$ rpki-client -vvf rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft File: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft (raw, json) Hash identifier: Hf8S0IalUWOITkAM/HVjEBxgW0cszpgHFDYat4Lrc/g= Subject key identifier: 08:43:81:D8:AB:D7:72:3D:EC:96:FA:68:BE:25:5E:F4:0F:8E:59:11 Authority key identifier: 42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 Certificate issuer: /CN=A915D6C2/serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Certificate serial: 0543 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft Manifest number: 0532 Signing time: Thu 23 Jul 2026 00:21:08 +0000 Manifest this update: Thu 23 Jul 2026 00:21:07 +0000 Manifest next update: Thu 30 Jul 2026 00:21:07 +0000 Files and hashes: 1: QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl (hash: it7PGeR2gowyOmdRGAeCvaV3Y/6Q9BTyglsLixZ5rtA=) 2: 5808B946B73A11ED8A2A8964C4F9AE02.roa (hash: l82fYq1x4u49vmBmNnG130HVCjkEDSzOMLfbwYG7C8U=) 3: 58A4A3E2B73A11ED8A2A8964C4F9AE02.roa (hash: yq/8yNnq6a4ASHoRBlMWzxoMD3auQ65vuNtbtSiVuBA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1347 (0x543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D6C2, serialNumber=42B749E1ECDBE030747F8CB5747F2D73A5E42454 Validity Not Before: Jul 23 00:21:07 2026 GMT Not After : Jul 30 00:21:07 2026 GMT Subject: CN=6a615e74-9a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:ed:14:a8:62:ba:2b:c5:48:6c:44:6a:3d: de:2e:c9:7d:21:b4:d0:2c:df:39:9a:b2:f3:d6:0e: 44:33:3d:09:23:cd:5b:c6:91:8e:40:1d:8d:8c:bd: 2e:b0:3f:ce:14:29:df:5f:79:11:a5:17:74:ee:67: 05:d7:46:44:f3:e0:89:40:6b:64:e9:ea:c6:b7:6c: 27:0f:d7:de:bd:c0:7b:37:bd:24:76:87:d9:0c:31: 64:57:c7:35:98:c3:65:8c:62:60:7f:34:49:a1:61: a3:5f:c7:e4:9b:98:43:5d:31:bf:82:af:38:8b:c1: ed:13:d1:82:1a:91:85:52:8d:5f:d1:a6:72:f6:1e: da:b1:0c:14:e4:5e:13:50:99:34:4f:5a:35:96:ff: ea:25:e9:7e:6a:70:99:24:ed:8f:d6:7b:61:3a:a6: 3d:fb:6f:05:d9:e2:d4:19:98:41:87:2b:61:d3:59: c9:a1:fa:5c:cc:75:e1:11:56:ae:a8:4b:10:45:0a: fa:4e:01:28:a5:b9:a3:fc:e0:5c:a0:54:31:e8:e9: 17:3f:9e:df:06:17:6b:76:8f:73:64:d4:8c:88:6d: b7:6d:58:a7:5d:40:82:8b:4b:4d:21:2d:ae:47:4b: 8f:1b:8d:6f:b5:e2:b7:d9:9f:2b:e5:25:1f:cd:86: 51:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:43:81:D8:AB:D7:72:3D:EC:96:FA:68:BE:25:5E:F4:0F:8E:59:11 X509v3 Authority Key Identifier: keyid:42:B7:49:E1:EC:DB:E0:30:74:7F:8C:B5:74:7F:2D:73:A5:E4:24:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D6C2/F9C46FAC53A211EC9D5E615DC4F9AE02/QrdJ4ezb4DB0f4y1dH8tc6XkJFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1c:b8:ca:df:76:ab:92:ab:6a:53:2c:cb:86:46:4d:c0:2d: