$ rpki-client -vvf rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft File: QgBM9ryh-lZCT17qJPYqkrJc3s8.mft (raw, json) Hash identifier: qnzMhpFygsG6oK/61JP73cdFaYvkz8azj6ohGKmhn8c= Subject key identifier: 71:1C:88:D3:D5:9C:00:5B:28:D9:CF:18:21:79:33:8B:3C:55:C4:DB Authority key identifier: 42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF Certificate issuer: /CN=A919960D/serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft Manifest number: 029B Signing time: Thu 23 Jul 2026 02:47:49 +0000 Manifest this update: Thu 23 Jul 2026 02:47:48 +0000 Manifest next update: Thu 30 Jul 2026 02:47:48 +0000 Files and hashes: 1: QgBM9ryh-lZCT17qJPYqkrJc3s8.crl (hash: S5AS8mfA0tMorrbXSkZHKhhgSPEV1zEX03y7bCs35vU=) 2: BE9174768DDE11ED97AFDA82C4F9AE02.roa (hash: lWqXr9OCi9y8igTWAmlmDXkw3mBGBTPXv9Xm5W9NawI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:47:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919960D, serialNumber=42004CF6BCA1FA56424F5EEA24F62A92B25CDECF Validity Not Before: Jul 23 02:47:48 2026 GMT Not After : Jul 30 02:47:48 2026 GMT Subject: CN=6a6180d5-b07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:84:09:2e:9d:b3:c9:de:36:70:3a:aa:55: 01:c2:02:8c:10:44:85:39:48:f7:62:bf:f7:e5:89: 11:c5:0c:75:57:1d:66:ca:00:3c:2e:b3:17:de:b5: 15:c7:02:80:b5:b8:cf:b9:db:3c:50:24:54:79:12: 34:1d:de:3c:ba:df:59:30:44:32:ef:9e:c7:7b:0d: 03:23:df:9d:0d:82:62:56:cf:06:ef:98:34:05:07: a1:bc:1d:87:2c:60:93:0b:a1:ec:eb:1c:21:3d:bd: b2:cf:c2:c5:f6:90:e3:ba:0b:d9:a3:c4:7c:3f:48: 11:fb:20:a3:ea:97:72:6d:93:ed:69:56:d3:d4:8f: 00:5f:d8:86:b4:c3:40:da:1e:97:ba:37:bf:16:2e: 0d:b5:f9:86:ba:53:3e:50:c4:aa:70:a9:a2:7e:cb: 65:c4:c5:fd:6a:a8:21:7d:3e:e0:a1:54:fa:d6:85: 3a:5e:f0:f9:a0:bb:eb:bc:31:2b:f3:c7:b9:67:40: 14:b6:05:db:87:04:8e:04:ff:9c:89:6a:b0:44:d7: bc:d6:97:90:e3:0b:b8:99:eb:03:c2:c9:98:06:7e: e6:8e:3e:ab:bd:fe:09:94:43:08:2d:de:87:cd:f0: d4:f9:71:65:8d:96:f9:1a:38:4a:d8:19:77:aa:f5: ad:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1C:88:D3:D5:9C:00:5B:28:D9:CF:18:21:79:33:8B:3C:55:C4:DB X509v3 Authority Key Identifier: keyid:42:00:4C:F6:BC:A1:FA:56:42:4F:5E:EA:24:F6:2A:92:B2:5C:DE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgBM9ryh-lZCT17qJPYqkrJc3s8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919960D/BD0B64C68DDA11ED873A7487C4F9AE02/QgBM9ryh-lZCT17qJPYqkrJc3s8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fe:3d:3d:4d:75:3a:2c:78:39:be:a8:92:31:bb:f9:2b:27: 