$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft File: mCQhgadVSijnjBropzvieUUsy_Q.mft (raw, json) Hash identifier: ND3U4f+ePrO5kxnBA+11UIEp85hfDtjLzN3F0i4Ptps= Subject key identifier: FB:19:1F:87:75:3A:57:E3:A7:0D:DA:E2:E7:0F:FC:22:08:1F:1C:93 Authority key identifier: 98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 Certificate issuer: /CN=A91DEDC1/serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft Manifest number: CA Signing time: Mon 27 Jul 2026 08:59:43 +0000 Manifest this update: Mon 27 Jul 2026 08:59:42 +0000 Manifest next update: Mon 03 Aug 2026 08:59:42 +0000 Files and hashes: 1: mCQhgadVSijnjBropzvieUUsy_Q.crl (hash: 2qCY13SPYjJM913iWViriBLPfnJ8tARJLf0PE+LKx2E=) 2: 5C5BA8365D6A11F081971E0DC4F9AE02.roa (hash: dbHPkMuEOzuqpzoFmdsmiLtbpvTBxHiZw5BwSoqb+aQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEDC1, serialNumber=98242181A7554A28E78C1AE8A73BE279452CCBF4 Validity Not Before: Jul 27 08:59:42 2026 GMT Not After : Aug 3 08:59:42 2026 GMT Subject: CN=6a671dff-6af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2f:ea:2d:e6:6a:50:c5:6c:36:34:a4:aa:b0: ec:cd:78:e8:fa:c4:4a:ef:11:43:f3:68:93:67:ec: 2e:27:da:b6:f7:29:69:f4:07:6d:c8:63:c8:44:51: 31:f1:eb:56:3f:13:31:51:ad:0b:e1:a4:16:76:49: e6:74:d9:29:45:6b:36:9d:96:5d:18:c7:3d:dd:5b: d1:d8:a1:01:e3:6c:4d:16:8f:97:ab:56:fd:55:5b: 4e:eb:0a:55:81:08:55:bd:64:20:e1:aa:b7:10:42: ca:5b:7c:ae:0a:7e:3c:4c:12:c0:d6:de:56:82:7b: 3a:1c:8f:a7:ae:b5:31:5e:2f:72:05:64:fe:d2:54: ca:46:79:31:cb:ba:89:f6:98:5a:4e:b4:b7:7a:5c: 03:20:df:e0:09:b5:a5:2a:93:9d:b4:2b:fc:0f:ef: 1a:e0:ca:ef:b6:9d:1b:78:c2:c1:f8:55:b0:a4:df: 03:7f:85:06:96:4c:33:6c:ba:0c:95:af:14:fc:26: d0:6a:96:4e:65:15:3e:bc:a2:44:82:e5:14:ac:84: c1:44:36:38:76:24:d0:0a:aa:94:7e:ae:c6:dc:56: 08:aa:29:65:9c:3e:1c:df:ed:81:47:fb:ff:bd:c1: e1:84:3b:4c:40:52:62:6e:9e:aa:50:c1:92:56:ea: 79:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:19:1F:87:75:3A:57:E3:A7:0D:DA:E2:E7:0F:FC:22:08:1F:1C:93 X509v3 Authority Key Identifier: keyid:98:24:21:81:A7:55:4A:28:E7:8C:1A:E8:A7:3B:E2:79:45:2C:CB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCQhgadVSijnjBropzvieUUsy_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDC1/FD112B765D6911F0911D720CC4F9AE02/mCQhgadVSijnjBropzvieUUsy_Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:dd:61:7c:e1:36:e4:c4:30:37:49:f8:13:ce:34:48:18:02: 