$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft File: cgqmbzbBRgrUvDrGkvlltxdKWOA.mft (raw, json) Hash identifier: c92k6ywN81A3Kieuiywtt/0cj48P2hSZSd5hZDQdkCk= Subject key identifier: 3C:D3:BB:A7:BB:79:B6:FB:BB:03:ED:9D:4A:A7:7C:54:E6:24:87:81 Authority key identifier: 72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0 Certificate issuer: /CN=A91B4053/serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft Manifest number: D0 Signing time: Thu 23 Jul 2026 08:35:17 +0000 Manifest this update: Thu 23 Jul 2026 08:35:16 +0000 Manifest next update: Thu 30 Jul 2026 08:35:16 +0000 Files and hashes: 1: cgqmbzbBRgrUvDrGkvlltxdKWOA.crl (hash: EhGKsuhCu+dS0dO+6HkKvLQfd5X8Ow/uPmKyrL5GVOI=) 2: AC8BCC2E50E411F0B8E7D45DC4F9AE02.roa (hash: 0Xdlp+Jjf+yeb2d/P0L7IU19P+mYj01Gp9Tj8N+RxJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.crl rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4053, serialNumber=720AA66F36C1460AD4BC3AC692F965B7174A58E0 Validity Not Before: Jul 23 08:35:16 2026 GMT Not After : Jul 30 08:35:16 2026 GMT Subject: CN=6a61d245-038f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:8a:12:eb:c4:f2:e5:a3:b9:27:d9:6b:21: f1:a6:ba:2f:44:37:5c:06:6c:55:d0:c1:74:9b:8f: 88:e4:72:74:a4:d3:85:54:90:29:af:7c:54:1f:94: 51:96:09:a9:90:41:87:f0:7f:4c:8e:05:78:d3:79: fc:cf:b9:48:c1:c8:b1:71:5b:c8:99:73:d1:0e:95: b8:ec:2f:e7:6b:2e:6a:60:e5:fd:4a:88:3d:ee:d6: 3c:ea:45:2e:49:b2:be:a0:48:1d:f8:7f:6b:61:5d: 64:74:a0:b4:e8:9a:75:97:c6:36:d0:85:e1:74:34: 82:84:59:f8:2e:15:60:c1:06:02:76:1d:cd:ac:ad: ef:61:3e:4c:55:8a:eb:3b:d4:3f:06:75:c4:5d:b4: ba:dc:5d:21:be:db:c4:d5:d2:d6:cd:9d:63:b8:31: 7a:de:3c:91:24:08:0b:0b:ad:b1:44:f0:f0:e9:4e: 83:bf:6c:7f:5a:51:b6:8c:4e:d7:20:2c:1a:f8:c2: 3e:09:91:b5:e3:8c:87:da:3f:8c:09:55:c0:5d:cd: ea:8f:62:fc:92:e7:ec:4f:cc:bf:4f:02:73:ca:ee: aa:15:21:18:63:91:a1:21:28:e6:bf:04:0d:84:55: 38:00:a5:ba:3f:5e:28:d4:ea:9b:e1:ad:36:40:1e: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D3:BB:A7:BB:79:B6:FB:BB:03:ED:9D:4A:A7:7C:54:E6:24:87:81 X509v3 Authority Key Identifier: keyid:72:0A:A6:6F:36:C1:46:0A:D4:BC:3A:C6:92:F9:65:B7:17:4A:58:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cgqmbzbBRgrUvDrGkvlltxdKWOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3640CB9450E111F091C4BB74C4F9AE02/cgqmbzbBRgrUvDrGkvlltxdKWOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:79:c6:6a:04:bb:fa:0f:89:8a:d0:ce:2a:99:b9:c2:c8:99: 