$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft File: q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft (raw, json) Hash identifier: k2lzUgConWEE4hexsPzGoMlUZK85dDaMSW7UmAx7R/s= Subject key identifier: 69:A8:07:B5:9D:6C:D9:E1:45:3C:E1:42:27:6A:18:05:11:BF:D0:AE Authority key identifier: AB:C2:E4:84:FE:B1:EC:79:35:E0:F0:F3:8F:19:18:C6:39:51:88:83 Certificate issuer: /CN=A91EAF29/serialNumber=ABC2E484FEB1EC7935E0F0F38F1918C639518883 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft Manifest number: 19 Signing time: Thu 23 Jul 2026 11:02:56 +0000 Manifest this update: Thu 23 Jul 2026 11:02:56 +0000 Manifest next update: Thu 30 Jul 2026 11:02:56 +0000 Files and hashes: 1: q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl (hash: 4aIhbIYIKF4VQ7u+gFbekqDHLBPR/BBgyBrObA+HqnU=) 2: 7E55CC0E610C11F1BA3A45B39947A888.roa (hash: E0w9BgdOurSZs3raW0wpmHL4bAQMnen7LkEC4VGqfmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAF29, serialNumber=ABC2E484FEB1EC7935E0F0F38F1918C639518883 Validity Not Before: Jul 23 11:02:56 2026 GMT Not After : Jul 30 11:02:56 2026 GMT Subject: CN=6a61f4e0-f4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a9:e8:cb:24:21:8e:e1:ea:9e:8c:69:d5:de: d0:03:2f:85:c2:d2:b8:9e:ef:6e:37:40:96:6a:3f: 54:9d:1c:d2:1c:32:d4:63:f1:fd:5c:34:8e:fb:8c: cf:7a:bb:f0:fa:d7:e0:9c:6f:d5:6b:d4:7e:d2:45: dc:c7:c3:6a:64:02:df:86:4e:5e:04:e4:a5:ad:9e: e3:e7:30:ed:ee:0b:61:d0:7a:44:a2:f2:32:b7:c2: 75:4d:c9:c5:8d:7e:7d:4f:4b:d8:25:e5:28:c7:10: 38:c6:e4:3f:9a:85:8e:f7:56:c7:4f:9b:99:d8:c7: 22:af:41:ab:5f:80:bb:b5:5d:ee:f6:65:bd:61:75: 21:70:b0:5b:67:f3:6b:fd:43:70:e1:eb:43:32:7b: b4:19:83:1a:fd:87:7d:dc:42:e4:50:f1:43:27:e7: 60:6a:92:d8:60:74:87:27:b9:6f:98:1b:ff:44:6e: c6:d3:1e:62:bc:8e:ab:85:69:ca:b0:89:9c:f2:27: 6c:8c:02:ff:6a:25:4b:78:b9:06:07:cc:a7:ef:8e: 69:47:64:ed:67:dd:57:d0:59:fd:9a:63:71:d0:73: 49:6f:b8:b8:18:2d:87:62:0e:b7:6c:b5:21:a1:27: 7c:fe:11:8a:46:55:28:00:5d:40:e5:aa:51:14:e1: a9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A8:07:B5:9D:6C:D9:E1:45:3C:E1:42:27:6A:18:05:11:BF:D0:AE X509v3 Authority Key Identifier: keyid:AB:C2:E4:84:FE:B1:EC:79:35:E0:F0:F3:8F:19:18:C6:39:51:88:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8LkhP6x7Hk14PDzjxkYxjlRiIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF29/107AC356610C11F1AA3DE8159947A888/q8LkhP6x7Hk14PDzjxkYxjlRiIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:3b:4c:38:54:c6:34:e9:ab:e4:ed:07:6a:bd:fb:67:57:e1: 