$ rpki-client -vvf rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft File: KQX7MhK9YWRvt69jPqGiV7w6Pew.mft (raw, json) Hash identifier: XCCEEzJqpoiarp7gFRmdHQfl4yRTqXgP8o00xlnNI44= Subject key identifier: 38:92:55:43:74:F7:BF:D1:9B:2A:6B:13:87:48:A9:F6:99:03:C5:B1 Authority key identifier: 29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC Certificate issuer: /CN=A9156971/serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Certificate serial: 356E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft Manifest number: 3565 Signing time: Wed 22 Jul 2026 14:46:06 +0000 Manifest this update: Wed 22 Jul 2026 14:46:05 +0000 Manifest next update: Wed 29 Jul 2026 14:46:05 +0000 Files and hashes: 1: KQX7MhK9YWRvt69jPqGiV7w6Pew.crl (hash: 0OgraR6+YnIqVX+KpbNTn1MjrhCzUexq90kV9TF084s=) 2: 4AF78A4AFEC611EF86B4765BC4F9AE02.roa (hash: DaUDfRkisbFjBhwxGgOMj8rF42Ao1F9Plt9FEElpL3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13678 (0x356e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156971, serialNumber=2905FB3212BD61646FB7AF633EA1A257BC3A3DEC Validity Not Before: Jul 22 14:46:05 2026 GMT Not After : Jul 29 14:46:05 2026 GMT Subject: CN=6a60d7ae-d74f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0a:bd:65:af:c7:be:05:75:97:e6:f6:96:e9: e1:b3:a1:47:4c:c2:b2:55:9d:4e:d9:14:9a:22:73: b5:72:30:35:94:bd:67:b3:fd:28:2d:cc:98:80:a6: 97:02:88:45:03:db:cf:52:a9:e5:81:84:28:39:25: e8:4a:6f:b2:d4:53:fa:13:bb:ad:80:a5:b0:60:d4: a9:b7:89:10:14:d8:ac:38:6b:24:86:3c:18:d8:e9: 19:b3:3f:4c:e0:d1:29:0a:52:bc:65:77:bb:0a:f1: cc:9f:0e:d2:e5:79:88:f3:11:b8:e9:b6:54:b0:c5: 1e:b0:b5:8d:a1:99:64:b6:84:a3:38:16:a8:ab:5e: 14:61:a5:d1:d1:b8:4a:45:c4:ce:44:5b:06:f4:b3: b3:8d:40:0f:8f:c3:79:b2:4f:01:97:fe:1b:59:80: 57:45:dc:6e:f0:db:aa:af:1f:67:7e:ae:9f:f7:bf: 48:93:ed:11:71:bb:2f:24:78:48:2c:d1:4b:66:16: 5d:3b:7c:d2:b3:98:10:bb:ef:aa:e9:4f:0c:0c:39: b3:d0:8c:5b:49:9a:86:98:a5:6d:5d:ec:d7:c0:7f: 3d:5e:64:fe:6e:7a:b8:0e:eb:e6:83:77:45:a2:9f: 41:a7:b0:ce:81:cd:2f:55:0b:b7:4e:c3:ac:39:84: b1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:92:55:43:74:F7:BF:D1:9B:2A:6B:13:87:48:A9:F6:99:03:C5:B1 X509v3 Authority Key Identifier: keyid:29:05:FB:32:12:BD:61:64:6F:B7:AF:63:3E:A1:A2:57:BC:3A:3D:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KQX7MhK9YWRvt69jPqGiV7w6Pew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156971/48C221861D9211E2ADB30BF508B02CD2/KQX7MhK9YWRvt69jPqGiV7w6Pew.