$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft File: q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json) Hash identifier: AAWw5+7LOntuArbg1/WFt9fH4oikWfkli1iA6M6KYDY= Subject key identifier: 3A:4D:C6:16:D6:9A:37:AA:5D:67:4D:20:62:38:F6:1D:B6:A6:3E:99 Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 36F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft Manifest number: 360A Signing time: Fri 24 Jul 2026 14:31:03 +0000 Manifest this update: Fri 24 Jul 2026 14:31:03 +0000 Manifest next update: Fri 31 Jul 2026 14:31:03 +0000 Files and hashes: 1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: l/8r2pqACXS7NjXhpFm1puimx1pKMlEZ4RL5jZcrczQ=) 2: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=) 3: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=) 4: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=) 5: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: HGBUZghw2mrH37viSTYGdL7UxbtP3kpsrCzGnWhLnVU=) 6: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: rEfB0wTEVedizbjd1aa4stNP7Lpi5g6RaGy1a4umZiM=) 7: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: Vuo+8i5V4Znap+Qs1dOcHdE1nAFejMLQYP5EDIvQcjU=) 8: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk=) 9: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: N79DDK5pn6TCAon8GJdsX02x5/pCsRg1kmXulJOa3DU=) 10: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: kuzwCvIHtKelM7oshMzAb2U462l4e0HmxA10PXja6PA=) 11: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: /QQiHNO+P4zS7clMch+1xG2dmlltL/7vNQJGue0Q24E=) 12: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 14:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14072 (0x36f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Jul 24 14:31:03 2026 GMT Not After : Jul 31 14:31:03 2026 GMT Subject: CN=6a637727-d492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:77:5f:cc:e7:86:6f:29:8c:6c:f1:ca:d0:39: 14:37:a1:84:19:80:cc:0a:7a:96:0f:d7:83:d1:f8: 5e:6a:80:9a:34:57:d0:d6:11:00:45:76:79:f4:ad: 01:25:da:d8:f6:5e:94:7b:f6:77:05:f5:0d:e9:8c: 9e:8e:c6:ab:e1:96:d5:bc:ee:ff:cc:1b:95:4b:15: c7:67:4f:de:b5:a5:fc:b7:a4:24:a1:23:a2:24:57: 73:81:25:c1:69:fd:01:85:81:ca:59:1a:4b:99:12: c9:e2:2b:88:4a:b0:a9:fb:7c:45:70:9f:64:ca:56: b0:9c:9b:61:28:c7:99:5d:b7:2a:dd:41:16:a1:3a: 1b:8a:56:f9:ea:b8:5d:6a:88:46:4d:da:79:66:40: fc:9c:c9:74:dd:72:a7:4c:2a:1e:60:99:86:0a:f1: e9:24:3c:53:32:9f:2f:c7:5e:6d:85:aa:26:b0:51: 88:a9:1d:38:ab:33:f3:2b:08:d2:e9:d4:c7:14:3c: bc:7d:6d:b7:94:f2:68:a7:ee:11:4d:79:0e:4b:a0: 60:17:f4:57:24:b8:6f:6b:e5:23:a2:96:30:9e:28: e4:01:b1:d2:d0:d0:eb:39:a3:e1:a0:ed:2e:11:5a: 8d:01:d6:27:4e:2f:0e:71:48:0c:c1:f2:ce:7c:cd: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4D:C6:16:D6:9A:37:AA:5D:67:4D:20:62:38:F6:1D:B6:A6:3E:99 X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:8b:45:f5:a6:ca:57:69:2b:95:dd:dd:ad:c2:e3:d9:77:f1: 1a:4a:11:5b:f7:66:cf:d3:e2:0a:c9:d8:7c:c9:02:13:42:99: 63:70:8c:28:fe:81:e4:76:58:ce:3f:16:15:17:f2:a8:a1:af: 8e:42:b7:c1:6b:21:7c:1d:ec:43:4e:f2:b2:cf:04:53:d5:e4: 31:5e:af:08:d1:b1:3f:51:f1:b6:17:71:6f:9f:a0:52:af:ca: fe:87:0f:da:43:10:1e:d3:28:84:9e:3c:cf:ac:22:12:de:65: 6b:4e:37:f7:17:0c:49:a1:ed:7e:72:e1:e4:73:01:f7:a0:27: 41:75:29:57:64:41:b6:69:b5:e8:05:3a:e1:df:eb:ef:41:5f: c6:ca:4b:32:0d:1f:ba:39:cf:81:81:02:96:b4:06:86:41:30: 78:f9:d6:50:36:98:e0:c7:a2:bc:28:01:c8:48:95:d5:e5:5c: 5a:7b:be:f1:69:7c:1d:b2:7c:7b:90:4d:3b:2c:f1:09:a0:47: b6:8f:da:d3:66:e3:35:24:a2:5f:b8:6b:1e:fc:5c:22:79:0f: 0f:86:e7:da:02:c1:aa:0c:93:b6:65:82:9c:e2:09:1c:10:6f: 62:9c:81:94:fe:48:35:61:e1:27:f4:09:dc:5c:b5:4b:2b:70: cc:18:f2:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjYwNzI0MTQzMTAzWhcNMjYwNzMxMTQzMTAzWjAYMRYwFAYD VQQDEw02YTYzNzcyNy1kNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqndfzOeGbymMbPHK0DkUN6GEGYDMCnqWD9eD0fheaoCaNFfQ1hEARXZ59K0B JdrY9l6Ue/Z3BfUN6Yyejsar4ZbVvO7/zBuVSxXHZ0/etaX8t6QkoSOiJFdzgSXB af0BhYHKWRpLmRLJ4iuISrCp+3xFcJ9kylawnJthKMeZXbcq3UEWoTobilb56rhd aohGTdp5ZkD8nMl03XKnTCoeYJmGCvHpJDxTMp8vx15thaomsFGIqR04qzPzKwjS 6dTHFDy8fW23lPJop+4RTXkOS6BgF/RXJLhva+UjopYwnijkAbHS0NDrOaPhoO0u EVqNAdYnTi8OcUgMwfLOfM2bLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpNxhbW mjeqXWdNIGI49h22pj6ZMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQ1NC9ENEMzMEI0MjFEODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdC clVpM0hhbUxjOUlxTmkydkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF4tF9abKV2krld3drcLj2XfxGkoRW/dmz9PiCsnYfMkCE0KZY3CMKP6B5HZY zj8WFRfyqKGvjkK3wWshfB3sQ07yss8EU9XkMV6vCNGxP1Hxthdxb5+gUq/K/ocP 2kMQHtMohJ48z6wiEt5la0439xcMSaHtfnLh5HMB96AnQXUpV2RBtmm16AU64d/r 70FfxspLMg0fujnPgYEClrQGhkEwePnWUDaY4MeivCgByEiV1eVcWnu+8Wl8HbJ8 e5BNOyzxCaBHto/a02bjNSSiX7hrHvxcInkPD4bn2gLBqgyTtmWCnOIJHBBvYpyB lP5INWHhJ/QJ3Fy1SytwzBjyPg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:52:52 2026 by rpki-client