$ rpki-client -vvf rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft File: Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft (raw, json) Hash identifier: yxiC/xLYF7kdbXB1M7D5Ddf+ru6TPpnWtZivWU0Nf7w= Subject key identifier: C1:1D:BB:AB:34:A7:A7:84:67:0E:ED:51:23:53:F8:33:4A:D3:74:32 Authority key identifier: 43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 Certificate issuer: /CN=A9198D20/serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft Manifest number: 0CA0 Signing time: Wed 22 Jul 2026 18:51:27 +0000 Manifest this update: Wed 22 Jul 2026 18:51:27 +0000 Manifest next update: Wed 29 Jul 2026 18:51:27 +0000 Files and hashes: 1: Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl (hash: jqf7kIDoyI4JjrwCAWpfOr4jQO6eXpmTk4kAgOf0olI=) 2: EE985C561CEA11EA8B382C0BC4F9AE02.roa (hash: DJMUXwUzwbPlOgQB+UtvzG/7I16IrRMq3UM2uKL9s14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198D20, serialNumber=43C3CF1174BD72B434C6928B8ABEBF05D6313F40 Validity Not Before: Jul 22 18:51:27 2026 GMT Not After : Jul 29 18:51:27 2026 GMT Subject: CN=6a61112f-50e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:93:09:dc:b4:6d:4a:50:ff:7a:27:55:0a:48: 8d:05:5a:11:91:61:3b:52:bc:79:53:4a:41:a0:2a: 7a:a4:1e:51:75:c6:c8:42:e8:2f:a9:2d:7f:c4:0e: 75:41:fd:01:5f:41:db:da:3d:0a:97:58:c8:94:c6: 29:2b:f0:56:fa:70:17:10:eb:78:d9:f5:5f:fa:8d: ad:7c:7b:9e:e7:e4:be:d2:38:ff:9d:0a:0e:8c:88: a6:ad:30:98:9e:3e:67:17:25:6d:b5:12:59:99:3e: 84:04:de:40:1a:45:4e:d0:4a:ae:96:06:fc:4a:8b: 12:ef:b8:aa:29:d1:ae:23:1c:7a:55:27:79:79:bb: db:f9:35:92:3d:52:46:d5:dd:b7:f9:b4:07:08:b8: 78:3e:f4:ba:65:12:ac:b5:d6:22:4a:85:10:9a:a0: b5:9a:77:e1:43:ea:e9:cf:4b:24:01:af:ee:51:ed: 93:b8:28:06:24:dc:74:b5:e0:df:61:05:9e:43:3c: bc:21:1a:32:d6:31:41:6e:8c:b8:09:89:e9:24:d7: 36:5b:12:a1:81:78:88:1a:19:2d:ec:e3:0c:9d:7e: 16:f2:71:57:88:bd:bd:26:7b:73:32:db:ca:a6:88: a6:53:68:ff:cf:b2:31:76:b3:a5:91:13:58:5c:3c: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1D:BB:AB:34:A7:A7:84:67:0E:ED:51:23:53:F8:33:4A:D3:74:32 X509v3 Authority Key Identifier: keyid:43:C3:CF:11:74:BD:72:B4:34:C6:92:8B:8A:BE:BF:05:D6:31:3F:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q8PPEXS9crQ0xpKLir6_BdYxP0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198D20/3F7703C21CE911EA98897487C4F9AE02/Q8PPEXS9crQ0xpKLir6_BdYxP0A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:49:75:eb:e6:1a:7a:27:f0:90:9a:20:53:80:fd:c3:be:b6: de:11:3d:9f:20:10:f6:4f:58:2c:03:56:44:af:dc:be:13:1f: 69:ba:40:12:6a:34:61:6e:10:da:f0:63:8c:12:dd:bd:e4:ba: 8c:35:1f:e7:27:16:db:e7:aa:3c:1c:f2:2c:e1:1f:6f:b0:b9: 4d:d5:be:34:73:70:00:b3:92:95:ff:fa:39:84:90:dc:7e:db: 6e:9e:0a:36:1f:d0:cc:da:5e:4f:3a:1b:07:f3:27:2b:07:30: 80:fe:dd:f0:39:57:0e:e6:20:e1:22:ed:5c:d2:80:d6:cb:07: 1c:ca:cb:7e:e0:68:34:2b:ff:d0:26:41:1e:96:67:f4:b5:94: 3a:b8:e5:c4:c5:27:2e:9c:9e:1f:c3:db:04:b5:e4:d0:67:b2: 26:f3:f4:4d:b6:33:ea:20:2c:d7:11:df:ea:a9:21:3a:db:28: ea:e8:6b:49:a7:a3:0e:dd:1c:a7:99:9d:1c:fd:05:56:e4:50: a4:32:ff:da:e1:44:c6:cd:d6:2a:63:5c:5b:cb:1b:b5:9b:12: 7b:3a:39:18:97:d3:ef:c7:8f:21:4a:b0:ce:7a:1c:ec:7d:6a: e9:30:79:ca:f3:29:33:58:02:09:c7:fa:80:ac:cc:05:c5:46: ba:59:b1:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThEMjAxMTAvBgNVBAUTKDQzQzNDRjExNzRCRDcyQjQzNEM2OTI4QjhBQkVCRjA1 RDYzMTNGNDAwHhcNMjYwNzIyMTg1MTI3WhcNMjYwNzI5MTg1MTI3WjAYMRYwFAYD VQQDEw02YTYxMTEyZi01MGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZMJ3LRtSlD/eidVCkiNBVoRkWE7Urx5U0pBoCp6pB5RdcbIQugvqS1/xA51 Qf0BX0Hb2j0Kl1jIlMYpK/BW+nAXEOt42fVf+o2tfHue5+S+0jj/nQoOjIimrTCY nj5nFyVttRJZmT6EBN5AGkVO0Equlgb8SosS77iqKdGuIxx6VSd5ebvb+TWSPVJG 1d23+bQHCLh4PvS6ZRKstdYiSoUQmqC1mnfhQ+rpz0skAa/uUe2TuCgGJNx0teDf YQWeQzy8IRoy1jFBboy4CYnpJNc2WxKhgXiIGhkt7OMMnX4W8nFXiL29JntzMtvK poimU2j/z7IxdrOlkRNYXDxJWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMEdu6s0 p6eEZw7tUSNT+DNK03QyMB8GA1UdIwQYMBaAFEPDzxF0vXK0NMaSi4q+vwXWMT9A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEQyMC8zRjc3MDNDMjFD RTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNyUTB4cEtMaXI2X0JkWXhQ MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1E4UFBFWFM5Y3JRMHhwS0xpcjZfQmRZeFAwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEQyMC8zRjc3MDNDMjFDRTkxMUVBOTg4OTc0ODdDNEY5QUUwMi9ROFBQRVhTOWNy UTB4cEtMaXI2X0JkWXhQMEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf0l16+YaeifwkJogU4D9w7623hE9nyAQ9k9YLANWRK/cvhMfabpAEmo0YW4Q 2vBjjBLdveS6jDUf5ycW2+eqPBzyLOEfb7C5TdW+NHNwALOSlf/6OYSQ3H7bbp4K Nh/QzNpeTzobB/MnKwcwgP7d8DlXDuYg4SLtXNKA1ssHHMrLfuBoNCv/0CZBHpZn 9LWUOrjlxMUnLpyeH8PbBLXk0GeyJvP0TbYz6iAs1xHf6qkhOtso6uhrSaejDt0c p5mdHP0FVuRQpDL/2uFExs3WKmNcW8sbtZsSezo5GJfT78ePIUqwznoc7H1q6TB5 yvMpM1gCCcf6gKzMBcVGulmxrQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:24:18 2026 by rpki-client