$ rpki-client -vvf rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft File: QK2YSqtZnI785foLPmXRxDaWLpo.mft (raw, json) Hash identifier: p+0GMp/6P/fltG7IdrmUie4s9WU9LxurJuvD7XdUuZ4= Subject key identifier: 44:E0:F9:AD:4F:8B:B4:1C:15:04:EB:3F:B7:B3:87:86:3B:4F:B4:4E Authority key identifier: 40:AD:98:4A:AB:59:9C:8E:FC:E5:FA:0B:3E:65:D1:C4:36:96:2E:9A Certificate issuer: /CN=A915F1EE/serialNumber=40AD984AAB599C8EFCE5FA0B3E65D1C436962E9A Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QK2YSqtZnI785foLPmXRxDaWLpo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft Manifest number: 1A Signing time: Thu 23 Jul 2026 11:02:13 +0000 Manifest this update: Thu 23 Jul 2026 11:02:12 +0000 Manifest next update: Thu 30 Jul 2026 11:02:12 +0000 Files and hashes: 1: QK2YSqtZnI785foLPmXRxDaWLpo.crl (hash: NH4Cacm6YjgYRcV3lbMS39ImizRjt6WgsE1GzUYQHdk=) 2: 0208B39E601E11F1B4F202588C47A888.roa (hash: dZXspaelPSf6p7zRYrOdmCIidl6IgNDXHd3ZtaJRbVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.crl rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QK2YSqtZnI785foLPmXRxDaWLpo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F1EE, serialNumber=40AD984AAB599C8EFCE5FA0B3E65D1C436962E9A Validity Not Before: Jul 23 11:02:12 2026 GMT Not After : Jul 30 11:02:12 2026 GMT Subject: CN=6a61f4b5-1402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:3d:78:df:40:3d:af:4d:56:62:41:34:ec: 52:f0:64:df:64:43:11:d1:51:15:69:3a:8b:6b:25: bc:e3:2b:8d:c9:7e:d6:3b:d6:d7:53:1b:a1:b8:37: 78:74:46:6c:26:be:8c:dc:bb:88:88:8e:3d:88:0a: 00:b8:2a:69:b0:bd:fd:7a:b1:67:cd:00:6e:e8:75: 52:fc:ee:8f:59:54:79:40:37:5a:de:73:9e:7b:bb: 4f:98:e3:8f:64:dc:3c:0c:11:50:9a:6a:23:f8:c6: dd:a3:93:be:6a:be:82:b7:85:c8:f6:4a:1a:5c:6b: 6b:5a:d7:e1:54:cd:c4:49:f1:49:d8:01:82:61:37: 63:bb:ac:a9:95:a6:1d:03:4a:d0:2e:d6:af:5a:f6: 90:6d:22:b2:a1:23:76:23:15:96:84:f0:bb:fc:16: c8:f8:9b:d7:ea:23:20:46:30:3b:04:69:af:92:e7: 35:2f:ab:69:ff:9e:0a:1a:3c:14:86:2c:24:e4:d5: e2:20:e5:ba:c7:07:6d:ef:05:78:c5:85:64:38:77: 42:1b:dd:1a:72:bd:de:db:57:99:69:1a:9f:c5:3f: cf:66:ee:7a:6e:c0:c6:ae:b0:dc:85:95:2b:b2:d2: 4b:2a:18:43:2d:db:72:fd:cc:cb:a6:73:f9:2a:9f: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E0:F9:AD:4F:8B:B4:1C:15:04:EB:3F:B7:B3:87:86:3B:4F:B4:4E X509v3 Authority Key Identifier: keyid:40:AD:98:4A:AB:59:9C:8E:FC:E5:FA:0B:3E:65:D1:C4:36:96:2E:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QK2YSqtZnI785foLPmXRxDaWLpo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F1EE/9F902FC6601D11F1AD70A0368C47A888/QK2YSqtZnI785foLPmXRxDaWLpo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:18:23:f3:d1:44:9c:f2:1b:da:0e:7e:98:dc:80:19:ef:00: