$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft File: qXEsy37uAkrriHZ7di4Qk7FA_24.mft (raw, json) Hash identifier: fCZcb2qGEAzczLa3TfneqUa100AvvpY7/7eOA2ttneU= Subject key identifier: B6:4D:91:F8:69:C4:12:48:BB:B8:A4:CD:AE:70:10:90:2D:D6:88:87 Authority key identifier: A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E Certificate issuer: /CN=A9148B6A/serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Certificate serial: 10EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft Manifest number: 10D2 Signing time: Wed 22 Jul 2026 18:18:06 +0000 Manifest this update: Wed 22 Jul 2026 18:18:06 +0000 Manifest next update: Wed 29 Jul 2026 18:18:06 +0000 Files and hashes: 1: qXEsy37uAkrriHZ7di4Qk7FA_24.crl (hash: iJwgvKB4hyZoG+nubEp/+/tnXeTSYAKf6y1VZ2nt6zA=) 2: 1BCA5982656311ECA4E81323C4F9AE02.roa (hash: sBJRcb1jeiSo6W9iH/QWFKlKGnbO+XkPqf2UK7Z9wiI=) 3: 07FF4ABC5A1011EAA8B1B456C4F9AE02.roa (hash: GDAnZb/56NjHKOSDOXY9bNI/CfCE20/WA0Nzn9nbjnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4332 (0x10ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148B6A, serialNumber=A9712CCB7EEE024AEB88767B762E1093B140FF6E Validity Not Before: Jul 22 18:18:06 2026 GMT Not After : Jul 29 18:18:06 2026 GMT Subject: CN=6a61095e-8fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:c1:b1:f2:e8:55:f2:71:ef:89:0d:e8:45: 10:0d:b1:62:f0:3a:67:fb:ca:da:a9:b3:20:38:63: c3:5c:5b:c5:82:06:71:80:a4:42:01:28:c9:27:e2: 25:c1:82:5a:40:d0:4e:9a:aa:72:e7:f3:ed:68:c3: 8f:01:ee:75:55:fa:9e:6d:48:32:9c:0b:8b:93:0b: cb:2f:1c:68:9f:94:cd:21:2c:d9:0d:67:7b:c9:04: 4a:fe:42:57:24:04:db:d7:a0:55:16:51:7d:e3:ff: 3c:cf:31:ef:3f:d2:de:ca:78:70:cd:11:10:39:4a: 8a:6a:74:fb:2f:8b:98:b0:f8:6f:a5:81:cc:ab:82: 3c:a9:39:c8:3c:2a:e1:b3:4d:d0:62:00:c9:85:fb: 23:f0:f5:f7:e3:30:75:fb:e2:fe:ff:95:bd:fd:c5: a3:38:d6:c9:34:ea:5d:86:e1:53:f4:42:c5:48:1a: 14:17:42:31:3a:39:c7:de:e1:e7:72:3b:16:97:7c: 89:6f:29:07:a2:89:8b:97:6e:dc:e6:86:95:b7:8b: 84:69:2b:f8:15:55:e0:d5:5d:7f:f3:b5:7d:ba:e6: 81:f3:bb:cc:91:f1:40:be:07:6c:a9:f6:e7:95:15: 11:7c:6b:0b:33:e6:d0:75:83:26:5f:0a:0d:37:ec: 82:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4D:91:F8:69:C4:12:48:BB:B8:A4:CD:AE:70:10:90:2D:D6:88:87 X509v3 Authority Key Identifier: keyid:A9:71:2C:CB:7E:EE:02:4A:EB:88:76:7B:76:2E:10:93:B1:40:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qXEsy37uAkrriHZ7di4Qk7FA_24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B6A/0875F4964C7411E997900F55C4F9AE02/qXEsy37uAkrriHZ7di4Qk7FA_24.