$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft File: qbDUr9uPeMPSyEfipHI6OFlXYoA.mft (raw, json) Hash identifier: xAYG9CohCoQ/HVW12+Ply1gwrRUjFFHbiqkR30/h/iU= Subject key identifier: 46:B0:52:91:D0:0D:E5:D1:8D:E1:05:FB:61:C3:65:80:CA:8E:2E:C8 Authority key identifier: A9:B0:D4:AF:DB:8F:78:C3:D2:C8:47:E2:A4:72:3A:38:59:57:62:80 Certificate issuer: /CN=A91B0B89/serialNumber=A9B0D4AFDB8F78C3D2C847E2A4723A3859576280 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft Manifest number: 28 Signing time: Thu 23 Jul 2026 10:51:02 +0000 Manifest this update: Thu 23 Jul 2026 10:51:02 +0000 Manifest next update: Thu 30 Jul 2026 10:51:02 +0000 Files and hashes: 1: qbDUr9uPeMPSyEfipHI6OFlXYoA.crl (hash: kpgu3w0yI7ynzBWMCUdAz8fXYnHTXGj10elKbouF6Kg=) 2: 5D089144492911F1B850B010A6833773.roa (hash: 7Omr/cVEKs+waddjhiEUfhIRfZGdS9UY5db1PiEBZhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.crl rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0B89, serialNumber=A9B0D4AFDB8F78C3D2C847E2A4723A3859576280 Validity Not Before: Jul 23 10:51:02 2026 GMT Not After : Jul 30 10:51:02 2026 GMT Subject: CN=6a61f216-d2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:e5:1d:21:06:4b:1b:f1:ef:64:e0:a2:91: b3:fe:1d:e1:4d:12:2e:6d:a7:aa:a1:be:43:ac:87: 8a:35:36:67:47:92:a5:90:f6:54:37:8a:1d:02:f9: 63:9a:8f:5a:32:78:04:f2:a0:82:a7:10:e1:ab:53: 57:36:b9:f1:eb:3c:ed:76:c0:55:22:1e:b8:ba:62: e3:db:45:c5:07:cb:be:79:1f:08:78:30:1d:ab:ad: 0f:dc:6f:5d:7d:67:c1:38:81:ba:eb:5a:bf:f7:86: 32:54:6a:31:d4:60:f2:ed:40:f6:41:cd:af:b0:d8: 12:c9:58:86:d5:8d:f1:eb:dd:33:01:9d:84:22:4b: ef:58:d1:1d:a8:8a:ac:a3:02:3f:a2:a7:b6:88:8a: fc:cf:18:13:bb:60:fc:bb:ba:81:f1:f9:3f:6e:95: e1:23:7e:f4:d0:86:1d:fd:08:c1:ce:24:60:6f:fc: 76:79:a5:28:f2:ac:73:46:49:6d:c2:21:8b:4a:df: 9d:1e:c5:08:f3:0f:0d:cf:f6:7d:59:95:75:56:bb: ed:dc:09:19:cf:31:44:c7:00:60:ff:96:41:5a:b1: 93:21:6f:e6:be:78:a3:bd:4c:76:62:2f:29:e6:d2: 5e:85:21:37:26:5c:52:0b:4b:e7:4a:df:c9:df:69: 8a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B0:52:91:D0:0D:E5:D1:8D:E1:05:FB:61:C3:65:80:CA:8E:2E:C8 X509v3 Authority Key Identifier: keyid:A9:B0:D4:AF:DB:8F:78:C3:D2:C8:47:E2:A4:72:3A:38:59:57:62:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbDUr9uPeMPSyEfipHI6OFlXYoA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/FBF58362492811F1850958F6A5833773/qbDUr9uPeMPSyEfipHI6OFlXYoA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:cc:41:1a:63:72:c8:12:70:54:8d:68:33:02:ff:5d:6d:d9: