$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft File: QxsKSDX89paz7NM1klqOE2EM0Tc.mft (raw, json) Hash identifier: BEFtXouho1pLuhNJ+Bq27h0CVn66Jmya04YrEjQDJ2U= Subject key identifier: 89:E4:2B:C5:12:50:6F:A8:6D:43:43:A6:05:AB:32:DC:7A:6D:00:05 Authority key identifier: 43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 Certificate issuer: /CN=A91BE89F/serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft Manifest number: 0162 Signing time: Thu 23 Jul 2026 06:32:58 +0000 Manifest this update: Thu 23 Jul 2026 06:32:58 +0000 Manifest next update: Thu 30 Jul 2026 06:32:58 +0000 Files and hashes: 1: QxsKSDX89paz7NM1klqOE2EM0Tc.crl (hash: BV2wKfNuNbuEqmp7BMCjTA1zWkYcWrfxOQ1vKwgtpS0=) 2: 49ADB44C6DCC11EF8BE2A566C4F9AE02.roa (hash: /4+lF6tlUt2UR6b5tRfzTFnRtlIHVlDaWV39Y4Dm8cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE89F, serialNumber=431B0A4835FCF696B3ECD335925A8E13610CD137 Validity Not Before: Jul 23 06:32:58 2026 GMT Not After : Jul 30 06:32:58 2026 GMT Subject: CN=6a61b59a-9ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6f:c1:51:48:27:cd:c6:c4:44:04:3d:02:4f: fa:9c:95:0c:86:c8:25:52:57:ad:ee:39:94:1a:f5: 09:e5:ff:f7:52:4b:c7:ee:f2:ec:d0:d1:72:3d:3d: 97:69:df:e8:85:30:d3:1d:a3:a1:0d:74:18:e1:2b: 48:3a:9b:cd:ca:3d:ea:46:16:2f:19:9a:cd:20:85: 4d:78:b7:d4:fe:e4:70:6a:03:a4:ee:0e:6b:77:84: a8:aa:e1:cf:64:80:fa:69:8c:77:6f:ca:18:1b:5a: 6e:41:1c:84:d7:5b:9c:dd:ef:5f:59:3a:b7:f7:e7: 1e:9a:3f:c6:21:ae:bc:4a:f2:a2:e5:86:52:c6:1b: 1f:ad:66:c5:e3:eb:ba:96:c0:24:0a:1a:8f:c3:10: 17:64:93:58:c7:31:9f:60:dc:f4:81:4f:2b:a4:60: 11:f2:19:e3:8a:a4:69:1d:b8:3d:c1:1b:a8:9b:3c: c9:1a:4b:1e:a3:1f:79:8f:e6:82:38:09:d4:e7:26: 34:8c:0d:f2:e3:23:5c:4d:ff:ab:2d:d7:0f:a9:e4: 44:7f:95:28:2c:a3:fb:cc:3e:0a:68:97:37:cf:41: c6:14:09:34:38:58:22:f6:2d:9e:5c:96:bb:2d:39: 25:51:6c:f5:2c:02:f9:9c:1f:54:58:76:0c:c6:49: 3a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E4:2B:C5:12:50:6F:A8:6D:43:43:A6:05:AB:32:DC:7A:6D:00:05 X509v3 Authority Key Identifier: keyid:43:1B:0A:48:35:FC:F6:96:B3:EC:D3:35:92:5A:8E:13:61:0C:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QxsKSDX89paz7NM1klqOE2EM0Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE89F/AFFD21706DCB11EF9B39B865C4F9AE02/QxsKSDX89paz7NM1klqOE2EM0Tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:16:fc:69:5a:62:dc:4f:d2:23:99:42:dc:e3:94:79:b4:c1: