$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft File: -qIKGvsgkct_URR4g_NkpFMJQTE.mft (raw, json) Hash identifier: rgxL/KsS/3Qhj5SJsq89169NXo/jD3lnnO82oD8ag8M= Subject key identifier: 49:B6:6A:76:3D:1B:98:2E:52:50:0A:82:A8:D7:EA:EA:89:35:C9:BF Authority key identifier: FA:A2:0A:1A:FB:20:91:CB:7F:51:14:78:83:F3:64:A4:53:09:41:31 Certificate issuer: /CN=A91AF0E8/serialNumber=FAA20A1AFB2091CB7F51147883F364A453094131 Certificate serial: 3575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft Manifest number: 3568 Signing time: Wed 22 Jul 2026 15:09:51 +0000 Manifest this update: Wed 22 Jul 2026 15:09:51 +0000 Manifest next update: Wed 29 Jul 2026 15:09:51 +0000 Files and hashes: 1: -qIKGvsgkct_URR4g_NkpFMJQTE.crl (hash: REE9hJNwj03uxkz1Me/dymK7xXroLA04SfeHatuNMQ0=) 2: 0A956A80B48711EC83327546C4F9AE02.roa (hash: DWDLfS9VFoRUspo4gPt0SLH/400cssY5io0TF9oRBK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.crl rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13685 (0x3575) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0E8, serialNumber=FAA20A1AFB2091CB7F51147883F364A453094131 Validity Not Before: Jul 22 15:09:51 2026 GMT Not After : Jul 29 15:09:51 2026 GMT Subject: CN=6a60dd3f-efaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:f1:da:2b:3d:ce:e1:dc:79:c6:dc:4f:86: 95:30:8a:8c:08:c5:25:61:9a:45:83:ca:ea:09:0f: a2:f2:17:67:c5:17:a7:23:ea:b7:7e:60:0b:b4:dd: 9d:6e:74:c1:6f:71:19:6e:72:ef:b6:80:d5:90:06: dc:bc:17:b5:7e:84:0b:30:16:35:88:65:0c:f1:72: 76:c5:a7:77:84:bf:ad:92:99:8e:81:61:11:f4:91: 92:76:13:d6:3a:c9:69:a0:24:a6:2d:e7:81:24:04: 11:ba:f6:d1:f7:3d:6e:20:a2:9b:a5:3e:1e:ea:d3: c8:f5:10:4f:da:37:73:10:24:22:e7:89:be:de:c6: cf:06:2a:0b:15:f4:1a:77:cc:8d:b0:b6:4d:43:42: 32:38:c6:d3:06:59:49:5d:92:f4:4a:b3:d0:20:5e: 07:1e:33:45:0d:94:d2:be:3d:7b:e7:0f:2a:95:a0: 9a:fb:35:35:65:a9:85:b7:50:1f:09:df:2d:39:35: d9:29:cc:78:8d:a3:75:21:0f:c1:b0:46:df:09:15: 7d:37:2f:dc:9d:fd:38:1f:0c:29:c9:ba:77:ab:77: 89:d6:26:20:66:fc:59:19:87:a4:a1:33:64:17:9d: a0:60:b5:92:76:52:5e:79:d1:87:ce:7b:46:07:6d: a4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B6:6A:76:3D:1B:98:2E:52:50:0A:82:A8:D7:EA:EA:89:35:C9:BF X509v3 Authority Key Identifier: keyid:FA:A2:0A:1A:FB:20:91:CB:7F:51:14:78:83:F3:64:A4:53:09:41:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-qIKGvsgkct_URR4g_NkpFMJQTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0E8/45796AD21DA311E29FFB8C9808B02CD2/-qIKGvsgkct_URR4g_NkpFMJQTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b4:a5:4a:6f:60:3f:a6:ae:93:bd:d5:8a:41:3f:1c:b1:b8: ea:7e:97:fc:d6:29:5a:f1:10:6d:28:02:00:55:ec:de:c4:bc: cc:80:c2:e3:b1:75:59:c7:bc:d3:02:0e:3d:92:d8:7f:27:bf: ba:05:fb:6b:6a:30:35:bb:b7:56:f0:0b:3d:c1:68:03:6c:5a: 0b:b5:4d:08:91:da:0a:e0:b8:5f:d1:fb:df:7b:8c:9d:73:ec: b5:18:cf:fc:f6:39:9b:3d:62:20:41:c5:fb:5e:0b:a9:3f:72: ad:60:1a:05:37:1b:b1:1d:70:58:5a:56:e0:1a:7c:c1:58:6a: 17:0e:a8:60:be:01:60:20:14:fc:67:3b:40:95:89:6e:e7:9f: 1d:51:4c:7f:c6:ed:eb:c6:0d:60:dc:58:13:0b:d6:b0:6c:c4: 10:6f:f8:40:d0:f6:07:85:c0:94:08:34:88:1e:ae:dd:aa:27: af:f8:2b:da:5a:e2:6d:82:96:ad:13:ea:b0:e0:31:7f:03:64: ce:0a:07:3b:1d:46:fb:0f:bc:05:b9:79:89:e6:24:5c:55:6a: b8:da:b5:93:7c:ca:cc:31:02:33:65:56:8e:28:81:62:50:ce: 1c:ab:c2:0d:ed:93:84:e9:f4:24:c3:2f:51:3c:93:00:e0:ae: ec:c8:29:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwRTgxMTAvBgNVBAUTKEZBQTIwQTFBRkIyMDkxQ0I3RjUxMTQ3ODgzRjM2NEE0 NTMwOTQxMzEwHhcNMjYwNzIyMTUwOTUxWhcNMjYwNzI5MTUwOTUxWjAYMRYwFAYD VQQDEw02YTYwZGQzZi1lZmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmT3x2is9zuHcecbcT4aVMIqMCMUlYZpFg8rqCQ+i8hdnxRenI+q3fmALtN2d bnTBb3EZbnLvtoDVkAbcvBe1foQLMBY1iGUM8XJ2xad3hL+tkpmOgWER9JGSdhPW OslpoCSmLeeBJAQRuvbR9z1uIKKbpT4e6tPI9RBP2jdzECQi54m+3sbPBioLFfQa d8yNsLZNQ0IyOMbTBllJXZL0SrPQIF4HHjNFDZTSvj175w8qlaCa+zU1ZamFt1Af Cd8tOTXZKcx4jaN1IQ/BsEbfCRV9Ny/cnf04Hwwpybp3q3eJ1iYgZvxZGYekoTNk F52gYLWSdlJeedGHzntGB22kOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEm2anY9 G5guUlAKgqjX6uqJNcm/MB8GA1UdIwQYMBaAFPqiChr7IJHLf1EUeIPzZKRTCUEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBFOC80NTc5NkFEMjFE QTMxMUUyOUZGQjhDOTgwOEIwMkNEMi8tcUlLR3ZzZ2tjdF9VUlI0Z19Oa3BGTUpR VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1xSUtHdnNna2N0X1VSUjRnX05rcEZNSlFURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBFOC80NTc5NkFEMjFEQTMxMUUyOUZGQjhDOTgwOEIwMkNEMi8tcUlLR3ZzZ2tj dF9VUlI0Z19Oa3BGTUpRVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAprSlSm9gP6auk73VikE/HLG46n6X/NYpWvEQbSgCAFXs3sS8zIDC47F1Wce8 0wIOPZLYfye/ugX7a2owNbu3VvALPcFoA2xaC7VNCJHaCuC4X9H733uMnXPstRjP /PY5mz1iIEHF+14LqT9yrWAaBTcbsR1wWFpW4Bp8wVhqFw6oYL4BYCAU/Gc7QJWJ buefHVFMf8bt68YNYNxYEwvWsGzEEG/4QND2B4XAlAg0iB6u3aonr/gr2lribYKW rRPqsOAxfwNkzgoHOx1G+w+8Bbl5ieYkXFVquNq1k3zKzDECM2VWjiiBYlDOHKvC De2ThOn0JMMvUTyTAOCu7Mgp5A== -----END CERTIFICATE-----Generated at Thu Jul 23 23:08:00 2026 by rpki-client