$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft File: sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft (raw, json) Hash identifier: 1yRR4LCp577jiTCrL2n1/UGhKTcHTBKivjQzZIhTJ6s= Subject key identifier: CA:63:D3:B8:B4:64:56:D8:8C:10:B1:09:E9:0F:89:55:7A:07:48:42 Authority key identifier: B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 Certificate issuer: /CN=A91BC966/serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Certificate serial: 0D09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft Manifest number: 0CD2 Signing time: Wed 22 Jul 2026 18:50:08 +0000 Manifest this update: Wed 22 Jul 2026 18:50:07 +0000 Manifest next update: Wed 29 Jul 2026 18:50:07 +0000 Files and hashes: 1: sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl (hash: fwxKxS3m9OVLnxX15I0Pcde3D+DAWQ5PhoVNJQ2+tsU=) 2: 5DA849821C1211EA819EA46EC4F9AE02.roa (hash: 5CBCbCNQtmal7jhPIzguEfXdAdwnlI8iW5BfKYZoqfQ=) 3: A6A53FA2D67E11EEAA2CA218C4F9AE02.roa (hash: Pa3ot+5z5ol95lA2w+Jvw6Gsu2PMGQdkC+e3HT9MeD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3337 (0xd09) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC966, serialNumber=B2A25DDE1A9EC91B59986A532F78835436183248 Validity Not Before: Jul 22 18:50:07 2026 GMT Not After : Jul 29 18:50:07 2026 GMT Subject: CN=6a6110df-4242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:e1:f9:90:be:8c:2a:2d:93:a3:1e:73:8b: 91:f4:69:d1:98:46:42:31:61:c1:f5:db:d8:37:cd: db:55:43:d8:84:20:c5:a6:2d:15:dc:61:8c:57:3c: 1e:06:f4:74:e2:8a:7a:77:0f:0c:4f:cb:c8:e4:4e: 49:85:d6:58:a8:2e:cc:24:6d:c3:74:84:30:0a:63: 0d:79:21:ed:46:26:55:b5:b8:67:60:57:ec:d9:0d: 05:1e:e3:af:c6:3f:5c:2c:42:82:0e:37:6c:f9:8d: f5:a3:0d:0e:17:6c:d8:4c:ed:b6:a2:77:c9:a8:09: 72:6d:99:bc:f8:4f:3c:11:05:c7:bf:77:c7:e0:75: 89:4c:27:4c:d2:78:d7:7a:e6:9d:6f:d1:a8:96:a3: cf:2d:80:5a:dd:ef:15:58:0b:18:f6:02:c4:d1:f3: 6c:91:8d:f6:92:68:99:e9:28:16:88:7b:69:8e:79: fe:c6:a0:8f:1e:5b:f9:6d:77:46:1a:bd:a9:30:ed: b9:fb:08:22:83:8d:0b:82:ee:c0:db:81:ab:ba:76: ac:18:ae:6c:cd:4f:db:f4:a2:88:45:61:ae:44:be: a1:ad:b8:31:8b:13:c7:ca:58:8f:c3:6f:9f:ed:07: 75:00:7c:d0:ab:ac:90:85:d9:ef:2b:05:b9:77:8f: 6e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:D3:B8:B4:64:56:D8:8C:10:B1:09:E9:0F:89:55:7A:07:48:42 X509v3 Authority Key Identifier: keyid:B2:A2:5D:DE:1A:9E:C9:1B:59:98:6A:53:2F:78:83:54:36:18:32:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqJd3hqeyRtZmGpTL3iDVDYYMkg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC966/A1952BA21C1111EAB6C3C76DC4F9AE02/sqJd3hqeyRtZmGpTL3iDVDYYMkg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7a:eb:da:8a:12:26:4c:fb:db:24:22:ba:88:ae:a3:80:c5: af:90:6c:6b:c4:de:4b:ba:7e:71:36:ae:2d:f7:7e:23:07:bb: 00:54:71:3e:40:ad:ec:77:6e:61:74:44:9e:ff:09:99:da:53: 30:c6:60:45:1c:90:34:2a:a5:fa:85:ce:30:e7:a1:24:5f:8e: 0b:80:a8:97:39:9d:28:e0:f6:8f:c3:9c:e5:b1:80:0f:b4:3f: 97:30:c6:97:69:78:41:83:12:11:e2:3f:8f:a1:4a:77:d1:3b: 1f:c7:fb:7c:3c:8d:c3:ae:e8:fb:d3:2c:97:c8:e3:fa:f5:b6: be:9f:0f:5a:ba:44:cd:e8:7f:20:48:ec:83:89:e7:fe:5f:a1: 94:a0:95:55:ca:a2:ea:45:d4:46:a8:ee:bc:bf:94:12:46:f4: 43:1c:e2:90:88:82:e1:17:3e:bd:ff:a9:a7:ac:c6:a9:0e:27: 10:63:1e:e3:1b:95:95:1b:d7:fc:79:70:73:b4:f9:ef:0b:60: 08:14:70:42:d1:fc:a3:13:54:c6:12:46:1f:fc:3e:b8:d9:58: 69:0d:29:c2:98:1a:9f:f6:da:33:fe:f6:6d:ab:80:6b:d7:91: dc:e4:46:cb:f7:f4:6a:cd:27:b6:6a:3f:aa:51:b8:06:df:27: f9:0c:cf:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkM5NjYxMTAvBgNVBAUTKEIyQTI1RERFMUE5RUM5MUI1OTk4NkE1MzJGNzg4MzU0 MzYxODMyNDgwHhcNMjYwNzIyMTg1MDA3WhcNMjYwNzI5MTg1MDA3WjAYMRYwFAYD VQQDEw02YTYxMTBkZi00MjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkXh+ZC+jCotk6Mec4uR9GnRmEZCMWHB9dvYN83bVUPYhCDFpi0V3GGMVzwe BvR04op6dw8MT8vI5E5JhdZYqC7MJG3DdIQwCmMNeSHtRiZVtbhnYFfs2Q0FHuOv xj9cLEKCDjds+Y31ow0OF2zYTO22onfJqAlybZm8+E88EQXHv3fH4HWJTCdM0njX euadb9GolqPPLYBa3e8VWAsY9gLE0fNskY32kmiZ6SgWiHtpjnn+xqCPHlv5bXdG Gr2pMO25+wgig40Lgu7A24GrunasGK5szU/b9KKIRWGuRL6hrbgxixPHyliPw2+f 7Qd1AHzQq6yQhdnvKwW5d49uXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpj07i0 ZFbYjBCxCekPiVV6B0hCMB8GA1UdIwQYMBaAFLKiXd4anskbWZhqUy94g1Q2GDJI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzk2Ni9BMTk1MkJBMjFD MTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlSdFptR3BUTDNpRFZEWVlN a2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxSmQzaHFleVJ0Wm1HcFRMM2lEVkRZWU1rZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qzk2Ni9BMTk1MkJBMjFDMTExMUVBQjZDM0M3NkRDNEY5QUUwMi9zcUpkM2hxZXlS dFptR3BUTDNpRFZEWVlNa2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiXrr2ooSJkz72yQiuoiuo4DFr5Bsa8TeS7p+cTauLfd+Iwe7AFRxPkCt7Hdu YXREnv8JmdpTMMZgRRyQNCql+oXOMOehJF+OC4ColzmdKOD2j8Oc5bGAD7Q/lzDG l2l4QYMSEeI/j6FKd9E7H8f7fDyNw67o+9Msl8jj+vW2vp8PWrpEzeh/IEjsg4nn /l+hlKCVVcqi6kXURqjuvL+UEkb0QxzikIiC4Rc+vf+pp6zGqQ4nEGMe4xuVlRvX /Hlwc7T57wtgCBRwQtH8oxNUxhJGH/w+uNlYaQ0pwpgan/baM/72bauAa9eR3ORG y/f0as0ntmo/qlG4Bt8n+QzPfg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:26:49 2026 by rpki-client