$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft File: qEIODiButOkMWHKN1D91Dc_DzIY.mft (raw, json) Hash identifier: pONpQkB1b80PdGW0AFFfYQwY4cDMhzzbi0qy2pgkoUU= Subject key identifier: F4:A2:86:44:BD:57:11:93:0A:E3:43:E0:72:8A:75:10:F4:82:38:1B Authority key identifier: A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86 Certificate issuer: /CN=A91DCF4D/serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft Manifest number: 04 Signing time: Thu 23 Jul 2026 11:20:57 +0000 Manifest this update: Thu 23 Jul 2026 11:20:56 +0000 Manifest next update: Thu 30 Jul 2026 11:20:56 +0000 Files and hashes: 1: qEIODiButOkMWHKN1D91Dc_DzIY.crl (hash: +mej13IVO368eOKeLR/XzJuJSQyWmPS3x936+q99658=) 2: A41A30BE866011F191F4B56496A30FBC.roa (hash: AJVM8QB8v9wW9C2GIwYSkWw279MNg5CiJGgU0E7i/bE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCF4D, serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86 Validity Not Before: Jul 23 11:20:56 2026 GMT Not After : Jul 30 11:20:56 2026 GMT Subject: CN=6a61f918-ddef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:3a:ed:a3:b4:55:43:74:c5:94:98:30:b2: 65:2a:3e:95:b1:79:0b:4d:83:bd:e7:3f:29:05:56: c8:5d:37:6c:81:0f:cd:f3:f2:f5:fa:ca:e6:18:f8: a8:be:60:36:32:f5:2b:3a:e0:69:e0:c2:0a:1b:4d: 54:39:41:7a:2a:a7:f7:30:f8:fb:f0:73:de:d5:53: 40:86:a1:f1:3c:dd:ba:a1:11:6d:c2:dc:f7:5e:49: fb:30:2a:1f:7d:c9:99:11:3c:75:11:aa:12:db:d5: 64:1c:4b:79:a9:1c:83:c9:ec:7b:e7:de:64:b1:6b: 0a:65:f1:55:d4:90:51:7e:45:fd:c6:74:c6:14:99: 70:1e:4f:4d:39:0f:37:f6:80:22:28:7d:b3:98:c9: 9a:f5:d2:e4:94:07:84:ad:c9:74:0f:90:71:f4:38: 23:33:fd:bf:69:dc:a5:78:ec:00:b5:f6:de:43:d2: aa:98:3e:4c:38:87:c2:1b:69:75:a4:8f:49:56:1d: 19:1f:2d:42:1e:5c:ce:24:7e:8a:da:aa:a5:d9:0c: 73:f8:2b:d2:84:73:b2:f8:32:94:f4:b5:1c:f3:33: d4:be:36:79:0a:bf:19:5d:d1:a7:7e:51:8e:65:69: c8:da:b8:0b:3a:7b:a9:02:d6:32:64:25:7b:fa:f5: f1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A2:86:44:BD:57:11:93:0A:E3:43:E0:72:8A:75:10:F4:82:38:1B X509v3 Authority Key Identifier: keyid:A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:53:05:09:f3:a9:84:7a:79:20:b0:1a:72:5d:2f:08:f2:7c: b8:ca:29:b0:2c:8f:0a:c9:c5:28:aa:3d:c1:d4:69:9a:ae:c7: 1f:34:b3:f1:a1:b1:37:db:ac:02:67:68:ed:e2:b7:eb:72:73: a0:4a:9e:70:55:02:92:c9:02:6c:dc:85:b9:0f:60:ef:2d:14: fd:6e:51:1f:36:8b:2b:0e:24:cb:1d:77:2c:38:3d:9f:07:b5: 19:37:78:d6:93:52:bb:5a:e3:75:7b:42:e2:33:c9:8c:b6:71: d6:74:65:77:36:4b:ce:b1:b2:e6:72:fe:22:8a:1d:45:ea:99: d4:f9:08:33:70:9f:db:2a:c3:8a:d3:b6:f8:24:e3:7a:24:d9: 80:9c:bf:b9:68:83:f2:f7:88:9b:fc:fe:a1:e4:3b:05:11:2f: 18:87:8a:13:ae:4a:80:ae:1c:d3:cc:ed:a9:d8:d4:98:71:5d: d7:2b:38:d6:75:db:cf:ac:d1:af:9c:08:a5:73:eb:97:d6:45: cb:95:78:4f:67:6e:c4:40:38:b7:c3:d1:6b:4e:a1:4c:c0:5c: 9d:30:2b:80:60:5b:0b:f9:22:2f:0b:f4:a3:8f:92:0c:f8:f4: 89:7f:d6:0f:f4:23:3e:e6:65:f0:94:42:a1:ff:ba:d7:45:3a: 43:29:0a:45 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Q0Y0RDExMC8GA1UEBRMoQTg0MjBFMEUyMDZFQjRFOTBDNTg3MjhERDQzRjc1MERD RkMzQ0M4NjAeFw0yNjA3MjMxMTIwNTZaFw0yNjA3MzAxMTIwNTZaMBgxFjAUBgNV BAMTDTZhNjFmOTE4LWRkZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCycTrto7RVQ3TFlJgwsmUqPpWxeQtNg73nPykFVshdN2yBD83z8vX6yuYY+Ki+ YDYy9Ss64GngwgobTVQ5QXoqp/cw+Pvwc97VU0CGofE83bqhEW3C3PdeSfswKh99 yZkRPHURqhLb1WQcS3mpHIPJ7Hvn3mSxawpl8VXUkFF+Rf3GdMYUmXAeT005Dzf2 gCIofbOYyZr10uSUB4StyXQPkHH0OCMz/b9p3KV47AC19t5D0qqYPkw4h8IbaXWk j0lWHRkfLUIeXM4kforaqqXZDHP4K9KEc7L4MpT0tRzzM9S+NnkKvxld0ad+UY5l acjauAs6e6kC1jJkJXv69fFxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9KKGRL1X EZMK40Pgcop1EPSCOBswHwYDVR0jBBgwFoAUqEIODiButOkMWHKN1D91Dc/DzIYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDRjREL0RCOTBFNDgwODQ5 RDExRjE5MjAzQjBCQjg4QTMwRkJDL3FFSU9EaUJ1dE9rTVdIS04xRDkxRGNfRHpJ WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcUVJT0RpQnV0T2tNV0hLTjFEOTFEY19EeklZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD RjREL0RCOTBFNDgwODQ5RDExRjE5MjAzQjBCQjg4QTMwRkJDL3FFSU9EaUJ1dE9r TVdIS04xRDkxRGNfRHpJWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBEUwUJ86mEenkgsBpyXS8I8ny4yimwLI8KycUoqj3B1GmarscfNLPxobE326wC Z2jt4rfrcnOgSp5wVQKSyQJs3IW5D2DvLRT9blEfNosrDiTLHXcsOD2fB7UZN3jW k1K7WuN1e0LiM8mMtnHWdGV3NkvOsbLmcv4iih1F6pnU+QgzcJ/bKsOK07b4JON6 JNmAnL+5aIPy94ib/P6h5DsFES8Yh4oTrkqArhzTzO2p2NSYcV3XKzjWddvPrNGv nAilc+uX1kXLlXhPZ27EQDi3w9FrTqFMwFydMCuAYFsL+SIvC/Sjj5IM+PSJf9YP 9CM+5mXwlEKh/7rXRTpDKQpF -----END CERTIFICATE-----Generated at Fri Jul 24 13:16:04 2026 by rpki-client