$ rpki-client -vvf rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft File: qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft (raw, json) Hash identifier: RhYTQeBXxeFEbssPbhNd1DovZLvnAnEC30+wij/9D3Y= Subject key identifier: 89:B9:C5:82:C6:B5:83:D3:56:85:71:0B:44:F5:0E:6B:FE:25:CD:B7 Authority key identifier: AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 Certificate issuer: /CN=A9191FA5/serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Certificate serial: 375E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft Manifest number: 3669 Signing time: Wed 22 Jul 2026 14:28:54 +0000 Manifest this update: Wed 22 Jul 2026 14:28:53 +0000 Manifest next update: Wed 29 Jul 2026 14:28:53 +0000 Files and hashes: 1: qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl (hash: VxZtf40IJ2Xl6Eonrk9V5ujE65ZpguDNU1kh/CqSL8M=) 2: FF09B6BEC2E511EBBDB1B180C4F9AE02.roa (hash: mwUwSyXq9hYn9NcVA4KtfCObl3mLHB8zjMVLVpWBk/E=) 3: B8E7D994D00711EAB66A1255C4F9AE02.roa (hash: ceidhlKu5HDjsUw7jcr2YLL4PSxhocZYikLNU4m7FQc=) 4: FDE510BCC2E511EBBDB1B180C4F9AE02.roa (hash: WQPSpMOv8/dEP+Ftx23/DGMKPs2Lbujf5CefihOR5E0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:28:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14174 (0x375e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191FA5, serialNumber=AB11E809F2BC66B0D1E60B8A31F86B5B82E00E39 Validity Not Before: Jul 22 14:28:53 2026 GMT Not After : Jul 29 14:28:53 2026 GMT Subject: CN=6a60d3a6-f3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4c:bf:3f:85:d9:1a:20:a4:0b:cb:4d:2f:a9: b5:e2:c4:0b:b5:54:e3:63:66:d9:7e:2c:b5:4c:99: 21:2a:e9:d8:5b:26:3c:2f:31:3d:06:b6:13:5a:86: 7d:00:7a:1d:a8:7c:a2:7a:7d:f1:b9:e9:4b:94:ec: d5:90:f3:20:b9:9e:51:f9:08:89:a6:4c:b3:07:f5: 19:4f:ed:4b:76:90:18:0c:1e:fc:f1:61:f1:e4:02: 38:24:77:8f:ce:3d:1e:e0:20:46:25:f4:76:c0:6f: ad:24:2c:b9:5e:bd:f2:f5:50:9f:87:48:cd:1a:6b: 87:6c:27:2e:dd:07:e0:bd:47:89:eb:7e:ed:24:75: 9a:3d:22:9d:49:2a:3e:af:51:6d:05:c7:a0:81:0b: f9:ea:ee:95:33:8c:13:b0:96:6b:ef:2c:a9:ba:96: ab:da:0d:1b:1e:3d:fc:a9:e1:9b:9e:da:92:40:9d: 06:44:57:ad:db:07:f9:4f:e8:ba:7b:7b:a8:22:c2: ea:ca:15:f6:df:88:47:f0:b1:f4:19:65:18:62:4e: 6c:d9:60:00:25:da:b7:f7:74:6d:be:48:58:69:cb: b5:88:b6:9d:e4:cd:f6:dc:7c:3f:44:a6:e8:8a:7c: 10:40:8a:6c:4d:68:ca:09:07:2b:09:d5:ab:75:86: 61:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B9:C5:82:C6:B5:83:D3:56:85:71:0B:44:F5:0E:6B:FE:25:CD:B7 X509v3 Authority Key Identifier: