$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft File: Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft (raw, json) Hash identifier: f7o2YhVTrJj3y9ldeB0ubw0Ne/c5Y7s+XdjBESHGJGw= Subject key identifier: 10:EE:D0:00:AC:41:5A:89:61:45:C2:55:C6:27:06:2D:DE:05:B7:17 Authority key identifier: 42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 Certificate issuer: /CN=A91BE1BC/serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Certificate serial: 1117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft Manifest number: 10F3 Signing time: Tue 28 Jul 2026 17:24:12 +0000 Manifest this update: Tue 28 Jul 2026 17:24:11 +0000 Manifest next update: Tue 04 Aug 2026 17:24:11 +0000 Files and hashes: 1: Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl (hash: 6bMro4sgDA8pUWd+Cdp/6r46L/g1Ca90OFAds4/jbwE=) 2: 8B7BDC02708811ED95A9DC75C4F9AE02.roa (hash: 4xjOHA2a4uxswPhEHWIZ5kUb1RGsi99QGiMmvVEx05A=) 3: 8C2FEEE0708811ED95A9DC75C4F9AE02.roa (hash: 1zVW9OK/rYgrfqL/Kah7ClFS1DlkC9pX1ORA7B+nV6E=) 4: 23E61408678A11F08A94B35AC4F9AE02.roa (hash: hKyxzq+6NvE6xqXSiWJ91EzUH8fvtkfjv6xhpZcoKsw=) 5: 58FDD2EA10C211EA977E7378C4F9AE02.roa (hash: 6nMr9po5FUO/6NYfd0esqHnOLHyHERnqiMq2SWSxTpQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4375 (0x1117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE1BC, serialNumber=429E9BDDA296620003CEC5EFABB823D303FE4F71 Validity Not Before: Jul 28 17:24:11 2026 GMT Not After : Aug 4 17:24:11 2026 GMT Subject: CN=6a68e5bc-dfe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:69:7d:fe:b7:77:39:9f:5d:6e:1e:8a:b9: b3:fb:98:0b:4a:42:09:af:ff:61:ee:25:5b:d4:dc: 39:a1:d0:73:28:33:4e:37:db:9a:d7:c5:87:2e:0b: 11:23:ce:da:82:e0:20:2e:6a:8f:20:68:7a:c9:f9: 54:39:14:a0:b6:f9:f0:7f:b4:bf:a0:83:36:d8:dd: 8f:9d:8b:3c:54:98:f1:c4:69:52:04:b3:dd:52:a8: fb:64:e6:7d:bb:4a:9a:10:96:47:cc:e5:e5:3b:a1: 00:c7:f8:0c:dc:37:a0:b8:43:fd:c5:50:c3:56:37: c8:98:09:e5:a8:57:9d:48:b3:12:49:4b:dd:f6:79: 0e:ed:d0:7c:88:f0:5c:04:f2:37:78:6e:6a:77:59: dc:5f:29:a9:30:27:98:55:3b:c6:f4:27:11:ab:b9: f6:ff:1b:8c:a1:66:6a:5f:af:9d:7f:7e:ee:a8:cf: 09:10:1a:de:a9:36:d3:75:86:70:bd:e4:49:c7:47: db:af:98:34:2d:5b:3a:56:fa:b3:b9:c2:80:c9:48: 81:ac:a2:22:71:ac:42:96:c8:49:f1:41:db:02:bc: f0:eb:0c:86:bb:60:1a:b9:60:42:8e:38:72:d2:d8: a2:5b:e2:39:83:55:6f:57:6c:2c:11:15:95:84:88: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EE:D0:00:AC:41:5A:89:61:45:C2:55:C6:27:06:2D:DE:05:B7:17 X509v3 Authority Key Identifier: