$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft File: qK6pspMKYU1coxq59-hDeTYaL0M.mft (raw, json) Hash identifier: a/a+HwROI+OE9sGT6Qj+1d7tBdQmd830yNaTBpG5us8= Subject key identifier: AE:3A:D0:09:4A:75:18:C2:A7:CA:CC:9B:31:8E:8B:80:FD:6A:F1:DB Authority key identifier: A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 Certificate issuer: /CN=A91D7C1D/serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Certificate serial: 0A94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft Manifest number: 0A7F Signing time: Sun 26 Jul 2026 20:06:25 +0000 Manifest this update: Sun 26 Jul 2026 20:06:25 +0000 Manifest next update: Sun 02 Aug 2026 20:06:25 +0000 Files and hashes: 1: qK6pspMKYU1coxq59-hDeTYaL0M.crl (hash: 44/YjrRJzaWPgT7Vjp12pUWGAKx+t3xcyceiy/a3Ycs=) 2: A292E3529E9711EEB6899B1CC4F9AE02.roa (hash: BML+CpNfWIhxgmjTMLZ//EdSsz/6Hi/QXJXWPhL7TSQ=) 3: tizrtS3qU9ricaSU5pNSzX87kgs.asa (hash: Incu3TWqBW6SfBEt+b0TNfuW9AAh4IPbRzwBVryYKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2708 (0xa94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7C1D, serialNumber=A8AEA9B2930A614D5CA31AB9F7E84379361A2F43 Validity Not Before: Jul 26 20:06:25 2026 GMT Not After : Aug 2 20:06:25 2026 GMT Subject: CN=6a6668c1-ebd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:84:1c:9a:08:21:41:5e:68:b7:e0:3e:91:a9: 16:f3:db:53:8d:95:0a:d9:e2:cb:27:6e:5f:13:11: bc:f7:49:f4:75:31:37:0c:2d:4c:a8:36:e1:70:34: e5:c9:0a:df:2e:77:46:1d:ea:42:4a:27:9b:0b:40: 8f:c9:4a:68:2d:4f:7e:06:00:0e:08:8a:06:cc:63: e9:04:47:3a:46:3f:7f:6f:27:28:c2:c0:69:15:35: 3b:97:df:ea:cf:9b:aa:29:cd:fa:37:ad:47:e8:ae: 5e:8a:34:4a:7a:ed:63:c2:fb:d1:a4:c7:9e:9a:30: 4c:ec:08:e1:da:30:37:47:15:29:93:8d:19:44:e8: d0:3b:63:57:34:76:6d:88:54:1b:c2:65:72:b1:be: 6c:ee:54:eb:bc:5f:92:86:cf:74:da:be:1a:99:16: 14:ee:c2:43:8a:42:58:53:60:b3:4e:12:0e:e6:85: 3f:66:dd:fe:83:b1:8d:4e:59:b1:1f:13:11:70:c4: c1:1d:08:fb:8b:91:97:bd:b4:92:62:b9:46:fc:52: 90:dd:1a:6a:c4:8c:1d:9d:c2:ad:be:b9:33:ad:24: be:d0:7f:e3:c1:03:5f:16:d1:f4:28:18:46:e3:cd: 9b:25:38:40:6e:0d:6f:27:54:91:d8:fa:83:55:b5: 3f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3A:D0:09:4A:75:18:C2:A7:CA:CC:9B:31:8E:8B:80:FD:6A:F1:DB X509v3 Authority Key Identifier: keyid:A8:AE:A9:B2:93:0A:61:4D:5C:A3:1A:B9:F7:E8:43:79:36:1A:2F:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qK6pspMKYU1coxq59-hDeTYaL0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7C1D/A8070AF28AF011EAA9528309C4F9AE02/qK6pspMKYU1coxq59-hDeTYaL0M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:82:a7:c8:ff:a4:6e:cb:95:4d:ac:7f:19:b6:e0:d8:98:89: 