$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json) Hash identifier: CoDEaErXclIF0ZELpWboNyLr2MDcwNEKPAfAeAPJ1aM= Subject key identifier: CE:73:4B:B3:DE:97:01:A4:DD:D7:90:0B:A2:37:24:BD:16:18:F1:9A Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 0785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft Manifest number: 12B5 Signing time: Tue 28 Jul 2026 17:08:10 +0000 Manifest this update: Tue 28 Jul 2026 17:08:09 +0000 Manifest next update: Tue 04 Aug 2026 17:08:09 +0000 Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: Ce4uYfqpFTkhJ5fy1Rkfx9gwS320Rvw5mIqPKxl5+XM=) 2: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (hash: Fr+3c6RpSKSYZINS3tB5kOz0vDzbNjiqKIyeQ9IGWSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1925 (0x785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: Jul 28 17:08:09 2026 GMT Not After : Aug 4 17:08:09 2026 GMT Subject: CN=6a68e1f9-968d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b0:2a:cd:2e:e9:13:f7:ac:c9:5b:0d:f1:6a: f1:b0:5d:97:66:c0:3e:d1:0f:4c:83:7c:f1:77:b4: 61:11:7e:59:d7:8e:a0:49:77:8e:9b:47:ef:b2:72: d9:54:4b:32:70:d0:92:94:24:af:74:23:a5:69:88: b5:f7:74:87:49:82:f7:79:82:91:ea:2a:89:11:5d: 36:d4:3f:c6:73:56:42:b4:bf:ff:42:e5:05:e1:74: d1:41:d6:fe:aa:60:a0:f0:01:45:96:80:8a:b5:f9: 2a:04:1c:0d:b5:94:cd:bd:9d:bc:6b:63:d4:2a:03: 6b:aa:75:24:cf:36:17:90:bb:ad:75:86:41:9e:9c: ab:a0:74:ec:f6:63:71:d5:61:ac:35:01:12:27:8c: 3b:8e:ab:32:65:f1:66:92:6b:91:85:16:27:3b:77: dc:ec:16:58:b8:26:3e:60:b8:21:c3:c0:6c:1a:b2: c1:7d:65:c4:3b:20:50:11:84:e5:cb:5a:ce:94:d5: 84:3c:42:f0:db:fe:43:11:d1:8f:ee:85:7b:11:dd: 40:79:a3:12:34:1a:09:ed:5e:1d:c3:e1:dc:18:84: f4:44:0a:ed:d8:14:2e:3c:e5:48:51:02:3a:f2:54: 9a:0d:be:64:87:bb:05:21:b6:11:ef:e4:c8:43:a2: d5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:73:4B:B3:DE:97:01:A4:DD:D7:90:0B:A2:37:24:BD:16:18:F1:9A X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:58:bb:e0:66:45:27:35:32:66:1c:46:e6:a7:d4:49:3e:44: d2:af:80:88:3f:b1:f5:6a:98:57:ee:3b:90:da:ae:53:c4:6c: 0b:19:89:ef:9e:1f:9f:53:a8:19:c7:9f:66:1c:42:1e:ed:25: ef:03:b4:cd:12:52:7a:ce:71:91:2c:98:6a:3e:68:7d:18:e1: 63:cb:92:73:18:2e:43:b7:3f:47:03:07:b9:25:02:97:3c:55: f9:bc:52:0e:24:92:25:7f:e8:13:ba:3b:9d:bf:50:04:4e:c4: 2b:ac:bf:03:03:43:48:56:6f:82:48:00:f5:f3:af:13:dd:95: 70:bb:08:9a:68:f0:52:92:99:a5:8c:09:bb:ab:61:74:77:9e: 88:a4:4e:8f:eb:62:91:e1:20:01:4e:db:dd:88:05:dd:bc:ac: c3:d9:21:6c:50:22:4a:a2:71:c8:63:66:bb:74:c8:08:c5:54: 7a:47:c2:02:d7:fc:fc:56:d6:b0:8f:4e:fe:59:f9:04:37:e9: d1:ef:5b:0b:74:80:b8:39:d0:bf:f4:59:ef:c0:7f:da:62:db: 65:0f:ac:2d:ee:93:98:da:c7:86:f5:1a:81:97:84:0e:9b:36: 85:97:03:6d:29:25:ea:1f:0c:fa:41:13:b3:5e:a7:e0:ee:20: c4:58:05:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjYwNzI4MTcwODA5WhcNMjYwODA0MTcwODA5WjAYMRYwFAYD VQQDEw02YTY4ZTFmOS05NjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bAqzS7pE/esyVsN8WrxsF2XZsA+0Q9Mg3zxd7RhEX5Z146gSXeOm0fvsnLZ VEsycNCSlCSvdCOlaYi193SHSYL3eYKR6iqJEV021D/Gc1ZCtL//QuUF4XTRQdb+ qmCg8AFFloCKtfkqBBwNtZTNvZ28a2PUKgNrqnUkzzYXkLutdYZBnpyroHTs9mNx 1WGsNQESJ4w7jqsyZfFmkmuRhRYnO3fc7BZYuCY+YLghw8BsGrLBfWXEOyBQEYTl y1rOlNWEPELw2/5DEdGP7oV7Ed1AeaMSNBoJ7V4dw+HcGIT0RArt2BQuPOVIUQI6 8lSaDb5kh7sFIbYR7+TIQ6LVswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5zS7Pe lwGk3deQC6I3JL0WGPGaMB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR UmhScXdndWpKR0ZFWWFuTU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwVi74GZFJzUyZhxG5qfUST5E0q+AiD+x9WqYV+47kNquU8RsCxmJ754fn1Oo GcefZhxCHu0l7wO0zRJSes5xkSyYaj5ofRjhY8uScxguQ7c/RwMHuSUClzxV+bxS DiSSJX/oE7o7nb9QBE7EK6y/AwNDSFZvgkgA9fOvE92VcLsImmjwUpKZpYwJu6th dHeeiKROj+tikeEgAU7b3YgF3bysw9khbFAiSqJxyGNmu3TICMVUekfCAtf8/FbW sI9O/ln5BDfp0e9bC3SAuDnQv/RZ78B/2mLbZQ+sLe6TmNrHhvUagZeEDps2hZcD bSkl6h8M+kETs16n4O4gxFgFNw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:38:17 2026 by rpki-client