keyid:42:9E:9B:DD:A2:96:62:00:03:CE:C5:EF:AB:B8:23:D3:03:FE:4F:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qp6b3aKWYgADzsXvq7gj0wP-T3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE1BC/896C6C4846CE11E992850A3CC4F9AE02/Qp6b3aKWYgADzsXvq7gj0wP-T3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:04:a5:ff:91:f1:c8:a6:3b:1c:61:f2:21:6c:b4:6b:9f:3f: 1f:0a:8a:12:9f:a0:b2:89:9b:68:2d:4c:9a:8c:07:f0:d1:3b: 5c:2f:42:20:a7:09:22:4b:84:dd:6a:e7:29:3d:04:19:55:89: 17:35:e5:e7:df:b4:e2:98:c0:a9:1e:1f:43:fc:53:ac:9d:32: c3:a6:2f:40:71:e5:89:57:2e:78:c8:6f:d5:87:07:c3:50:c0: 15:fd:ef:46:62:6e:da:2b:a0:a8:7c:64:01:33:59:eb:5e:33: e8:6c:0d:a7:fe:95:ab:50:2f:f0:64:4c:ef:a7:d9:43:05:72: bb:5b:d5:e9:f4:8d:03:eb:77:de:35:78:19:f3:15:80:af:35: 18:79:6d:bc:b3:16:58:98:66:74:b9:f9:04:ee:37:c8:6f:0a: 78:e4:ff:50:79:6a:3c:09:34:cb:0f:dd:51:2c:e1:18:77:2c: d4:23:46:0e:42:3e:19:db:0f:39:3c:b1:0b:3e:e0:e6:19:5c: d7:be:67:c2:fc:71:93:f2:a7:5e:83:28:74:dc:d4:fd:bd:5a: 72:94:51:ce:90:b7:c2:5f:81:06:8a:96:7f:a2:95:46:f2:a1: b5:1e:ff:1d:ce:a0:29:60:c7:81:34:ea:d7:c2:41:58:6c:fd: 73:05:d0:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICERcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxQkMxMTAvBgNVBAUTKDQyOUU5QkREQTI5NjYyMDAwM0NFQzVFRkFCQjgyM0Qz MDNGRTRGNzEwHhcNMjYwNzI4MTcyNDExWhcNMjYwODA0MTcyNDExWjAYMRYwFAYD VQQDEw02YTY4ZTViYy1kZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6hpff63dzmfXW4eirmz+5gLSkIJr/9h7iVb1Nw5odBzKDNON9ua18WHLgsR I87aguAgLmqPIGh6yflUORSgtvnwf7S/oIM22N2PnYs8VJjxxGlSBLPdUqj7ZOZ9 u0qaEJZHzOXlO6EAx/gM3DeguEP9xVDDVjfImAnlqFedSLMSSUvd9nkO7dB8iPBc BPI3eG5qd1ncXympMCeYVTvG9CcRq7n2/xuMoWZqX6+df37uqM8JEBreqTbTdYZw veRJx0fbr5g0LVs6VvqzucKAyUiBrKIicaxClshJ8UHbArzw6wyGu2AauWBCjjhy 0tiiW+I5g1VvV2wsERWVhIhqmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDu0ACs QVqJYUXCVcYnBi3eBbcXMB8GA1UdIwQYMBaAFEKem92ilmIAA87F76u4I9MD/k9x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTFCQy84OTZDNkM0ODQ2 Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1lnQUR6c1h2cTdnajB3UC1U M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FwNmIzYUtXWWdBRHpzWHZxN2dqMHdQLVQzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTFCQy84OTZDNkM0ODQ2Q0UxMUU5OTI4NTBBM0NDNEY5QUUwMi9RcDZiM2FLV1ln QUR6c1h2cTdnajB3UC1UM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlgSl/5HxyKY7HGHyIWy0a58/HwqKEp+gsombaC1MmowH8NE7XC9CIKcJIkuE 3WrnKT0EGVWJFzXl59+04pjAqR4fQ/xTrJ0yw6YvQHHliVcueMhv1YcHw1DAFf3v RmJu2iugqHxkATNZ614z6GwNp/6Vq1Av8GRM76fZQwVyu1vV6fSNA+t33jV4GfMV gK81GHltvLMWWJhmdLn5BO43yG8KeOT/UHlqPAk0yw/dUSzhGHcs1CNGDkI+GdsP OTyxCz7g5hlc175nwvxxk/KnXoModNzU/b1acpRRzpC3wl+BBoqWf6KVRvKhtR7/ Hc6gKWDHgTTq18JBWGz9cwXQIw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:56:49 2026 by rpki-client