$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: 9MDrn0MEMZ0bcKh4MAmYLdMpGOJPwf3hrwSvK0XJ8EI= Subject key identifier: 52:87:80:02:A2:9D:ED:E8:0F:32:68:0F:84:DE:C0:56:DF:3A:AF:91 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 02A8 Signing time: Mon 27 Jul 2026 03:02:45 +0000 Manifest this update: Mon 27 Jul 2026 03:02:44 +0000 Manifest next update: Mon 03 Aug 2026 03:02:44 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: pJ5jZ5r6X+VEXWfM/hIBU6UyQeq6dyLgEkefha+7OGE=) 2: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: xDjn+cobUE2agLkdimK21R3Sdz0e7azaiAPMZg9qQro=) 3: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 6sjpy6GriqELAPGgjJdFUt57xHCHCLQzT9kEpI0w6Mg=) 4: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: v5FOCrkT7bwg0TVjJC2RnsG6lxQLJwnHry99/PwnEBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Jul 27 03:02:44 2026 GMT Not After : Aug 3 03:02:44 2026 GMT Subject: CN=6a66ca55-f0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d7:c7:22:bc:02:29:51:ec:14:59:80:f9:6f: 76:75:1e:ad:54:34:0f:2e:04:bf:ac:e6:20:8c:0b: 87:47:24:27:b7:dd:6c:c8:dc:5d:b3:80:8e:65:ed: cc:8c:2c:fe:bd:04:17:5b:92:11:4a:43:62:de:61: 12:2e:20:58:ba:a5:f0:c9:de:34:34:32:c4:ec:65: bd:ad:d4:89:0e:7c:9c:43:a7:5d:30:f2:a8:a3:71: da:4a:cd:91:2d:34:05:f8:60:67:44:3f:26:57:73: 3d:a5:c3:91:c5:63:00:be:25:c7:ce:36:ff:f8:1f: 04:4b:48:ca:d2:86:58:6c:0e:e0:31:bc:6a:88:a9: 28:e5:4c:03:49:90:23:9d:0a:4d:e8:9b:52:f7:5b: ac:8a:22:e0:5c:c9:db:ae:c6:3d:43:e6:db:af:c4: 58:72:be:63:4d:bb:a4:16:5d:be:6d:57:9e:7c:64: a6:2f:20:40:6d:0c:b9:13:75:fb:10:dc:d4:c9:72: 1e:dd:4b:3d:a6:33:14:af:69:24:4e:e5:52:f5:94: cb:c3:68:54:0f:4f:6a:e3:cb:75:fd:42:7c:8b:cf: 23:91:db:58:71:bb:e0:46:5f:6b:a5:9f:94:a3:59: 93:b6:c0:22:71:56:58:f2:1a:e8:9e:3b:29:6e:c4: 2a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:87:80:02:A2:9D:ED:E8:0F:32:68:0F:84:DE:C0:56:DF:3A:AF:91 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:89:a0:0a:33:4b:25:1e:67:9c:3f:fe:ca:38:bd:3f:ac:b1: 6e:20:58:a9:1b:77:94:01:f4:8c:7c:65:90:c9:93:c8:06:6a: 78:5b:0d:7e:3f:2b:ee:2b:c6:73:44:69:47:df:ef:a5:fe:36: b0:f2:55:e9:52:82:02:66:03:d7:84:d6:ae:a5:b2:fc:0b:92: cf:1a:28:eb:6a:1d:c9:d0:96:d1:27:8b:7f:61:1d:77:b3:73: 10:5b:93:6b:7d:5c:ef:04:41:b7:42:66:5e:3b:d4:4a:62:d1: 1d:36:e6:4e:20:8c:08:c8:17:f7:ac:73:c3:c9:29:cb:5d:80: d0:b0:83:fe:81:28:b5:c9:d8:bf:b7:39:61:06:0a:95:f8:56: c0:a6:e3:a0:ae:25:1a:b6:93:71:0d:b1:63:d5:cb:1f:ef:48: 44:64:75:9a:ca:21:6b:88:e0:e1:25:88:e8:d8:ff:0a:7e:8b: 7a:53:24:c0:37:f0:03:05:c6:3b:0b:7e:b6:13:6f:2e:7a:5d: e7:90:15:72:83:ed:95:07:e2:42:bf:33:b5:35:5a:5e:12:5c: 69:3d:22:4d:1a:f8:32:9f:b0:94:f9:8b:97:3e:52:ea:e5:e0: 33:24:c6:6b:d8:5e:b6:79:a1:80:14:b3:d1:55:17:0c:12:0a: f9:b8:be:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYwNzI3MDMwMjQ0WhcNMjYwODAzMDMwMjQ0WjAYMRYwFAYD VQQDEw02YTY2Y2E1NS1mMGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutfHIrwCKVHsFFmA+W92dR6tVDQPLgS/rOYgjAuHRyQnt91syNxds4COZe3M jCz+vQQXW5IRSkNi3mESLiBYuqXwyd40NDLE7GW9rdSJDnycQ6ddMPKoo3HaSs2R LTQF+GBnRD8mV3M9pcORxWMAviXHzjb/+B8ES0jK0oZYbA7gMbxqiKko5UwDSZAj nQpN6JtS91usiiLgXMnbrsY9Q+bbr8RYcr5jTbukFl2+bVeefGSmLyBAbQy5E3X7 ENzUyXIe3Us9pjMUr2kkTuVS9ZTLw2hUD09q48t1/UJ8i88jkdtYcbvgRl9rpZ+U o1mTtsAicVZY8hronjspbsQqpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKHgAKi ne3oDzJoD4TewFbfOq+RMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1YmgCjNLJR5nnD/+yji9P6yxbiBYqRt3lAH0jHxlkMmTyAZqeFsNfj8r7ivG c0RpR9/vpf42sPJV6VKCAmYD14TWrqWy/AuSzxoo62odydCW0SeLf2Edd7NzEFuT a31c7wRBt0JmXjvUSmLRHTbmTiCMCMgX96xzw8kpy12A0LCD/oEotcnYv7c5YQYK lfhWwKbjoK4lGraTcQ2xY9XLH+9IRGR1msoha4jg4SWI6Nj/Cn6LelMkwDfwAwXG Owt+thNvLnpd55AVcoPtlQfiQr8ztTVaXhJcaT0iTRr4Mp+wlPmLlz5S6uXgMyTG a9hetnmhgBSz0VUXDBIK+bi+LQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:20:12 2026 by rpki-client