e8:10:21:b4:7a:a0:3d:bb:f4:59:e4:e7:2a:08:b4:15:15:fb: 53:0f:fe:a7:08:ba:ad:80:a6:c3:41:d1:03:e3:35:46:77:ff: 8e:a3:26:bf:c1:72:33:25:09:2d:a6:b0:86:8c:b2:4f:a9:f7: 9b:b1:72:8d:0f:09:f1:16:13:fb:d2:74:2a:3b:e1:21:2c:08: 41:de:8c:28:35:a8:7d:35:71:51:12:a8:0c:48:af:0e:7e:66: e3:7c:6c:ac:7b:e2:da:e4:f5:9e:d8:fa:2a:01:db:7a:f6:91: 0d:99:3a:42:b2:82:ba:6a:2c:f9:b1:97:8c:94:b4:cd:ff:2f: 3d:87:e8:fd:36:b2:a3:b0:db:15:d8:75:d3:5a:2f:71:fc:58: 0c:97:3b:61:50:0b:26:b0:3b:ea:a0:d2:5e:22:f8:8c:ae:55: 05:fb:05:e3:93:82:6a:9b:90:c2:01:1e:db:b7:9c:ed:15:a7: 60:ea:52:32:42:16:31:06:46:01:66:15:0d:ac:a1:63:cf:5b: 44:b6:1a:a2:66:fa:4c:8c:64:41:54:7a:b8:40:06:69:4e:ea: c8:1a:f5:75:67:2b:5d:c7:44:93:ba:88:3e:78:21:25:8a:2e: 20:bb:a7:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU4OUYxMTAvBgNVBAUTKDQzMUIwQTQ4MzVGQ0Y2OTZCM0VDRDMzNTkyNUE4RTEz NjEwQ0QxMzcwHhcNMjYwNzIzMDYzMjU4WhcNMjYwNzMwMDYzMjU4WjAYMRYwFAYD VQQDEw02YTYxYjU5YS05ZWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2W/BUUgnzcbERAQ9Ak/6nJUMhsglUlet7jmUGvUJ5f/3UkvH7vLs0NFyPT2X ad/ohTDTHaOhDXQY4StIOpvNyj3qRhYvGZrNIIVNeLfU/uRwagOk7g5rd4SoquHP ZID6aYx3b8oYG1puQRyE11uc3e9fWTq39+cemj/GIa68SvKi5YZSxhsfrWbF4+u6 lsAkChqPwxAXZJNYxzGfYNz0gU8rpGAR8hnjiqRpHbg9wRuomzzJGkseox95j+aC OAnU5yY0jA3y4yNcTf+rLdcPqeREf5UoLKP7zD4KaJc3z0HGFAk0OFgi9i2eXJa7 LTklUWz1LAL5nB9UWHYMxkk6RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFInkK8US UG+obUNDpgWrMtx6bQAFMB8GA1UdIwQYMBaAFEMbCkg1/PaWs+zTNZJajhNhDNE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTg5Ri9BRkZEMjE3MDZE Q0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlwYXo3Tk0xa2xxT0UyRU0w VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1F4c0tTRFg4OXBhejdOTTFrbHFPRTJFTTBUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTg5Ri9BRkZEMjE3MDZEQ0IxMUVGOUIzOUI4NjVDNEY5QUUwMi9ReHNLU0RYODlw YXo3Tk0xa2xxT0UyRU0wVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZhb8aVpi3E/SI5lC3OOUebTB6BAhtHqgPbv0WeTnKgi0FRX7Uw/+pwi6rYCm w0HRA+M1Rnf/jqMmv8FyMyUJLaawhoyyT6n3m7FyjQ8J8RYT+9J0KjvhISwIQd6M KDWofTVxURKoDEivDn5m43xsrHvi2uT1ntj6KgHbevaRDZk6QrKCumos+bGXjJS0 zf8vPYfo/Tayo7DbFdh101ovcfxYDJc7YVALJrA76qDSXiL4jK5VBfsF45OCapuQ wgEe27ec7RWnYOpSMkIWMQZGAWYVDayhY89bRLYaomb6TIxkQVR6uEAGaU7qyBr1 dWcrXcdEk7qIPnghJYouILungg== -----END CERTIFICATE-----Generated at Fri Jul 24 11:09:19 2026 by rpki-client