$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft File: QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft (raw, json) Hash identifier: YlBdHKXowTrP8FepBKucGJ2qXKqsbmt63ftcL++SJkc= Subject key identifier: 38:ED:A3:E0:68:CE:AE:79:6E:E1:C9:11:CB:25:EE:DD:6B:4D:6B:B5 Authority key identifier: 42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 Certificate issuer: /CN=A91FCEB1/serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Certificate serial: 2166 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft Manifest number: 2945 Signing time: Tue 28 Jul 2026 16:00:37 +0000 Manifest this update: Tue 28 Jul 2026 16:00:37 +0000 Manifest next update: Tue 04 Aug 2026 16:00:37 +0000 Files and hashes: 1: QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl (hash: SV0pi4V0GfItTPNXssCwfuPcN7qrb4JT8Wvk2jdWUfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8550 (0x2166) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCEB1, serialNumber=4267CF5D03004A8FEFDF21395D0FE824548B13C1 Validity Not Before: Jul 28 16:00:37 2026 GMT Not After : Aug 4 16:00:37 2026 GMT Subject: CN=6a68d225-f388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cf:69:95:4b:e4:29:ac:b3:6d:9f:ee:d0:cf: 5a:5c:94:ef:e1:99:74:7f:f9:62:79:fd:52:fa:a0: 2f:07:b4:cb:43:06:90:b0:d8:ac:e6:f6:68:f7:f6: 38:e2:30:57:ca:f2:8b:82:f6:c6:cb:fa:e2:23:fb: f4:10:2c:9a:42:b6:3f:4d:12:59:27:e5:61:c9:6c: 62:ea:23:fb:6f:37:ae:cd:a1:5b:38:bc:df:c6:35: 27:89:19:66:23:c4:55:61:ee:e5:9b:b5:2d:a8:18: 4a:14:b8:3a:64:d8:0d:07:cd:c1:ce:ca:c0:1a:b2: e0:64:81:d4:c4:b3:30:45:43:08:b9:38:d2:24:03: 50:d1:10:3e:fd:01:0e:34:52:bd:29:54:af:65:be: 71:ac:80:5e:ef:ac:d3:da:56:51:70:7a:93:2b:0d: 00:bc:ec:73:3c:df:59:69:ad:fe:45:ec:5f:60:fc: e8:a2:a0:19:46:b6:3d:30:e5:88:54:14:99:7b:ba: 8a:0b:23:93:28:7a:45:75:d1:6d:72:5b:9e:5c:e5: 34:9b:80:6e:83:f9:3b:19:0d:a3:39:8e:52:15:63: 37:11:f3:62:0a:ca:2a:60:c4:7f:6d:40:6d:4f:72: fe:4e:82:8b:2d:22:1f:f1:4c:e2:69:c9:f8:2c:99: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:ED:A3:E0:68:CE:AE:79:6E:E1:C9:11:CB:25:EE:DD:6B:4D:6B:B5 X509v3 Authority Key Identifier: keyid:42:67:CF:5D:03:00:4A:8F:EF:DF:21:39:5D:0F:E8:24:54:8B:13:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmfPXQMASo_v3yE5XQ_oJFSLE8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/EFB875C808C911E68C778878C4F9AE02/QmfPXQMASo_v3yE5XQ_oJFSLE8E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:7f:8c:e2:d6:ff:a2:f1:77:de:03:0c:d5:a1:92:b1:03:bc: 05:cb:eb:db:a2:fe:ef:5c:20:83:ea:7a:a7:5c:c1:1b:ee:45: f5:25:c8:42:7d:91:69:dc:47:b1:28:23:43:db:b7:d2:90:5a: 43:14:04:61:79:20:0f:06:86:9b:00:77:6e:ef:e7:1f:c2:76: f2:ef:a7:d5:a2:df:39:cd:c1:4d:28:31:43:2f:7e:f0:c4:56: 46:6a:6e:70:e5:b2:23:f9:a9:ed:81:91:4f:62:3f:33:3e:68: d6:08:54:e8:10:1f:c5:b4:04:6b:83:94:47:c7:37:86:89:57: 0e:b3:ff:99:e7:68:8b:86:e7:9a:51:4b:eb:60:1c:f5:2b:44: ae:bf:82:79:e9:85:ce:8d:7e:8c:9f:1d:80:2e:a2:65:a7:a5: 64:83:da:d5:84:48:9b:52:13:f2:2f:f5:80:62:04:4b:3b:70: 0f:e8:e0:8f:31:34:04:a6:af:50:41:8f:6f:ad:74:a2:f2:85: 61:33:3d:b5:82:db:89:ef:9e:9b:d4:8e:55:1c:b6:8d:a1:12: c8:c8:fc:1f:f8:40:97:80:2c:9a:df:11:02:70:64:06:fd:5c: 9c:e7:e9:84:d4:9a:77:04:61:f3:a7:c6:33:61:bb:b4:d2:2a: a0:d9:1b:b9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNFQjExMTAvBgNVBAUTKDQyNjdDRjVEMDMwMDRBOEZFRkRGMjEzOTVEMEZFODI0 NTQ4QjEzQzEwHhcNMjYwNzI4MTYwMDM3WhcNMjYwODA0MTYwMDM3WjAYMRYwFAYD VQQDEw02YTY4ZDIyNS1mMzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArc9plUvkKayzbZ/u0M9aXJTv4Zl0f/lief1S+qAvB7TLQwaQsNis5vZo9/Y4 4jBXyvKLgvbGy/riI/v0ECyaQrY/TRJZJ+VhyWxi6iP7bzeuzaFbOLzfxjUniRlm I8RVYe7lm7UtqBhKFLg6ZNgNB83BzsrAGrLgZIHUxLMwRUMIuTjSJANQ0RA+/QEO NFK9KVSvZb5xrIBe76zT2lZRcHqTKw0AvOxzPN9Zaa3+RexfYPzooqAZRrY9MOWI VBSZe7qKCyOTKHpFddFtclueXOU0m4Bug/k7GQ2jOY5SFWM3EfNiCsoqYMR/bUBt T3L+ToKLLSIf8Uziacn4LJn0dQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDjto+Bo zq55buHJEcsl7t1rTWu1MB8GA1UdIwQYMBaAFEJnz10DAEqP798hOV0P6CRUixPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0VCMS9FRkI4NzVDODA4 QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNvX3YzeUU1WFFfb0pGU0xF OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FtZlBYUU1BU29fdjN5RTVYUV9vSkZTTEU4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0VCMS9FRkI4NzVDODA4QzkxMUU2OEM3Nzg4NzhDNEY5QUUwMi9RbWZQWFFNQVNv X3YzeUU1WFFfb0pGU0xFOEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABX+M4tb/ovF33gMM1aGSsQO8Bcvr26L+71wgg+p6p1zBG+5F9SXIQn2RadxH sSgjQ9u30pBaQxQEYXkgDwaGmwB3bu/nH8J28u+n1aLfOc3BTSgxQy9+8MRWRmpu cOWyI/mp7YGRT2I/Mz5o1ghU6BAfxbQEa4OUR8c3holXDrP/medoi4bnmlFL62Ac 9StErr+CeemFzo1+jJ8dgC6iZaelZIPa1YRIm1IT8i/1gGIESztwD+jgjzE0BKav UEGPb610ovKFYTM9tYLbie+em9SOVRy2jaESyMj8H/hAl4Asmt8RAnBkBv1cnOfp hNSadwRh86fGM2G7tNIqoNkbuQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:49:20 2026 by rpki-client