$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: dd3X6n0y7jjHsElTctgOBtICaviQWV8CMNFdju+V3OU= Subject key identifier: C0:6B:EA:8D:F9:07:89:31:EC:A1:12:65:C0:BE:A2:D7:39:4A:93:B1 Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 1709 Signing time: Wed 22 Jul 2026 18:30:45 +0000 Manifest this update: Wed 22 Jul 2026 18:30:44 +0000 Manifest next update: Wed 29 Jul 2026 18:30:44 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: FGQTUvYoW68pK9I1glQAmOynpTr3mBFvzCkLtFuN1CM=) 2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: eIAHLPD+G1WHeALpmNDjCvEhWTMycfos5yNXip7qHSk=) 3: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: kTqCbZKUtBsFFXpPj9uO/YMS3jJEQ+u1QwW8st6ZqAs=) 4: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: r3oax/+V4q+jPioRQnTYAoCLL+EoLljtLzFVV7hSq0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:30:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Jul 22 18:30:44 2026 GMT Not After : Jul 29 18:30:44 2026 GMT Subject: CN=6a610c55-16f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b9:1a:68:74:dc:af:ba:df:2e:3c:6b:f5:2e: ea:b0:12:e8:7e:b6:b2:8b:2a:01:84:8b:97:08:3c: f8:45:3b:5e:a6:e6:d2:0a:64:ae:f2:38:e5:39:70: 6e:9b:a2:ac:b9:b7:83:ed:26:65:b2:72:ce:f6:a8: 92:8f:7a:52:a9:70:70:77:eb:03:6c:18:bf:d3:4c: 2e:0b:70:81:d7:28:c4:99:da:32:cb:09:11:9c:ff: 82:e7:62:1e:7d:97:b6:44:37:96:df:1c:c7:57:61: 30:cf:61:2b:7e:0f:12:2e:94:22:af:39:94:21:31: ef:a7:1a:e4:64:60:72:7a:bb:4f:14:67:d1:61:9a: 06:b7:6e:a1:52:fc:bf:70:a7:0f:f9:98:54:ed:12: 78:34:c8:3d:31:67:08:f1:6f:7f:07:a1:9a:95:86: 0d:5c:3f:b6:31:36:a5:e1:76:15:f2:16:e1:60:52: 5d:68:af:f0:4f:0f:2c:ad:82:07:b0:02:1c:0b:3c: 45:ad:df:65:fc:52:bf:98:5e:3a:cf:94:1d:c8:b9: 9b:8e:ba:97:4e:c1:a9:84:e3:fa:da:dc:df:1f:bd: 8f:1a:ca:d5:fd:a5:2d:a4:9e:d9:a8:38:9d:4b:1b: 37:b0:98:72:d0:98:a8:da:3d:ca:a8:60:ca:24:86: e2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:6B:EA:8D:F9:07:89:31:EC:A1:12:65:C0:BE:A2:D7:39:4A:93:B1 X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:85:4a:71:7c:92:c3:3c:e0:31:1b:f0:f7:13:f3:1a:17:89: ad:10:86:95:f2:18:08:bb:1c:89:ce:30:b8:9e:ab:e3:7c:d9: bc:6b:ca:d2:eb:a1:66:2b:df:53:ac:12:94:d5:73:c5:01:1f: 3b:8a:00:60:c5:7d:32:e5:10:0a:4e:fd:b7:59:55:d0:5b:7b: e9:5c:c3:21:5e:a7:2e:3f:b5:50:9a:40:bb:81:bb:57:bf:54: a7:cb:e1:b0:6c:6f:dc:4e:b0:10:f6:5d:8e:f5:75:c6:af:4a: bc:cb:83:15:65:87:92:53:e7:9d:72:78:a1:42:d1:ec:a1:ef: 94:6a:34:bf:48:61:d2:46:27:5c:51:ce:20:f7:89:2c:4f:47: 0e:ef:5a:91:40:ff:6f:b0:d8:67:ed:60:46:e6:00:9a:bd:88: cd:81:ec:76:f7:66:d7:33:7e:5d:b4:d7:78:20:2f:63:18:18: ae:d5:e8:0a:3a:78:3e:c5:bc:10:08:63:93:dc:2a:27:89:e2: 9d:b0:7a:d0:47:39:d8:12:56:66:2f:90:c8:05:1a:b9:0e:91: 96:40:f3:05:46:aa:da:9b:6b:8a:e3:60:29:41:3e:c7:f0:14: f9:d4:19:9c:7d:09:9e:44:10:24:b6:21:2c:37:9a:e4:4a:d3: 5e:2f:90:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjYwNzIyMTgzMDQ0WhcNMjYwNzI5MTgzMDQ0WjAYMRYwFAYD VQQDEw02YTYxMGM1NS0xNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bkaaHTcr7rfLjxr9S7qsBLofrayiyoBhIuXCDz4RTtepubSCmSu8jjlOXBu m6KsubeD7SZlsnLO9qiSj3pSqXBwd+sDbBi/00wuC3CB1yjEmdoyywkRnP+C52Ie fZe2RDeW3xzHV2Ewz2Erfg8SLpQirzmUITHvpxrkZGByertPFGfRYZoGt26hUvy/ cKcP+ZhU7RJ4NMg9MWcI8W9/B6GalYYNXD+2MTal4XYV8hbhYFJdaK/wTw8srYIH sAIcCzxFrd9l/FK/mF46z5QdyLmbjrqXTsGphOP62tzfH72PGsrV/aUtpJ7ZqDid Sxs3sJhy0Jio2j3KqGDKJIbiIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMBr6o35 B4kx7KESZcC+otc5SpOxMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEIVKcXySwzzgMRvw9xPzGheJrRCGlfIYCLscic4wuJ6r43zZvGvK0uuhZivf U6wSlNVzxQEfO4oAYMV9MuUQCk79t1lV0Ft76VzDIV6nLj+1UJpAu4G7V79Up8vh sGxv3E6wEPZdjvV1xq9KvMuDFWWHklPnnXJ4oULR7KHvlGo0v0hh0kYnXFHOIPeJ LE9HDu9akUD/b7DYZ+1gRuYAmr2IzYHsdvdm1zN+XbTXeCAvYxgYrtXoCjp4PsW8 EAhjk9wqJ4ninbB60Ec52BJWZi+QyAUauQ6RlkDzBUaq2ptriuNgKUE+x/AU+dQZ nH0JnkQQJLYhLDea5ErTXi+Q1A== -----END CERTIFICATE-----Generated at Fri Jul 24 14:06:07 2026 by rpki-client