$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft File: jqW5VjInwuWNQ4vBe6giUHVCRDs.mft (raw, json) Hash identifier: s+SPgeyPkL9LArdjQUNIIr/SxVh1E+WsnTnFamUuK38= Subject key identifier: D9:DE:BE:A1:DB:74:63:76:B5:5B:88:78:DE:DC:9C:2B:C9:7F:1D:09 Authority key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B Certificate issuer: /CN=A91B0DE0/serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B Certificate serial: 0169 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft Manifest number: 0161 Signing time: Thu 23 Jul 2026 06:31:01 +0000 Manifest this update: Thu 23 Jul 2026 06:31:00 +0000 Manifest next update: Thu 30 Jul 2026 06:31:00 +0000 Files and hashes: 1: jqW5VjInwuWNQ4vBe6giUHVCRDs.crl (hash: 3sbeMt/AYmd44ETecztj0ShrWezusRgJs174NNaaDIs=) 2: E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa (hash: qoNSrp1S5UFLz+pkwMGVW1W6xXhNXfIp8HVNYC4sZ1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 361 (0x169) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B Validity Not Before: Jul 23 06:31:00 2026 GMT Not After : Jul 30 06:31:00 2026 GMT Subject: CN=6a61b525-611d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d5:ec:b1:ef:9a:92:61:57:07:f5:74:e8:0a: a1:01:f5:fc:6e:10:53:29:b3:ac:9e:46:05:2a:ff: fd:77:4c:36:9c:ca:19:8b:f3:35:a2:ca:a7:73:d6: ac:40:e6:10:91:45:2e:fe:ec:22:4d:6b:db:44:d0: 5e:98:d5:0f:5f:5c:e5:02:c0:9d:61:c1:26:83:4d: 2f:0f:90:86:19:81:2d:89:7c:4d:e8:62:ce:85:03: ee:a9:76:b3:06:78:5e:4e:d0:10:1a:d8:5f:62:40: 3d:c1:20:16:b1:c4:5d:ce:61:f2:db:b7:e6:88:35: 0f:19:44:e9:33:73:7b:e6:a5:af:2c:6c:5a:d1:60: d8:11:ef:2b:a3:a1:24:61:b3:ae:94:d8:5e:c3:e4: 00:44:c6:45:72:67:19:6d:6d:75:2f:75:dd:28:cf: 6b:2b:4d:bb:e5:47:87:09:08:08:37:4c:72:92:35: 25:3d:f2:e8:75:d3:a5:cc:74:31:fe:5a:49:ba:a4: ba:a3:08:fe:9b:a5:eb:a2:c2:06:3c:a9:ea:c4:ff: 70:8b:30:cc:e8:2b:c0:7f:a3:95:5c:5c:f6:9a:19: 1a:26:92:41:a9:28:37:98:67:f6:74:c3:04:7a:0c: 64:c0:00:c0:d7:ae:68:f1:5c:3f:96:be:1c:e7:5b: 1e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DE:BE:A1:DB:74:63:76:B5:5B:88:78:DE:DC:9C:2B:C9:7F:1D:09 X509v3 Authority Key Identifier: keyid:8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:60:bc:21:f1:d9:ae:81:a1:a5:d1:87:45:df:91:b7:c9:7b: d2:f4:7e:c3:10:c6:b5:58:f5:8d:8f:23:a9:a9:87:0a:e3:ff: b4:4b:58:32:c6:57:a4:92:75:81:9f:41:58:30:7d:61:03:29: ce:38:9d:45:64:57:29:80:ad:cf:2f:cd:55:4f:05:61:b2:12: 5e:2a:72:58:3b:75:51:e2:5b:e2:81:ac:cb:db:94:c2:23:5d: 9c:7f:9c:ca:67:3b:5c:ab:ca:6e:1d:8b:33:35:7b:7b:f9:f6: 0e:61:06:57:96:0f:41:b5:7a:33:d0:9d:a6:37:29:b5:16:7e: 25:ff:73:93:f5:6d:cf:6c:ab:a8:ca:d6:58:18:01:72:25:92: 1e:34:a0:23:8b:f5:33:72:a7:20:21:24:ed:ac:33:c7:16:e0: 6c:83:2f:c5:41:a3:68:14:6a:2a:89:99:b9:95:ff:8a:34:2a: 75:40:a8:31:41:59:70:b3:4f:f9:da:9a:ea:73:dd:42:95:72: 7e:d4:7a:a2:48:b3:13:ed:c8:58:5d:cd:17:d1:0b:dc:c2:c9: 3f:2f:6a:cd:18:75:88:b0:3b:55:52:0e:7a:61:3b:e5:36:2e: 33:48:d3:ac:ee:4b:9c:36:25:79:37:ce:88:fb:ac:13:ab:4c: 45:4f:db:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBERTAxMTAvBgNVBAUTKDhFQTVCOTU2MzIyN0MyRTU4RDQzOEJDMTdCQTgyMjUw NzU0MjQ0M0IwHhcNMjYwNzIzMDYzMTAwWhcNMjYwNzMwMDYzMTAwWjAYMRYwFAYD VQQDEw02YTYxYjUyNS02MTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9Xsse+akmFXB/V06AqhAfX8bhBTKbOsnkYFKv/9d0w2nMoZi/M1osqnc9as QOYQkUUu/uwiTWvbRNBemNUPX1zlAsCdYcEmg00vD5CGGYEtiXxN6GLOhQPuqXaz BnheTtAQGthfYkA9wSAWscRdzmHy27fmiDUPGUTpM3N75qWvLGxa0WDYEe8ro6Ek YbOulNhew+QARMZFcmcZbW11L3XdKM9rK0275UeHCQgIN0xykjUlPfLoddOlzHQx /lpJuqS6owj+m6XrosIGPKnqxP9wizDM6CvAf6OVXFz2mhkaJpJBqSg3mGf2dMME egxkwADA165o8Vw/lr4c51seVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnevqHb dGN2tVuIeN7cnCvJfx0JMB8GA1UdIwQYMBaAFI6luVYyJ8LljUOLwXuoIlB1QkQ7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMERFMC83MDQwQThFODZB ODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9qcVc1VmpJbnd1V05RNHZCZTZnaVVIVkNS RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2pxVzVWaklud3VXTlE0dkJlNmdpVUhWQ1JEcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MERFMC83MDQwQThFODZBODUxMUVGQjE1NjgxNDdDNEY5QUUwMi9qcVc1VmpJbnd1 V05RNHZCZTZnaVVIVkNSRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK2C8IfHZroGhpdGHRd+Rt8l70vR+wxDGtVj1jY8jqamHCuP/tEtYMsZXpJJ1 gZ9BWDB9YQMpzjidRWRXKYCtzy/NVU8FYbISXipyWDt1UeJb4oGsy9uUwiNdnH+c ymc7XKvKbh2LMzV7e/n2DmEGV5YPQbV6M9CdpjcptRZ+Jf9zk/Vtz2yrqMrWWBgB ciWSHjSgI4v1M3KnICEk7awzxxbgbIMvxUGjaBRqKomZuZX/ijQqdUCoMUFZcLNP +dqa6nPdQpVyftR6okizE+3IWF3NF9EL3MLJPy9qzRh1iLA7VVIOemE75TYuM0jT rO5LnDYleTfOiPusE6tMRU/bEw== -----END CERTIFICATE-----Generated at Thu Jul 23 23:13:24 2026 by rpki-client