15:d1:95:18:0f:66:7c:64:be:41:3d:18:96:5a:2b:78:8b:b3: 98:92:50:0c:60:d4:d5:7a:da:72:c4:e9:5e:e1:30:67:ae:c1: ad:ef:97:8f:21:b1:f5:84:33:a4:31:fc:c1:12:c9:c8:87:ec: d8:73:f5:69:80:9d:1c:34:4b:1d:9e:2f:11:7b:5d:a1:1e:4b: 44:80:39:7f:84:ad:47:d0:e0:f2:d1:42:ff:6e:7e:90:5b:18: b8:88:d8:4a:79:e9:6a:c5:f8:f5:89:b0:8f:cf:39:1e:8f:3e: e9:7a:8c:44:b9:df:f9:f1:b6:c8:c9:95:e1:8d:b3:bd:4e:76: b7:85:68:cc:3d:7f:bb:e5:2e:c3:65:7b:06:05:f3:a0:f6:d8: b1:6e:15:35:81:87:f8:91:e3:50:2f:64:46:55:6c:68:62:e3: a0:4d:0f:c0:92:7d:83:19:2a:e4:5c:c3:be:23:3f:06:76:74: 40:a2:43:cc:90:ea:72:4f:e0:c6:04:66:bd:49:f7:ea:12:9e: 6c:34:be:7d:62:43:e0:27:19:9f:76:b0:0d:ff:17:55:4d:54: e5:92:4a:43:0b:de:9c:92:e1:8d:b2:ee:78:93:52:7d:5d:89: 72:cf:2e:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQwNTMxMTAvBgNVBAUTKDcyMEFBNjZGMzZDMTQ2MEFENEJDM0FDNjkyRjk2NUI3 MTc0QTU4RTAwHhcNMjYwNzIzMDgzNTE2WhcNMjYwNzMwMDgzNTE2WjAYMRYwFAYD VQQDEw02YTYxZDI0NS0wMzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkVeKEuvE8uWjuSfZayHxprovRDdcBmxV0MF0m4+I5HJ0pNOFVJApr3xUH5RR lgmpkEGH8H9MjgV403n8z7lIwcixcVvImXPRDpW47C/nay5qYOX9Sog97tY86kUu SbK+oEgd+H9rYV1kdKC06Jp1l8Y20IXhdDSChFn4LhVgwQYCdh3NrK3vYT5MVYrr O9Q/BnXEXbS63F0hvtvE1dLWzZ1juDF63jyRJAgLC62xRPDw6U6Dv2x/WlG2jE7X ICwa+MI+CZG144yH2j+MCVXAXc3qj2L8kufsT8y/TwJzyu6qFSEYY5GhISjmvwQN hFU4AKW6P14o1Oqb4a02QB7iJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDzTu6e7 ebb7uwPtnUqnfFTmJIeBMB8GA1UdIwQYMBaAFHIKpm82wUYK1Lw6xpL5ZbcXSljg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDA1My8zNjQwQ0I5NDUw RTExMUYwOTFDNEJCNzRDNEY5QUUwMi9jZ3FtYnpiQlJnclV2RHJHa3ZsbHR4ZEtX T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NncW1iemJCUmdyVXZEckdrdmxsdHhkS1dPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDA1My8zNjQwQ0I5NDUwRTExMUYwOTFDNEJCNzRDNEY5QUUwMi9jZ3FtYnpiQlJn clV2RHJHa3ZsbHR4ZEtXT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM3nGagS7+g+JitDOKpm5wsiZFdGVGA9mfGS+QT0YlloreIuzmJJQDGDU1Xra csTpXuEwZ67Bre+XjyGx9YQzpDH8wRLJyIfs2HP1aYCdHDRLHZ4vEXtdoR5LRIA5 f4StR9Dg8tFC/25+kFsYuIjYSnnpasX49Ymwj885Ho8+6XqMRLnf+fG2yMmV4Y2z vU52t4VozD1/u+Uuw2V7BgXzoPbYsW4VNYGH+JHjUC9kRlVsaGLjoE0PwJJ9gxkq 5FzDviM/BnZ0QKJDzJDqck/gxgRmvUn36hKebDS+fWJD4CcZn3awDf8XVU1U5ZJK QwvenJLhjbLueJNSfV2Jcs8utw== -----END CERTIFICATE-----Generated at Fri Jul 24 13:43:11 2026 by rpki-client