$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft File: qX6qTW8VW40nxAro4yfZulLDS0I.mft (raw, json) Hash identifier: 6li96/52RUoL2rOi+N3gGtbhfvkB1hxlkQd3wmyY77Y= Subject key identifier: 1D:15:53:C1:2C:22:76:FA:AB:37:C8:43:E4:CF:F9:F6:7F:A2:5F:39 Authority key identifier: A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 Certificate issuer: /CN=A91EB4AF/serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Certificate serial: 0416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft Manifest number: 03F0 Signing time: Thu 23 Jul 2026 01:29:10 +0000 Manifest this update: Thu 23 Jul 2026 01:29:10 +0000 Manifest next update: Thu 30 Jul 2026 01:29:10 +0000 Files and hashes: 1: qX6qTW8VW40nxAro4yfZulLDS0I.crl (hash: 5xm7PLFxKUT1JaMVtIJgUF04Jt62i4+F+J+mfzP59FA=) 2: DCE70C6EF9B911ED8314C10EC4F9AE02.roa (hash: ZY3y7l0sOwn5Wj/wG0idR2yoV2IE4WMSo7bUKMPTVck=) 3: 595774341B6211F0B9733473C4F9AE02.roa (hash: TViW6+JPazKkRXhQ7ni+cLWTzOT4kOhtajYLtf39390=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB4AF, serialNumber=A97EAA4D6F155B8D27C40AE8E327D9BA52C34B42 Validity Not Before: Jul 23 01:29:10 2026 GMT Not After : Jul 30 01:29:10 2026 GMT Subject: CN=6a616e66-6f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:20:e4:d5:2e:05:44:5c:f8:23:b5:e4:e3:d2: 57:db:e2:dd:2a:df:6b:cb:a1:80:5f:7a:9e:66:43: 85:a7:d8:a9:c0:db:fc:f2:8b:2b:96:71:1f:34:7e: 35:22:2e:66:73:23:6f:1c:fd:18:a3:5b:a6:32:2c: 3e:4b:4c:29:f8:40:64:d1:79:ba:2e:10:75:e7:88: 0f:2a:77:99:22:bf:66:3d:d1:ff:f6:a3:ea:ba:1a: d6:9c:1c:66:05:88:63:70:dc:ef:4a:af:01:f8:55: 0f:eb:2e:db:f2:7a:4b:f2:77:67:d1:eb:0c:5d:6b: c2:de:6c:c9:c3:50:1f:99:9d:04:8e:34:df:98:f3: fb:91:de:86:9c:84:cc:7f:d3:8e:01:4b:43:68:63: 20:93:4b:46:97:e6:03:b9:a7:7f:cd:2a:ea:f0:9e: 58:28:06:69:0e:e7:4b:88:d4:d0:57:f5:37:db:9f: 6f:2a:59:73:ff:84:4c:9f:1b:e9:7d:52:ae:18:14: 51:1e:24:00:d9:04:62:1c:59:75:a8:1f:a8:9e:d1: c2:e5:ee:5a:da:84:03:7a:9d:55:8b:2f:42:8e:9d: 36:41:0f:fd:52:b9:7d:95:8c:dd:ad:35:2b:4f:63: 67:64:87:86:99:70:e7:58:22:b3:9e:31:31:33:81: 8c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:15:53:C1:2C:22:76:FA:AB:37:C8:43:E4:CF:F9:F6:7F:A2:5F:39 X509v3 Authority Key Identifier: keyid:A9:7E:AA:4D:6F:15:5B:8D:27:C4:0A:E8:E3:27:D9:BA:52:C3:4B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qX6qTW8VW40nxAro4yfZulLDS0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB4AF/CC7B255ADCA911EC94E3E029C4F9AE02/qX6qTW8VW40nxAro4yfZulLDS0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f0:ac:65:d6:82:69:9a:16:27:6c:b4:c8:18:59:b3:e2:2d: 