$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft File: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft (raw, json) Hash identifier: xGdIlxTMGubS9JZ6CuSggU5kHm7Q/FN3NVB1kKxqbbU= Subject key identifier: 87:53:B5:21:4E:0C:9A:EA:5D:4B:26:B6:00:33:80:26:7D:61:05:16 Authority key identifier: 0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB Certificate issuer: /CN=A91DC017/serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Certificate serial: 02C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft Manifest number: 02A6 Signing time: Thu 23 Jul 2026 02:49:09 +0000 Manifest this update: Thu 23 Jul 2026 02:49:08 +0000 Manifest next update: Thu 30 Jul 2026 02:49:08 +0000 Files and hashes: 1: CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl (hash: Bk7zHggX90v5GyBwFhuL7EzS2ElExl7gGRdtDOmDBIQ=) 2: 08A1C0B8DC5011EF9C212C5CC4F9AE02.roa (hash: 6sjpy6GriqELAPGgjJdFUt57xHCHCLQzT9kEpI0w6Mg=) 3: 1B8DE01C641911EF83FFBF3CC4F9AE02.roa (hash: xDjn+cobUE2agLkdimK21R3Sdz0e7azaiAPMZg9qQro=) 4: C0C268B8441C11EF9E110F1EC4F9AE02.roa (hash: v5FOCrkT7bwg0TVjJC2RnsG6lxQLJwnHry99/PwnEBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 707 (0x2c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC017, serialNumber=0AA5DE29265A08E27A581D894465BDCDB73709BB Validity Not Before: Jul 23 02:49:08 2026 GMT Not After : Jul 30 02:49:08 2026 GMT Subject: CN=6a618124-3a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:ed:78:24:78:8c:3f:1c:34:84:ea:61:be: 69:f1:cb:f5:4e:c4:3c:2f:46:c4:e1:fd:24:bd:56: 56:61:7c:e0:a4:f9:a7:cc:e3:5d:c5:da:78:0b:3e: 55:2e:4b:b2:48:3f:26:d1:40:c0:32:e0:68:9a:a5: dc:74:ca:1c:ca:34:c9:01:f4:4d:cb:69:a2:9b:dd: dc:4a:58:3c:88:a3:e8:56:af:9f:c6:57:de:b0:75: ce:f9:df:b9:ae:8c:ad:a0:4a:80:5d:0d:41:8d:16: 2a:7c:90:e0:a2:d8:a0:8c:29:ea:d4:0a:18:8e:a0: f4:90:33:d6:23:b4:e2:10:43:4f:4e:61:20:e8:fb: 6b:3a:a8:1c:ca:5a:3a:0e:c6:ea:77:ab:a2:e9:8d: e5:4e:b5:c5:a8:0b:a4:f2:c4:54:8b:0a:8b:77:a8: 61:46:a3:80:55:28:9a:60:2a:5d:cf:b7:65:c3:f3: 34:e3:22:32:35:00:06:31:dd:bf:1d:51:13:46:f9: a3:83:32:5f:b8:c6:31:b6:45:03:e0:d0:c8:39:61: c9:12:ab:75:35:45:af:1a:08:51:b1:cd:b0:9a:c0: d0:75:04:29:f4:dd:d7:0f:39:5c:3b:9a:6a:eb:6a: 79:8b:9d:ac:12:9e:f5:d2:6f:67:68:6d:e6:93:a3: 57:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:53:B5:21:4E:0C:9A:EA:5D:4B:26:B6:00:33:80:26:7D:61:05:16 X509v3 Authority Key Identifier: