$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: WAfrkAr1+yRh93HU0crAYO4ALu0uGHaiBUvTnwpL8kI= Subject key identifier: 2D:1B:48:E4:F5:7A:01:D8:62:6C:1C:17:82:FA:85:D6:71:B9:12:96 Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: E3 Signing time: Thu 23 Jul 2026 08:25:06 +0000 Manifest this update: Thu 23 Jul 2026 08:25:06 +0000 Manifest next update: Thu 30 Jul 2026 08:25:06 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: 50q2Hes5Ms7Yw2NnCfMfF+UwHeJvfkpg4KJS07JBQwk=) 2: C3DCFE54EB2911F0BD7173483B6F56BC.roa (hash: GRUkISuSjrdPycV7YoKPvCtNvhdJEKU1KQQr0iDkDpg=) 3: 1FC17CE2EB2D11F0971959663D6F56BC.roa (hash: w/3re6+mcHn3z7mWQlt9gMEkLcEqozWFLvA0qzfndLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Jul 23 08:25:06 2026 GMT Not After : Jul 30 08:25:06 2026 GMT Subject: CN=6a61cfe2-b802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:34:f7:2f:33:ef:80:1c:8f:76:e0:79:95:53: 15:9b:b6:c9:81:9d:fa:cc:36:c0:b8:d4:52:cc:86: e3:8c:c7:f6:ea:13:94:d6:28:1f:3a:1a:49:bf:d9: 01:48:3a:19:61:1e:58:31:3f:e0:b5:1f:91:72:e8: ee:4a:14:55:60:c5:75:3b:d6:6a:a5:f4:d8:eb:ed: 2c:a6:22:49:13:62:45:81:05:f6:72:9c:54:ed:78: b1:47:68:47:ab:a8:4c:e5:47:91:0d:ef:d3:bb:04: 1a:7a:f6:01:02:53:3a:53:36:4b:bd:93:ab:33:26: fe:d7:43:a5:f0:20:08:6b:dd:e0:54:58:c3:85:41: fd:a0:7b:c9:e4:a4:9d:36:e5:a2:cd:ed:32:f2:d2: 3a:7f:51:1b:1c:67:0e:9c:7e:b8:5c:ae:97:08:5f: 4b:56:ae:0f:5b:ba:f9:11:60:6a:33:9b:0f:23:9d: dd:f3:ff:90:a8:dd:e8:11:d6:ad:54:8b:0a:1a:e2: e2:a1:71:2e:65:3c:58:bb:99:80:9b:fd:fa:4e:a9: 6a:05:66:c7:76:09:8c:64:9a:a9:99:1d:48:5e:46: 46:c3:15:88:c8:56:f6:85:bb:ed:0e:e4:bf:e5:21: cb:c0:a4:6e:ce:08:ec:ab:ab:5f:e7:d4:f8:46:82: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1B:48:E4:F5:7A:01:D8:62:6C:1C:17:82:FA:85:D6:71:B9:12:96 X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:df:0d:63:e1:a4:97:67:0b:e4:88:5b:8c:0a:b2:80:38:29: 6e:46:cb:e3:e8:0b:11:9a:6d:e1:e0:26:fa:78:1e:36:bb:2e: d6:ca:7b:48:8f:b1:3a:e3:dd:69:3d:82:ea:00:5e:8c:3a:9d: 18:a6:20:66:13:fe:fe:3a:06:24:aa:b9:0e:f9:43:db:e4:00: dc:9a:3f:03:c8:f5:77:1c:07:19:20:d7:70:8a:63:c3:78:b3: 64:f1:7c:0b:0d:24:94:49:c7:f0:6d:de:24:c5:36:61:d0:b1: fa:b1:f7:c2:6a:03:60:db:05:02:d3:7f:fd:36:59:89:61:72: 00:7b:35:fb:e9:af:ac:27:1e:81:90:cc:44:e8:d1:50:fa:26: fa:a0:6a:e6:93:ee:ff:6e:22:54:65:42:1f:5d:d3:76:3d:00: 45:3f:18:50:cc:f4:70:97:29:dc:cf:97:75:88:9c:48:17:fd: 80:7f:2d:51:77:e3:e7:e9:61:3c:bd:bb:5f:51:f5:67:7a:ec: f5:9f:85:ea:c5:fa:68:54:95:25:6c:d3:62:67:04:e7:fb:4c: 6c:7b:cf:fc:31:d8:3c:ba:7a:35:05:b9:e3:4e:5c:51:35:86: 81:c8:2a:24:fd:39:20:cb:f4:fc:cb:88:c0:a2:0d:87:dd:04: 1f:99:c1:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEFCNTNEOTkyODEwMkI5MTlEQjdDNTQ2NUM4REQ1RkYy NjY3NDQzQjMwHhcNMjYwNzIzMDgyNTA2WhcNMjYwNzMwMDgyNTA2WjAYMRYwFAYD VQQDEw02YTYxY2ZlMi1iODAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zT3LzPvgByPduB5lVMVm7bJgZ36zDbAuNRSzIbjjMf26hOU1igfOhpJv9kB SDoZYR5YMT/gtR+RcujuShRVYMV1O9ZqpfTY6+0spiJJE2JFgQX2cpxU7XixR2hH q6hM5UeRDe/TuwQaevYBAlM6UzZLvZOrMyb+10Ol8CAIa93gVFjDhUH9oHvJ5KSd NuWize0y8tI6f1EbHGcOnH64XK6XCF9LVq4PW7r5EWBqM5sPI53d8/+QqN3oEdat VIsKGuLioXEuZTxYu5mAm/36TqlqBWbHdgmMZJqpmR1IXkZGwxWIyFb2hbvtDuS/ 5SHLwKRuzgjsq6tf59T4RoLd1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC0bSOT1 egHYYmwcF4L6hdZxuRKWMB8GA1UdIwQYMBaAFKtT2ZKBArkZ23xUZcjdX/JmdEOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9EODRFN0JGMjND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VSbmJmRlJseU4xZjhtWjBR N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VS bmJmRlJseU4xZjhtWjBRN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKN8NY+Gkl2cL5IhbjAqygDgpbkbL4+gLEZpt4eAm+ngeNrsu1sp7SI+xOuPd aT2C6gBejDqdGKYgZhP+/joGJKq5DvlD2+QA3Jo/A8j1dxwHGSDXcIpjw3izZPF8 Cw0klEnH8G3eJMU2YdCx+rH3wmoDYNsFAtN//TZZiWFyAHs1++mvrCcegZDMROjR UPom+qBq5pPu/24iVGVCH13Tdj0ART8YUMz0cJcp3M+XdYicSBf9gH8tUXfj5+lh PL27X1H1Z3rs9Z+F6sX6aFSVJWzTYmcE5/tMbHvP/DHYPLp6NQW5405cUTWGgcgq JP05IMv0/MuIwKINh90EH5nBNQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:15:42 2026 by rpki-client