$ rpki-client -vvf rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft File: sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft (raw, json) Hash identifier: yBw7VAkWAIB/DtPWsxXzUWsjQkEYH05Imija051Ohss= Subject key identifier: 24:60:89:83:39:69:63:B8:6B:0F:53:E8:5F:2B:66:F4:D9:62:C0:42 Authority key identifier: B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 Certificate issuer: /CN=A917E7C7/serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft Manifest number: 01A1 Signing time: Tue 28 Jul 2026 06:40:54 +0000 Manifest this update: Tue 28 Jul 2026 06:40:54 +0000 Manifest next update: Tue 04 Aug 2026 06:40:54 +0000 Files and hashes: 1: sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl (hash: Lxfh/JfUNz13WRZW8725Qhs7jcjbATiilWPr8pI7XHQ=) 2: 031A090A5C2C11F0A1180E20C4F9AE02.roa (hash: EmlnlS4Z9CMI7PDZI/wf0AKGdImncjWzGhUb3m4XvQ0=) 3: o1Hnt3pYHdDl-L3mnK-sgg_Rcig.asa (hash: Zccc8+XJpnSnsaDg6uSKWCceWIp1ghS+5M+XYjTnkjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 06:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E7C7, serialNumber=B2AD50F3571BDA1EEC07CC48DA01D3F375458D24 Validity Not Before: Jul 28 06:40:54 2026 GMT Not After : Aug 4 06:40:54 2026 GMT Subject: CN=6a684ef6-30dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1c:66:84:5a:67:61:e7:1f:2c:47:c4:2a:2c: 97:57:34:99:34:d0:f5:3b:79:a4:3a:02:0f:c6:55: c6:3e:91:d8:61:20:f1:10:39:53:e3:24:f3:b4:e1: 28:68:d1:0d:a8:52:96:38:b5:9c:77:8c:5e:cd:21: 38:99:44:a3:32:8a:50:ba:f4:56:45:b0:df:51:4a: c1:70:d3:8e:d6:64:35:b9:48:31:17:0f:0d:ba:35: d9:24:27:5b:28:7d:16:03:5f:21:57:dc:26:98:5c: 83:d8:fc:a3:47:53:3b:27:66:c8:b3:cc:4a:c5:a0: 09:4a:eb:1f:d4:28:23:74:e9:3b:90:04:23:57:18: 4a:af:ab:61:a9:62:c4:14:ab:1a:6f:dc:90:ed:53: b0:24:81:0b:bb:fd:26:13:49:b6:58:14:dd:c5:ee: 40:7f:9a:44:83:20:c4:6d:2b:93:c4:dd:10:36:a4: 1b:06:e5:33:44:ad:c0:8f:89:ce:cc:e2:3d:d1:d9: 6f:3c:40:f9:bd:d5:9b:31:41:ff:77:5e:15:06:75: f7:2d:38:d1:8c:bd:8a:28:34:88:00:47:cc:e1:50: 41:d1:90:63:e2:c1:bb:60:2b:b5:da:53:d1:ac:b1: b5:9f:c5:1b:44:9c:7a:33:cf:bf:aa:11:06:40:43: 78:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:60:89:83:39:69:63:B8:6B:0F:53:E8:5F:2B:66:F4:D9:62:C0:42 X509v3 Authority Key Identifier: keyid:B2:AD:50:F3:57:1B:DA:1E:EC:07:CC:48:DA:01:D3:F3:75:45:8D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sq1Q81cb2h7sB8xI2gHT83VFjSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E7C7/1A59F78E16B311EF89CFE30EC4F9AE02/sq1Q81cb2h7sB8xI2gHT83VFjSQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f7:db:c8:0d:04:29:00:91:0c:51:c4:f6:4d:6e:ad:26:f8: 