$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft File: qgt4LbmTLiL93vDD91WW7glF4S0.mft (raw, json) Hash identifier: DH24cq6SCfBJvMyRoP7w4dnVkW6XlC/Xic6OHtjQs4k= Subject key identifier: A1:9C:88:2F:33:D0:60:92:DC:9E:1B:A0:94:FF:D8:0F:12:10:04:7E Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D Certificate issuer: /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft Manifest number: 0130 Signing time: Thu 23 Jul 2026 07:20:24 +0000 Manifest this update: Thu 23 Jul 2026 07:20:23 +0000 Manifest next update: Thu 30 Jul 2026 07:20:23 +0000 Files and hashes: 1: qgt4LbmTLiL93vDD91WW7glF4S0.crl (hash: oV8hU7pSKCTJcFCEsgK/sfZ9nWy60ttF48rUNFDrnkk=) 2: 3A0E0B1CD47511EF91EA0832C4F9AE02.roa (hash: aCExDuGa6YujX3JL0arcNyOR8mwam9J29+GY2ZdNl4k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D Validity Not Before: Jul 23 07:20:23 2026 GMT Not After : Jul 30 07:20:23 2026 GMT Subject: CN=6a61c0b7-0c27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:c0:6e:57:14:db:3e:bc:40:9c:bf:4a:06: cd:48:bb:e8:a2:e0:fd:77:a6:54:39:d3:a6:2c:df: 12:a4:27:f5:dd:61:16:6e:c4:d2:42:62:ea:3d:7f: 03:b5:ef:ef:d6:6e:8b:de:26:21:93:0a:cd:b6:d2: 20:58:83:74:43:3d:2a:4c:e4:5c:a9:66:94:2d:be: 42:ed:b5:51:35:62:d7:68:1c:8c:99:0f:10:3d:a2: 7a:ae:72:96:18:fd:d3:bd:3d:57:ec:22:fc:93:a3: 37:17:36:77:e5:f8:51:7b:96:0a:97:38:de:1c:1a: 6e:0b:93:44:44:12:47:f7:14:53:c2:24:f8:6a:41: b6:59:a2:ac:de:29:62:72:e8:f9:3a:a6:65:0d:85: 6e:06:bc:d6:a6:8f:89:e0:08:2e:c9:e4:f8:e5:1d: 1b:84:7c:de:34:0f:bd:cf:36:17:a9:1a:2c:da:ba: 70:4d:5f:02:de:84:b6:0a:be:ae:54:df:63:95:dc: 9a:22:96:b7:68:b6:cd:80:e1:73:d8:54:0c:9b:57: 72:61:19:f1:93:e5:52:0d:2b:fc:09:72:4d:3c:e6: 19:c5:58:e7:0c:f7:8e:f1:bd:30:9e:15:d6:b8:d7: 4b:10:4d:01:1e:0c:4e:79:c5:09:d5:b2:cd:33:42: 91:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9C:88:2F:33:D0:60:92:DC:9E:1B:A0:94:FF:D8:0F:12:10:04:7E X509v3 Authority Key Identifier: keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a5:15:7a:71:b9:5c:5e:1d:4d:e6:47:d3:97:4f:bb:8d:b3: 59:31:5f:d3:14:41:a0:b0:5a:19:2d:cf:a7:71:b3:dd:bb:48: 86:3b:5e:c8:4c:c7:f2:99:fd:6b:bb:0a:69:ee:a8:21:42:3b: 6a:a6:20:da:1f:b0:ac:ed:06:62:07:51:90:7c:aa:45:63:2e: b1:6a:13:5c:3c:4c:b2:ae:bc:2b:b1:5b:2a:f3:17:4b:27:c4: 39:d2:b1:e7:49:30:86:16:64:c5:01:91:a5:3f:7b:bc:87:c9: b9:b7:64:97:3b:b1:ac:6a:1f:64:65:e7:48:d1:a3:70:92:2e: 92:c0:b8:7e:5a:af:5c:f7:e4:e8:11:e9:27:31:ff:3d:8e:c0: a0:66:3d:89:04:79:16:8f:0b:52:d7:d3:84:83:a2:d2:0c:e8: f7:12:f2:3e:85:2f:0b:d8:8d:7e:8f:0f:9a:67:14:be:19:5c: 55:3c:81:2d:99:9d:b3:fd:83:f5:3d:9c:54:d7:4e:d0:e1:68: 2a:21:ad:b2:17:79:54:41:f3:1f:e2:aa:83:9c:30:11:c4:72: e3:d6:6a:74:6c:8f:e0:47:a5:64:19:3d:d8:03:9d:7f:8a:b3: 27:8f:41:dd:6f:a9:36:5a:16:b0:ea:67:c0:aa:fa:f7:09:4e: b4:1d:c2:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M5MDkxMTAvBgNVBAUTKEFBMEI3ODJEQjk5MzJFMjJGRERFRjBDM0Y3NTU5NkVF MDk0NUUxMkQwHhcNMjYwNzIzMDcyMDIzWhcNMjYwNzMwMDcyMDIzWjAYMRYwFAYD VQQDEw02YTYxYzBiNy0wYzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth/AblcU2z68QJy/SgbNSLvoouD9d6ZUOdOmLN8SpCf13WEWbsTSQmLqPX8D te/v1m6L3iYhkwrNttIgWIN0Qz0qTORcqWaULb5C7bVRNWLXaByMmQ8QPaJ6rnKW GP3TvT1X7CL8k6M3FzZ35fhRe5YKlzjeHBpuC5NERBJH9xRTwiT4akG2WaKs3ili cuj5OqZlDYVuBrzWpo+J4AguyeT45R0bhHzeNA+9zzYXqRos2rpwTV8C3oS2Cr6u VN9jldyaIpa3aLbNgOFz2FQMm1dyYRnxk+VSDSv8CXJNPOYZxVjnDPeO8b0wnhXW uNdLEE0BHgxOecUJ1bLNM0KRMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKGciC8z 0GCS3J4boJT/2A8SEAR+MB8GA1UdIwQYMBaAFKoLeC25ky4i/d7ww/dVlu4JReEt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzkwOS8wNzc5N0ZFNEMw REMxMUVGOUU4NzE4NDRDNEY5QUUwMi9xZ3Q0TGJtVExpTDkzdkREOTFXVzdnbEY0 UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FndDRMYm1UTGlMOTN2REQ5MVdXN2dsRjRTMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzkwOS8wNzc5N0ZFNEMwREMxMUVGOUU4NzE4NDRDNEY5QUUwMi9xZ3Q0TGJtVExp TDkzdkREOTFXVzdnbEY0UzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGqUVenG5XF4dTeZH05dPu42zWTFf0xRBoLBaGS3Pp3Gz3btIhjteyEzH8pn9 a7sKae6oIUI7aqYg2h+wrO0GYgdRkHyqRWMusWoTXDxMsq68K7FbKvMXSyfEOdKx 50kwhhZkxQGRpT97vIfJubdklzuxrGofZGXnSNGjcJIuksC4flqvXPfk6BHpJzH/ PY7AoGY9iQR5Fo8LUtfThIOi0gzo9xLyPoUvC9iNfo8PmmcUvhlcVTyBLZmds/2D 9T2cVNdO0OFoKiGtshd5VEHzH+Kqg5wwEcRy49ZqdGyP4EelZBk92AOdf4qzJ49B 3W+pNloWsOpnwKr69wlOtB3CqA== -----END CERTIFICATE-----Generated at Fri Jul 24 12:13:12 2026 by rpki-client