$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft File: qriBuCFHwwNrgPxnWTTcLkbOD38.mft (raw, json) Hash identifier: 7rawDOEb3v+h7sQSL+B0VReNcCF7vXJIVCfK9LdDULg= Subject key identifier: 4A:FC:43:1A:E0:39:61:8B:52:A8:79:97:4A:4F:4F:34:3A:4E:50:F0 Authority key identifier: AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F Certificate issuer: /CN=A91F4EDE/serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Certificate serial: 06E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft Manifest number: 06AF Signing time: Tue 28 Jul 2026 23:01:08 +0000 Manifest this update: Tue 28 Jul 2026 23:01:08 +0000 Manifest next update: Tue 04 Aug 2026 23:01:08 +0000 Files and hashes: 1: qriBuCFHwwNrgPxnWTTcLkbOD38.crl (hash: yJKDqnZKletBegox6LYeryFZwt4ljivA46RwF4y1vkg=) 2: 5A9BFC3ABE7C11EB8BC25C1CC4F9AE02.roa (hash: NTWzneRsI6xBoZcMBa/cRNUEBFQFqDaPLGuJ4Y8AzAY=) 3: 7E859EFEE60411EF89467057C4F9AE02.roa (hash: DBTQzmV3HyHHyoJ4NWJ949FIY35oLUF9Ca78F0C+fRE=) 4: 8C4BB9AED9DB11EF9AE05220C4F9AE02.roa (hash: CN1S5iBG91fG5Dyt4QhTqMPNL4CwNQilfba/5yYIoFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 22:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1765 (0x6e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4EDE, serialNumber=AAB881B82147C3036B80FC675934DC2E46CE0F7F Validity Not Before: Jul 28 23:01:08 2026 GMT Not After : Aug 4 23:01:08 2026 GMT Subject: CN=6a6934b4-d068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:5b:e4:60:9d:d5:99:a9:fa:a4:34:91:ac: f7:fc:4c:19:c2:38:50:e9:b4:57:b2:f6:ac:27:33: 50:10:23:b6:79:b1:70:b4:d5:83:08:0d:ac:8e:f3: 40:9f:45:37:19:4d:b5:9c:86:fa:eb:81:0f:72:16: d1:bd:c1:6b:8b:64:ac:ea:d8:cc:92:ca:24:d1:b5: 66:e1:b5:1e:71:09:c4:09:ff:b1:45:71:e6:ff:20: d8:84:4c:bc:6e:8a:a4:1b:29:06:7f:3f:2f:d3:fd: 1c:18:33:79:1d:6c:3c:48:4d:d6:35:47:6a:74:9d: 3e:b9:7a:df:86:9c:62:47:6a:4a:71:27:47:51:14: 94:e4:97:88:b0:cd:9e:bb:da:c8:95:1a:b0:fe:e7: b5:af:a5:80:d8:6d:fb:f9:77:b8:d2:b9:a5:d0:56: 45:35:0d:a7:00:78:21:e4:51:24:32:90:f7:74:50: 14:e4:bc:9a:53:e2:91:d1:8a:fa:41:26:02:e5:fe: 23:71:58:f7:b3:e0:ee:11:67:c9:2a:57:cd:bd:3c: a6:01:7c:6d:15:d2:00:b5:c4:85:99:45:fe:a9:ce: 07:10:54:4a:01:60:78:dc:7f:94:fc:2a:87:79:8c: 57:c7:75:cb:5b:89:71:85:67:9e:a7:eb:0d:52:37: b0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:FC:43:1A:E0:39:61:8B:52:A8:79:97:4A:4F:4F:34:3A:4E:50:F0 X509v3 Authority Key Identifier: keyid:AA:B8:81:B8:21:47:C3:03:6B:80:FC:67:59:34:DC:2E:46:CE:0F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qriBuCFHwwNrgPxnWTTcLkbOD38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4EDE/2CB03258BE7911EB95118B19C4F9AE02/qriBuCFHwwNrgPxnWTTcLkbOD38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:46:be:e9:b4:14:a8:84:07:ba:25:e9:5e:d8:7b:6d:74:29: 4f:80:94:23:21:db:a0:e5:d3:9d:41:b6:a2:c4:85:d6:ff:6f: dd:bb:b2:06:2e:e9:d3:90:e0:4d:0f:4f:94:dd:5d:a0:93:35: 78:36:3d:5d:e8:cb:a2:2e:b8:d2:40:d6:a9:94:a3:f1:3a:12: 7f:69:a1:52:55:2d:3c:53:4c:2e:af:73:bb:c1:70:17:ed:75: 08:05:93:9a:a6:2b:83:86:3e:6b:97:8b:f1:4b:3e:a3:92:35: 52:c5:c1:84:c6:cb:5d:6d:b8:a0:38:cb:5d:23:6f:c2:0e:0c: f4:51:ec:cc:43:c4:83:97:05:2f:63:d0:bd:55:e2:a7:3b:88: 7c:98:3a:34:a2:d3:d1:b4:28:eb:f7:41:ad:09:fc:7e:c5:16: d7:ac:7b:7b:d9:46:2d:23:55:b2:54:3b:71:33:29:23:bf:c2: f4:1e:a3:6a:e7:36:66:dc:c1:9d:9a:8b:97:a7:85:27:53:2b: 9a:09:71:3d:47:c1:85:2f:80:cc:79:fc:f2:7d:1a:51:7f:d1: 0c:2d:fa:93:ac:7b:08:b2:eb:3b:c5:c7:44:27:52:68:de:59: 22:15:4f:0f:0b:0a:43:cb:9f:1e:ce:ba:3e:32:b3:39:a1:b1: 53:8c:76:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjRFREUxMTAvBgNVBAUTKEFBQjg4MUI4MjE0N0MzMDM2QjgwRkM2NzU5MzREQzJF NDZDRTBGN0YwHhcNMjYwNzI4MjMwMTA4WhcNMjYwODA0MjMwMTA4WjAYMRYwFAYD VQQDEw02YTY5MzRiNC1kMDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvdb5GCd1Zmp+qQ0kaz3/EwZwjhQ6bRXsvasJzNQECO2ebFwtNWDCA2sjvNA n0U3GU21nIb664EPchbRvcFri2Ss6tjMksok0bVm4bUecQnECf+xRXHm/yDYhEy8 boqkGykGfz8v0/0cGDN5HWw8SE3WNUdqdJ0+uXrfhpxiR2pKcSdHURSU5JeIsM2e u9rIlRqw/ue1r6WA2G37+Xe40rml0FZFNQ2nAHgh5FEkMpD3dFAU5LyaU+KR0Yr6 QSYC5f4jcVj3s+DuEWfJKlfNvTymAXxtFdIAtcSFmUX+qc4HEFRKAWB43H+U/CqH eYxXx3XLW4lxhWeep+sNUjewvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEr8Qxrg OWGLUqh5l0pPTzQ6TlDwMB8GA1UdIwQYMBaAFKq4gbghR8MDa4D8Z1k03C5Gzg9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNEVERS8yQ0IwMzI1OEJF NzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3TnJnUHhuV1RUY0xrYk9E MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FyaUJ1Q0ZId3dOcmdQeG5XVFRjTGtiT0QzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NEVERS8yQ0IwMzI1OEJFNzkxMUVCOTUxMThCMTlDNEY5QUUwMi9xcmlCdUNGSHd3 TnJnUHhuV1RUY0xrYk9EMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKka+6bQUqIQHuiXpXth7bXQpT4CUIyHboOXTnUG2osSF1v9v3buyBi7p05Dg TQ9PlN1doJM1eDY9XejLoi640kDWqZSj8ToSf2mhUlUtPFNMLq9zu8FwF+11CAWT mqYrg4Y+a5eL8Us+o5I1UsXBhMbLXW24oDjLXSNvwg4M9FHszEPEg5cFL2PQvVXi pzuIfJg6NKLT0bQo6/dBrQn8fsUW16x7e9lGLSNVslQ7cTMpI7/C9B6jauc2ZtzB nZqLl6eFJ1MrmglxPUfBhS+AzHn88n0aUX/RDC36k6x7CLLrO8XHRCdSaN5ZIhVP DwsKQ8ufHs66PjKzOaGxU4x2+w== -----END CERTIFICATE-----Generated at Wed Jul 29 00:33:00 2026 by rpki-client