83:7d:42:88:78:de:8f:d9:84:62:b5:50:47:e1:f5:31:f3:7f: c2:df:66:51:42:d8:f3:73:0f:22:15:94:93:bf:83:ca:8e:10: 32:42:da:fc:a1:a8:3e:00:ea:3c:06:b9:b7:0c:4b:1f:25:7c: cf:65:76:82:c3:31:a9:0d:f4:9e:ef:8b:b6:20:6f:96:31:66: 76:07:e1:87:c3:05:29:1b:d4:a1:2a:20:1f:64:49:b2:4f:cc: 85:41:bd:7e:3c:7d:e9:4d:35:c7:2d:8e:d0:62:70:d4:3b:b1: 1d:d3:60:db:95:77:4e:87:13:a1:c9:c2:be:26:5e:b2:11:d5: 35:17:a9:fc:9e:cb:81:57:fe:3c:d6:22:85:6c:e2:94:41:5f: 90:16:4b:04:a4:b8:1b:bf:b8:2c:8a:e4:37:80:8b:81:f2:e7: 45:0f:d2:b4:4c:86:d5:19:28:c5:17:55:b7:52:b6:70:ee:8e: a0:b8:ff:c5:ce:96:68:44:a6:96:85:61:e1:2b:a2:67:f0:23: 82:3f:50:2f:17:c8:90:5a:c1:81:b5:2c:7d:16:62:e4:bf:38: 2d:e2:53:b2:cc:04:db:59:77:09:88:a0:d0:be:51:d3:43:77: 40:f9:73:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U3QzcxMTAvBgNVBAUTKEIyQUQ1MEYzNTcxQkRBMUVFQzA3Q0M0OERBMDFEM0Yz NzU0NThEMjQwHhcNMjYwNzI4MDY0MDU0WhcNMjYwODA0MDY0MDU0WjAYMRYwFAYD VQQDEw02YTY4NGVmNi0zMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RxmhFpnYecfLEfEKiyXVzSZNND1O3mkOgIPxlXGPpHYYSDxEDlT4yTztOEo aNENqFKWOLWcd4xezSE4mUSjMopQuvRWRbDfUUrBcNOO1mQ1uUgxFw8NujXZJCdb KH0WA18hV9wmmFyD2PyjR1M7J2bIs8xKxaAJSusf1CgjdOk7kAQjVxhKr6thqWLE FKsab9yQ7VOwJIELu/0mE0m2WBTdxe5Af5pEgyDEbSuTxN0QNqQbBuUzRK3Aj4nO zOI90dlvPED5vdWbMUH/d14VBnX3LTjRjL2KKDSIAEfM4VBB0ZBj4sG7YCu12lPR rLG1n8UbRJx6M8+/qhEGQEN4PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRgiYM5 aWO4aw9T6F8rZvTZYsBCMB8GA1UdIwQYMBaAFLKtUPNXG9oe7AfMSNoB0/N1RY0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTdDNy8xQTU5Rjc4RTE2 QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJoN3NCOHhJMmdIVDgzVkZq U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxMVE4MWNiMmg3c0I4eEkyZ0hUODNWRmpTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTdDNy8xQTU5Rjc4RTE2QjMxMUVGODlDRkUzMEVDNEY5QUUwMi9zcTFRODFjYjJo N3NCOHhJMmdIVDgzVkZqU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS/fbyA0EKQCRDFHE9k1urSb4g31CiHjej9mEYrVQR+H1MfN/wt9mUULY83MP IhWUk7+Dyo4QMkLa/KGoPgDqPAa5twxLHyV8z2V2gsMxqQ30nu+LtiBvljFmdgfh h8MFKRvUoSogH2RJsk/MhUG9fjx96U01xy2O0GJw1DuxHdNg25V3TocTocnCviZe shHVNRep/J7LgVf+PNYihWzilEFfkBZLBKS4G7+4LIrkN4CLgfLnRQ/StEyG1Rko xRdVt1K2cO6OoLj/xc6WaESmloVh4SuiZ/Ajgj9QLxfIkFrBgbUsfRZi5L84LeJT sswE21l3CYig0L5R00N3QPlz1Q== -----END CERTIFICATE-----Generated at Tue Jul 28 14:45:37 2026 by rpki-client