$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: rKa0tMFd71OvGY+pcqDPbG4qbNg9rPmGHCMN1pjMVcA= Subject key identifier: 5B:9E:73:7E:12:B6:26:79:11:E8:C9:01:30:70:C1:38:AC:81:50:7D Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 03DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0CB0 Signing time: Tue 28 Jul 2026 20:41:27 +0000 Manifest this update: Tue 28 Jul 2026 20:41:27 +0000 Manifest next update: Tue 04 Aug 2026 20:41:27 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: dt+RhqiwVEHaVtZZ54TyGj+TqGP3OlSEd0hmrpi5MDE=) 2: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: XL/ZcgALP761TCI8hEan3K78GIrb6EiGTeA4Vn2wUJI=) 3: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: AIsLYj1Q0Ri7p3sC6uZCzxYzj0O4+4SA75lfHau1SqU=) 4: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: rKjGeR3bW3KsKLNlokaXVqhFpQOnZispIcGW123rOaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 986 (0x3da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Jul 28 20:41:27 2026 GMT Not After : Aug 4 20:41:27 2026 GMT Subject: CN=6a6913f7-599b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:be:07:2c:6b:d2:39:ba:bf:d3:60:c7:83: 87:27:bc:c2:43:8a:25:4c:65:4d:6c:9f:b2:92:34: ba:b1:7f:b4:42:8d:64:87:97:28:b7:03:fd:f6:9b: ea:fe:3e:15:7e:87:c9:cb:3e:ec:81:5d:d6:8d:58: bb:1d:84:98:bb:de:c0:62:54:fd:41:0c:d0:b6:e7: c4:0a:3a:2d:62:b8:08:8e:4f:f3:0e:42:35:44:e1: fb:fd:cf:9b:d6:8a:dd:90:d7:14:74:c5:e9:51:bd: df:5b:d2:b5:2c:52:86:62:12:a7:b3:cb:64:02:3f: 1d:2b:86:90:7a:43:17:8d:1c:dd:48:bd:60:7b:78: c2:4f:b1:e3:5e:db:f5:fb:e8:ce:04:bf:cc:ac:64: 5e:a4:91:67:af:9e:cb:2b:5a:84:5d:bd:0b:d7:6d: 5f:c4:94:53:43:9b:5c:54:93:6b:6c:e3:25:d0:b4: 26:91:57:15:55:15:68:71:c5:5e:17:9d:84:69:19: 76:ae:3b:6b:4f:40:82:fe:84:7d:5b:c3:5c:8d:30: c2:ac:2d:b1:87:02:b6:17:12:fe:65:a5:5d:07:54: 10:cd:a4:af:2c:c6:2d:3c:0d:48:77:60:ad:63:bc: 68:fb:c1:0a:59:90:d5:12:76:b4:36:de:99:ba:fa: 18:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9E:73:7E:12:B6:26:79:11:E8:C9:01:30:70:C1:38:AC:81:50:7D X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b9:24:24:b6:b2:cd:61:1f:d7:2c:98:df:16:85:57:2b:ea: f1:80:7e:a7:a9:ac:45:02:c3:1b:fa:a4:58:77:ed:57:03:85: fb:bd:a3:84:f4:57:8c:9c:35:e2:de:7a:dc:5f:49:45:3c:fc: ca:12:e8:48:81:b0:34:59:8b:88:33:59:d6:d3:3d:a7:0d:41: 06:11:d7:fd:7f:0a:4b:fc:a6:ec:d3:4c:61:ef:e0:d3:cf:d2: 1e:34:f8:99:8b:8d:67:b0:fc:77:5f:74:f6:99:6c:5f:61:4c: 2c:b2:97:55:7a:e3:a7:d7:91:ff:f2:62:ee:da:53:bc:34:1b: b0:8d:3e:1e:ce:d5:a1:e1:44:79:3d:b8:dd:4f:2c:f1:06:81: 75:60:08:45:c6:52:e0:a6:16:84:06:73:73:d5:bb:fe:c5:31: 25:fd:7d:cc:1e:1a:93:ea:70:46:8f:1d:44:67:57:c3:66:e1: 7c:a6:8b:57:e3:f6:2d:21:01:c1:ee:02:09:6d:2d:cf:a4:f3: b1:d5:c0:fd:43:47:2d:9b:a3:49:d4:4a:20:c8:4d:ee:d9:54: cc:da:61:bf:7f:7c:d2:a1:95:c3:d4:b5:c7:d5:34:d0:7a:5c: cc:ce:95:7e:16:e3:e1:f3:0d:18:bb:68:bb:1b:9a:81:3b:7b: fb:4b:e7:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwNzI4MjA0MTI3WhcNMjYwODA0MjA0MTI3WjAYMRYwFAYD VQQDEw02YTY5MTNmNy01OTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygW+Byxr0jm6v9Ngx4OHJ7zCQ4olTGVNbJ+ykjS6sX+0Qo1kh5cotwP99pvq /j4VfofJyz7sgV3WjVi7HYSYu97AYlT9QQzQtufECjotYrgIjk/zDkI1ROH7/c+b 1ordkNcUdMXpUb3fW9K1LFKGYhKns8tkAj8dK4aQekMXjRzdSL1ge3jCT7HjXtv1 ++jOBL/MrGRepJFnr57LK1qEXb0L121fxJRTQ5tcVJNrbOMl0LQmkVcVVRVoccVe F52EaRl2rjtrT0CC/oR9W8NcjTDCrC2xhwK2FxL+ZaVdB1QQzaSvLMYtPA1Id2Ct Y7xo+8EKWZDVEna0Nt6ZuvoYNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFuec34S tiZ5EejJATBwwTisgVB9MB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL7kkJLayzWEf1yyY3xaFVyvq8YB+p6msRQLDG/qkWHftVwOF+72jhPRXjJw1 4t563F9JRTz8yhLoSIGwNFmLiDNZ1tM9pw1BBhHX/X8KS/ym7NNMYe/g08/SHjT4 mYuNZ7D8d1909plsX2FMLLKXVXrjp9eR//Ji7tpTvDQbsI0+Hs7VoeFEeT243U8s 8QaBdWAIRcZS4KYWhAZzc9W7/sUxJf19zB4ak+pwRo8dRGdXw2bhfKaLV+P2LSEB we4CCW0tz6TzsdXA/UNHLZujSdRKIMhN7tlUzNphv3980qGVw9S1x9U00HpczM6V fhbj4fMNGLtouxuagTt7+0vnDw== -----END CERTIFICATE-----Generated at Wed Jul 29 03:02:09 2026 by rpki-client