$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft File: qtagvMTbBX4UafHdswGbFlMwzkI.mft (raw, json) Hash identifier: jW+crljnI+aE/MrIACVZwQJm4+UtvE9vHP3XcArRUAo= Subject key identifier: C2:F4:A3:15:55:B9:9C:3A:A1:8D:12:83:AA:F7:1C:F2:DE:4B:E6:AE Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft Manifest number: C2 Signing time: Thu 23 Jul 2026 08:49:32 +0000 Manifest this update: Thu 23 Jul 2026 08:49:32 +0000 Manifest next update: Thu 30 Jul 2026 08:49:32 +0000 Files and hashes: 1: qtagvMTbBX4UafHdswGbFlMwzkI.crl (hash: m4B9IcA1kuicTNj7wWvL/tCdGw9IcHn6nvgqPuEbHKs=) 2: A73E47B6646611F092E66D56C4F9AE02.roa (hash: Jt3QbCBmPs1SUBic9BqvudNkMTSb9O8hdsUiuIKph7o=) 3: 1096927A646E11F08C8F9173C4F9AE02.roa (hash: 1uwYIweKNIY1EejwHRX9/epxqujJUSa33C/FoQ3Fbz4=) 4: 4282D1FE646E11F0B9817D36C4F9AE02.roa (hash: 0FADNXeUq1T4cmPNbX+0C9rpDsYY6TULXCq/1v19c/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Validity Not Before: Jul 23 08:49:32 2026 GMT Not After : Jul 30 08:49:32 2026 GMT Subject: CN=6a61d59c-0897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:a7:dc:b7:a4:cc:f0:57:a5:b6:96:a9:e6: 7f:c1:45:a4:cf:b3:08:eb:d0:a4:65:74:67:b6:41: 43:4a:99:87:c0:af:ae:06:7e:ba:85:84:b3:bf:45: 28:43:3b:d7:bd:3c:e5:09:cc:90:db:b9:57:84:d3: 08:ab:d7:41:3f:a7:f7:f0:fd:0e:91:5e:1a:18:61: 34:f0:6a:95:c6:07:19:08:79:de:5d:14:58:10:d8: e7:ce:f0:aa:85:96:1d:eb:6a:f5:8b:ce:98:a1:07: b0:43:df:59:ba:e4:c9:60:61:b7:50:4e:00:1e:94: a4:c8:b9:37:22:cc:36:69:62:53:cc:cc:05:79:f7: 50:30:77:f2:79:24:a6:67:e2:4a:9d:ff:f0:df:72: 82:27:bc:28:e8:a7:2f:1e:86:ca:b6:7d:b8:f4:75: cd:c3:f3:bf:1a:e5:62:52:07:30:40:87:d3:2a:d6: 15:1e:21:42:ad:32:57:e4:90:ca:c0:fa:86:b0:61: 2f:42:85:56:96:88:9e:b4:0a:36:32:49:9f:81:62: ea:8d:cd:07:0e:10:3f:6e:fc:23:d5:42:97:e5:3a: 07:96:54:60:3d:2d:b5:f5:c4:e9:74:07:db:a5:cb: 1c:cb:f3:b0:87:48:4e:d9:42:06:93:68:cb:6a:f3: 44:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F4:A3:15:55:B9:9C:3A:A1:8D:12:83:AA:F7:1C:F2:DE:4B:E6:AE X509v3 Authority Key Identifier: keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:15:db:71:e4:8e:13:c4:94:19:ed:5d:c5:b7:a0:c5:a6:82: 3f:cf:19:90:61:df:ae:5b:6d:9e:99:41:79:ad:26:9e:1a:6d: 4b:f7:8b:b1:dc:b4:96:4c:0e:ea:3f:89:50:1b:6b:6f:5e:25: eb:31:fc:77:10:95:4a:45:b7:b0:69:c9:b4:59:39:06:92:b5: 31:09:d2:9c:ee:c1:7a:15:16:22:50:bf:82:02:d6:ff:df:be: 0c:d7:d4:e3:f3:ed:99:fa:fb:82:67:04:4a:50:6f:81:2b:cb: cb:1d:7b:16:8d:d8:af:53:7a:c4:49:4f:27:d7:98:ac:88:d4: 72:f6:6a:ef:69:e5:a4:45:cd:df:ef:a8:d1:49:1b:07:3e:76: cc:04:aa:c8:f5:29:05:f2:f2:cb:a9:23:c6:d2:67:d8:c0:d5: cc:a8:00:fd:74:c3:c2:6f:34:ec:32:97:2d:32:9a:44:04:95: 76:f3:45:ee:18:52:5e:c7:11:c7:82:46:6a:97:b5:b4:45:6f: e9:50:cc:c8:6b:1f:7b:01:58:f6:01:e2:49:ab:26:b0:a8:d9: 3a:0f:a1:1a:f9:d6:b6:7a:4b:76:43:34:ea:a6:9c:6e:85:50: ff:09:31:35:b3:77:5a:76:3f:9c:b3:b0:e9:2e:be:aa:61:df: dc:d6:c4:b4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1RjAxMTAvBgNVBAUTKEFBRDZBMEJDQzREQjA1N0UxNDY5RjFEREIzMDE5QjE2 NTMzMENFNDIwHhcNMjYwNzIzMDg0OTMyWhcNMjYwNzMwMDg0OTMyWjAYMRYwFAYD VQQDEw02YTYxZDU5Yy0wODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkqqn3LekzPBXpbaWqeZ/wUWkz7MI69CkZXRntkFDSpmHwK+uBn66hYSzv0Uo QzvXvTzlCcyQ27lXhNMIq9dBP6f38P0OkV4aGGE08GqVxgcZCHneXRRYENjnzvCq hZYd62r1i86YoQewQ99ZuuTJYGG3UE4AHpSkyLk3Isw2aWJTzMwFefdQMHfyeSSm Z+JKnf/w33KCJ7wo6KcvHobKtn249HXNw/O/GuViUgcwQIfTKtYVHiFCrTJX5JDK wPqGsGEvQoVWloietAo2MkmfgWLqjc0HDhA/bvwj1UKX5ToHllRgPS219cTpdAfb pcscy/Owh0hO2UIGk2jLavNEcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFML0oxVV uZw6oY0Sg6r3HPLeS+auMB8GA1UdIwQYMBaAFKrWoLzE2wV+FGnx3bMBmxZTMM5C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODVGMC80QkU2OUQwMjY0 MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xdGFndk1UYkJYNFVhZkhkc3dHYkZsTXd6 a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3F0YWd2TVRiQlg0VWFmSGRzd0diRmxNd3prSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODVGMC80QkU2OUQwMjY0MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi9xdGFndk1UYkJY NFVhZkhkc3dHYkZsTXd6a0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkxXbceSOE8SUGe1dxbegxaaCP88ZkGHfrlttnplBea0mnhptS/eLsdy0lkwO 6j+JUBtrb14l6zH8dxCVSkW3sGnJtFk5BpK1MQnSnO7BehUWIlC/ggLW/9++DNfU 4/Ptmfr7gmcESlBvgSvLyx17Fo3Yr1N6xElPJ9eYrIjUcvZq72nlpEXN3++o0Ukb Bz52zASqyPUpBfLyy6kjxtJn2MDVzKgA/XTDwm807DKXLTKaRASVdvNF7hhSXscR x4JGape1tEVv6VDMyGsfewFY9gHiSasmsKjZOg+hGvnWtnpLdkM06qacboVQ/wkx NbN3WnY/nLOw6S6+qmHf3NbEtA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:12:21 2026 by rpki-client