$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: gJkdxvngwSow7RzACP8G4nlXY9KY4LdxtKPPQluswWs= Subject key identifier: 90:80:AE:43:74:F0:0D:69:3C:B0:0D:6A:2C:C7:8A:C0:FF:FA:CC:4B Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0CAA Signing time: Wed 22 Jul 2026 20:47:33 +0000 Manifest this update: Wed 22 Jul 2026 20:47:32 +0000 Manifest next update: Wed 29 Jul 2026 20:47:32 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: 6hlrfmX44DL/3gypBSgWd0OUUgrDYuhW3fuX01x/Jvw=) 2: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: rKjGeR3bW3KsKLNlokaXVqhFpQOnZispIcGW123rOaY=) 3: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: XL/ZcgALP761TCI8hEan3K78GIrb6EiGTeA4Vn2wUJI=) 4: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: AIsLYj1Q0Ri7p3sC6uZCzxYzj0O4+4SA75lfHau1SqU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:47:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Jul 22 20:47:32 2026 GMT Not After : Jul 29 20:47:32 2026 GMT Subject: CN=6a612c65-0e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a2:fb:ce:ac:a6:55:fc:71:8f:f5:f7:c8:01: 24:5c:d8:7a:8f:36:34:84:32:6a:a1:57:e2:d0:5f: 75:26:33:d8:fc:7d:01:43:c8:09:b6:d0:2c:69:cc: 42:38:75:8b:76:98:88:a3:85:b6:e0:dd:88:56:00: a6:a8:af:54:d5:39:55:44:13:d2:7c:1f:cd:ea:57: 9a:54:c0:b2:83:5c:21:17:a6:e4:19:5c:21:77:4c: b2:ee:96:c0:fa:99:94:25:91:e8:fc:1e:c5:0e:4f: b3:52:c9:6b:52:d7:9f:43:25:9d:0e:b3:2a:20:7f: f3:7f:d1:70:93:38:fb:ca:77:ed:a8:a6:cb:40:d8: 61:0f:00:2e:42:72:b6:ad:9f:7f:52:18:6f:76:9d: bb:df:7a:dc:ba:bd:4e:7d:4e:89:b0:4a:39:b2:4e: 6e:74:60:59:c1:56:0e:5c:65:63:b4:8b:55:1b:d0: 65:ba:17:e6:b4:ec:37:e7:f4:66:b9:72:f4:98:67: 79:21:be:fb:82:a8:1d:0e:ff:7c:c7:f6:c6:22:27: 0d:86:e4:c9:89:bf:ed:fd:22:4a:dc:52:c6:8f:d1: f8:04:98:a2:ab:eb:d5:83:ba:e3:f5:ff:ac:b9:7a: 8e:60:23:50:2a:eb:e5:02:9a:f6:31:ac:76:b3:01: 0f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:80:AE:43:74:F0:0D:69:3C:B0:0D:6A:2C:C7:8A:C0:FF:FA:CC:4B X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f1:71:a7:a6:fc:43:c2:99:51:9d:12:b8:f9:7b:c9:4e:ac: 75:aa:46:af:4f:00:0f:b9:e9:f2:8b:4f:64:8e:2a:96:c9:17: ce:1a:28:a2:70:dc:55:74:58:ed:b6:15:40:fa:7a:95:89:96: 77:9c:ca:b3:e4:1d:c6:ba:86:17:3f:63:d8:fe:16:d2:5d:6a: 0c:1f:8b:86:7e:af:83:11:20:ff:9b:4b:7f:83:a9:db:f0:7b: e8:a7:5e:2e:4b:08:c3:27:fd:43:f3:38:37:d6:2f:28:13:be: 97:09:30:86:05:9c:09:2d:9e:40:86:89:ed:b3:66:36:d0:62: a5:dd:71:0c:a5:62:1f:cd:10:5c:12:6f:ca:ef:a2:63:e6:6d: b5:e3:1b:e5:5b:0c:76:57:37:e6:fd:3a:ec:6d:f9:53:15:57: 69:6e:d6:ba:da:63:40:d7:3b:0a:d5:2d:79:04:19:68:90:ce: cd:c9:64:cd:06:61:24:6d:cf:ea:34:e8:a9:f5:e6:3a:3b:6d: 84:35:6d:9e:98:8d:64:d1:0d:14:30:17:14:a6:dc:63:ff:10: 46:21:f2:28:29:98:af:33:9e:01:b2:30:d7:52:13:cb:9f:bc: 4b:dd:87:bf:9a:cc:dc:70:57:ca:b8:8e:89:aa:6f:88:c6:83: 78:22:18:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwNzIyMjA0NzMyWhcNMjYwNzI5MjA0NzMyWjAYMRYwFAYD VQQDEw02YTYxMmM2NS0wZTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlaL7zqymVfxxj/X3yAEkXNh6jzY0hDJqoVfi0F91JjPY/H0BQ8gJttAsacxC OHWLdpiIo4W24N2IVgCmqK9U1TlVRBPSfB/N6leaVMCyg1whF6bkGVwhd0yy7pbA +pmUJZHo/B7FDk+zUslrUtefQyWdDrMqIH/zf9Fwkzj7ynftqKbLQNhhDwAuQnK2 rZ9/Uhhvdp2733rcur1OfU6JsEo5sk5udGBZwVYOXGVjtItVG9BluhfmtOw35/Rm uXL0mGd5Ib77gqgdDv98x/bGIicNhuTJib/t/SJK3FLGj9H4BJiiq+vVg7rj9f+s uXqOYCNQKuvlApr2Max2swEPjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCArkN0 8A1pPLANaizHisD/+sxLMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnPFxp6b8Q8KZUZ0SuPl7yU6sdapGr08AD7np8otPZI4qlskXzhooonDcVXRY 7bYVQPp6lYmWd5zKs+QdxrqGFz9j2P4W0l1qDB+Lhn6vgxEg/5tLf4Op2/B76Kde LksIwyf9Q/M4N9YvKBO+lwkwhgWcCS2eQIaJ7bNmNtBipd1xDKViH80QXBJvyu+i Y+ZtteMb5VsMdlc35v067G35UxVXaW7WutpjQNc7CtUteQQZaJDOzclkzQZhJG3P 6jToqfXmOjtthDVtnpiNZNENFDAXFKbcY/8QRiHyKCmYrzOeAbIw11ITy5+8S92H v5rM3HBXyriOiapviMaDeCIYhA== -----END CERTIFICATE-----Generated at Fri Jul 24 10:19:03 2026 by rpki-client