$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft File: -Q4hD858Z6Lysy3hTusFoEsNEOE.mft (raw, json) Hash identifier: JJ19ot2LbSeixSoxYMgdzv6xaHCQ7/L4S3K2FuR5LmA= Subject key identifier: 10:B2:AE:F8:91:1D:A2:6E:5D:91:E1:5E:EB:F4:A9:82:35:26:F8:6C Authority key identifier: F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1 Certificate issuer: /CN=A91A7369/serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft Manifest number: 0228 Signing time: Wed 29 Jul 2026 03:51:58 +0000 Manifest this update: Wed 29 Jul 2026 03:51:58 +0000 Manifest next update: Wed 05 Aug 2026 03:51:58 +0000 Files and hashes: 1: -Q4hD858Z6Lysy3hTusFoEsNEOE.crl (hash: PdeanEt1q5Y/pF+DKDiv0p576GHjxGAtXwWkwOUvw34=) 2: 10A3333E3BAC11F1B91923E195833773.roa (hash: qv+5geqvZuNiYk7aYI5fXtMxpLW2mBJm6HRn38gC5D4=) 3: re2-D6m1rwVPcLxJQ-D1bJPeQAY.asa (hash: twkoRDc3iJHscp7wypa+HU9CAGZBoclPq14+LY8ZVQM=) 4: A99E5658488011EE8113A766C4F9AE02.roa (hash: PrGqSAcgp1HdiIpn0vqqOgThVUF4Ys8AxQ1iGGW7VmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 03:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7369, serialNumber=F90E210FCE7C67A2F2B32DE14EEB05A04B0D10E1 Validity Not Before: Jul 29 03:51:58 2026 GMT Not After : Aug 5 03:51:58 2026 GMT Subject: CN=6a6978de-75cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:4b:23:84:2b:02:06:3f:2c:20:60:fe:3f: 32:ad:1a:e9:7b:84:55:ad:13:b0:cd:e2:be:b8:de: 8a:21:5c:e3:96:40:3d:d8:21:ec:d7:5b:59:a2:c6: 0c:4c:4a:7d:af:77:4e:d2:e2:77:b3:9d:78:4e:db: d3:fc:cf:e2:5f:54:2b:56:82:29:b1:54:08:91:21: 3f:82:41:f6:b7:3b:b4:3c:4b:bc:8d:b1:26:02:1b: 83:6f:60:11:ba:86:a2:20:ff:26:40:3d:e7:4d:59: 08:dd:ba:19:4d:e2:9e:59:20:bc:01:76:16:dd:99: c5:79:dd:0e:8f:e2:f8:9b:bd:70:58:e1:e0:79:1a: 3f:0e:16:64:e8:fa:73:ea:4e:36:0a:88:06:39:1e: 31:e6:c0:b3:5c:01:2d:97:17:9e:53:e2:97:ea:eb: 68:0f:83:9b:5e:f6:50:bc:4e:63:c1:fd:09:17:cd: 4f:32:3d:4d:a6:d2:f2:9f:9e:e7:95:f5:9d:49:bb: 99:74:18:54:f0:55:c0:b7:7d:2d:cd:e0:ef:a6:2f: 89:36:e4:ec:b0:7a:ff:9a:5b:79:60:8d:82:15:21: 14:61:2d:dc:11:91:b5:af:e7:07:4b:e0:5c:a2:0a: 02:9d:ec:3a:38:d0:ab:18:60:ae:3c:74:37:0d:e1: a2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B2:AE:F8:91:1D:A2:6E:5D:91:E1:5E:EB:F4:A9:82:35:26:F8:6C X509v3 Authority Key Identifier: keyid:F9:0E:21:0F:CE:7C:67:A2:F2:B3:2D:E1:4E:EB:05:A0:4B:0D:10:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Q4hD858Z6Lysy3hTusFoEsNEOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7369/B1D61942487F11EEA80A024CC4F9AE02/-Q4hD858Z6Lysy3hTusFoEsNEOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:4d:d9:aa:59:63:39:8f:a4:6b:59:75:2d:2f:4e:c9:14:20: b1:ca:8e:1f:79:bc:04:cd:4b:c5:6d:ec:af:db:c6:54:ff:d9: c5:7f:98:cf:1d:75:c7:48:5c:1f:ce:6e:45:cb:8b:6f:e6:8b: ae:45:f2:a8:5c:d7:2d:0f:75:30:db:33:b9:ca:43:7a:c9:11: 30:d9:a0:56:af:64:d3:9b:9a:d9:c9:09:f7:35:04:f4:ce:de: 48:3a:d3:a0:df:db:38:ad:20:e9:03:32:2f:8d:c8:a3:ae:89: 26:6b:0e:c4:e5:87:af:6b:dc:79:d3:ee:64:d3:91:06:bb:df: b3:75:74:69:7a:82:6e:10:f2:d4:a4:fa:c9:d5:5f:82:51:2e: 75:b3:eb:15:38:a0:14:b3:dd:79:21:fe:8f:23:2a:e4:f3:89: b8:8f:cb:bf:82:82:de:66:f1:73:f1:ad:8f:64:09:84:22:91: e3:53:6f:99:fa:ee:2e:59:a3:11:31:c1:73:92:a4:7c:17:83: a7:18:58:b2:4b:c8:df:b2:5a:1f:6c:41:36:90:24:42:a9:63: bb:e3:7b:44:25:a9:aa:7e:e8:47:eb:16:72:17:18:dc:0d:81: a3:68:11:a7:55:39:e8:71:c9:ae:42:f9:dc:91:5a:cc:10:94: d3:6a:b9:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTczNjkxMTAvBgNVBAUTKEY5MEUyMTBGQ0U3QzY3QTJGMkIzMkRFMTRFRUIwNUEw NEIwRDEwRTEwHhcNMjYwNzI5MDM1MTU4WhcNMjYwODA1MDM1MTU4WjAYMRYwFAYD VQQDEw02YTY5NzhkZS03NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7NLI4QrAgY/LCBg/j8yrRrpe4RVrROwzeK+uN6KIVzjlkA92CHs11tZosYM TEp9r3dO0uJ3s514TtvT/M/iX1QrVoIpsVQIkSE/gkH2tzu0PEu8jbEmAhuDb2AR uoaiIP8mQD3nTVkI3boZTeKeWSC8AXYW3ZnFed0Oj+L4m71wWOHgeRo/DhZk6Ppz 6k42CogGOR4x5sCzXAEtlxeeU+KX6utoD4ObXvZQvE5jwf0JF81PMj1NptLyn57n lfWdSbuZdBhU8FXAt30tzeDvpi+JNuTssHr/mlt5YI2CFSEUYS3cEZG1r+cHS+Bc ogoCnew6ONCrGGCuPHQ3DeGigQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCyrviR HaJuXZHhXuv0qYI1JvhsMB8GA1UdIwQYMBaAFPkOIQ/OfGei8rMt4U7rBaBLDRDh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzM2OS9CMUQ2MTk0MjQ4 N0YxMUVFQTgwQTAyNENDNEY5QUUwMi8tUTRoRDg1OFo2THlzeTNoVHVzRm9Fc05F T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1RNGhEODU4WjZMeXN5M2hUdXNGb0VzTkVPRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzM2OS9CMUQ2MTk0MjQ4N0YxMUVFQTgwQTAyNENDNEY5QUUwMi8tUTRoRDg1OFo2 THlzeTNoVHVzRm9Fc05FT0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmU3ZqlljOY+ka1l1LS9OyRQgscqOH3m8BM1LxW3sr9vGVP/ZxX+Yzx11x0hc H85uRcuLb+aLrkXyqFzXLQ91MNszucpDeskRMNmgVq9k05ua2ckJ9zUE9M7eSDrT oN/bOK0g6QMyL43Io66JJmsOxOWHr2vcedPuZNORBrvfs3V0aXqCbhDy1KT6ydVf glEudbPrFTigFLPdeSH+jyMq5POJuI/Lv4KC3mbxc/Gtj2QJhCKR41NvmfruLlmj ETHBc5KkfBeDpxhYskvI37JaH2xBNpAkQqlju+N7RCWpqn7oR+sWchcY3A2Bo2gR p1U56HHJrkL53JFazBCU02q5ng== -----END CERTIFICATE-----Generated at Wed Jul 29 14:19:28 2026 by rpki-client