$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft File: PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft (raw, json) Hash identifier: gWUxTARCwSU/BZ1g+RONmJkKr1LoihAW2P5Dq0ESmZ0= Subject key identifier: F6:27:08:50:FF:AB:B4:1E:90:0A:F4:08:11:37:7B:2E:76:D5:12:4F Authority key identifier: 3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 Certificate issuer: /CN=A91E4668/serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Certificate serial: 0F63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft Manifest number: 0F53 Signing time: Tue 28 Jul 2026 17:39:44 +0000 Manifest this update: Tue 28 Jul 2026 17:39:43 +0000 Manifest next update: Tue 04 Aug 2026 17:39:43 +0000 Files and hashes: 1: PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl (hash: U5nA/NtH1yNJaexvT6APHyyImHuXsal0sW2l+is2iWA=) 2: A5B7D874091F11EFA6EDE141C4F9AE02.roa (hash: RRHBbu8CLmSmiPxmYAkEV9Yq+PqsqGzcbre4j4oCADM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3939 (0xf63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4668, serialNumber=3D0556D193BC92A21EA747F958C697A97EC5D5D6 Validity Not Before: Jul 28 17:39:43 2026 GMT Not After : Aug 4 17:39:43 2026 GMT Subject: CN=6a68e960-b516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:50:ec:4e:db:9b:f7:7c:fd:f9:a9:81:00: 1c:c4:df:24:5b:58:bc:f7:8d:c4:ed:3b:30:f5:a5: f7:ae:2b:73:ab:7f:ba:ba:14:4b:f2:d8:12:6c:19: de:37:c5:8c:c0:93:88:c6:90:c4:c4:80:ec:db:33: 55:79:af:a9:05:65:3b:d3:d0:29:81:9d:86:14:f8: 8f:94:c3:35:2b:db:9c:cb:7e:1f:c4:eb:e6:96:f1: cc:ce:2f:96:50:31:4c:a7:f7:a3:98:7a:01:4f:22: ff:57:c1:be:24:86:0a:34:f6:18:b2:df:56:1a:44: d8:04:e0:33:0d:30:56:90:a6:ad:af:45:50:de:e9: 45:88:2e:fd:23:5a:95:73:79:d7:b7:ba:ef:69:f9: b7:48:1f:02:50:00:65:44:75:8b:9b:de:28:77:3f: 5b:60:d7:13:8a:ec:24:1b:36:71:20:70:c3:1a:63: ed:e3:03:f4:b3:7f:7a:2c:d9:4d:cb:66:84:4a:d1: 6f:23:cf:ac:df:6e:17:1c:d8:33:f7:32:cb:95:06: d3:18:2f:08:e6:0d:d1:51:83:45:77:6d:3e:3a:b3: 67:55:a8:6f:ad:36:5c:55:d3:7d:a9:bf:0b:d8:71: a8:93:1e:88:57:4e:e2:9a:42:a4:c7:de:13:02:55: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:27:08:50:FF:AB:B4:1E:90:0A:F4:08:11:37:7B:2E:76:D5:12:4F X509v3 Authority Key Identifier: keyid:3D:05:56:D1:93:BC:92:A2:1E:A7:47:F9:58:C6:97:A9:7E:C5:D5:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PQVW0ZO8kqIep0f5WMaXqX7F1dY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4668/7C9009AC97F111E9A2E51981C4F9AE02/PQVW0ZO8kqIep0f5WMaXqX7F1dY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c4:b1:f5:2d:29:18:05:40:56:69:69:c7:10:05:c6:87:dc: 