$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft File: cq-668ns3aLu0tSbE-YEjqPkHmA.mft (raw, json) Hash identifier: xMLyeN1Uy7iA2ikMZ3x3pqfL3iKNvd6SClkBaissKRM= Subject key identifier: 42:A4:BD:BA:7F:75:12:E8:A2:7B:D8:5E:6A:41:A1:0F:21:B1:B9:1F Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 22A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft Manifest number: 2251 Signing time: Tue 28 Jul 2026 15:58:31 +0000 Manifest this update: Tue 28 Jul 2026 15:58:31 +0000 Manifest next update: Tue 04 Aug 2026 15:58:31 +0000 Files and hashes: 1: cq-668ns3aLu0tSbE-YEjqPkHmA.crl (hash: 17874lKezrYSqjFRvQwowsB90NvseedCHf4avZq2JSc=) 2: E9DE96C44C3611EEA9D59630C4F9AE02.roa (hash: v4lm1t03b9gy+zkyAg0MsXuQLEziIg1Uau5peZt74RY=) 3: EEFB07CCB8A311ED8F694046C4F9AE02.roa (hash: V2GgiDiVdp7icGNp8uei2QdYQy4qfASwmRrufFn1mxg=) 4: AB9E7432714911EEBF95153CC4F9AE02.roa (hash: Bbmi/J5Lpn7aHAntaVp/ckgJSOlUGXUjQqXrthSWKgU=) 5: 1C628A90671411EEA0040661C4F9AE02.roa (hash: M0M27e7jpHMqjXXvltEuadHWRQl0UpCUB3Q3dSoBa+I=) 6: 0FB07E54D28311EDB1655152C4F9AE02.roa (hash: 3IlwneiT3OIjV7tuhT2g5I0grdOyE91JkHSLmUB2BEY=) 7: 0F0824DED28311EDB1655152C4F9AE02.roa (hash: YxBTBicabikn08Aqg/dvf+PsgRQVrImZt4AAt8rvHnc=) 8: E50E6E14B63411EDB4416786C4F9AE02.roa (hash: KYaSzwf1L2QkO+jOOMTkJ2kvbpBzCO+jKOwM50VbrBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8872 (0x22a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D, serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Validity Not Before: Jul 28 15:58:31 2026 GMT Not After : Aug 4 15:58:31 2026 GMT Subject: CN=6a68d1a7-e37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:5b:9b:2c:ae:ef:51:91:9b:3a:2a:d8:a9: 4d:49:3c:86:8c:9d:ee:2e:bb:09:33:5d:14:84:13: b2:6b:31:75:52:89:70:04:21:35:01:e7:ae:d9:47: cd:d8:bc:5c:b5:b8:92:2c:cb:dd:91:e5:73:64:d2: 5d:a8:b7:30:2c:1c:9e:b4:25:dc:ae:3f:15:bf:db: fd:51:f4:4c:cc:97:42:39:82:ae:d4:97:58:70:6c: 73:53:1b:8c:f0:43:cc:fc:3f:a6:fe:cb:37:0e:21: 8a:fe:a8:7b:70:12:83:73:a8:08:53:c3:a7:a4:3a: 0e:10:39:f4:dd:07:1c:70:82:8e:e8:51:ee:ae:77: 9c:ff:4f:0c:1d:1a:9f:fb:2b:c9:fb:3e:db:8a:15: df:19:0e:e0:ab:ba:3b:1f:7d:f2:a2:53:75:1c:d2: 3d:77:24:15:07:48:b6:a5:67:4e:e3:ce:49:83:50: 26:20:34:8f:64:26:8f:4a:99:02:16:22:79:5e:09: 41:c3:1c:e6:07:50:2c:6a:2f:86:ac:24:a5:e1:7f: ba:d4:b4:3c:51:c2:5f:cc:c3:f4:3d:b3:d2:04:88: 