$ rpki-client -vvf rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft File: fqB__DIeh8j3RMqqCf_5ixzAtos.mft (raw, json) Hash identifier: PNWX+UkbnFnks4NjCc5cJDahMSVSqGh8cyW1+8MvSf4= Subject key identifier: 4F:4B:A1:1D:11:41:D3:DF:FB:89:90:20:73:E7:66:3B:99:7F:DF:E8 Authority key identifier: 7E:A0:7F:FC:32:1E:87:C8:F7:44:CA:AA:09:FF:F9:8B:1C:C0:B6:8B Certificate issuer: /CN=A91E859E/serialNumber=7EA07FFC321E87C8F744CAAA09FFF98B1CC0B68B Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft Manifest number: 20 Signing time: Wed 29 Jul 2026 10:37:16 +0000 Manifest this update: Wed 29 Jul 2026 10:37:16 +0000 Manifest next update: Wed 05 Aug 2026 10:37:16 +0000 Files and hashes: 1: fqB__DIeh8j3RMqqCf_5ixzAtos.crl (hash: qY95YK2MlJwLLAS8yrC5sHWBWwQ5qF/OX51Do9qElmQ=) 2: D22158C0674811F1B78F7ABD8247A888.roa (hash: MGUrpK1K2oupHxzWSgO6Nc9+anYE61p1UNik8Cr88aI=) 3: 0CB90268678411F1A5717FF39347A888.roa (hash: FMjrzW19UpAuLU2zd+ioPWQz9JPl11mv3uL2SMTAKOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.crl rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 10:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E859E, serialNumber=7EA07FFC321E87C8F744CAAA09FFF98B1CC0B68B Validity Not Before: Jul 29 10:37:16 2026 GMT Not After : Aug 5 10:37:16 2026 GMT Subject: CN=6a69d7dc-fa08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8c:88:46:70:ab:48:63:2e:57:28:f8:9a:c5: aa:b9:24:44:08:6e:0f:41:0d:e4:7f:e7:f6:d0:52: 13:a0:e8:d4:be:a6:8e:aa:2a:5f:9b:7a:9a:eb:82: 13:5b:b0:8c:1c:4a:16:04:b9:92:b8:d5:9a:28:63: 97:bb:80:fc:ba:f0:4f:a5:f7:58:ad:da:42:03:4a: 4b:51:41:b6:c2:e1:f9:9e:fe:18:a8:66:2a:da:91: 7a:59:d9:d9:db:59:ba:5b:8c:8f:3b:b9:af:8e:33: 61:bd:ae:07:58:cb:42:b5:33:4a:50:e7:44:eb:39: fc:fd:a5:05:c1:80:cd:97:d9:18:55:4c:c3:05:84: 3a:81:aa:f8:50:a0:ba:9b:97:e4:a2:c6:54:ad:3b: 88:4c:df:25:1e:4d:3d:20:3d:79:d0:82:4b:4d:38: d7:7e:f2:93:c8:b8:e1:cc:8c:5c:72:93:2f:e8:55: f5:41:09:f7:f8:3b:d3:32:b6:9e:53:f5:2a:1c:6e: 82:b3:cc:c6:64:de:20:b1:a5:2e:61:00:18:32:96: f9:69:ca:1d:20:61:42:d9:ff:00:67:df:cc:a8:50: d9:e3:9a:5f:20:4f:a8:0a:dc:58:cb:c2:1d:26:6f: 7d:5b:86:7c:6d:86:4b:04:04:b2:41:02:af:37:b7: 2c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4B:A1:1D:11:41:D3:DF:FB:89:90:20:73:E7:66:3B:99:7F:DF:E8 X509v3 Authority Key Identifier: keyid:7E:A0:7F:FC:32:1E:87:C8:F7:44:CA:AA:09:FF:F9:8B:1C:C0:B6:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqB__DIeh8j3RMqqCf_5ixzAtos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E859E/F2A78DD2674111F1AF8DA6A97F47A888/fqB__DIeh8j3RMqqCf_5ixzAtos.