$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json) Hash identifier: wx2ZfRjIgKcjk8XqxacOk9ysOnkYz/gEf2SaPA+L6mQ= Subject key identifier: EE:40:29:B7:68:D6:A7:25:4A:E3:7B:6E:85:CC:2A:6E:88:28:83:A5 Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 0BC1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft Manifest number: 0AFE Signing time: Wed 22 Jul 2026 19:58:06 +0000 Manifest this update: Wed 22 Jul 2026 19:58:05 +0000 Manifest next update: Wed 29 Jul 2026 19:58:05 +0000 Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: XHiZXsJRANBoj/m665KHrLRiGAbksUNs+4Ro+J9nNYo=) 2: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: wpGRFC6+DwJQoD/Bm6hMgYO5Gr04EgHxiy8sbfP7iA8=) 3: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: GhZxcNMvyQlSrFSWmku1+ahVlAxZoEGclnQbU2Qrymw=) 4: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: SkOhlI1Sq/LIctQQV3ASYYQ+aRYJDMBcBGKvl4fYf/A=) 5: 553170245AC511EBA052F663C4F9AE02.roa (hash: NBDkJIuqHlF4I8cMlSivAAbBMzPvILaMaBqKjeLV/KQ=) 6: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: LpUWhMMembbOWPh50IbGhsLcg7v+awk6J0ISPizwZwo=) 7: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: wZo18R1LnD+2k6h4J7pMIrHXFSVwyqxLJaqUcBl2koQ=) 8: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: sw6eH1M5hEn6a0pc3B0uLVLZCRXvmEkQN01rQxgEvj0=) 9: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: GKBnrOK5UbpE6Y1zn126/+tVLBVe3fXMAkHrduoxCcI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3009 (0xbc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Validity Not Before: Jul 22 19:58:05 2026 GMT Not After : Jul 29 19:58:05 2026 GMT Subject: CN=6a6120cd-fd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:ee:84:30:43:f1:a3:07:10:42:c3:db:93: 81:df:ab:be:7d:87:6d:c7:58:ca:53:df:f0:07:8a: 4e:89:fb:3d:25:0a:15:26:2d:b6:83:47:3e:77:19: ce:1c:2a:ce:4e:6f:d2:4f:94:59:82:20:0e:97:81: d5:61:5c:d4:f3:7e:0f:9e:09:fb:2c:13:0a:81:e4: 17:dd:89:39:2a:d6:cc:1e:0f:4a:68:90:85:6a:af: 7c:86:c7:9b:08:17:69:b9:b9:10:51:f2:12:0d:bb: fb:91:f8:a5:0b:33:3c:65:3b:6c:6d:17:30:28:d9: 9b:44:7c:dc:7a:93:5d:e1:c7:7b:10:de:e9:71:eb: 11:0a:07:a2:79:a8:46:b4:ec:4c:a4:a9:f9:e4:5b: 53:51:cc:30:48:80:0c:f4:86:a1:30:3b:94:ad:f5: ba:52:60:0d:2c:f1:69:ec:26:f6:08:90:1d:da:42: bb:9a:fe:79:82:87:d9:98:ed:0f:40:42:03:cf:ea: 44:d3:54:8f:eb:25:70:d4:74:b5:5f:24:cb:cb:e8: 03:47:f8:f6:e4:ec:64:ea:7d:cd:bc:ac:d6:66:7e: 8f:9d:7d:51:97:c4:34:da:db:cb:c9:38:3e:ae:96: 2e:5b:df:7f:06:e1:4b:56:2e:90:e5:b1:be:4f:f6: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:40:29:B7:68:D6:A7:25:4A:E3:7B:6E:85:CC:2A:6E:88:28:83:A5 X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:0a:14:b8:f0:d3:6d:e0:21:72:80:b0:08:1e:f0:1a:c2:e2: 3f:8f:6e:8a:32:cc:bb:40:f0:7f:90:64:6c:43:5f:a9:ed:1d: be:a8:7b:ae:b2:7f:a0:0f:23:f9:b7:3f:dc:d7:79:64:3a:11: a0:8b:8c:68:71:3d:19:df:06:14:df:2e:8e:0a:29:29:0b:9c: ac:19:3a:cf:66:24:d5:bc:f0:04:2e:f9:b5:cb:fc:71:5e:aa: fb:8a:8c:0d:3e:22:3d:34:f3:a6:14:da:87:06:6f:96:4f:ec: a8:ca:59:20:13:bb:62:b5:29:cf:1c:a0:5e:4a:f7:49:ab:b0: 29:13:db:44:de:c2:b3:33:74:53:9d:0d:a9:98:e8:89:0e:ab: 21:73:e1:6e:8b:69:45:b9:07:1e:96:6e:39:12:9e:6b:d7:cb: 8d:86:85:53:79:97:10:66:48:80:84:e7:3a:aa:2c:50:5b:4f: 93:32:31:2a:3a:17:58:2b:28:0f:a0:22:6e:26:1b:80:66:c2: ed:4b:4d:30:a5:28:db:05:b9:f9:0b:4c:49:12:1e:6b:5e:4e: 17:b4:9d:c7:14:a4:4a:83:6a:ba:29:da:20:96:43:e0:a0:0a: ee:38:ab:e8:7c:e4:6b:97:7b:0c:8e:36:9b:2f:55:9c:92:14: d9:f5:9e:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjYwNzIyMTk1ODA1WhcNMjYwNzI5MTk1ODA1WjAYMRYwFAYD VQQDEw02YTYxMjBjZC1mZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7PuhDBD8aMHEELD25OB36u+fYdtx1jKU9/wB4pOifs9JQoVJi22g0c+dxnO HCrOTm/ST5RZgiAOl4HVYVzU834Pngn7LBMKgeQX3Yk5KtbMHg9KaJCFaq98hseb CBdpubkQUfISDbv7kfilCzM8ZTtsbRcwKNmbRHzcepNd4cd7EN7pcesRCgeieahG tOxMpKn55FtTUcwwSIAM9IahMDuUrfW6UmANLPFp7Cb2CJAd2kK7mv55gofZmO0P QEIDz+pE01SP6yVw1HS1XyTLy+gDR/j25Oxk6n3NvKzWZn6PnX1Rl8Q02tvLyTg+ rpYuW99/BuFLVi6Q5bG+T/Y8sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5AKbdo 1qclSuN7boXMKm6IKIOlMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkwoUuPDTbeAhcoCwCB7wGsLiP49uijLMu0Dwf5BkbENfqe0dvqh7rrJ/oA8j +bc/3Nd5ZDoRoIuMaHE9Gd8GFN8ujgopKQucrBk6z2Yk1bzwBC75tcv8cV6q+4qM DT4iPTTzphTahwZvlk/sqMpZIBO7YrUpzxygXkr3SauwKRPbRN7CszN0U50NqZjo iQ6rIXPhbotpRbkHHpZuORKea9fLjYaFU3mXEGZIgITnOqosUFtPkzIxKjoXWCso D6AibiYbgGbC7UtNMKUo2wW5+QtMSRIea15OF7SdxxSkSoNquinaIJZD4KAK7jir 6Hzka5d7DI42my9VnJIU2fWeGA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:51:42 2026 by rpki-client