$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft File: lQJWKPFDQQRhRqwgujJGFEYanMM.mft (raw, json) Hash identifier: rwCOHOz4dC+KfDfbrRL0KV4k6A7GyjaKyD5osnynu7c= Subject key identifier: B7:26:48:69:D9:75:9C:0F:41:93:BB:74:86:2F:F4:64:87:67:0D:93 Authority key identifier: 95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 Certificate issuer: /CN=A91E5A9F/serialNumber=95025628F14341046146AC20BA324614461A9CC3 Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft Manifest number: 12B2 Signing time: Wed 22 Jul 2026 17:09:23 +0000 Manifest this update: Wed 22 Jul 2026 17:09:23 +0000 Manifest next update: Wed 29 Jul 2026 17:09:23 +0000 Files and hashes: 1: lQJWKPFDQQRhRqwgujJGFEYanMM.crl (hash: DoYsHZZx8wr5eJ2SZ31lgrwlfe7EIQfe87Il6t+y8Tc=) 2: 9CA45412A6AB11F0AA6B453DC4F9AE02.roa (hash: Fr+3c6RpSKSYZINS3tB5kOz0vDzbNjiqKIyeQ9IGWSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5A9F, serialNumber=95025628F14341046146AC20BA324614461A9CC3 Validity Not Before: Jul 22 17:09:23 2026 GMT Not After : Jul 29 17:09:23 2026 GMT Subject: CN=6a60f943-4040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:7b:ac:aa:c9:e6:0e:ed:44:ab:3a:fd:53: b8:19:69:bb:d4:8c:d6:0c:c2:32:38:88:76:aa:09: 20:a8:d6:ee:8b:38:c6:69:87:ce:f5:4a:a3:69:c6: b9:47:c2:7b:c2:83:ba:2e:ee:30:44:ad:e5:1b:ec: 2b:45:bb:26:71:60:db:a8:bc:0d:b7:d9:01:ca:09: 07:c3:1f:48:5f:ac:b7:a9:3e:fc:25:cf:05:8c:9d: 1e:7e:40:f1:5a:af:4c:31:72:3c:70:f6:40:29:b0: 3d:d9:3c:22:55:df:ae:60:ce:2c:e7:2e:f2:16:3e: a2:bc:72:01:24:ff:1a:4d:4d:47:67:e3:03:fb:a2: 58:03:66:95:92:b4:25:30:b3:51:ba:27:35:7b:65: c3:51:fe:d5:d9:46:6a:a2:ce:4e:15:52:b9:c2:90: c6:b6:3d:c1:34:9b:23:84:6f:2f:23:64:fe:db:a1: da:f1:6d:a7:06:3e:e7:cf:37:96:38:c1:9f:59:30: 46:39:06:63:8d:4e:d2:0c:80:e0:f7:d6:59:3e:24: c4:8a:31:73:02:04:c4:89:04:d8:e3:39:bb:19:99: 2f:9d:d7:ab:16:de:8e:66:60:28:72:f1:7b:86:b5: b1:72:b3:f5:52:9c:21:b6:88:ce:f8:35:05:10:9c: 43:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:26:48:69:D9:75:9C:0F:41:93:BB:74:86:2F:F4:64:87:67:0D:93 X509v3 Authority Key Identifier: keyid:95:02:56:28:F1:43:41:04:61:46:AC:20:BA:32:46:14:46:1A:9C:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lQJWKPFDQQRhRqwgujJGFEYanMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5A9F/6736F334E33A11E886117780C4F9AE02/lQJWKPFDQQRhRqwgujJGFEYanMM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:2c:22:54:20:2d:d5:a2:cf:57:a1:34:ec:e3:66:03:45:6a: 