$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft File: qjXi-Xe1XnL5FjW_fVO861NHmDs.mft (raw, json) Hash identifier: h13Jb3is3GJVaAi/XwSHlle6HHMYxJLedMtxgIE+kec= Subject key identifier: 3B:32:80:23:6A:BA:C7:B9:01:65:A6:D8:D3:55:67:93:45:6A:A9:9F Authority key identifier: AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B Certificate issuer: /CN=A91D2C38/serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft Manifest number: 0138 Signing time: Thu 23 Jul 2026 07:08:03 +0000 Manifest this update: Thu 23 Jul 2026 07:08:03 +0000 Manifest next update: Thu 30 Jul 2026 07:08:03 +0000 Files and hashes: 1: qjXi-Xe1XnL5FjW_fVO861NHmDs.crl (hash: rIPCAbqLKaYsXFSvBC8EMwFfYbEqDp29k2T1hP0nqGA=) 2: 8D6B6D86A98C11EFAAC0F364C4F9AE02.roa (hash: hAmO+Dq9vGZAILDadtbesaeJmrxEB8UrXmpWc1/KCyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2C38, serialNumber=AA35E2F977B55E72F91635BF7D53BCEB5347983B Validity Not Before: Jul 23 07:08:03 2026 GMT Not After : Jul 30 07:08:03 2026 GMT Subject: CN=6a61bdd3-cce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:c1:18:ac:8d:72:e9:91:cb:0e:d3:06:df: b6:21:e5:0b:c4:7f:45:7b:a8:46:c9:1d:ce:33:6b: 32:3a:57:b8:8f:c4:d1:f0:92:7c:da:fc:45:72:05: ac:4b:13:44:c2:eb:37:6b:7c:8a:70:0e:3e:57:27: 64:da:71:89:94:18:b2:a0:92:c7:66:e0:51:b4:00: ff:20:a4:6b:c4:10:eb:c1:16:52:a7:7e:74:07:c7: 15:46:f0:2a:c9:9e:98:dc:d8:db:fe:a2:00:96:1d: 33:b4:bb:1e:94:1c:b6:5d:fc:90:c8:c6:7c:bc:a5: cc:cd:65:8a:3c:74:42:34:12:91:12:fb:9c:ed:82: a9:23:e2:4b:e2:59:49:b0:02:32:56:d3:a7:b8:f9: de:a7:a5:fc:8a:e1:83:e5:b5:ea:d9:e4:9c:30:89: 55:99:37:f5:45:cb:03:f3:e0:8b:5f:d9:9a:4e:d1: d7:33:de:f4:9b:4d:d1:57:a3:82:5c:f3:87:4d:7f: 67:fa:f2:4e:de:d3:1c:a2:86:99:df:da:a1:7e:a8: ba:51:2b:aa:9a:c4:76:28:96:41:c7:bb:ef:19:da: 90:d3:0b:32:de:31:f5:d3:8d:d6:be:4d:23:62:3d: 6e:39:aa:66:b5:f0:db:13:2e:ca:ea:aa:41:fd:a4: 11:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:32:80:23:6A:BA:C7:B9:01:65:A6:D8:D3:55:67:93:45:6A:A9:9F X509v3 Authority Key Identifier: keyid:AA:35:E2:F9:77:B5:5E:72:F9:16:35:BF:7D:53:BC:EB:53:47:98:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qjXi-Xe1XnL5FjW_fVO861NHmDs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2C38/04BAA614A98C11EF9350FB63C4F9AE02/qjXi-Xe1XnL5FjW_fVO861NHmDs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:17:bf:d8:51:58:d4:bc:d2:14:b3:5f:93:e2:5c:dd:f2:3d: e9:08:ed:75:84:e3:50:39:92:9a:77:2a:4b:2a:3f:b4:3d:ac: d2:46:98:12:0e:26:69:af:03:bb:e5:7d:e5:72:7c:67:5d:ba: 2b:bf:72:6e:91:e9:a9:3e:dd:9c:15:06:1d:95:28:2f:69:97: 20:b6:27:0c:96:b5:a5:4e:17:c0:f7:97:02:4f:88:d3:d6:97: 4c:d7:d0:66:0e:69:b8:77:73:af:3d:34:66:dd:e5:c8:01:ae: 5c:08:16:da:19:4e:59:b1:eb:57:d8:8c:ce:46:ba:e6:49:6c: df:57:a0:aa:3c:ec:e0:bd:34:7f:9f:1e:2f:55:ae:90:ad:c0: 24:c3:9f:eb:14:70:33:e9:2c:79:f5:7e:8d:20:fa:d8:53:3b: 3f:40:f5:8a:11:80:4c:0e:05:2c:d6:a0:b2:f6:56:50:06:51: b2:ad:61:7e:40:9d:19:e5:57:7c:22:ce:7c:d6:7f:fb:c3:88: fb:ed:00:c9:8e:ba:d3:33:1e:f2:d9:09:10:56:66:be:ce:5b: f3:0b:b1:67:0a:33:d5:89:fe:fd:60:2b:bf:37:e7:cf:ca:6f: 50:28:eb:30:cd:11:13:57:ab:8e:4b:7b:b2:20:13:fc:fc:d8: 4d:3a:7c:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJDMzgxMTAvBgNVBAUTKEFBMzVFMkY5NzdCNTVFNzJGOTE2MzVCRjdENTNCQ0VC NTM0Nzk4M0IwHhcNMjYwNzIzMDcwODAzWhcNMjYwNzMwMDcwODAzWjAYMRYwFAYD VQQDEw02YTYxYmRkMy1jY2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAreXBGKyNcumRyw7TBt+2IeULxH9Fe6hGyR3OM2syOle4j8TR8JJ82vxFcgWs SxNEwus3a3yKcA4+Vydk2nGJlBiyoJLHZuBRtAD/IKRrxBDrwRZSp350B8cVRvAq yZ6Y3Njb/qIAlh0ztLselBy2XfyQyMZ8vKXMzWWKPHRCNBKREvuc7YKpI+JL4llJ sAIyVtOnuPnep6X8iuGD5bXq2eScMIlVmTf1RcsD8+CLX9maTtHXM970m03RV6OC XPOHTX9n+vJO3tMcooaZ39qhfqi6USuqmsR2KJZBx7vvGdqQ0wsy3jH1043Wvk0j Yj1uOapmtfDbEy7K6qpB/aQRkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDsygCNq use5AWWm2NNVZ5NFaqmfMB8GA1UdIwQYMBaAFKo14vl3tV5y+RY1v31TvOtTR5g7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkMzOC8wNEJBQTYxNEE5 OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhuTDVGaldfZlZPODYxTkht RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FqWGktWGUxWG5MNUZqV19mVk84NjFOSG1Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkMzOC8wNEJBQTYxNEE5OEMxMUVGOTM1MEZCNjNDNEY5QUUwMi9xalhpLVhlMVhu TDVGaldfZlZPODYxTkhtRHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZhe/2FFY1LzSFLNfk+Jc3fI96QjtdYTjUDmSmncqSyo/tD2s0kaYEg4maa8D u+V95XJ8Z126K79ybpHpqT7dnBUGHZUoL2mXILYnDJa1pU4XwPeXAk+I09aXTNfQ Zg5puHdzrz00Zt3lyAGuXAgW2hlOWbHrV9iMzka65kls31egqjzs4L00f58eL1Wu kK3AJMOf6xRwM+ksefV+jSD62FM7P0D1ihGATA4FLNagsvZWUAZRsq1hfkCdGeVX fCLOfNZ/+8OI++0AyY660zMe8tkJEFZmvs5b8wuxZwoz1Yn+/WArvzfnz8pvUCjr MM0RE1erjkt7siAT/PzYTTp8NA== -----END CERTIFICATE-----Generated at Fri Jul 24 04:41:23 2026 by rpki-client