$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: na8qUVuX24yANzE9tuh72tj/aekrYhzOvzvhXoMZjdY= Subject key identifier: D7:D8:62:E8:E5:EE:88:98:CE:9C:86:AC:B3:1B:65:26:BD:15:1F:C3 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 044F Signing time: Wed 29 Jul 2026 00:58:06 +0000 Manifest this update: Wed 29 Jul 2026 00:58:06 +0000 Manifest next update: Wed 05 Aug 2026 00:58:06 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: Fu+DdgtVSCbVns3WoURwe5iwR0mJKaLzEyJi6FmHIgk=) 2: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: YHAl4wyL5lBLADe3tYGJfQq5g48eFSMbVbWuT+BMPaQ=) 3: 61138FD0708111F1AFA81DDF7CA30FBC.roa (hash: UXuyg07q384x+vqE80NFlYLxxP2h+t2gXIe3OeSv7hI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Jul 29 00:58:06 2026 GMT Not After : Aug 5 00:58:06 2026 GMT Subject: CN=6a69501e-5a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:99:7a:b1:f3:20:cc:be:99:c9:0e:1c:d2:e5: 3e:d3:6c:f9:c6:2d:ea:8f:8c:92:6d:65:77:d6:86: b5:3e:b7:1f:31:d9:44:9c:81:9d:6d:4a:a7:5f:22: ef:91:3b:ef:9c:b9:d3:e2:1b:6e:22:1c:6f:9b:6b: c4:1b:7b:94:4c:56:dc:8b:6c:12:e4:4c:16:27:4f: aa:10:4f:fa:66:67:56:13:0b:43:e4:f9:f6:d3:65: 44:ae:49:4e:23:b7:1b:17:29:82:17:12:7f:67:ec: 9d:89:2f:98:41:1e:35:44:65:f8:ee:58:ea:f1:13: f6:63:88:05:7c:57:ca:01:51:5d:36:d8:ee:a1:48: b7:66:c6:63:b6:dc:6d:c0:c1:f7:d5:7a:8b:3b:07: c9:2a:e9:f7:84:97:4e:55:ad:e2:8b:9c:17:9e:33: 97:2f:10:88:49:d8:bd:2a:a1:af:20:a6:90:48:98: 83:6e:35:13:f1:94:12:ff:65:ba:4a:73:4c:b2:58: a5:1d:87:42:73:2e:ec:9e:cd:90:85:f0:df:09:5c: e5:8c:ed:31:c1:1a:c2:51:df:09:a1:73:22:b9:bb: eb:18:bb:1f:5a:a5:02:d6:d6:4f:05:47:ed:50:83: b2:a5:b3:f9:ae:b1:b8:75:54:19:df:e2:15:db:f5: f3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D8:62:E8:E5:EE:88:98:CE:9C:86:AC:B3:1B:65:26:BD:15:1F:C3 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:87:72:4a:50:5d:e3:4f:d7:28:15:61:cd:0d:03:f7:fb:19: 4b:dd:2c:9d:57:ff:2a:c0:d7:53:08:f5:fa:18:0b:49:0e:08: 29:e4:ad:80:58:40:73:8b:e9:8b:95:8a:43:80:ee:60:09:b0: c4:69:98:8c:0a:64:79:af:b0:c3:58:27:ae:49:20:86:c2:c9: 3d:b2:d4:f7:d8:c7:37:3e:2d:fe:f2:4c:df:fe:39:ef:46:eb: e2:59:00:b3:5a:9c:41:0a:81:a1:04:eb:47:f5:03:c0:f3:4a: df:19:e7:d9:d6:bc:1b:cd:1b:22:9b:f0:a8:6e:74:c7:81:d4: 0e:b1:6e:4b:b9:75:52:99:ad:5f:21:3a:e8:3c:90:e3:39:2b: 18:8b:32:5f:43:d5:16:9e:be:31:03:86:db:cb:6a:1b:5e:27: ac:63:ed:79:d1:a2:49:a1:1d:2f:fc:03:7e:53:48:d8:2f:f6: 60:11:8b:68:33:c3:0f:0c:61:0c:08:e5:f8:25:33:e7:a6:79: f2:5b:e7:b8:65:85:5b:36:fd:f3:4d:31:7a:25:50:f9:82:6a: 9a:1e:e3:c3:9a:f2:3e:6b:6e:a2:c6:0f:ff:fb:3e:18:94:6f: 54:aa:b9:08:4a:a3:a6:de:1d:3b:e2:ab:9d:e6:b4:bf:76:17: a8:5e:11:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjYwNzI5MDA1ODA2WhcNMjYwODA1MDA1ODA2WjAYMRYwFAYD VQQDEw02YTY5NTAxZS01YThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9pl6sfMgzL6ZyQ4c0uU+02z5xi3qj4ySbWV31oa1PrcfMdlEnIGdbUqnXyLv kTvvnLnT4htuIhxvm2vEG3uUTFbci2wS5EwWJ0+qEE/6ZmdWEwtD5Pn202VErklO I7cbFymCFxJ/Z+ydiS+YQR41RGX47ljq8RP2Y4gFfFfKAVFdNtjuoUi3ZsZjttxt wMH31XqLOwfJKun3hJdOVa3ii5wXnjOXLxCISdi9KqGvIKaQSJiDbjUT8ZQS/2W6 SnNMslilHYdCcy7sns2QhfDfCVzljO0xwRrCUd8JoXMiubvrGLsfWqUC1tZPBUft UIOypbP5rrG4dVQZ3+IV2/XzDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNfYYujl 7oiYzpyGrLMbZSa9FR/DMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANYdySlBd40/XKBVhzQ0D9/sZS90snVf/KsDXUwj1+hgLSQ4IKeStgFhAc4vp i5WKQ4DuYAmwxGmYjApkea+ww1gnrkkghsLJPbLU99jHNz4t/vJM3/4570br4lkA s1qcQQqBoQTrR/UDwPNK3xnn2da8G80bIpvwqG50x4HUDrFuS7l1UpmtXyE66DyQ 4zkrGIsyX0PVFp6+MQOG28tqG14nrGPtedGiSaEdL/wDflNI2C/2YBGLaDPDDwxh DAjl+CUz56Z58lvnuGWFWzb9800xeiVQ+YJqmh7jw5ryPmtuosYP//s+GJRvVKq5 CEqjpt4dO+Krnea0v3YXqF4RCg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:50:54 2026 by rpki-client