10:71:69:13:ad:9e:09:5a:61:77:c6:53:b7:c7:29:12:9b:43: ae:f8:3f:91:e7:69:cc:ba:92:04:c9:34:a9:12:3b:ff:8f:e1: aa:53:7e:ff:7c:95:44:76:05:64:2a:ce:93:a2:dd:9f:48:5e: 18:7d:6e:7c:cc:13:c1:f5:c9:8c:e7:9d:89:b5:1b:bd:e1:d0: 1d:24:35:c7:5a:cf:49:f3:b0:1b:d1:c7:78:5c:6c:5b:e0:57: d0:07:fc:db:4d:ae:84:42:d4:0e:a7:f6:cc:57:62:c7:e1:ba: 42:92:2b:c7:fa:cc:2b:e0:8e:d8:62:dc:3a:ed:3a:29:75:d1: d5:89:d7:8c:6d:4c:80:09:6e:7e:89:40:62:60:58:5c:69:5c: 06:36:b7:b4:78:4d:63:de:40:f9:b4:96:45:98:33:f5:ba:be: 2d:0e:be:1b:af:7f:bd:ec:7c:c9:24:93:ac:1c:73:2a:b4:c2: a2:94:57:f4:6e:41:a0:c0:95:db:bc:9c:ae:36:46:68:44:7e: 9c:9d:c8:a9:7e:5a:1d:b0:6f:a0:e5:a9:ac:6c:6e:91:2d:7b: fa:5f:89:37:6f:74:64:18:c2:10:9f:f9:80:15:d6:c1:d0:56: 75:c1:67:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdDMUQxMTAvBgNVBAUTKEE4QUVBOUIyOTMwQTYxNEQ1Q0EzMUFCOUY3RTg0Mzc5 MzYxQTJGNDMwHhcNMjYwNzI2MjAwNjI1WhcNMjYwODAyMjAwNjI1WjAYMRYwFAYD VQQDEw02YTY2NjhjMS1lYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYQcmgghQV5ot+A+kakW89tTjZUK2eLLJ25fExG890n0dTE3DC1MqDbhcDTl yQrfLndGHepCSiebC0CPyUpoLU9+BgAOCIoGzGPpBEc6Rj9/bycowsBpFTU7l9/q z5uqKc36N61H6K5eijRKeu1jwvvRpMeemjBM7Ajh2jA3RxUpk40ZROjQO2NXNHZt iFQbwmVysb5s7lTrvF+Shs902r4amRYU7sJDikJYU2CzThIO5oU/Zt3+g7GNTlmx HxMRcMTBHQj7i5GXvbSSYrlG/FKQ3RpqxIwdncKtvrkzrSS+0H/jwQNfFtH0KBhG 482bJThAbg1vJ1SR2PqDVbU/4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK460AlK dRjCp8rMmzGOi4D9avHbMB8GA1UdIwQYMBaAFKiuqbKTCmFNXKMauffoQ3k2Gi9D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0MxRC9BODA3MEFGMjhB RjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lVMWNveHE1OS1oRGVUWWFM ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FLNnBzcE1LWVUxY294cTU5LWhEZVRZYUwwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0MxRC9BODA3MEFGMjhBRjAxMUVBQTk1MjgzMDlDNEY5QUUwMi9xSzZwc3BNS1lV MWNveHE1OS1oRGVUWWFMME0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAYKnyP+kbsuVTax/Gbbg2JiJEHFpE62eCVphd8ZTt8cpEptDrvg/kedpzLqS BMk0qRI7/4/hqlN+/3yVRHYFZCrOk6Ldn0heGH1ufMwTwfXJjOedibUbveHQHSQ1 x1rPSfOwG9HHeFxsW+BX0Af8202uhELUDqf2zFdix+G6QpIrx/rMK+CO2GLcOu06 KXXR1YnXjG1MgAlufolAYmBYXGlcBja3tHhNY95A+bSWRZgz9bq+LQ6+G69/vex8 ySSTrBxzKrTCopRX9G5BoMCV27ycrjZGaER+nJ3IqX5aHbBvoOWprGxukS17+l+J N290ZBjCEJ/5gBXWwdBWdcFnsw== -----END CERTIFICATE-----Generated at Tue Jul 28 16:04:58 2026 by rpki-client