$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: JBrjRcsJuWGFHcgCNTKya0I1Z7k//QS4GeAgqp41oig= Subject key identifier: C7:13:3C:85:E5:1B:49:C9:C2:E9:9F:DD:89:1B:BA:53:70:F3:DE:65 Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: E7 Signing time: Mon 27 Jul 2026 08:44:20 +0000 Manifest this update: Mon 27 Jul 2026 08:44:20 +0000 Manifest next update: Mon 03 Aug 2026 08:44:20 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: NFP8X89g4NZGW6W/TmRRDOYIWAtXevwW0RXvd/0A7KI=) 2: C3DCFE54EB2911F0BD7173483B6F56BC.roa (hash: hZQbMZ8wBZ3CYwiXTphoVD9Fsf34oefbQ7yrGVzjULw=) 3: 1FC17CE2EB2D11F0971959663D6F56BC.roa (hash: aI9DlzDvvLFMVVyO/coQSpjqyPYkqJnDOZuQHUXRHk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Jul 27 08:44:20 2026 GMT Not After : Aug 3 08:44:20 2026 GMT Subject: CN=6a671a64-3652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:2b:c8:0f:4d:f7:09:67:fe:b7:89:3b:6f: 37:39:a8:30:3b:71:53:58:37:7c:59:e1:f4:1f:21: 9f:57:53:a3:e1:4d:84:4b:d1:9f:ca:7f:86:b8:8b: 87:8a:82:f7:b4:7d:5d:91:81:e3:5f:82:4f:61:0a: 3a:c1:cf:00:46:73:99:0f:78:ba:d2:97:6b:59:ff: 8d:9f:7e:5c:4b:6a:24:31:f5:76:71:53:0d:91:0e: 89:74:bd:89:d3:b9:ac:f5:c0:40:fe:20:87:26:82: b7:22:88:d9:cf:a3:ba:8c:98:81:54:bf:ce:e9:1f: b9:89:97:a3:cf:7d:b8:c8:87:6d:e2:c4:7c:85:bd: a2:af:c8:39:55:35:b5:fc:16:f8:b4:fa:28:c9:4c: de:76:c6:06:bb:9f:21:2e:fc:9a:b8:ef:91:f0:f8: f2:a1:7e:b4:b8:a2:9a:e0:8c:f5:45:c5:f0:05:55: 8f:fc:0d:e4:cf:b5:59:cd:8c:69:97:3b:03:0c:85: 2d:93:43:c8:28:90:72:a7:50:c0:b0:c8:3f:3d:79: 9a:e4:19:ea:fe:4f:54:df:56:ed:58:8d:71:0e:fa: 91:4c:ab:be:42:40:91:e8:6f:e9:89:95:6b:46:c3: 34:0b:d9:7d:37:ba:57:0b:5a:0e:b7:1d:79:b8:e8: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:13:3C:85:E5:1B:49:C9:C2:E9:9F:DD:89:1B:BA:53:70:F3:DE:65 X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:d8:96:ad:e8:14:70:ea:60:ec:26:d3:bd:ee:99:19:e9:19: 6f:14:a1:20:ba:f2:0c:9e:a2:3e:40:e3:ce:82:ca:48:39:46: 93:e3:38:c1:59:1e:98:9b:66:59:04:f6:15:0c:07:b7:7d:0b: b3:3f:2e:de:14:ef:8b:6f:5a:9b:df:98:d8:6d:4b:eb:8b:92: 45:a8:54:1a:80:5e:ce:6e:2c:34:8b:a7:f0:a2:e3:cc:87:d7: 30:6b:25:13:17:06:3c:bb:d2:58:f9:d8:7e:3d:31:8e:66:af: b3:0b:33:cc:43:59:44:5f:8c:e1:ca:1a:47:5d:ea:e7:d9:3e: f7:72:46:36:a4:6e:f9:70:ea:31:2d:d1:d4:8a:a3:c8:69:62: 6d:2d:c8:49:c7:9f:17:c3:ba:8c:76:34:b8:d8:d5:82:6d:e8: 7e:48:49:25:0a:60:bd:7a:dc:ff:64:f7:b1:f2:94:74:80:06: b4:c2:1a:c2:ed:af:5d:0b:02:f1:a2:09:e8:13:d6:45:72:03: b9:75:3b:dc:49:77:ce:c3:04:04:a9:8e:3e:8f:5f:fd:12:95: 35:30:36:da:14:63:8a:07:b2:50:33:c0:fc:aa:a6:ab:39:98: 5a:05:61:3a:13:e3:23:31:70:82:7d:18:ea:e9:cb:06:9c:a3: de:91:1c:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEFCNTNEOTkyODEwMkI5MTlEQjdDNTQ2NUM4REQ1RkYy NjY3NDQzQjMwHhcNMjYwNzI3MDg0NDIwWhcNMjYwODAzMDg0NDIwWjAYMRYwFAYD VQQDEw02YTY3MWE2NC0zNjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCYryA9N9wln/reJO283OagwO3FTWDd8WeH0HyGfV1Oj4U2ES9Gfyn+GuIuH ioL3tH1dkYHjX4JPYQo6wc8ARnOZD3i60pdrWf+Nn35cS2okMfV2cVMNkQ6JdL2J 07ms9cBA/iCHJoK3IojZz6O6jJiBVL/O6R+5iZejz324yIdt4sR8hb2ir8g5VTW1 /Bb4tPooyUzedsYGu58hLvyauO+R8PjyoX60uKKa4Iz1RcXwBVWP/A3kz7VZzYxp lzsDDIUtk0PIKJByp1DAsMg/PXma5Bnq/k9U31btWI1xDvqRTKu+QkCR6G/piZVr RsM0C9l9N7pXC1oOtx15uOgGkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMcTPIXl G0nJwumf3YkbulNw895lMB8GA1UdIwQYMBaAFKtT2ZKBArkZ23xUZcjdX/JmdEOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9EODRFN0JGMjND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VSbmJmRlJseU4xZjhtWjBR N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VS bmJmRlJseU4xZjhtWjBRN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmtiWregUcOpg7CbTve6ZGekZbxShILryDJ6iPkDjzoLKSDlGk+M4wVkemJtm WQT2FQwHt30Lsz8u3hTvi29am9+Y2G1L64uSRahUGoBezm4sNIun8KLjzIfXMGsl ExcGPLvSWPnYfj0xjmavswszzENZRF+M4coaR13q59k+93JGNqRu+XDqMS3R1Iqj yGlibS3IScefF8O6jHY0uNjVgm3ofkhJJQpgvXrc/2T3sfKUdIAGtMIawu2vXQsC 8aIJ6BPWRXIDuXU73El3zsMEBKmOPo9f/RKVNTA22hRjigeyUDPA/KqmqzmYWgVh OhPjIzFwgn0Y6unLBpyj3pEcEQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:11:55 2026 by rpki-client