63:76:57:43:8a:d1:ae:de:ae:8c:0b:37:c5:c9:6f:ab:eb:f8: f7:9a:67:f5:4a:9f:44:35:d4:b4:48:a4:59:82:f4:6b:68:5f: e9:6f:06:4b:f9:7e:bf:00:d9:2e:9a:b8:c1:00:91:79:01:51: 28:2e:f1:03:6c:0e:1f:c0:62:78:93:84:a1:72:d3:4a:b4:d7: 4b:0d:a9:cf:23:e1:6d:67:b0:36:15:f4:d2:56:48:5c:41:02: 09:fd:28:55:2c:07:92:2d:39:aa:c8:20:10:58:be:fe:e8:82: 9e:89:cd:e8:ee:23:1e:1a:8c:93:41:a7:02:32:94:3c:f0:98: 45:a8:b2:8e:3e:e3:fd:d4:32:f1:d8:99:aa:97:e1:43:df:08: 9b:a9:f0:5c:32:80:20:d2:16:34:42:23:35:11:89:6b:d6:76: 57:84:a4:97:9b:a0:e1:fd:e2:4b:54:0f:dc:18:19:35:52:d1: a5:f7:fd:90:d2:f9:b0:85:9a:c3:40:9c:c7:81:12:04:18:f5: bf:4b:c1:80:05:ad:ab:b0:ae:77:96:e6:3e:44:1f:2d:36:c5: b6:ee:2c:da:22:e4:ef:80:95:74:65:f3:3c:6b:ac:15:5e:59: b8:25:17:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVEQzExMTAvBgNVBAUTKDk4MjQyMTgxQTc1NTRBMjhFNzhDMUFFOEE3M0JFMjc5 NDUyQ0NCRjQwHhcNMjYwNzI3MDg1OTQyWhcNMjYwODAzMDg1OTQyWjAYMRYwFAYD VQQDEw02YTY3MWRmZi02YWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0y/qLeZqUMVsNjSkqrDszXjo+sRK7xFD82iTZ+wuJ9q29ylp9AdtyGPIRFEx 8etWPxMxUa0L4aQWdknmdNkpRWs2nZZdGMc93VvR2KEB42xNFo+Xq1b9VVtO6wpV gQhVvWQg4aq3EELKW3yuCn48TBLA1t5Wgns6HI+nrrUxXi9yBWT+0lTKRnkxy7qJ 9phaTrS3elwDIN/gCbWlKpOdtCv8D+8a4Mrvtp0beMLB+FWwpN8Df4UGlkwzbLoM la8U/CbQapZOZRU+vKJEguUUrITBRDY4diTQCqqUfq7G3FYIqillnD4c3+2BR/v/ vcHhhDtMQFJibp6qUMGSVup5YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPsZH4d1 Olfjpw3a4ucP/CIIHxyTMB8GA1UdIwQYMBaAFJgkIYGnVUoo54wa6Kc74nlFLMv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURDMS9GRDExMkI3NjVE NjkxMUYwOTExRDcyMENDNEY5QUUwMi9tQ1FoZ2FkVlNpam5qQnJvcHp2aWVVVXN5 X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DUWhnYWRWU2lqbmpCcm9wenZpZVVVc3lfUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RURDMS9GRDExMkI3NjVENjkxMUYwOTExRDcyMENDNEY5QUUwMi9tQ1FoZ2FkVlNp am5qQnJvcHp2aWVVVXN5X1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ91hfOE25MQwN0n4E840SBgCY3ZXQ4rRrt6ujAs3xclvq+v495pn9UqfRDXU tEikWYL0a2hf6W8GS/l+vwDZLpq4wQCReQFRKC7xA2wOH8BieJOEoXLTSrTXSw2p zyPhbWewNhX00lZIXEECCf0oVSwHki05qsggEFi+/uiCnonN6O4jHhqMk0GnAjKU PPCYRaiyjj7j/dQy8diZqpfhQ98Im6nwXDKAINIWNEIjNRGJa9Z2V4Skl5ug4f3i S1QP3BgZNVLRpff9kNL5sIWaw0Ccx4ESBBj1v0vBgAWtq7Cud5bmPkQfLTbFtu4s 2iLk74CVdGXzPGusFV5ZuCUXpg== -----END CERTIFICATE-----Generated at Wed Jul 29 05:43:56 2026 by rpki-client