ae:fe:06:a8:b9:77:76:08:59:29:cd:a6:cd:42:f0:c4:2e:78: 14:cf:1f:71:a1:f2:65:f4:b2:6e:58:c1:58:66:15:59:5f:33: 31:20:d6:13:6a:bd:8f:4f:46:c6:46:5a:bb:3f:5c:2f:1d:a0: fa:f2:4c:eb:b4:ef:79:95:e1:76:ba:42:82:d5:e1:27:69:3f: 17:47:49:56:7d:ff:1b:b4:32:de:f4:28:2c:3c:06:52:ab:e2: c5:98:78:f9:7e:91:44:a1:aa:a8:f8:61:d3:62:60:08:42:1d: 2c:aa:83:64:50:00:69:0b:98:15:ff:58:3b:5f:b3:6f:eb:2e: b9:b6:27:e8:28:82:02:61:84:4a:2d:74:92:5f:d5:7f:76:39: dd:bd:a4:d0:ee:2d:7c:5f:21:9e:de:06:cc:f9:94:8a:a4:97: ea:52:a8:b2:c8:7b:88:cd:af:c4:b4:82:f5:ca:f2:8b:b7:c1: 93:34:80:01:19:8c:5a:99:8d:c7:a1:f6:26:7a:4d:d8:92:41: bf:c4:ed:c1:48:29:8a:71:ee:24:ec:24:d1:a0:35:de:7e:68: 74:6e:62:d9:42:43:43:17:95:73:d5:21:c0:39:7d:3a:b7:16: 39:52:23:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2QzIxMTAvBgNVBAUTKDQyQjc0OUUxRUNEQkUwMzA3NDdGOENCNTc0N0YyRDcz QTVFNDI0NTQwHhcNMjYwNzIzMDAyMTA3WhcNMjYwNzMwMDAyMTA3WjAYMRYwFAYD VQQDEw02YTYxNWU3NC05YTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7/tFKhiuivFSGxEaj3eLsl9IbTQLN85mrLz1g5EMz0JI81bxpGOQB2NjL0u sD/OFCnfX3kRpRd07mcF10ZE8+CJQGtk6erGt2wnD9fevcB7N70kdofZDDFkV8c1 mMNljGJgfzRJoWGjX8fkm5hDXTG/gq84i8HtE9GCGpGFUo1f0aZy9h7asQwU5F4T UJk0T1o1lv/qJel+anCZJO2P1nthOqY9+28F2eLUGZhBhyth01nJofpczHXhEVau qEsQRQr6TgEopbmj/OBcoFQx6OkXP57fBhdrdo9zZNSMiG23bVinXUCCi0tNIS2u R0uPG41vteK32Z8r5SUfzYZRhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhDgdir 13I97Jb6aL4lXvQPjlkRMB8GA1UdIwQYMBaAFEK3SeHs2+AwdH+MtXR/LXOl5CRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDZDMi9GOUM0NkZBQzUz QTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjREQjBmNHkxZEg4dGM2WGtK RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FyZEo0ZXpiNERCMGY0eTFkSDh0YzZYa0pGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDZDMi9GOUM0NkZBQzUzQTIxMUVDOUQ1RTYxNURDNEY5QUUwMi9RcmRKNGV6YjRE QjBmNHkxZEg4dGM2WGtKRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHRy4yt92q5KralMsy4ZGTcAtrv4GqLl3dghZKc2mzULwxC54FM8fcaHyZfSy bljBWGYVWV8zMSDWE2q9j09GxkZauz9cLx2g+vJM67TveZXhdrpCgtXhJ2k/F0dJ Vn3/G7Qy3vQoLDwGUqvixZh4+X6RRKGqqPhh02JgCEIdLKqDZFAAaQuYFf9YO1+z b+suubYn6CiCAmGESi10kl/Vf3Y53b2k0O4tfF8hnt4GzPmUiqSX6lKossh7iM2v xLSC9cryi7fBkzSAARmMWpmNx6H2JnpN2JJBv8TtwUgpinHuJOwk0aA13n5odG5i 2UJDQxeVc9UhwDl9OrcWOVIjAQ== -----END CERTIFICATE-----Generated at Fri Jul 24 09:25:20 2026 by rpki-client