f5:9a:18:a1:a5:ec:68:03:0b:6d:97:3e:a6:96:dc:c0:d2:df: d3:17:cc:f0:a8:78:a4:80:03:6d:f7:2f:57:d4:bb:ef:10:99: bf:91:cf:0a:c8:1d:9d:22:c2:a9:09:d3:35:94:50:1f:a5:71: 35:ed:b4:9a:df:ae:d0:bb:cb:04:70:26:2d:51:61:af:5b:64: 32:20:fe:e9:49:33:d4:cb:eb:c0:0a:d0:67:d3:91:02:d4:41: 9f:8e:1e:6c:fa:4f:49:40:68:9e:f1:63:e5:d1:f1:cc:6d:fd: 84:35:6b:91:d1:60:bc:46:bc:8b:1b:31:d1:ad:c8:bf:d6:17: 69:2e:d0:ec:bb:22:c1:fd:82:85:e7:63:9b:76:28:71:11:e1: 20:d1:0c:85:55:91:93:21:c4:fd:f2:73:87:f5:96:f6:77:a8: af:36:33:d8:ba:cb:4a:5d:f6:0d:43:79:b7:1b:de:6a:aa:41: 49:f4:da:7e:bc:de:d4:af:45:7d:14:01:c0:6e:3e:82:58:5a: bd:d0:63:cd:5a:b4:50:11:f0:a1:13:82:0d:73:f1:89:f4:43: 7c:a1:11:10:44:8d:8e:7d:79:14:d3:1e:82:96:61:b1:79:94: 2d:39:ba:2e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MEI4OTExMC8GA1UEBRMoQTlCMEQ0QUZEQjhGNzhDM0QyQzg0N0UyQTQ3MjNBMzg1 OTU3NjI4MDAeFw0yNjA3MjMxMDUxMDJaFw0yNjA3MzAxMDUxMDJaMBgxFjAUBgNV BAMTDTZhNjFmMjE2LWQyY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE5+UdIQZLG/HvZOCikbP+HeFNEi5tp6qhvkOsh4o1NmdHkqWQ9lQ3ih0C+WOa j1oyeATyoIKnEOGrU1c2ufHrPO12wFUiHri6YuPbRcUHy755Hwh4MB2rrQ/cb119 Z8E4gbrrWr/3hjJUajHUYPLtQPZBza+w2BLJWIbVjfHr3TMBnYQiS+9Y0R2oiqyj Aj+ip7aIivzPGBO7YPy7uoHx+T9uleEjfvTQhh39CMHOJGBv/HZ5pSjyrHNGSW3C IYtK350exQjzDw3P9n1ZlXVWu+3cCRnPMUTHAGD/lkFasZMhb+a+eKO9THZiLynm 0l6FITcmXFILS+dK38nfaYrhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURrBSkdAN 5dGN4QX7YcNlgMqOLsgwHwYDVR0jBBgwFoAUqbDUr9uPeMPSyEfipHI6OFlXYoAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIwQjg5L0ZCRjU4MzYyNDky ODExRjE4NTA5NThGNkE1ODMzNzczL3FiRFVyOXVQZU1QU3lFZmlwSEk2T0ZsWFlv QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWJEVXI5dVBlTVBTeUVmaXBISTZPRmxYWW9BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIw Qjg5L0ZCRjU4MzYyNDkyODExRjE4NTA5NThGNkE1ODMzNzczL3FiRFVyOXVQZU1Q U3lFZmlwSEk2T0ZsWFlvQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAHzEEaY3LIEnBUjWgzAv9dbdn1mhihpexoAwttlz6mltzA0t/TF8zwqHikgANt 9y9X1LvvEJm/kc8KyB2dIsKpCdM1lFAfpXE17bSa367Qu8sEcCYtUWGvW2QyIP7p STPUy+vACtBn05EC1EGfjh5s+k9JQGie8WPl0fHMbf2ENWuR0WC8RryLGzHRrci/ 1hdpLtDsuyLB/YKF52ObdihxEeEg0QyFVZGTIcT98nOH9Zb2d6ivNjPYustKXfYN Q3m3G95qqkFJ9Np+vN7Ur0V9FAHAbj6CWFq90GPNWrRQEfChE4INc/GJ9EN8oREQ RI2OfXkU0x6ClmGxeZQtObou -----END CERTIFICATE-----Generated at Fri Jul 24 07:15:12 2026 by rpki-client