:41:3a: 32:d8:b4:24:19:17:00:7e:92:ee:f4:2d:5d:91:94: e3:4d:51:3b:df:67:0d:76:35:ea:33:fe:74:52:1a: 68:09:c4:a4:60:f2:af:c7:73:dd:11:16:41:b5:05: 52:4e:16:3c:cd:8d:01:34:89:4f:fe:96:48:6d:c2: bb:63:41:90:09:98:eb:92:8b:54:18:00:53:3a:39: b4:b7:d1:27:23:df:e6:14:79:09:a3:bb:ef:18:a5: e6:93:a8:f5:2e:88:a8:83:af:60:8f:2b:a4:6b:b8: 6b:e7:92:ad:eb:c0:f4:44:4e:8b:30:00:83:e5:5c: 2f:d2:ce:70:c2:f8:70:0b:65:44:da:94:19:c9:ec: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F4:8F:F9:2D:90:41:C0:F5:C7:EF:19:64:57:FE:95:4D:C8:0E:E6 X509v3 Authority Key Identifier: keyid:B5:09:37:5E:25:A9:5D:2B:59:C1:95:81:C3:C6:35:B6:8A:49:11:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tQk3XiWpXStZwZWBw8Y1topJES0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E754/ACD1D7701DAB11E2BA2806AA08B02CD2/tQk3XiWpXStZwZWBw8Y1topJES0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e0:12:ef:55:b6:8e:ac:65:95:b4:16:d1:a4:89:4b:2b:56: 36:10:9d:2d:90:25:4b:44:9b:79:03:27:11:5a:1e:42:d6:74: 82:11:1e:c7:e4:36:a5:1d:8e:66:68:c5:98:00:28:13:8c:ce: 71:aa:80:90:62:89:9d:0e:46:53:06:f4:c2:35:81:91:a9:36: 28:ae:8d:fe:b1:c0:cc:fc:fa:dc:d0:db:26:e0:6d:2b:a3:b2: 2e:68:bf:a7:a9:75:88:30:a5:eb:45:fa:03:a3:9a:7f:56:1b: fd:a7:a8:58:0e:19:f7:00:52:42:3a:1a:66:80:c3:fc:80:e6: 2e:80:fe:f1:4b:0d:59:52:0e:38:56:33:e4:ca:89:cc:a1:e7: 19:62:5c:93:70:80:d2:72:b8:dc:62:47:97:85:f0:bf:ba:67: 15:5b:b6:5a:15:de:b7:0f:6f:9b:5b:25:4c:14:83:fc:09:ef: 19:4c:a7:8d:43:82:4d:9b:b4:bb:12:c6:61:f1:6e:4d:90:09: 07:19:76:8f:bb:29:22:c4:e4:d0:3b:8e:24:98:6f:ae:61:e2: 72:44:41:5c:2e:01:12:56:83:83:70:54:29:15:80:1d:d6:a1: 6a:d3:0b:fb:40:83:d4:5f:eb:d5:89:e7:61:03:0e:73:67:31: 94:8d:88:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3NTQxMTAvBgNVBAUTKEI1MDkzNzVFMjVBOTVEMkI1OUMxOTU4MUMzQzYzNUI2 OEE0OTExMkQwHhcNMjYwNzI4MTUyMjQ2WhcNMjYwODA0MTUyMjQ2WjAYMRYwFAYD VQQDEw02YTY4Yzk0Ni05NWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7cyXxPKBhiL0KSCQb4JlYraaGP0fGWXaIrdUpM+kXj5Bjdc4c3IuDuK1uxlm q+jvnf4ceA1nZIHrDlucNnCR5EFXEuNWKk4UjS6t5KzlCqe+60uyYn8qeObW7q1h 8It13JTl6oKrZ66/Q8pFIABI+KWkSwfKQToy2LQkGRcAfpLu9C1dkZTjTVE732cN djXqM/50UhpoCcSkYPKvx3PdERZBtQVSThY8zY0BNIlP/pZIbcK7Y0GQCZjrkotU GABTOjm0t9EnI9/mFHkJo7vvGKXmk6j1Loiog69gjyuka7hr55Kt68D0RE6LMACD 5Vwv0s5wwvhwC2VE2pQZyex66wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHP0j/kt kEHA9cfvGWRX/pVNyA7mMB8GA1UdIwQYMBaAFLUJN14lqV0rWcGVgcPGNbaKSREt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTc1NC9BQ0QxRDc3MDFE QUIxMUUyQkEyODA2QUEwOEIwMkNEMi90UWszWGlXcFhTdFp3WldCdzhZMXRvcEpF UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RRazNYaVdwWFN0WndaV0J3OFkxdG9wSkVTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTc1NC9BQ0QxRDc3MDFEQUIxMUUyQkEyODA2QUEwOEIwMkNEMi90UWszWGlXcFhT dFp3WldCdzhZMXRvcEpFUzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOOAS71W2jqxllbQW0aSJSytWNhCdLZAlS0SbeQMnEVoeQtZ0ghEex+Q2pR2O ZmjFmAAoE4zOcaqAkGKJnQ5GUwb0wjWBkak2KK6N/rHAzPz63NDbJuBtK6OyLmi/ p6l1iDCl60X6A6Oaf1Yb/aeoWA4Z9wBSQjoaZoDD/IDmLoD+8UsNWVIOOFYz5MqJ zKHnGWJck3CA0nK43GJHl4Xwv7pnFVu2WhXetw9vm1slTBSD/AnvGUynjUOCTZu0 uxLGYfFuTZAJBxl2j7spIsTk0DuOJJhvrmHickRBXC4BElaDg3BUKRWAHdahatML +0CD1F/r1YnnYQMOc2cxlI2Iaw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:28:44 2026 by rpki-client