$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: OQb+i0gwH1NKicav9ifmoB2UzRalEHfi+baI1R+S5gs= Subject key identifier: C6:7C:29:53:65:BE:03:C6:ED:17:38:33:6C:80:32:E3:DC:E4:52:3B Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: 0164 Signing time: Mon 27 Jul 2026 06:50:21 +0000 Manifest this update: Mon 27 Jul 2026 06:50:20 +0000 Manifest next update: Mon 03 Aug 2026 06:50:20 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: s8DAczVhN0Z3cFyGLP5k1Qoab1gyO0TyG/kWfDsfngE=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: /4+lF6tlUt2UR6b5tRfzTFnRtlIHVlDaWV39Y4Dm8cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Jul 27 06:50:20 2026 GMT Not After : Aug 3 06:50:20 2026 GMT Subject: CN=6a66ffad-483d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:af:4e:65:37:c9:a3:cd:4b:0d:76:e6:53:6f: f8:88:7c:7b:53:f2:b5:9a:b1:9e:0c:e8:db:c3:b6: c5:00:52:ac:7d:f8:dc:da:e0:53:1b:91:58:fa:96: cb:a3:7d:fc:21:3b:f8:93:cf:ba:e8:4c:01:9b:84: ca:25:da:7d:69:33:4a:b0:a4:4e:40:2b:45:9a:18: e3:b5:86:94:d1:92:07:e4:3b:5b:67:5e:2c:65:25: 60:fc:e2:d4:95:6a:4b:fa:20:79:56:98:42:33:1e: 8c:07:89:72:5e:d5:78:9b:e0:d7:92:cd:dc:a8:2a: 30:fa:a8:5e:91:0c:99:51:8c:25:5f:6e:81:bb:31: 31:6b:fc:a4:0a:0d:58:03:51:d1:02:52:b0:03:55: 5b:f5:29:06:b6:6b:5f:c1:b1:f1:eb:2d:da:2b:83: 41:4d:4a:85:cd:d1:fd:7e:70:05:6a:1a:91:21:8e: 8e:9d:3e:78:da:fd:71:19:83:51:38:fe:b0:a5:c8: 55:d0:67:62:06:bc:d0:f2:21:36:0e:aa:3f:5f:e6: b6:22:32:25:eb:8b:dc:c0:f4:79:dd:61:04:e6:01: 70:81:e2:ba:3d:04:a3:38:2c:5b:e4:e2:6f:85:c4: d8:d8:29:35:0f:ef:de:63:ba:19:6e:c2:2e:94:f9: f5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7C:29:53:65:BE:03:C6:ED:17:38:33:6C:80:32:E3:DC:E4:52:3B X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:db:92:cb:74:ac:55:ab:60:44:2a:fa:da:bf:7f:f6:01:3f: 7a:3b:be:3b:a1:cd:65:c2:59:17:3a:f7:52:81:2c:48:dc:32: f9:6c:bf:49:18:2e:ca:e9:60:4a:08:77:78:82:a0:c6:8a:9c: b5:6a:f1:17:16:fd:cf:b8:24:35:1c:d1:45:f7:18:e3:4e:8c: cc:78:5b:45:d0:7e:9f:4a:de:71:d2:9f:e1:60:81:51:35:70: e2:c7:dd:ad:8f:84:81:9c:37:d2:a5:37:29:d0:9d:fd:b3:08: d2:6d:88:4a:2e:f2:01:0d:4e:42:d9:43:80:7e:cf:7b:8b:e5: 48:33:93:5c:89:5a:cc:3a:ba:99:dd:38:1c:c7:a6:59:78:30: aa:55:6e:91:a7:1d:55:2a:68:48:dd:0b:c4:9c:34:da:b6:b9: d7:23:10:f2:30:3c:95:45:5b:96:87:cc:7e:69:78:17:72:0f: c8:08:23:e9:a3:c5:09:d8:97:cf:4a:ea:85:03:1a:19:a5:8d: 54:42:e7:29:02:f7:7b:8d:22:ac:49:c1:6e:65:c6:ed:30:da: 19:38:0b:af:1f:5f:6c:f5:08:76:5e:f3:74:a1:58:16:c2:45: 6d:b0:6d:e9:fa:7c:71:c2:c7:59:61:c8:f7:36:73:2e:bb:07: 78:d4:be:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjYwNzI3MDY1MDIwWhcNMjYwODAzMDY1MDIwWjAYMRYwFAYD VQQDEw02YTY2ZmZhZC00ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnK9OZTfJo81LDXbmU2/4iHx7U/K1mrGeDOjbw7bFAFKsffjc2uBTG5FY+pbL o338ITv4k8+66EwBm4TKJdp9aTNKsKROQCtFmhjjtYaU0ZIH5DtbZ14sZSVg/OLU lWpL+iB5VphCMx6MB4lyXtV4m+DXks3cqCow+qhekQyZUYwlX26BuzExa/ykCg1Y A1HRAlKwA1Vb9SkGtmtfwbHx6y3aK4NBTUqFzdH9fnAFahqRIY6OnT542v1xGYNR OP6wpchV0GdiBrzQ8iE2Dqo/X+a2IjIl64vcwPR53WEE5gFwgeK6PQSjOCxb5OJv hcTY2Ck1D+/eY7oZbsIulPn1CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMZ8KVNl vgPG7Rc4M2yAMuPc5FI7MB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeduSy3SsVatgRCr62r9/9gE/eju+O6HNZcJZFzr3UoEsSNwy+Wy/SRguyulg Sgh3eIKgxoqctWrxFxb9z7gkNRzRRfcY406MzHhbRdB+n0recdKf4WCBUTVw4sfd rY+EgZw30qU3KdCd/bMI0m2ISi7yAQ1OQtlDgH7Pe4vlSDOTXIlazDq6md04HMem WXgwqlVukacdVSpoSN0LxJw02ra51yMQ8jA8lUVblofMfml4F3IPyAgj6aPFCdiX z0rqhQMaGaWNVELnKQL3e40irEnBbmXG7TDaGTgLrx9fbPUIdl7zdKFYFsJFbbBt 6fp8ccLHWWHI9zZzLrsHeNS+NA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:56:40 2026 by rpki-client