$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft File: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft (raw, json) Hash identifier: N1l6auJHWt1qSl96Sm0Dib7XGDzTfnnBvsRmu/4cnd4= Subject key identifier: 58:CD:14:A3:48:79:E7:54:EA:15:48:92:F0:B7:05:AD:61:0F:38:1D Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 Certificate issuer: /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Certificate serial: 0BC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft Manifest number: 0AFD Signing time: Mon 20 Jul 2026 19:58:31 +0000 Manifest this update: Mon 20 Jul 2026 19:58:30 +0000 Manifest next update: Mon 27 Jul 2026 19:58:30 +0000 Files and hashes: 1: Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl (hash: dQi5GsERIDWi77SWy7ui1BFAZ17m2njgw3HJuh6Y3xM=) 2: 61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (hash: wZo18R1LnD+2k6h4J7pMIrHXFSVwyqxLJaqUcBl2koQ=) 3: C3E2252E205F11EE8117111CC4F9AE02.roa (hash: wpGRFC6+DwJQoD/Bm6hMgYO5Gr04EgHxiy8sbfP7iA8=) 4: 553170245AC511EBA052F663C4F9AE02.roa (hash: NBDkJIuqHlF4I8cMlSivAAbBMzPvILaMaBqKjeLV/KQ=) 5: 84023C06D24611EABDDF5344C4F9AE02.roa (hash: LpUWhMMembbOWPh50IbGhsLcg7v+awk6J0ISPizwZwo=) 6: 0EA44D4E5ADD11EBB9CEE568C4F9AE02.roa (hash: GKBnrOK5UbpE6Y1zn126/+tVLBVe3fXMAkHrduoxCcI=) 7: 0DE32D9C2B1E11F0AFEB852DC4F9AE02.roa (hash: GhZxcNMvyQlSrFSWmku1+ahVlAxZoEGclnQbU2Qrymw=) 8: 8626FFC65AE511EBA452D33EC4F9AE02.roa (hash: sw6eH1M5hEn6a0pc3B0uLVLZCRXvmEkQN01rQxgEvj0=) 9: DCF88EAE5ED811EBAB677671C4F9AE02.roa (hash: SkOhlI1Sq/LIctQQV3ASYYQ+aRYJDMBcBGKvl4fYf/A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3008 (0xbc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6 Validity Not Before: Jul 20 19:58:30 2026 GMT Not After : Jul 27 19:58:30 2026 GMT Subject: CN=6a5e7de7-13f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:79:29:e6:e5:88:54:c7:9c:75:2d:65:83: ea:0b:d6:6d:61:04:9b:68:2a:bd:09:5b:3c:8c:be: c3:ac:36:37:18:1e:95:8d:4d:2c:1c:c7:d7:9c:26: 1d:26:e0:3d:e4:81:bc:45:11:b3:af:5a:c4:b9:52: 1c:7f:b6:3d:a4:91:3c:24:0e:62:2b:15:73:de:5d: 60:79:b0:a9:b9:9e:51:0c:5d:3c:76:36:94:d3:76: 98:7a:d1:33:e1:81:ac:af:0e:cc:f0:15:34:b3:d0: 93:98:fe:18:51:09:0e:53:5b:6d:d9:d0:44:9c:cf: 59:81:d3:c6:e4:d5:f6:85:eb:82:4a:cd:56:b2:ff: e0:cc:cb:d1:d9:20:c4:26:47:d5:10:ea:b1:78:99: 75:80:c0:21:b3:9a:3f:7a:ff:fc:95:fc:dd:a2:57: 97:4b:12:78:e4:58:aa:67:08:88:7e:d0:16:71:0e: 30:42:24:fb:de:ea:2a:c6:17:da:b3:37:5b:52:d8: c3:e8:6e:58:3b:5d:86:c4:c1:16:29:ad:c7:14:67: 