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:7f:57:43:8b:3a:93:de:50:7c:c4:62:da:85:1c:e5:f1:7f: 46:79:d4:b5:72:11:67:64:2d:a2:ef:70:fc:d8:db:b6:ff:5e: b5:22:4c:59:9b:3a:91:37:8c:c1:41:2c:b8:aa:e1:b4:39:a7: 8e:42:76:37:8f:2e:da:08:61:ea:f5:57:d5:4c:32:80:ae:5c: 24:6b:e3:5c:c2:a4:bc:19:d1:de:96:da:b6:74:40:78:3d:d8: 47:47:56:52:58:11:01:5c:50:c9:ff:9e:cd:d1:21:9a:9a:ba: c5:71:10:b8:3e:97:0c:11:d3:2a:1c:cd:55:23:65:f9:6e:f2: 3e:23:76:7e:e4:de:29:00:b7:78:a9:17:48:25:09:21:87:55: 8e:ba:c2:35:85:46:e6:f0:8a:8f:39:56:3b:29:9b:5c:1c:6d: 8f:64:93:39:35:17:1b:a6:5b:b2:41:25:0e:0e:31:77:ba:90: 4d:d2:ab:72:cf:ad:c7:7f:07:ce:c2:a5:9a:16:b2:31:30:69: c2:33:e5:f4:35:91:4f:2d:88:b3:03:23:8f:b4:d1:fc:b7:00: ca:8c:3d:aa:a8:13:c6:4c:81:be:f4:fa:c8:cc:c3:a0:71:3d: 0b:58:4e:56:95:c2:bc:d6:77:bb:b5:4e:bd:10:3a:c0:b1:a7: c2:00:40:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhCNkExMTAvBgNVBAUTKEE5NzEyQ0NCN0VFRTAyNEFFQjg4NzY3Qjc2MkUxMDkz QjE0MEZGNkUwHhcNMjYwNzIyMTgxODA2WhcNMjYwNzI5MTgxODA2WjAYMRYwFAYD VQQDEw02YTYxMDk1ZS04ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TvBsfLoVfJx74kN6EUQDbFi8Dpn+8raqbMgOGPDXFvFggZxgKRCASjJJ+Il wYJaQNBOmqpy5/PtaMOPAe51VfqebUgynAuLkwvLLxxon5TNISzZDWd7yQRK/kJX JATb16BVFlF94/88zzHvP9LeynhwzREQOUqKanT7L4uYsPhvpYHMq4I8qTnIPCrh s03QYgDJhfsj8PX34zB1++L+/5W9/cWjONbJNOpdhuFT9ELFSBoUF0IxOjnH3uHn cjsWl3yJbykHoomLl27c5oaVt4uEaSv4FVXg1V1/87V9uuaB87vMkfFAvgdsqfbn lRURfGsLM+bQdYMmXwoNN+yCCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLZNkfhp xBJIu7ikza5wEJAt1oiHMB8GA1UdIwQYMBaAFKlxLMt+7gJK64h2e3YuEJOxQP9u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEI2QS8wODc1RjQ5NjRD NzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFrcnJpSFo3ZGk0UWs3RkFf MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYRXN5Mzd1QWtycmlIWjdkaTRRazdGQV8yNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEI2QS8wODc1RjQ5NjRDNzQxMUU5OTc5MDBGNTVDNEY5QUUwMi9xWEVzeTM3dUFr cnJpSFo3ZGk0UWs3RkFfMjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeX9XQ4s6k95QfMRi2oUc5fF/RnnUtXIRZ2Qtou9w/Njbtv9etSJMWZs6kTeM wUEsuKrhtDmnjkJ2N48u2ghh6vVX1UwygK5cJGvjXMKkvBnR3pbatnRAeD3YR0dW UlgRAVxQyf+ezdEhmpq6xXEQuD6XDBHTKhzNVSNl+W7yPiN2fuTeKQC3eKkXSCUJ IYdVjrrCNYVG5vCKjzlWOymbXBxtj2STOTUXG6ZbskElDg4xd7qQTdKrcs+tx38H zsKlmhayMTBpwjPl9DWRTy2IswMjj7TR/LcAyow9qqgTxkyBvvT6yMzDoHE9C1hO VpXCvNZ3u7VOvRA6wLGnwgBA5A== -----END CERTIFICATE-----Generated at Fri Jul 24 13:06:48 2026 by rpki-client