keyid:0A:A5:DE:29:26:5A:08:E2:7A:58:1D:89:44:65:BD:CD:B7:37:09:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC017/105AC8FC90C311EDBA1DCC23C4F9AE02/CqXeKSZaCOJ6WB2JRGW9zbc3Cbs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:7d:b5:bd:0b:2a:63:1e:65:a8:ac:0c:d3:fc:2e:3e:24:ce: 7f:1c:16:6f:ac:32:c0:e1:1c:e0:82:d2:bf:8f:81:17:ba:75: 0d:df:56:3b:6d:43:c3:d7:e0:d1:34:2d:c5:c8:13:ef:3a:d3: 0b:25:f0:f3:f2:c4:da:3b:65:6e:08:1c:ee:51:20:50:33:15: 16:33:68:d0:8d:34:43:6d:85:fd:92:6f:19:09:07:87:11:47: 16:3a:27:c6:ae:09:ca:16:16:c6:81:8e:4b:f7:d3:29:e2:2f: d1:ba:0e:f6:d4:a1:95:09:c1:e2:de:c1:a3:c2:c4:ae:16:99: 69:38:25:e1:7f:fe:6e:b0:09:ab:1d:a3:b0:6f:46:91:6b:4a: bd:74:cb:2d:c2:d2:33:2b:89:85:33:e6:1c:d6:d7:bd:6b:7c: 7e:a6:13:a6:1d:fa:9f:bd:50:20:1c:7c:04:2c:55:be:72:34: ed:9a:90:32:4d:91:5b:b0:eb:30:79:22:f5:47:e8:08:dc:92: a5:14:34:b5:bc:95:b4:59:e9:59:6f:a6:f5:5f:17:35:72:6c: c4:a9:b9:9a:43:98:c9:97:51:ef:36:5c:82:0e:16:11:ba:c1: d4:57:3e:e6:94:af:25:db:13:d3:5d:83:e5:44:ba:91:97:35: e3:14:1c:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwMTcxMTAvBgNVBAUTKDBBQTVERTI5MjY1QTA4RTI3QTU4MUQ4OTQ0NjVCRENE QjczNzA5QkIwHhcNMjYwNzIzMDI0OTA4WhcNMjYwNzMwMDI0OTA4WjAYMRYwFAYD VQQDEw02YTYxODEyNC0zYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmrteCR4jD8cNITqYb5p8cv1TsQ8L0bE4f0kvVZWYXzgpPmnzONdxdp4Cz5V LkuySD8m0UDAMuBomqXcdMocyjTJAfRNy2mim93cSlg8iKPoVq+fxlfesHXO+d+5 roytoEqAXQ1BjRYqfJDgotigjCnq1AoYjqD0kDPWI7TiEENPTmEg6PtrOqgcylo6 Dsbqd6ui6Y3lTrXFqAuk8sRUiwqLd6hhRqOAVSiaYCpdz7dlw/M04yIyNQAGMd2/ HVETRvmjgzJfuMYxtkUD4NDIOWHJEqt1NUWvGghRsc2wmsDQdQQp9N3XDzlcO5pq 62p5i52sEp710m9naG3mk6NXCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdTtSFO DJrqXUsmtgAzgCZ9YQUWMB8GA1UdIwQYMBaAFAql3ikmWgjielgdiURlvc23Nwm7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzAxNy8xMDVBQzhGQzkw QzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNPSjZXQjJKUkdXOXpiYzND YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxWGVLU1phQ09KNldCMkpSR1c5emJjM0Nicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzAxNy8xMDVBQzhGQzkwQzMxMUVEQkExRENDMjNDNEY5QUUwMi9DcVhlS1NaYUNP SjZXQjJKUkdXOXpiYzNDYnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB321vQsqYx5lqKwM0/wuPiTOfxwWb6wywOEc4ILSv4+BF7p1Dd9WO21Dw9fg 0TQtxcgT7zrTCyXw8/LE2jtlbggc7lEgUDMVFjNo0I00Q22F/ZJvGQkHhxFHFjon xq4JyhYWxoGOS/fTKeIv0boO9tShlQnB4t7Bo8LErhaZaTgl4X/+brAJqx2jsG9G kWtKvXTLLcLSMyuJhTPmHNbXvWt8fqYTph36n71QIBx8BCxVvnI07ZqQMk2RW7Dr MHki9UfoCNySpRQ0tbyVtFnpWW+m9V8XNXJsxKm5mkOYyZdR7zZcgg4WEbrB1Fc+ 5pSvJdsT012D5US6kZc14xQcFw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:11:52 2026 by rpki-client