73:bf:fe:fc:e9:7a:a6:16:69:dc:cc:6a:42:8c:3f:25:3a:aa: bd:ff:82:8c:f1:ee:0a:78:90:b0:46:cf:79:ac:b4:a3:83:45: 1c:17:fd:97:31:22:dc:de:ef:63:48:8f:19:3d:a5:0c:4a:01: c6:c2:16:86:0e:f8:dd:34:7c:af:23:4a:74:4e:a4:d5:41:19: 91:a6:40:21:aa:67:27:fb:7c:72:c8:d5:9a:fb:8f:1b:f1:b1: cf:37:a8:fa:0b:66:e6:c9:7e:eb:76:0e:cd:1c:c7:74:8e:98: f2:84:46:c5:83:ae:19:95:0e:0c:42:dc:16:59:3d:8b:0a:15: a4:d4:b1:77:3f:96:92:f8:f3:6d:8d:1d:99:45:d9:1d:39:d9: 6d:e9:d8:60:d3:b2:3c:5e:f4:7f:be:6f:f2:e9:a7:0e:94:93: 7f:49:3a:75:96:c8:82:3e:1a:4d:67:c1:1c:2f:b3:6e:c1:c7: e4:48:3b:66:d9:d3:b4:f6:40:d9:8c:d4:ae:32:36:85:0c:75: 66:81:a0:74:dc:cf:ba:da:b3:4c:55:2c:26:f9:dd:41:e1:6a: d3:80:de:2f:32:a2:4a:dc:e0:b4:8e:4d:82:fd:af:4c:62:e2: 48:9c:39:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2NjgxMTAvBgNVBAUTKDNEMDU1NkQxOTNCQzkyQTIxRUE3NDdGOTU4QzY5N0E5 N0VDNUQ1RDYwHhcNMjYwNzI4MTczOTQzWhcNMjYwODA0MTczOTQzWjAYMRYwFAYD VQQDEw02YTY4ZTk2MC1iNTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38tQ7E7bm/d8/fmpgQAcxN8kW1i8943E7Tsw9aX3ritzq3+6uhRL8tgSbBne N8WMwJOIxpDExIDs2zNVea+pBWU709ApgZ2GFPiPlMM1K9ucy34fxOvmlvHMzi+W UDFMp/ejmHoBTyL/V8G+JIYKNPYYst9WGkTYBOAzDTBWkKatr0VQ3ulFiC79I1qV c3nXt7rvafm3SB8CUABlRHWLm94odz9bYNcTiuwkGzZxIHDDGmPt4wP0s396LNlN y2aEStFvI8+s324XHNgz9zLLlQbTGC8I5g3RUYNFd20+OrNnVahvrTZcVdN9qb8L 2HGokx6IV07imkKkx94TAlWHMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPYnCFD/ q7QekAr0CBE3ey521RJPMB8GA1UdIwQYMBaAFD0FVtGTvJKiHqdH+VjGl6l+xdXW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY2OC83QzkwMDlBQzk3 RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtxSWVwMGY1V01hWHFYN0Yx ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BRVlcwWk84a3FJZXAwZjVXTWFYcVg3RjFkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY2OC83QzkwMDlBQzk3RjExMUU5QTJFNTE5ODFDNEY5QUUwMi9QUVZXMFpPOGtx SWVwMGY1V01hWHFYN0YxZFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAG8Sx9S0pGAVAVmlpxxAFxofcc7/+/Ol6phZp3MxqQow/JTqqvf+CjPHuCniQ sEbPeay0o4NFHBf9lzEi3N7vY0iPGT2lDEoBxsIWhg743TR8ryNKdE6k1UEZkaZA IapnJ/t8csjVmvuPG/Gxzzeo+gtm5sl+63YOzRzHdI6Y8oRGxYOuGZUODELcFlk9 iwoVpNSxdz+WkvjzbY0dmUXZHTnZbenYYNOyPF70f75v8umnDpSTf0k6dZbIgj4a TWfBHC+zbsHH5Eg7ZtnTtPZA2YzUrjI2hQx1ZoGgdNzPutqzTFUsJvndQeFq04De LzKiStzgtI5Ngv2vTGLiSJw5IQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:21 2026 by rpki-client