25:1b:6c:e9:d0:32:1a:04:c0:e5:56:42:48:86:ce:d2:e7:cf: 74:d8:cc:0b:11:79:ba:d1:1f:8c:21:a3:c4:1f:47:3a:15:25: e7:8e:92:34:46:2d:7f:0a:b9:07:82:f4:2c:23:db:50:0e:c0: f6:85:18:a0:f8:65:aa:d7:aa:47:6a:1c:60:f5:24:60:bf:0f: f3:66:60:27:f9:5b:2f:b3:a2:69:3b:af:e1:2a:86:10:b4:cc: 4f:a3:92:a3:f9:d9:46:8c:3a:eb:4e:b5:37:5b:bb:fd:ff:74: 3f:f5:ef:95:85:47:f0:50:73:fa:49:d5:f1:4a:66:6c:63:6f: 94:92:9f:25:d0:57:78:1c:a6:be:9f:b4:04:60:61:0f:e9:29: 78:88:b1:4e:a6:6a:4d:1d:ea:0a:2e:79:e6:15:83:bf:5a:e7: 1c:9f:fd:a4:fe:08:72:61:00:6e:de:33:3e:17:0b:91:a2:62: 65:e6:a3:05:39:71:f4:63:93:8e:d9:12:f8:b4:85:3e:c0:ef: 08:9a:08:03:91:ad:e3:50:1a:42:81:cb:f4:c9:cb:65:59:e1: 0f:ee:8a:4a:7f:1e:72:ac:02:20:12:84:8d:1a:ae:d6:e8:0b: e1:28:00:9a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUYyOTExMC8GA1UEBRMoQUJDMkU0ODRGRUIxRUM3OTM1RTBGMEYzOEYxOTE4QzYz OTUxODg4MzAeFw0yNjA3MjMxMTAyNTZaFw0yNjA3MzAxMTAyNTZaMBgxFjAUBgNV BAMTDTZhNjFmNGUwLWY0YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrqejLJCGO4eqejGnV3tADL4XC0rie7243QJZqP1SdHNIcMtRj8f1cNI77jM96 u/D61+Ccb9Vr1H7SRdzHw2pkAt+GTl4E5KWtnuPnMO3uC2HQekSi8jK3wnVNycWN fn1PS9gl5SjHEDjG5D+ahY73VsdPm5nYxyKvQatfgLu1Xe72Zb1hdSFwsFtn82v9 Q3Dh60Mye7QZgxr9h33cQuRQ8UMn52BqkthgdIcnuW+YG/9EbsbTHmK8jquFacqw iZzyJ2yMAv9qJUt4uQYHzKfvjmlHZO1n3VfQWf2aY3HQc0lvuLgYLYdiDrdstSGh J3z+EYpGVSgAXUDlqlEU4am/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaagHtZ1s 2eFFPOFCJ2oYBRG/0K4wHwYDVR0jBBgwFoAUq8LkhP6x7Hk14PDzjxkYxjlRiIMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRjI5LzEwN0FDMzU2NjEw QzExRjFBQTNERTgxNTk5NDdBODg4L3E4TGtoUDZ4N0hrMTRQRHpqeGtZeGpsUmlJ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcThMa2hQNng3SGsxNFBEemp4a1l4amxSaUlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RjI5LzEwN0FDMzU2NjEwQzExRjFBQTNERTgxNTk5NDdBODg4L3E4TGtoUDZ4N0hr MTRQRHpqeGtZeGpsUmlJTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCtO0w4VMY06avk7QdqvftnV+ElG2zp0DIaBMDlVkJIhs7S58902MwLEXm60R+M IaPEH0c6FSXnjpI0Ri1/CrkHgvQsI9tQDsD2hRig+GWq16pHahxg9SRgvw/zZmAn +Vsvs6JpO6/hKoYQtMxPo5Kj+dlGjDrrTrU3W7v9/3Q/9e+VhUfwUHP6SdXxSmZs Y2+Ukp8l0Fd4HKa+n7QEYGEP6Sl4iLFOpmpNHeoKLnnmFYO/Wuccn/2k/ghyYQBu 3jM+FwuRomJl5qMFOXH0Y5OO2RL4tIU+wO8ImggDka3jUBpCgcv0yctlWeEP7opK fx5yrAIgEoSNGq7W6AvhKACa -----END CERTIFICATE-----Generated at Fri Jul 24 12:57:41 2026 by rpki-client