7e:79:b3:9d:85:36:89:b9:d9:bd:3a:a1:cb:73:cf: 5c:b1:02:c7:07:07:71:fe:84:3c:d5:77:4b:49:cd: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A4:BD:BA:7F:75:12:E8:A2:7B:D8:5E:6A:41:A1:0F:21:B1:B9:1F X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f2:d3:d6:b5:47:7e:27:3a:b6:9e:29:ae:ae:4b:03:39:d4: 9b:30:ba:c7:25:57:d2:9b:d0:28:b3:59:6e:ce:ec:8b:9d:3f: 50:bb:76:f8:5d:e1:03:7b:cb:1c:67:d6:17:b2:44:96:cd:32: 45:6d:f2:2f:3b:fa:a8:2a:92:38:7c:cc:24:02:53:92:fa:82: 08:60:90:78:e4:39:3e:a1:01:d2:3e:cf:b0:d4:95:ca:84:1d: b6:59:f4:fc:2e:ed:1f:4d:38:fa:da:b4:3b:fc:5f:dc:67:f8: 58:2f:ea:a1:22:2a:0c:e7:09:2d:3b:2c:45:30:b9:e2:53:fe: 81:82:86:07:4d:7b:f4:35:86:c1:7f:61:ab:b7:be:97:54:01: f5:2e:05:90:fc:ea:44:6e:77:53:e9:ad:58:a7:7d:d6:3e:e2: ac:88:75:87:58:b5:aa:88:6f:94:82:ce:ba:80:ac:d4:c6:7f: 74:15:24:ab:9e:d0:8f:65:43:05:24:0f:c4:53:de:d1:52:3b: 6c:f4:c0:64:2a:47:0c:c0:7f:da:0b:78:37:99:84:6e:9b:be: db:85:ef:05:ce:59:b2:0f:76:97:a1:7d:91:45:65:e0:c1:70: b8:16:6e:f0:84:16:e4:f0:cd:0f:13:01:d6:f9:89:aa:32:dc: 12:15:11:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjYwNzI4MTU1ODMxWhcNMjYwODA0MTU1ODMxWjAYMRYwFAYD VQQDEw02YTY4ZDFhNy1lMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPZbmyyu71GRmzoq2KlNSTyGjJ3uLrsJM10UhBOyazF1UolwBCE1Aeeu2UfN 2LxctbiSLMvdkeVzZNJdqLcwLByetCXcrj8Vv9v9UfRMzJdCOYKu1JdYcGxzUxuM 8EPM/D+m/ss3DiGK/qh7cBKDc6gIU8OnpDoOEDn03QcccIKO6FHurnec/08MHRqf +yvJ+z7bihXfGQ7gq7o7H33yolN1HNI9dyQVB0i2pWdO485Jg1AmIDSPZCaPSpkC FiJ5XglBwxzmB1Asai+GrCSl4X+61LQ8UcJfzMP0PbPSBIh+ebOdhTaJudm9OqHL c89csQLHBwdx/oQ81XdLSc0Y/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEKkvbp/ dRLoonvYXmpBoQ8hsbkfMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQ0RC9CQUUxMDhDNEVBNjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNh THUwdFNiRS1ZRWpxUGtIbUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAevLT1rVHfic6tp4prq5LAznUmzC6xyVX0pvQKLNZbs7si50/ULt2+F3hA3vL HGfWF7JEls0yRW3yLzv6qCqSOHzMJAJTkvqCCGCQeOQ5PqEB0j7PsNSVyoQdtln0 /C7tH004+tq0O/xf3Gf4WC/qoSIqDOcJLTssRTC54lP+gYKGB0179DWGwX9hq7e+ l1QB9S4FkPzqRG53U+mtWKd91j7irIh1h1i1qohvlILOuoCs1MZ/dBUkq57Qj2VD BSQPxFPe0VI7bPTAZCpHDMB/2gt4N5mEbpu+24XvBc5Zsg92l6F9kUVl4MFwuBZu 8IQW5PDNDxMB1vmJqjLcEhURLQ== -----END CERTIFICATE-----Generated at Wed Jul 29 04:53:03 2026 by rpki-client