0e:66:f2:73:54:de:db:3e:4f:94:ab:7f:a8:57:cd:1c:f9:be: 4e:a6:52:a3:ef:7f:6d:68:40:c2:1c:27:34:56:9e:f5:38:1b: b2:e5:5c:dd:aa:fb:63:82:53:1d:12:47:51:fa:11:42:a9:6e: 18:fb:37:a3:9d:36:9b:80:29:ab:03:85:c7:9a:4a:61:0a:d7: 87:a1:9b:c9:17:f7:a0:02:f6:d8:ee:35:ea:ca:9e:0c:2c:0c: b3:9f:6a:80:8e:4f:9a:d4:fd:54:f6:24:e5:66:ca:1b:de:ad: ae:7c:20:15:63:c2:a4:5d:2b:17:a5:3c:4c:8b:d1:0d:a1:8b: c3:f5:ff:12:ce:90:1e:18:6b:0a:38:10:fa:6a:f9:47:ab:f9: df:0f:ec:7c:e7:16:af:6a:d8:56:78:55:1a:23:39:35:04:e6: 7f:46:28:78:b7:45:ed:b3:7f:20:08:39:9a:04:42:f7:a3:8b: ee:c4:b8:01:05:d7:46:c6:01:2a:11:a9:43:a3:6b:e9:7c:c4: 26:d3:64:fe:af:97:8a:df:0f:cf:fa:66:46:15:00:af:70:25: 87:aa:23:0a:d4:e1:2a:a9:75:82:dc:4b:19:fc:85:25:35:ce: e6:54:9b:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVBOUYxMTAvBgNVBAUTKDk1MDI1NjI4RjE0MzQxMDQ2MTQ2QUMyMEJBMzI0NjE0 NDYxQTlDQzMwHhcNMjYwNzIyMTcwOTIzWhcNMjYwNzI5MTcwOTIzWjAYMRYwFAYD VQQDEw02YTYwZjk0My00MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPB7rKrJ5g7tRKs6/VO4GWm71IzWDMIyOIh2qgkgqNbuizjGaYfO9Uqjaca5 R8J7woO6Lu4wRK3lG+wrRbsmcWDbqLwNt9kBygkHwx9IX6y3qT78Jc8FjJ0efkDx Wq9MMXI8cPZAKbA92TwiVd+uYM4s5y7yFj6ivHIBJP8aTU1HZ+MD+6JYA2aVkrQl MLNRuic1e2XDUf7V2UZqos5OFVK5wpDGtj3BNJsjhG8vI2T+26Ha8W2nBj7nzzeW OMGfWTBGOQZjjU7SDIDg99ZZPiTEijFzAgTEiQTY4zm7GZkvnderFt6OZmAocvF7 hrWxcrP1UpwhtojO+DUFEJxDBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcmSGnZ dZwPQZO7dIYv9GSHZw2TMB8GA1UdIwQYMBaAFJUCVijxQ0EEYUasILoyRhRGGpzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUE5Ri82NzM2RjMzNEUz M0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFRUmhScXdndWpKR0ZFWWFu TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xRSldLUEZEUVFSaFJxd2d1akpHRkVZYW5NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUE5Ri82NzM2RjMzNEUzM0ExMUU4ODYxMTc3ODBDNEY5QUUwMi9sUUpXS1BGRFFR UmhScXdndWpKR0ZFWWFuTU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQiwiVCAt1aLPV6E07ONmA0VqDmbyc1Te2z5PlKt/qFfNHPm+TqZSo+9/bWhA whwnNFae9TgbsuVc3ar7Y4JTHRJHUfoRQqluGPs3o502m4ApqwOFx5pKYQrXh6Gb yRf3oAL22O416sqeDCwMs59qgI5PmtT9VPYk5WbKG96trnwgFWPCpF0rF6U8TIvR DaGLw/X/Es6QHhhrCjgQ+mr5R6v53w/sfOcWr2rYVnhVGiM5NQTmf0YoeLdF7bN/ IAg5mgRC96OL7sS4AQXXRsYBKhGpQ6Nr6XzEJtNk/q+Xit8Pz/pmRhUAr3Alh6oj CtThKql1gtxLGfyFJTXO5lSbVA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:42:54 2026 by rpki-client