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:cc:08:ec:59:54:19:7b:6a:90:95:e4:a0:4f:11:25:42:d0: af:5a:35:c6:67:39:c4:88:1f:57:8f:d7:e8:ba:b0:16:e7:c2: 9b:94:dc:30:4e:30:76:7b:7b:b1:0a:44:f8:c4:cb:d5:75:bb: c1:bd:44:01:32:3a:ed:6e:74:4d:39:d8:cb:86:ca:d7:0b:4e: fc:95:e8:7b:8b:1c:a1:78:4f:a0:40:87:23:a4:ad:3e:c9:14: f0:9a:de:54:30:37:09:a3:ae:57:27:08:ca:21:d5:d5:fd:c3: b0:36:13:99:4e:b6:8e:10:86:d2:5c:98:cb:51:7b:e0:72:a6: 49:c8:30:9f:f4:6d:28:c9:54:e4:ff:e7:b9:31:07:a7:3d:e6: f2:40:72:74:e8:88:ca:a0:41:93:27:16:74:bd:bd:90:76:25: e4:cd:b5:bc:ed:87:fc:e5:df:11:bf:62:dd:64:b5:ae:2a:05: 00:f9:59:0a:6c:ca:e2:3d:3e:0c:1d:30:6c:8a:ec:de:a5:2a: c7:ba:94:1d:8f:e0:35:51:f7:2b:da:39:75:cf:b6:14:5b:d0: da:fa:01:60:06:8c:7a:b2:17:09:ef:ad:d8:58:7f:81:b6:64: 7a:7a:8f:e9:ce:8f:ed:90:81:03:59:a2:b6:e7:50:93:26:5a: 64:b0:ac:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY5NzExMTAvBgNVBAUTKDI5MDVGQjMyMTJCRDYxNjQ2RkI3QUY2MzNFQTFBMjU3 QkMzQTNERUMwHhcNMjYwNzIyMTQ0NjA1WhcNMjYwNzI5MTQ0NjA1WjAYMRYwFAYD VQQDEw02YTYwZDdhZS1kNzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wq9Za/HvgV1l+b2lunhs6FHTMKyVZ1O2RSaInO1cjA1lL1ns/0oLcyYgKaX AohFA9vPUqnlgYQoOSXoSm+y1FP6E7utgKWwYNSpt4kQFNisOGskhjwY2OkZsz9M 4NEpClK8ZXe7CvHMnw7S5XmI8xG46bZUsMUesLWNoZlktoSjOBaoq14UYaXR0bhK RcTORFsG9LOzjUAPj8N5sk8Bl/4bWYBXRdxu8Nuqrx9nfq6f979Ik+0RcbsvJHhI LNFLZhZdO3zSs5gQu++q6U8MDDmz0IxbSZqGmKVtXezXwH89XmT+bnq4Duvmg3dF op9Bp7DOgc0vVQu3TsOsOYSxrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDiSVUN0 97/RmyprE4dIqfaZA8WxMB8GA1UdIwQYMBaAFCkF+zISvWFkb7evYz6hole8Oj3s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njk3MS80OEMyMjE4NjFE OTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlXUnZ0NjlqUHFHaVY3dzZQ ZXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tRWDdNaEs5WVdSdnQ2OWpQcUdpVjd3NlBldy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njk3MS80OEMyMjE4NjFEOTIxMUUyQURCMzBCRjUwOEIwMkNEMi9LUVg3TWhLOVlX UnZ0NjlqUHFHaVY3dzZQZXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb8wI7FlUGXtqkJXkoE8RJULQr1o1xmc5xIgfV4/X6LqwFufCm5TcME4wdnt7 sQpE+MTL1XW7wb1EATI67W50TTnYy4bK1wtO/JXoe4scoXhPoECHI6StPskU8Jre VDA3CaOuVycIyiHV1f3DsDYTmU62jhCG0lyYy1F74HKmScgwn/RtKMlU5P/nuTEH pz3m8kBydOiIyqBBkycWdL29kHYl5M21vO2H/OXfEb9i3WS1rioFAPlZCmzK4j0+ DB0wbIrs3qUqx7qUHY/gNVH3K9o5dc+2FFvQ2voBYAaMerIXCe+t2Fh/gbZkenqP 6c6P7ZCBA1mitudQkyZaZLCskg== -----END CERTIFICATE-----Generated at Fri Jul 24 01:56:19 2026 by rpki-client