45:38:e7:64:75:71:46:0f:c2:13:22:89:eb:4e:1e:35:2b:d4: a2:9c:88:f6:7e:70:c0:42:4b:c7:0c:ce:22:55:d3:24:8e:2d: 26:b1:bf:ed:cf:d5:bf:12:14:ae:7c:97:e7:67:d8:ad:9a:9c: fa:b3:8e:27:a6:35:d6:13:f1:9d:6b:6e:55:d4:14:83:2f:4c: 5a:d3:76:82:85:65:68:d5:4f:e0:4c:b7:cf:93:ed:3d:84:14: d5:67:4f:3d:36:ed:67:9c:02:af:1e:8f:33:75:dc:83:52:89: ed:02:a0:22:9a:fd:3d:e6:74:13:d2:bd:5c:7d:0c:50:78:76: 17:ea:5f:c4:01:fc:d7:d8:ca:ab:8b:36:b1:2c:b5:dd:a3:ba: d2:2c:8f:e2:f9:c1:25:94:ce:1c:2e:5c:c0:ba:8d:df:34:33: 6f:f1:03:47:d8:52:1c:48:f1:3b:83:a2:2a:a9:8f:30:72:c7: 94:bf:20:21:38:45:0d:f8:01:c0:7b:a8:1d:ec:54:b3:53:2e: 46:6f:e7:59:71:52:94:3b:71:2b:c1:0a:d2:7e:83:27:2b:89: e7:65:34:bd:e9:7a:89:0c:18:3e:98:35:5b:08:7c:85:e8:93: d3:ee:1b:ce -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk2MEQxMTAvBgNVBAUTKDQyMDA0Q0Y2QkNBMUZBNTY0MjRGNUVFQTI0RjYyQTky QjI1Q0RFQ0YwHhcNMjYwNzIzMDI0NzQ4WhcNMjYwNzMwMDI0NzQ4WjAYMRYwFAYD VQQDEw02YTYxODBkNS1iMDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti2ECS6ds8neNnA6qlUBwgKMEESFOUj3Yr/35YkRxQx1Vx1mygA8LrMX3rUV xwKAtbjPuds8UCRUeRI0Hd48ut9ZMEQy757Hew0DI9+dDYJiVs8G75g0BQehvB2H LGCTC6Hs6xwhPb2yz8LF9pDjugvZo8R8P0gR+yCj6pdybZPtaVbT1I8AX9iGtMNA 2h6Xuje/Fi4NtfmGulM+UMSqcKmifstlxMX9aqghfT7goVT61oU6XvD5oLvrvDEr 88e5Z0AUtgXbhwSOBP+ciWqwRNe81peQ4wu4mesDwsmYBn7mjj6rvf4JlEMILd6H zfDU+XFljZb5GjhK2Bl3qvWtCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEciNPV nABbKNnPGCF5M4s8VcTbMB8GA1UdIwQYMBaAFEIATPa8ofpWQk9e6iT2KpKyXN7P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTYwRC9CRDBCNjRDNjhE REExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1sWkNUMTdxSlBZcWtySmMz czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnQk05cnloLWxaQ1QxN3FKUFlxa3JKYzNzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTYwRC9CRDBCNjRDNjhEREExMUVEODczQTc0ODdDNEY5QUUwMi9RZ0JNOXJ5aC1s WkNUMTdxSlBZcWtySmMzczgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAff49PU11Oix4Ob6okjG7+SsnRTjnZHVxRg/CEyKJ604eNSvUopyI9n5wwEJL xwzOIlXTJI4tJrG/7c/VvxIUrnyX52fYrZqc+rOOJ6Y11hPxnWtuVdQUgy9MWtN2 goVlaNVP4Ey3z5PtPYQU1WdPPTbtZ5wCrx6PM3Xcg1KJ7QKgIpr9PeZ0E9K9XH0M UHh2F+pfxAH819jKq4s2sSy13aO60iyP4vnBJZTOHC5cwLqN3zQzb/EDR9hSHEjx O4OiKqmPMHLHlL8gIThFDfgBwHuoHexUs1MuRm/nWXFSlDtxK8EK0n6DJyuJ52U0 vel6iQwYPpg1Wwh8heiT0+4bzg== -----END CERTIFICATE-----Generated at Fri Jul 24 14:02:10 2026 by rpki-client