$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft File: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft (raw, json) Hash identifier: jzlCHy2il7oAtYgyCxFrrMYK/YImzaPrjRHCoLLYYh4= Subject key identifier: 8C:33:C7:C8:2C:CB:02:71:0C:46:6B:EC:5C:8A:CA:52:99:B3:08:70 Authority key identifier: 41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD Certificate issuer: /CN=A91E91BC/serialNumber=414FB6178869130F826E9E30C0B794084D9760DD Certificate serial: 03DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft Manifest number: 03D5 Signing time: Mon 27 Jul 2026 01:39:02 +0000 Manifest this update: Mon 27 Jul 2026 01:39:02 +0000 Manifest next update: Mon 03 Aug 2026 01:39:02 +0000 Files and hashes: 1: QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl (hash: 4VQ8+mlaPl6Pse4WtFhrb4u57Pg2gDGQyqspHc4jJ9s=) 2: 7BCC4B32E85C11EE9593933FC4F9AE02.roa (hash: js/NeNf/P0ilTfK3hm4VU61TP33gO5AhYeKCE1H/UPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 989 (0x3dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=414FB6178869130F826E9E30C0B794084D9760DD Validity Not Before: Jul 27 01:39:02 2026 GMT Not After : Aug 3 01:39:02 2026 GMT Subject: CN=6a66b6b6-70b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:60:82:0a:bf:5f:5d:fe:72:f3:9b:c6:db:69: 75:4f:8c:5f:ed:8c:3a:7b:de:4b:01:e8:70:89:81: 4e:03:66:7a:4b:ba:dd:2a:5b:65:ae:83:f8:c5:03: 3e:34:19:42:87:4f:4a:9b:5f:d8:ef:2b:7f:94:59: 26:e2:cc:92:3c:f2:80:af:7d:26:37:b4:0f:34:36: e3:0d:c9:b3:14:0c:67:23:a0:d5:92:18:d9:bb:fb: 53:e2:08:0a:27:b9:92:a6:6f:50:ed:e9:ee:3f:10: 2e:44:04:e2:9f:e7:92:5a:cf:41:ae:3a:e6:19:84: d6:63:09:07:13:f5:b1:2c:19:5d:bb:60:32:1f:25: b0:0a:20:f4:16:a7:d2:e7:17:c8:15:34:1f:33:65: 07:90:02:e4:ed:11:7f:b2:e1:50:a4:46:a4:07:cc: b1:16:37:dd:1e:10:f1:73:b6:d3:9d:73:c5:89:e9: 25:4f:1e:97:30:ea:77:10:97:71:87:19:b2:24:fa: 01:11:b7:1b:e7:3a:7e:bc:d4:b7:f2:ed:06:a9:9d: 61:5d:8f:12:fc:d2:3d:df:63:19:c3:f3:7a:96:d9: 2c:27:21:72:bb:c5:20:6b:12:54:1d:27:be:e2:16: c6:0a:38:48:68:d5:f3:7b:8e:b5:67:f7:93:7e:33: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:33:C7:C8:2C:CB:02:71:0C:46:6B:EC:5C:8A:CA:52:99:B3:08:70 X509v3 Authority Key Identifier: keyid:41:4F:B6:17:88:69:13:0F:82:6E:9E:30:C0:B7:94:08:4D:97:60:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/A4E673CADBE911EC95110515C4F9AE02/QU-2F4hpEw-Cbp4wwLeUCE2XYN0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:a8:d5:50:d0:5b:4b:f3:ba:a9:ea:a4:88:ff:c5:41:1f:e2: 3e:6c:0b:f7:44:a9:81:7d:be:b3:95:f9:23:58:36:20:07:19: d6:de:2d:e7:fa:ed:f3:3e:aa:b8:b0:6d:fe:cc:c2:a9:86:d4: 27:86:66:b5:d2:50:f9:fa:d4:11:81:38:cb:85:92:70:2d:da: fb:9c:2a:40:9c:35:45:a9:7e:af:c2:6a:ca:8f:ce:74:90:e8: 72:46:df:e5:46:24:7b:5c:84:f6:e1:a7:fd:e5:6c:79:3b:e6: 12:ef:18:e0:f6:2e:96:ce:e9:da:9a:83:9d:7a:4d:74:c7:0a: 3f:80:22:ea:77:6c:a6:44:85:41:78:5e:70:23:7c:16:33:19: 15:ca:5a:1b:fe:34:7a:3c:3e:41:dd:d6:a9:29:27:b0:e6:c6: 7f:49:d6:25:f6:f1:f9:bc:99:21:e6:9a:94:63:61:b5:76:30: b1:20:36:c6:85:76:0f:6c:12:e4:fc:f4:a3:8a:89:6a:b1:43: 43:27:18:fa:65:d2:0f:f9:15:18:69:c6:5c:26:88:c4:3c:c0: 81:0f:95:9a:da:a2:45:3d:c6:84:f6:de:3f:e6:b6:8d:08:c5: 36:a0:95:d9:f3:38:cb:ff:55:1d:36:35:35:38:26:3a:f1:f3: 8c:71:65:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDQxNEZCNjE3ODg2OTEzMEY4MjZFOUUzMEMwQjc5NDA4 NEQ5NzYwREQwHhcNMjYwNzI3MDEzOTAyWhcNMjYwODAzMDEzOTAyWjAYMRYwFAYD VQQDEw02YTY2YjZiNi03MGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWCCCr9fXf5y85vG22l1T4xf7Yw6e95LAehwiYFOA2Z6S7rdKltlroP4xQM+ NBlCh09Km1/Y7yt/lFkm4sySPPKAr30mN7QPNDbjDcmzFAxnI6DVkhjZu/tT4ggK J7mSpm9Q7enuPxAuRATin+eSWs9BrjrmGYTWYwkHE/WxLBldu2AyHyWwCiD0FqfS 5xfIFTQfM2UHkALk7RF/suFQpEakB8yxFjfdHhDxc7bTnXPFieklTx6XMOp3EJdx hxmyJPoBEbcb5zp+vNS38u0GqZ1hXY8S/NI932MZw/N6ltksJyFyu8UgaxJUHSe+ 4hbGCjhIaNXze461Z/eTfjMRlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIwzx8gs ywJxDEZr7FyKylKZswhwMB8GA1UdIwQYMBaAFEFPtheIaRMPgm6eMMC3lAhNl2Dd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BNEU2NzNDQURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3LUNicDR3d0xlVUNFMlhZ TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FVLTJGNGhwRXctQ2JwNHd3TGVVQ0UyWFlOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BNEU2NzNDQURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9RVS0yRjRocEV3 LUNicDR3d0xlVUNFMlhZTjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF6jVUNBbS/O6qeqkiP/FQR/iPmwL90SpgX2+s5X5I1g2IAcZ1t4t5/rt8z6q uLBt/szCqYbUJ4ZmtdJQ+frUEYE4y4WScC3a+5wqQJw1Ral+r8Jqyo/OdJDockbf 5UYke1yE9uGn/eVseTvmEu8Y4PYuls7p2pqDnXpNdMcKP4Ai6ndspkSFQXhecCN8 FjMZFcpaG/40ejw+Qd3WqSknsObGf0nWJfbx+byZIeaalGNhtXYwsSA2xoV2D2wS 5Pz0o4qJarFDQycY+mXSD/kVGGnGXCaIxDzAgQ+VmtqiRT3GhPbeP+a2jQjFNqCV 2fM4y/9VHTY1NTgmOvHzjHFlSw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:11:36 2026 by rpki-client