keyid:AB:11:E8:09:F2:BC:66:B0:D1:E6:0B:8A:31:F8:6B:5B:82:E0:0E:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191FA5/08056CE41D8711E29DD3C6DE08B02CD2/qxHoCfK8ZrDR5guKMfhrW4LgDjk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:8a:ce:d5:fb:6c:ae:0f:99:3d:43:35:33:ff:6f:d3:27:c4: 4b:8f:cf:9e:93:51:d9:08:a7:2f:da:7c:7c:12:3b:61:be:c7: 1b:b3:27:b0:85:fb:3a:3b:6f:b1:23:0d:3d:0a:76:9a:ca:88: f8:cd:3c:3f:07:2f:b4:20:00:5c:51:30:f6:63:f6:ea:b4:d2: d1:9f:29:ff:ab:24:29:f0:d2:e3:aa:b9:c8:d5:9c:af:6d:75: fd:cc:3a:7c:a0:11:60:f5:27:18:91:f4:85:84:4b:df:67:ec: 6a:21:0b:ba:f9:41:ad:7f:c9:54:2b:8a:03:6c:c6:af:98:4a: af:6f:9a:32:1b:7c:50:fa:b1:47:0c:a9:bc:72:25:12:bf:10: 11:18:c8:df:29:16:4f:0f:7a:d1:a7:37:51:c1:d0:b0:f9:a0: 8e:21:ee:f1:37:03:e2:d7:1c:b1:94:e2:da:31:5a:14:8d:43: 14:13:4b:ed:55:53:be:33:78:f3:17:45:f0:89:42:05:5c:66: f7:0d:2d:cf:83:02:67:ec:1b:79:8c:fd:ec:e9:a4:e2:b0:18: f7:92:89:fb:58:71:98:93:23:cb:66:d5:27:8f:79:41:a3:bc: 75:19:59:b6:cf:cc:03:d7:33:f4:85:9c:bd:7d:35:33:5a:b2: 98:28:e9:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICN14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFGQTUxMTAvBgNVBAUTKEFCMTFFODA5RjJCQzY2QjBEMUU2MEI4QTMxRjg2QjVC ODJFMDBFMzkwHhcNMjYwNzIyMTQyODUzWhcNMjYwNzI5MTQyODUzWjAYMRYwFAYD VQQDEw02YTYwZDNhNi1mM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEy/P4XZGiCkC8tNL6m14sQLtVTjY2bZfiy1TJkhKunYWyY8LzE9BrYTWoZ9 AHodqHyien3xuelLlOzVkPMguZ5R+QiJpkyzB/UZT+1LdpAYDB788WHx5AI4JHeP zj0e4CBGJfR2wG+tJCy5Xr3y9VCfh0jNGmuHbCcu3QfgvUeJ637tJHWaPSKdSSo+ r1FtBceggQv56u6VM4wTsJZr7yypupar2g0bHj38qeGbntqSQJ0GRFet2wf5T+i6 e3uoIsLqyhX234hH8LH0GWUYYk5s2WAAJdq393RtvkhYacu1iLad5M323Hw/RKbo inwQQIpsTWjKCQcrCdWrdYZhCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIm5xYLG tYPTVoVxC0T1Dmv+Jc23MB8GA1UdIwQYMBaAFKsR6AnyvGaw0eYLijH4a1uC4A45 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUZBNS8wODA1NkNFNDFE ODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpyRFI1Z3VLTWZoclc0TGdE amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F4SG9DZks4WnJEUjVndUtNZmhyVzRMZ0Rqay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUZBNS8wODA1NkNFNDFEODcxMUUyOUREM0M2REUwOEIwMkNEMi9xeEhvQ2ZLOFpy RFI1Z3VLTWZoclc0TGdEamsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAIrO1ftsrg+ZPUM1M/9v0yfES4/PnpNR2QinL9p8fBI7Yb7HG7MnsIX7Ojtv sSMNPQp2msqI+M08PwcvtCAAXFEw9mP26rTS0Z8p/6skKfDS46q5yNWcr211/cw6 fKARYPUnGJH0hYRL32fsaiELuvlBrX/JVCuKA2zGr5hKr2+aMht8UPqxRwypvHIl Er8QERjI3ykWTw960ac3UcHQsPmgjiHu8TcD4tccsZTi2jFaFI1DFBNL7VVTvjN4 8xdF8IlCBVxm9w0tz4MCZ+wbeYz97Omk4rAY95KJ+1hxmJMjy2bVJ495QaO8dRlZ ts/MA9cz9IWcvX01M1qymCjp1w== -----END CERTIFICATE-----Generated at Fri Jul 24 00:16:16 2026 by rpki-client