$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft File: q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft (raw, json) Hash identifier: nQ+t1l5mCZdG3Dy2Ha5Psa3iPoaZvZV4I7qEM+ME5NY= Subject key identifier: 93:99:19:89:78:8F:AA:A9:4C:75:5D:F5:DE:57:C2:2D:A0:A3:69:FD Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 Certificate issuer: /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft Manifest number: EC Signing time: Thu 23 Jul 2026 08:10:09 +0000 Manifest this update: Thu 23 Jul 2026 08:10:08 +0000 Manifest next update: Thu 30 Jul 2026 08:10:08 +0000 Files and hashes: 1: q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl (hash: 83dt3T5X/UL70cV+xZRPo1hwaxdQ56VubDxzMSExR28=) 2: 330409804CCE11F08ADD6485C4F9AE02.roa (hash: uj9BtH+Gx30PB+Rd8YZACkYl9VczoWS9fHCOeF8FuCQ=) 3: 0E4F46F2532E11F0B87D127CC4F9AE02.roa (hash: N+2dubiMuqB/4gWD0ppVA6QZJO1Q/1zqaBt+voV0zVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0 Validity Not Before: Jul 23 08:10:08 2026 GMT Not After : Jul 30 08:10:08 2026 GMT Subject: CN=6a61cc60-61af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:f0:ee:07:91:0e:81:9e:36:3e:f0:7e:ed: 58:33:9b:79:69:db:33:67:a5:bc:9a:45:2a:0d:d8: 47:d9:8d:5d:3d:33:9f:71:f2:84:1d:7a:95:74:8a: d4:1c:18:1d:54:ef:64:b8:26:86:80:e1:33:f9:ea: 96:97:8f:d4:50:c5:59:47:b0:45:c5:7a:15:88:ac: b7:84:60:a7:c5:b8:3c:77:46:23:3f:8e:16:7e:40: fc:a8:c5:1d:3f:cd:bd:57:03:af:f9:db:f8:87:0e: 75:20:88:f9:cd:62:3b:af:e5:fa:9f:99:2b:a5:06: d4:dd:6d:a8:39:8a:6d:6e:6a:a2:52:56:79:fa:1d: fe:36:c2:3c:1d:d5:64:ae:db:08:88:0d:bf:7c:75: d5:ca:03:f1:c8:b6:f6:c4:2a:cb:fb:50:e2:75:73: a0:0d:3e:96:48:47:4a:6c:09:03:93:f7:0a:e0:e2: 06:53:45:1b:0a:cd:66:ab:33:1e:e9:06:d7:ca:26: 7c:c8:41:9b:18:4f:a5:67:15:79:be:96:f9:cf:1e: 7d:b9:dd:e8:d3:be:82:ae:ca:6b:46:d7:5b:f1:52: c3:4c:36:57:ff:5a:ff:d1:9b:aa:6d:c0:c4:ec:89: 2c:7e:bf:01:d6:2a:a0:e3:f6:96:88:86:2e:00:0f: c4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:99:19:89:78:8F:AA:A9:4C:75:5D:F5:DE:57:C2:2D:A0:A3:69:FD X509v3 Authority Key Identifier: keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:55:cc:65:12:5f:34:26:02:42:8c:c6:2b:5e:52:9e:06:97: 7f:0a:1b:98:ee:b4:48:35:d2:d9:5a:92:43:14:fd:75:25:1b: 1d:9f:4d:d1:f9:87:bc:b9:f7:f9:5b:f8:d6:e5:b9:a6:59:3a: 53:1e:f9:b1:08:ee:2d:29:38:e7:42:67:23:95:64:e1:c5:b7: f5:9b:3f:25:e1:b2:89:48:0f:1b:25:65:6a:3f:09:f2:38:e6: 51:bf:bd:5f:77:d3:3e:e8:5b:89:b3:f4:2d:4f:20:93:2c:b2: f8:9d:cb:fa:2b:51:33:47:16:89:5b:ef:de:e5:dd:a1:78:45: 03:67:03:f7:fe:33:3c:36:50:68:75:81:71:8b:e2:c8:99:b8: d0:1b:f4:83:77:84:94:98:6e:8c:63:1e:3b:48:76:b2:d7:74: 09:55:21:63:5a:a5:a8:e6:e3:ef:0c:e1:e0:94:aa:70:5f:49: ba:9c:fc:8f:72:e3:87:b4:42:a6:da:ee:dc:ce:b8:f3:0e:34: f0:f9:f6:f7:0e:05:91:8e:8b:4d:f8:0a:d7:58:0a:29:92:6b: e2:7f:51:dc:e1:7c:0d:e8:39:d3:55:b4:66:1d:dd:8f:74:ff: d0:5a:9e:43:a0:e1:e0:63:4d:f6:04:01:77:96:0f:b2:af:fb: 25:66:44:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI2RDkxMTAvBgNVBAUTKEFCNjJEOTYzOTA4Q0MwRTNBODAxOTlBNDNEMzEyQTM0 QTA0ODgxRjAwHhcNMjYwNzIzMDgxMDA4WhcNMjYwNzMwMDgxMDA4WjAYMRYwFAYD VQQDEw02YTYxY2M2MC02MWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuETw7geRDoGeNj7wfu1YM5t5adszZ6W8mkUqDdhH2Y1dPTOfcfKEHXqVdIrU HBgdVO9kuCaGgOEz+eqWl4/UUMVZR7BFxXoViKy3hGCnxbg8d0YjP44WfkD8qMUd P829VwOv+dv4hw51IIj5zWI7r+X6n5krpQbU3W2oOYptbmqiUlZ5+h3+NsI8HdVk rtsIiA2/fHXVygPxyLb2xCrL+1DidXOgDT6WSEdKbAkDk/cK4OIGU0UbCs1mqzMe 6QbXyiZ8yEGbGE+lZxV5vpb5zx59ud3o076CrsprRtdb8VLDTDZX/1r/0ZuqbcDE 7Iksfr8B1iqg4/aWiIYuAA/EYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJOZGYl4 j6qpTHVd9d5Xwi2go2n9MB8GA1UdIwQYMBaAFKti2WOQjMDjqAGZpD0xKjSgSIHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjZEOS83NzQzRDUxRTFF NUYxMUYwQkEzODlBNEVDNEY5QUUwMi9xMkxaWTVDTXdPT29BWm1rUFRFcU5LQkln ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyTFpZNUNNd09Pb0FabWtQVEVxTktCSWdmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjZEOS83NzQzRDUxRTFFNUYxMUYwQkEzODlBNEVDNEY5QUUwMi9xMkxaWTVDTXdP T29BWm1rUFRFcU5LQklnZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkFXMZRJfNCYCQozGK15SngaXfwobmO60SDXS2VqSQxT9dSUbHZ9N0fmHvLn3 +Vv41uW5plk6Ux75sQjuLSk450JnI5Vk4cW39Zs/JeGyiUgPGyVlaj8J8jjmUb+9 X3fTPuhbibP0LU8gkyyy+J3L+itRM0cWiVvv3uXdoXhFA2cD9/4zPDZQaHWBcYvi yJm40Bv0g3eElJhujGMeO0h2std0CVUhY1qlqObj7wzh4JSqcF9Jupz8j3Ljh7RC ptru3M648w408Pn29w4FkY6LTfgK11gKKZJr4n9R3OF8Deg501W0Zh3dj3T/0Fqe Q6Dh4GNN9gQBd5YPsq/7JWZEEQ== -----END CERTIFICATE-----Generated at Thu Jul 23 21:51:52 2026 by rpki-client