$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft File: QOlPucJEwgzdpE57Dop6cZqXdA8.mft (raw, json) Hash identifier: Fhog3d0W0BOTidf0SsZNRj3iC4Kp8a/qXQ8e/nR+rS4= Subject key identifier: 7B:DC:2B:0F:FF:E2:D6:0F:EA:61:ED:90:DB:E4:44:A7:80:09:2D:CF Authority key identifier: 40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F Certificate issuer: /CN=A91BA2AB/serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Certificate serial: 024E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft Manifest number: 024A Signing time: Mon 27 Jul 2026 03:51:24 +0000 Manifest this update: Mon 27 Jul 2026 03:51:23 +0000 Manifest next update: Mon 03 Aug 2026 03:51:23 +0000 Files and hashes: 1: QOlPucJEwgzdpE57Dop6cZqXdA8.crl (hash: PqdVghtqhSd6Ugz3p4Q1bGyrZZPrJRPCsPrW5VTF7qc=) 2: 7A8706087CA011EF8491607DC4F9AE02.roa (hash: NEAODUTKeBNCWNog3dkgj4g38ALv10sbj1oaLjD2vUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 590 (0x24e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA2AB, serialNumber=40E94FB9C244C20CDDA44E7B0E8A7A719A97740F Validity Not Before: Jul 27 03:51:23 2026 GMT Not After : Aug 3 03:51:23 2026 GMT Subject: CN=6a66d5bc-0f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:ba:93:58:81:5a:b3:56:ab:c7:32:61:10: ec:19:95:04:20:e3:35:3d:54:ed:79:9f:fd:97:27: 1b:12:47:de:18:b8:25:6a:15:70:5e:97:45:a0:11: 1a:11:51:a5:b0:57:fe:83:9b:ad:fd:c2:85:f5:12: 41:f7:62:6e:01:d6:2f:5f:87:6c:f8:c8:5b:55:a2: 07:71:66:76:d2:4c:85:82:7e:b3:b7:91:93:02:52: 3e:52:8e:0e:b3:2a:f7:76:24:d3:af:f3:8c:68:cb: 62:12:c0:86:17:6d:bc:ab:cd:42:b7:3a:ad:22:c6: 79:9e:3f:8b:fc:ad:e6:cd:aa:1e:9a:0d:c5:48:0d: 5b:4f:11:50:04:b9:ab:a9:d3:f1:98:4b:8d:46:50: 3f:36:b7:25:79:72:ec:65:f6:54:2f:b4:96:da:9b: 5f:41:98:96:02:88:f7:2f:f4:68:6e:f1:52:11:23: 59:0b:11:75:cd:88:78:24:f8:27:9b:16:ff:84:bc: 41:6d:fb:4e:8f:42:dc:6d:54:f6:f9:68:d5:c5:de: 18:ff:8a:fa:e3:2a:4d:50:7b:5b:e3:a2:1b:23:3b: ea:b5:5d:dd:c0:70:b9:86:16:3b:a9:c3:c1:da:95: 58:64:9d:db:89:77:3f:5a:e5:16:83:2d:b0:e5:72: 24:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:DC:2B:0F:FF:E2:D6:0F:EA:61:ED:90:DB:E4:44:A7:80:09:2D:CF X509v3 Authority Key Identifier: keyid:40:E9:4F:B9:C2:44:C2:0C:DD:A4:4E:7B:0E:8A:7A:71:9A:97:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOlPucJEwgzdpE57Dop6cZqXdA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA2AB/111E55E0097E11EEAE7F351FC4F9AE02/QOlPucJEwgzdpE57Dop6cZqXdA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:6b:bf:8c:f4:a4:45:9b:ac:74:a8:a0:1c:1a:0a:da:1a:c9: 