$ rpki-client -vvf rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft File: qo4b42JCQNwzAgR_tBp9TkeAjvg.mft (raw, json) Hash identifier: PBVp1u8sPlFd36YIUhYD1bRZPrLdgvnE+phC0wUrYUU= Subject key identifier: 3C:E4:D9:8A:AA:92:E0:CB:61:98:7B:5A:62:FB:F0:9C:18:FE:09:D9 Authority key identifier: AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 Certificate issuer: /CN=A911E509/serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Certificate serial: 0A7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft Manifest number: 0A37 Signing time: Wed 22 Jul 2026 20:16:36 +0000 Manifest this update: Wed 22 Jul 2026 20:16:36 +0000 Manifest next update: Wed 29 Jul 2026 20:16:36 +0000 Files and hashes: 1: qo4b42JCQNwzAgR_tBp9TkeAjvg.crl (hash: mtOt5SqUhT7Z/xLkzka1Bc1ifPFroT3zNcYkk9ayK8M=) 2: 0FD0ED72DEDF11F085D204E3526F56BC.roa (hash: pTLqg59yg6AHQtWauJEh8VBOaMqkkf2a1JioyqursTM=) 3: C2A410D4ADA011F08E990C1DC4F9AE02.roa (hash: G0vU5JVbCZyLk1wSOWyQBhOy8mR2nS22Z/eltaU886M=) 4: 2E18EB105D0C11EE873B1C2AC4F9AE02.roa (hash: 1IEjJ30lw69ZEHMKoLQ8EMNLbhqzITtfEQNas8rt+9s=) 5: 35E2088CDEDC11F09573FB8A516F56BC.roa (hash: Pkdcinjik27aP1313/FsgkfOJBBKQKn1ifEErEuk2l8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2684 (0xa7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E509, serialNumber=AA8E1BE3624240DC3302047FB41A7D4E47808EF8 Validity Not Before: Jul 22 20:16:36 2026 GMT Not After : Jul 29 20:16:36 2026 GMT Subject: CN=6a612524-7d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:d9:1d:30:2a:6b:01:6f:b4:98:b9:e8:d4: 4e:f8:e8:7e:ce:f5:d7:9a:f9:a8:7b:07:5f:05:1d: 7c:1b:c3:64:9e:20:68:f5:81:fe:21:38:8b:d6:8f: b7:e1:ef:4d:98:3f:72:32:a9:38:d5:59:6e:57:b7: 89:57:2d:54:fc:0f:5a:6f:42:62:a2:b7:c8:ed:45: 53:1b:15:16:b8:27:df:35:93:c7:5f:0e:78:83:13: bd:e5:01:7e:77:52:3e:2c:c4:8e:c7:b2:d3:61:05: c1:5f:db:32:e5:97:94:0b:6b:da:8d:ef:d1:91:24: 91:0d:3a:39:60:fd:79:84:84:07:f1:6e:f2:5c:1d: 01:27:4c:cc:af:8e:e3:5f:62:44:66:96:1d:aa:2f: 85:8d:12:61:7c:2e:3e:7b:b6:f7:6b:4d:7a:bd:97: 11:4a:4a:c3:a8:09:18:ed:80:9f:31:3d:c4:0b:23: a0:bf:3c:e9:f5:f2:3f:95:85:b6:f2:4b:17:a6:4b: 34:1b:1c:c3:2f:1c:76:6c:46:1c:5e:a1:6d:e2:53: c7:22:ef:7c:e7:75:4d:54:b6:46:89:3e:34:2e:33: 6a:54:db:34:70:76:2d:3a:3d:ae:bd:d4:e9:b6:2e: 74:09:95:e7:a4:e5:2c:0d:70:1d:3f:a7:9a:fe:f4: 5f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E4:D9:8A:AA:92:E0:CB:61:98:7B:5A:62:FB:F0:9C:18:FE:09:D9 X509v3 Authority Key Identifier: keyid:AA:8E:1B:E3:62:42:40:DC:33:02:04:7F:B4:1A:7D:4E:47:80:8E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qo4b42JCQNwzAgR_tBp9TkeAjvg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E509/79EA591EA7BD11EAAAA62948C4F9AE02/qo4b42JCQNwzAgR_tBp9TkeAjvg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:85:cf:5d:81:ae:cf:8a:4f:6b:df:a0:9e:f5:52:1d:0d:9f: 99:5a:d5:a5:1a:c4:1c:4f:d7:e8:98:dc:4e:17:23:fc:13:88: d6:c1:81:16:89:fe:1e:50:36:97:ec:5b:38:5c:03:d7:02:87: 92:58:4e:6c:ce:f8:33:9b:7c:0a:96:68:e7:55:e9:0e:81:9b: ee:14:ed:dd:b0:de:ca:9c:b2:3e:bf:de:f3:6e:1d:f9:d1:9f: 61:92:62:62:e2:c9:06:56:12:4d:7e:0a:14:7b:01:a8:0b:4a: 76:43:53:e7:44:ee:41:34:02:4f:eb:4a:35:60:b0:37:06:7c: db:72:3a:b0:16:88:61:f0:d8:d9:6a:92:3b:8d:64:8f:37:76: 02:96:b6:37:7e:6b:a5:e1:fc:60:c1:01:7f:6f:21:4a:f1:89: 49:6c:ca:06:78:76:af:f1:a9:4d:ee:72:4c:1a:d1:17:46:d6: 64:de:06:67:c0:74:c1:de:74:8d:83:31:bc:ac:54:b1:7b:8b: 2a:bd:6a:40:e9:af:1e:4a:bd:48:1f:48:16:f9:f5:8a:0e:c2: e7:63:47:54:61:b5:b8:65:5c:02:ff:de:49:18:4e:0d:42:08: b5:34:e8:f4:c9:a6:97:d5:aa:d5:04:0c:be:d6:aa:db:5e:3d: 3e:bb:ff:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU1MDkxMTAvBgNVBAUTKEFBOEUxQkUzNjI0MjQwREMzMzAyMDQ3RkI0MUE3RDRF NDc4MDhFRjgwHhcNMjYwNzIyMjAxNjM2WhcNMjYwNzI5MjAxNjM2WjAYMRYwFAYD VQQDEw02YTYxMjUyNC03ZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp7ZHTAqawFvtJi56NRO+Oh+zvXXmvmoewdfBR18G8NkniBo9YH+ITiL1o+3 4e9NmD9yMqk41VluV7eJVy1U/A9ab0JiorfI7UVTGxUWuCffNZPHXw54gxO95QF+ d1I+LMSOx7LTYQXBX9sy5ZeUC2vaje/RkSSRDTo5YP15hIQH8W7yXB0BJ0zMr47j X2JEZpYdqi+FjRJhfC4+e7b3a016vZcRSkrDqAkY7YCfMT3ECyOgvzzp9fI/lYW2 8ksXpks0GxzDLxx2bEYcXqFt4lPHIu9853VNVLZGiT40LjNqVNs0cHYtOj2uvdTp ti50CZXnpOUsDXAdP6ea/vRfPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzk2Yqq kuDLYZh7WmL78JwY/gnZMB8GA1UdIwQYMBaAFKqOG+NiQkDcMwIEf7QafU5HgI74 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTUwOS83OUVBNTkxRUE3 QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FOd3pBZ1JfdEJwOVRrZUFq dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FvNGI0MkpDUU53ekFnUl90QnA5VGtlQWp2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTUwOS83OUVBNTkxRUE3QkQxMUVBQUFBNjI5NDhDNEY5QUUwMi9xbzRiNDJKQ1FO d3pBZ1JfdEJwOVRrZUFqdmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQIXPXYGuz4pPa9+gnvVSHQ2fmVrVpRrEHE/X6JjcThcj/BOI1sGBFon+HlA2 l+xbOFwD1wKHklhObM74M5t8CpZo51XpDoGb7hTt3bDeypyyPr/e824d+dGfYZJi YuLJBlYSTX4KFHsBqAtKdkNT50TuQTQCT+tKNWCwNwZ823I6sBaIYfDY2WqSO41k jzd2Apa2N35rpeH8YMEBf28hSvGJSWzKBnh2r/GpTe5yTBrRF0bWZN4GZ8B0wd50 jYMxvKxUsXuLKr1qQOmvHkq9SB9IFvn1ig7C52NHVGG1uGVcAv/eSRhODUIItTTo 9Mmml9Wq1QQMvtaq2149Prv/EA== -----END CERTIFICATE-----Generated at Fri Jul 24 21:38:47 2026 by rpki-client