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:dc:23:d9:53:8c:81:48:4f:f0:ed:a2:30:b7:49:16:b1:24: 4d:3f:54:19:d9:f9:24:b6:a5:69:4d:8c:29:84:97:db:f6:9b: b0:f4:58:2a:a7:31:a4:fb:eb:e4:40:e3:a1:33:2c:86:65:ac: 44:1f:c0:2a:1d:d9:69:b1:4b:e1:8c:5b:97:e1:57:bc:3b:c9: 4a:86:95:b0:7d:a7:86:2c:86:ad:ab:4b:7a:fc:98:82:4f:03: 9b:3e:44:f7:a7:9b:e3:e1:18:6b:51:fd:36:0a:94:27:f3:39: 7c:8c:77:d3:a1:bf:52:92:44:50:53:ea:4a:9c:08:45:7d:1f: 44:36:bc:ae:d8:f0:a1:bb:b1:0f:0e:a6:c0:69:5a:84:97:d6: 75:b5:7a:b1:31:ac:7a:a9:a6:f5:07:d4:2a:b1:43:0a:17:ff: a0:5c:80:44:96:da:20:1c:99:2a:14:1a:49:75:81:56:47:b9: 8b:a3:ac:5a:ea:3d:73:29:29:eb:a8:ba:9b:1e:30:71:99:62: 92:5a:e0:25:f6:bf:ca:ad:83:d0:57:a4:14:94:8c:ad:17:16: 2a:00:53:cf:25:17:f6:47:be:8a:d8:70:14:21:65:0f:6b:27: 0d:5d:f7:2d:73:39:39:fb:b5:da:18:9f:05:c8:b8:55:b8:a2: f7:e6:3c:45 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODU5RTExMC8GA1UEBRMoN0VBMDdGRkMzMjFFODdDOEY3NDRDQUFBMDlGRkY5OEIx Q0MwQjY4QjAeFw0yNjA3MjkxMDM3MTZaFw0yNjA4MDUxMDM3MTZaMBgxFjAUBgNV BAMTDTZhNjlkN2RjLWZhMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEjIhGcKtIYy5XKPiaxaq5JEQIbg9BDeR/5/bQUhOg6NS+po6qKl+beprrghNb sIwcShYEuZK41ZooY5e7gPy68E+l91it2kIDSktRQbbC4fme/hioZirakXpZ2dnb WbpbjI87ua+OM2G9rgdYy0K1M0pQ50TrOfz9pQXBgM2X2RhVTMMFhDqBqvhQoLqb l+SixlStO4hM3yUeTT0gPXnQgktNONd+8pPIuOHMjFxyky/oVfVBCff4O9Mytp5T 9SocboKzzMZk3iCxpS5hABgylvlpyh0gYULZ/wBn38yoUNnjml8gT6gK3FjLwh0m b31bhnxthksEBLJBAq83tyy7AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUT0uhHRFB 09/7iZAgc+dmO5l/3+gwHwYDVR0jBBgwFoAUfqB//DIeh8j3RMqqCf/5ixzAtosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NTlFL0YyQTc4REQyNjc0 MTExRjFBRjhEQTZBOTdGNDdBODg4L2ZxQl9fREllaDhqM1JNcXFDZl81aXh6QXRv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZnFCX19ESWVoOGozUk1xcUNmXzVpeHpBdG9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4 NTlFL0YyQTc4REQyNjc0MTExRjFBRjhEQTZBOTdGNDdBODg4L2ZxQl9fREllaDhq M1JNcXFDZl81aXh6QXRvcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDV3CPZU4yBSE/w7aIwt0kWsSRNP1QZ2fkktqVpTYwphJfb9puw9FgqpzGk++vk QOOhMyyGZaxEH8AqHdlpsUvhjFuX4Ve8O8lKhpWwfaeGLIatq0t6/JiCTwObPkT3 p5vj4RhrUf02CpQn8zl8jHfTob9SkkRQU+pKnAhFfR9ENryu2PChu7EPDqbAaVqE l9Z1tXqxMax6qab1B9QqsUMKF/+gXIBEltogHJkqFBpJdYFWR7mLo6xa6j1zKSnr qLqbHjBxmWKSWuAl9r/KrYPQV6QUlIytFxYqAFPPJRf2R76K2HAUIWUPaycNXfct czk5+7XaGJ8FyLhVuKL35jxF -----END CERTIFICATE-----Generated at Wed Jul 29 15:45:47 2026 by rpki-client