40:fe:30:bf:f5:aa:38:33:5e:02:25:d4:62:70:46:18:a9:85: 41:98:4e:54:bd:4b:f9:bb:4c:f4:00:9e:52:d4:f2:1c:d8:d9: 6e:ed:34:db:1e:13:7b:8d:19:bd:04:73:e6:c9:c0:9e:8d:c0: 1b:75:e5:f8:5d:26:a1:2d:9b:74:3c:09:1b:09:56:78:3c:a8: 59:78:46:92:64:12:3f:cf:87:43:96:cb:bf:2e:1f:6e:e2:2e: 64:96:33:d2:0c:8a:63:90:f8:dc:b0:60:f7:37:02:f3:f5:33: 1b:f1:4d:2b:36:47:cf:61:d4:6e:d0:89:58:fe:61:7b:66:e4: 3b:32:42:74:d4:2d:fd:a9:b0:4e:af:7b:f1:45:02:43:cf:bf: 52:af:93:31:15:2b:b5:08:b9:d5:5c:cf:a3:43:d3:02:4e:0d: 75:c4:20:a1:bc:91:e7:ff:be:6f:ae:61:6c:23:98:83:61:2c: b3:63:53:81:9c:24:10:b9:f1:ae:6b:56:ec:03:cf:8f:9c:5c: 23:f6:f4:6a:d1:cf:83:c2:23:ca:8b:d3:06:35:e4:94:0b:30: 1b:5d:50:68:b9:2e:81:51:ab:b6:65:ab:5c:cf:31:2d:3b:16: c1:97:15:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkEyQUIxMTAvBgNVBAUTKDQwRTk0RkI5QzI0NEMyMENEREE0NEU3QjBFOEE3QTcx OUE5Nzc0MEYwHhcNMjYwNzI3MDM1MTIzWhcNMjYwODAzMDM1MTIzWjAYMRYwFAYD VQQDEw02YTY2ZDViYy0wZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuAG6k1iBWrNWq8cyYRDsGZUEIOM1PVTteZ/9lycbEkfeGLglahVwXpdFoBEa EVGlsFf+g5ut/cKF9RJB92JuAdYvX4ds+MhbVaIHcWZ20kyFgn6zt5GTAlI+Uo4O syr3diTTr/OMaMtiEsCGF228q81CtzqtIsZ5nj+L/K3mzaoemg3FSA1bTxFQBLmr qdPxmEuNRlA/NrcleXLsZfZUL7SW2ptfQZiWAoj3L/RobvFSESNZCxF1zYh4JPgn mxb/hLxBbftOj0LcbVT2+WjVxd4Y/4r64ypNUHtb46IbIzvqtV3dwHC5hhY7qcPB 2pVYZJ3biXc/WuUWgy2w5XIkFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvcKw// 4tYP6mHtkNvkRKeACS3PMB8GA1UdIwQYMBaAFEDpT7nCRMIM3aROew6KenGal3QP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTJBQi8xMTFFNTVFMDA5 N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdnemRwRTU3RG9wNmNacVhk QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FPbFB1Y0pFd2d6ZHBFNTdEb3A2Y1pxWGRBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTJBQi8xMTFFNTVFMDA5N0UxMUVFQUU3RjM1MUZDNEY5QUUwMi9RT2xQdWNKRXdn emRwRTU3RG9wNmNacVhkQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYmu/jPSkRZusdKigHBoK2hrJQP4wv/WqODNeAiXUYnBGGKmFQZhOVL1L+btM 9ACeUtTyHNjZbu002x4Te40ZvQRz5snAno3AG3Xl+F0moS2bdDwJGwlWeDyoWXhG kmQSP8+HQ5bLvy4fbuIuZJYz0gyKY5D43LBg9zcC8/UzG/FNKzZHz2HUbtCJWP5h e2bkOzJCdNQt/amwTq978UUCQ8+/Uq+TMRUrtQi51VzPo0PTAk4NdcQgobyR5/++ b65hbCOYg2Ess2NTgZwkELnxrmtW7APPj5xcI/b0atHPg8IjyovTBjXklAswG11Q aLkugVGrtmWrXM8xLTsWwZcVzA== -----END CERTIFICATE-----Generated at Tue Jul 28 22:18:10 2026 by rpki-client