03:51:45:f0:c3:28:88:eb:35:eb:35:1e:41:55:56:2f:95:41: 41:c3:6f:5a:cf:da:f1:e5:03:54:cf:43:bd:0c:b1:ca:3a:e4: 72:b7:ac:6d:c8:fb:e8:f6:11:2b:a4:b7:d9:fe:2b:a9:64:b4: df:de:de:82:8c:72:40:2a:e2:fd:6f:3c:3b:b2:d3:56:af:79: 4d:99:21:ed:68:df:e1:a4:2c:fe:51:4c:92:f7:29:30:c5:25: 76:39:23:2d:c6:eb:18:97:75:4b:37:94:0c:1d:fb:25:f9:10: 8f:82:70:c8:83:4d:ae:f3:9d:56:1d:9b:8b:dc:5d:ec:71:d5: 8b:61:31:e0:c0:24:51:d1:65:55:f7:62:24:3e:f8:3f:25:ab: 89:69:e9:f7:78:d8:49:2e:de:44:12:3a:16:59:b4:73:df:04: 98:87:6d:79:a0:4e:97:c5:0f:a9:31:36:e2:dd:58:ae:a4:70: dc:d4:f6:65:b7:50:ef:7c:94:72:35:5c:56:7a:05:fa:6b:a8: 9f:54:4b:3c:dd:23:12:a3:88:9d:1a:e7:f8:c0:ef:c7:b3:0b: a8:de:a1:2b:d9:57:e1:79:df:78:9f:42:97:0f:cb:09:2f:60: de:38:a5:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI0QUYxMTAvBgNVBAUTKEE5N0VBQTRENkYxNTVCOEQyN0M0MEFFOEUzMjdEOUJB NTJDMzRCNDIwHhcNMjYwNzIzMDEyOTEwWhcNMjYwNzMwMDEyOTEwWjAYMRYwFAYD VQQDEw02YTYxNmU2Ni02ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCDk1S4FRFz4I7Xk49JX2+LdKt9ry6GAX3qeZkOFp9ipwNv88osrlnEfNH41 Ii5mcyNvHP0Yo1umMiw+S0wp+EBk0Xm6LhB154gPKneZIr9mPdH/9qPquhrWnBxm BYhjcNzvSq8B+FUP6y7b8npL8ndn0esMXWvC3mzJw1AfmZ0EjjTfmPP7kd6GnITM f9OOAUtDaGMgk0tGl+YDuad/zSrq8J5YKAZpDudLiNTQV/U3259vKllz/4RMnxvp fVKuGBRRHiQA2QRiHFl1qB+ontHC5e5a2oQDep1Viy9Cjp02QQ/9Url9lYzdrTUr T2NnZIeGmXDnWCKznjExM4GMEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0VU8Es Inb6qzfIQ+TP+fZ/ol85MB8GA1UdIwQYMBaAFKl+qk1vFVuNJ8QK6OMn2bpSw0tC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjRBRi9DQzdCMjU1QURD QTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0MG54QXJvNHlmWnVsTERT MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FYNnFUVzhWVzQwbnhBcm80eWZadWxMRFMwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjRBRi9DQzdCMjU1QURDQTkxMUVDOTRFM0UwMjlDNEY5QUUwMi9xWDZxVFc4Vlc0 MG54QXJvNHlmWnVsTERTMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZfCsZdaCaZoWJ2y0yBhZs+ItA1FF8MMoiOs16zUeQVVWL5VBQcNvWs/a8eUD VM9DvQyxyjrkcresbcj76PYRK6S32f4rqWS0397egoxyQCri/W88O7LTVq95TZkh 7Wjf4aQs/lFMkvcpMMUldjkjLcbrGJd1SzeUDB37JfkQj4JwyINNrvOdVh2bi9xd 7HHVi2Ex4MAkUdFlVfdiJD74PyWriWnp93jYSS7eRBI6Flm0c98EmIdteaBOl8UP qTE24t1YrqRw3NT2ZbdQ73yUcjVcVnoF+muon1RLPN0jEqOInRrn+MDvx7MLqN6h K9lX4XnfeJ9Clw/LCS9g3jilhQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:26:07 2026 by rpki-client