$ rpki-client -vvf rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft File: qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft (raw, json) Hash identifier: +HryVPJ44yWPsrVKa2OQ+Li3IuqRpA+XjQ1JJAxIZTU= Subject key identifier: 0B:2F:97:D9:03:79:C4:27:E2:69:1D:14:36:67:1D:F6:DD:F3:12:17 Authority key identifier: AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B Certificate issuer: /CN=A913C04E/serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft Manifest number: 0226 Signing time: Thu 23 Jul 2026 04:06:54 +0000 Manifest this update: Thu 23 Jul 2026 04:06:54 +0000 Manifest next update: Thu 30 Jul 2026 04:06:54 +0000 Files and hashes: 1: qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl (hash: wbxm/O8X3+SUWwoAzEzvUcPhxeTZW5l9FsDJxiawq0k=) 2: F696778AFE6C11EF8DF5DD5FC4F9AE02.roa (hash: QZy1qVC0Q+cqyxMf7EVM3pOdkz0nlqRyTh5BSLF+qQU=) 3: 7236C4D8513211EEA8D81765C4F9AE02.roa (hash: LVK4CGRWmLE4xB4n/5XeLVwhnpe4egBFCt8oT+b9SGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C04E, serialNumber=AADCDB89E54B677C410463799F9586815C40FA4B Validity Not Before: Jul 23 04:06:54 2026 GMT Not After : Jul 30 04:06:54 2026 GMT Subject: CN=6a61935e-9a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dd:31:84:c3:f7:60:ff:c2:8b:90:fc:e0:93: 96:29:d7:86:c2:6f:54:39:f7:6b:60:47:94:ce:3a: ee:eb:0a:b1:cf:da:1a:9a:85:97:3b:fc:9c:74:14: eb:d2:8b:31:f2:6f:cb:38:84:07:61:16:9f:76:e1: 65:33:b5:d8:4b:01:1c:54:36:65:16:74:0a:95:0c: a4:78:05:eb:f9:00:06:88:a0:92:f4:bc:6a:76:18: 0f:37:25:1c:c5:b0:70:4a:60:e0:2e:6c:dd:5c:a9: a8:76:61:65:57:27:19:8a:d7:93:d9:27:88:9c:ee: 4a:c6:33:83:6c:68:8c:6a:12:fd:cf:cf:1c:ae:4a: b5:e2:c6:b6:e6:bd:35:fb:af:2b:20:66:20:04:6f: f1:b1:c6:75:eb:b5:7e:c8:59:47:5a:4c:f0:6d:f6: b7:56:02:82:46:0c:33:2b:7e:48:0a:b0:f0:95:8d: 7d:dc:49:04:8c:a1:42:c3:45:61:2c:90:9f:74:2d: b1:a3:18:fc:a7:6a:87:e6:b0:74:dd:e0:f7:a1:2a: 25:85:d7:aa:6b:8c:ff:2a:c6:5d:42:17:91:96:07: fd:11:79:84:6e:96:ad:41:7b:ad:9b:d9:9d:eb:24: e6:67:3c:9c:38:86:87:fd:6d:75:15:c3:e4:d9:30: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2F:97:D9:03:79:C4:27:E2:69:1D:14:36:67:1D:F6:DD:F3:12:17 X509v3 Authority Key Identifier: keyid:AA:DC:DB:89:E5:4B:67:7C:41:04:63:79:9F:95:86:81:5C:40:FA:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qtzbieVLZ3xBBGN5n5WGgVxA-ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C04E/22E68526513211EE964CCF5BC4F9AE02/qtzbieVLZ3xBBGN5n5WGgVxA-ks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:8d:4d:a9:19:ef:44:f3:fa:08:dd:5e:4e:f6:6f:c4:c0:82: e3:a1:7d:3e:9f:85:ed:dc:c9:a1:44:1f:63:b7:bd:71:f2:e0: f3:50:a1:c3:a5:d1:1e:1c:9c:d6:ff:65:86:c6:29:99:91:4d: 5f:25:86:cb:1f:37:c3:42:af:49:cc:34:56:36:cc:0a:6e:64: 35:84:81:20:70:c4:03:36:bb:5f:92:7f:37:50:2b:53:e4:74: d7:7f:8b:ff:9f:16:8b:b3:a4:75:8c:71:02:48:ed:a1:ef:59: 88:ae:29:f7:f7:7d:47:77:a1:df:e1:5c:a6:35:80:47:d3:b1: 5f:88:b8:43:70:35:7d:59:13:15:a4:13:cf:34:6d:e4:3c:aa: a8:3e:13:85:c9:61:36:87:65:40:9a:97:6e:9f:aa:3b:3f:a3: 42:04:ce:7f:f9:98:21:ad:12:8b:d3:6f:45:10:67:71:c3:31: 64:ca:54:80:2d:51:a6:b9:91:b8:8a:aa:e1:e4:b4:78:ca:c2: 1c:af:bb:bb:2b:3f:dd:42:32:d9:cd:f7:af:66:68:6d:0d:dc: fb:df:1e:89:4d:e4:58:52:41:4b:30:69:4c:97:36:31:45:26: 3b:d3:f6:f6:dd:fd:9c:35:17:81:79:0c:36:a0:04:87:fa:b4: fd:18:ea:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0MwNEUxMTAvBgNVBAUTKEFBRENEQjg5RTU0QjY3N0M0MTA0NjM3OTlGOTU4Njgx NUM0MEZBNEIwHhcNMjYwNzIzMDQwNjU0WhcNMjYwNzMwMDQwNjU0WjAYMRYwFAYD VQQDEw02YTYxOTM1ZS05YTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi90xhMP3YP/Ci5D84JOWKdeGwm9UOfdrYEeUzjru6wqxz9oamoWXO/ycdBTr 0osx8m/LOIQHYRafduFlM7XYSwEcVDZlFnQKlQykeAXr+QAGiKCS9LxqdhgPNyUc xbBwSmDgLmzdXKmodmFlVycZiteT2SeInO5KxjODbGiMahL9z88crkq14sa25r01 +68rIGYgBG/xscZ167V+yFlHWkzwbfa3VgKCRgwzK35ICrDwlY193EkEjKFCw0Vh LJCfdC2xoxj8p2qH5rB03eD3oSolhdeqa4z/KsZdQheRlgf9EXmEbpatQXutm9md 6yTmZzycOIaH/W11FcPk2TCKaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAsvl9kD ecQn4mkdFDZnHfbd8xIXMB8GA1UdIwQYMBaAFKrc24nlS2d8QQRjeZ+VhoFcQPpL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzA0RS8yMkU2ODUyNjUx MzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFozeEJCR041bjVXR2dWeEEt a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F0emJpZVZMWjN4QkJHTjVuNVdHZ1Z4QS1rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzA0RS8yMkU2ODUyNjUxMzIxMUVFOTY0Q0NGNUJDNEY5QUUwMi9xdHpiaWVWTFoz eEJCR041bjVXR2dWeEEta3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMY1NqRnvRPP6CN1eTvZvxMCC46F9Pp+F7dzJoUQfY7e9cfLg81Chw6XRHhyc 1v9lhsYpmZFNXyWGyx83w0KvScw0VjbMCm5kNYSBIHDEAza7X5J/N1ArU+R013+L /58Wi7OkdYxxAkjtoe9ZiK4p9/d9R3eh3+FcpjWAR9OxX4i4Q3A1fVkTFaQTzzRt 5DyqqD4ThclhNodlQJqXbp+qOz+jQgTOf/mYIa0Si9NvRRBnccMxZMpUgC1RprmR uIqq4eS0eMrCHK+7uys/3UIy2c33r2ZobQ3c+98eiU3kWFJBSzBpTJc2MUUmO9P2 9t39nDUXgXkMNqAEh/q0/RjqcQ== -----END CERTIFICATE-----Generated at Thu Jul 23 23:25:18 2026 by rpki-client