aa:d6:14:6e:49:5a:7d:c6:25:6a:3e:45:ef:e0:fc:6d:e1:85: f7:56:64:1c:85:9a:23:c6:98:9f:7c:ff:f3:15:10:1d:84:dd: 34:33:f8:06:0c:5b:8c:20:0a:f8:89:e6:0c:cb:ec:72:0f:01: 80:dc:cb:3c:b2:63:b3:a0:02:70:ca:f0:f6:f6:23:cd:f0:89: c1:f7:67:58:f8:1e:57:d2:0f:27:3c:d1:4a:29:fe:5f:bb:fe: 84:35:7f:01:03:e3:bc:d7:fa:db:d0:72:53:18:a2:fc:2a:93: b5:11:c2:90:00:ee:58:dc:56:8e:ee:29:fb:f9:8d:b0:45:40: f1:b8:48:ed:6e:43:eb:1d:1d:de:c1:4e:83:eb:44:2e:71:dc: c5:b0:f6:f4:41:c3:3f:37:5c:7c:c9:73:32:a6:40:f4:b0:94: 11:b3:ca:31:df:91:ec:5c:8a:c5:03:25:e3:1f:b2:6a:6a:d7: bc:98:c7:80:64:69:c9:cc:ae:a9:57:d3:ea:b8:49:d6:d7:4d: 58:65:7c:20:90:28:3c:89:4c:78:2a:0d:a6:2d:8d:1a:9d:d8: 0c:52:87:9e:d8:db:22:cd:a4:2d:d2:e8:c9:ad:3a:70:f3:a9: e3:b2:9c:f6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RjFFRTExMC8GA1UEBRMoNDBBRDk4NEFBQjU5OUM4RUZDRTVGQTBCM0U2NUQxQzQz Njk2MkU5QTAeFw0yNjA3MjMxMTAyMTJaFw0yNjA3MzAxMTAyMTJaMBgxFjAUBgNV BAMTDTZhNjFmNGI1LTE0MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZlj1430A9r01WYkE07FLwZN9kQxHRURVpOotrJbzjK43JftY71tdTG6G4N3h0 Rmwmvozcu4iIjj2ICgC4Kmmwvf16sWfNAG7odVL87o9ZVHlAN1rec557u0+Y449k 3DwMEVCaaiP4xt2jk75qvoK3hcj2Shpca2ta1+FUzcRJ8UnYAYJhN2O7rKmVph0D StAu1q9a9pBtIrKhI3YjFZaE8Lv8Fsj4m9fqIyBGMDsEaa+S5zUvq2n/ngoaPBSG LCTk1eIg5brHB23vBXjFhWQ4d0Ib3Rpyvd7bV5lpGp/FP89m7npuwMausNyFlSuy 0ksqGEMt23L9zMumc/kqn6iZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUROD5rU+L tBwVBOs/t7OHhjtPtE4wHwYDVR0jBBgwFoAUQK2YSqtZnI785foLPmXRxDaWLpow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGMUVFLzlGOTAyRkM2NjAx RDExRjFBRDcwQTAzNjhDNDdBODg4L1FLMllTcXRabkk3ODVmb0xQbVhSeERhV0xw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUUsyWVNxdFpuSTc4NWZvTFBtWFJ4RGFXTHBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG MUVFLzlGOTAyRkM2NjAxRDExRjFBRDcwQTAzNjhDNDdBODg4L1FLMllTcXRabkk3 ODVmb0xQbVhSeERhV0xwby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvGCPz0USc8hvaDn6Y3IAZ7wCq1hRuSVp9xiVqPkXv4Pxt4YX3VmQchZojxpif fP/zFRAdhN00M/gGDFuMIAr4ieYMy+xyDwGA3Ms8smOzoAJwyvD29iPN8InB92dY +B5X0g8nPNFKKf5fu/6ENX8BA+O81/rb0HJTGKL8KpO1EcKQAO5Y3FaO7in7+Y2w RUDxuEjtbkPrHR3ewU6D60QucdzFsPb0QcM/N1x8yXMypkD0sJQRs8ox35HsXIrF AyXjH7Jqate8mMeAZGnJzK6pV9PquEnW101YZXwgkCg8iUx4Kg2mLY0andgMUoee 2NsizaQt0ujJrTpw86njspz2 -----END CERTIFICATE-----Generated at Fri Jul 24 03:49:30 2026 by rpki-client