74:80:31:84:79:df:02:cb:41:82:cf:f6:7d:61:51: 11:ae:f7:fb:79:5f:b1:5f:a0:77:d1:fd:c2:9f:a3: b6:e6:f4:61:25:6c:5c:95:0d:53:9a:2d:85:f5:f6: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:14:A3:48:79:E7:54:EA:15:48:92:F0:B7:05:AD:61:0F:38:1D X509v3 Authority Key Identifier: keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:58:60:b9:47:e9:11:f5:90:1a:b3:0e:ee:e1:7f:b3:55:6a: 16:1a:c3:55:2e:70:44:2b:81:09:66:5f:94:de:8b:37:5b:fc: 21:b2:1b:9f:1f:62:8a:32:36:e8:48:72:a5:0f:0a:e1:c0:b6: 45:77:c9:c7:9b:de:5c:bc:79:ca:d6:f0:8e:91:e7:a7:cd:da: df:46:ee:7c:5e:de:cd:fd:1c:be:b7:d1:42:cc:5d:b9:f8:20: 31:79:ea:8b:0e:fc:12:af:1a:5f:ca:46:ee:14:02:7b:18:99: 8b:c5:cd:65:20:ca:cd:34:96:45:3e:c8:ab:bb:ed:08:0c:c3: 93:4e:57:c3:55:a0:71:f2:78:ce:10:b8:41:ed:eb:5e:af:48: 69:69:66:0f:fe:d4:12:ac:ca:64:0b:e3:86:a9:53:6e:5e:61: 07:9e:8f:37:70:da:44:8c:9a:77:07:6b:60:ae:17:97:d7:6e: b6:cc:5c:64:80:18:fd:d4:58:6b:c4:61:95:a2:dc:aa:43:d0: e2:0e:dd:64:7b:d1:a1:d1:04:7c:2c:0a:f2:19:70:8c:73:8f: 4d:a6:13:de:5c:76:bf:64:ca:25:a6:0a:25:b0:ff:5d:5a:53: 03:69:0b:2d:a8:e0:1b:db:f9:bf:fb:85:bb:90:0d:c2:5f:c4: fa:c9:b9:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY0N0MxMTAvBgNVBAUTKDQzNkIyQzVGMDNGOTFDQTc0MUM2QTI0OURDMDE1QTZE NTQ0QTYyQTYwHhcNMjYwNzIwMTk1ODMwWhcNMjYwNzI3MTk1ODMwWjAYMRYwFAYD VQQDEw02YTVlN2RlNy0xM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJJ5KebliFTHnHUtZYPqC9ZtYQSbaCq9CVs8jL7DrDY3GB6VjU0sHMfXnCYd JuA95IG8RRGzr1rEuVIcf7Y9pJE8JA5iKxVz3l1gebCpuZ5RDF08djaU03aYetEz 4YGsrw7M8BU0s9CTmP4YUQkOU1tt2dBEnM9ZgdPG5NX2heuCSs1Wsv/gzMvR2SDE JkfVEOqxeJl1gMAhs5o/ev/8lfzdoleXSxJ45FiqZwiIftAWcQ4wQiT73uoqxhfa szdbUtjD6G5YO12GxMEWKa3HFGd0gDGEed8Cy0GCz/Z9YVERrvf7eV+xX6B30f3C n6O25vRhJWxclQ1Tmi2F9fbS1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjNFKNI eedU6hVIkvC3Ba1hDzgdMB8GA1UdIwQYMBaAFENrLF8D+RynQcaiSdwBWm1USmKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjQ3Qy80MzdDQzQwNjg1 MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhLZEJ4cUpKM0FGYWJWUktZ cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Eyc3NYd1A1SEtkQnhxSkozQUZhYlZSS1lxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjQ3Qy80MzdDQzQwNjg1MTMxMUVBQUEwQjBBN0ZDNEY5QUUwMi9RMnNzWHdQNUhL ZEJ4cUpKM0FGYWJWUktZcVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ1hguUfpEfWQGrMO7uF/s1VqFhrDVS5wRCuBCWZflN6LN1v8IbIbnx9iijI2 6EhypQ8K4cC2RXfJx5veXLx5ytbwjpHnp83a30bufF7ezf0cvrfRQsxdufggMXnq iw78Eq8aX8pG7hQCexiZi8XNZSDKzTSWRT7Iq7vtCAzDk05Xw1WgcfJ4zhC4Qe3r Xq9IaWlmD/7UEqzKZAvjhqlTbl5hB56PN3DaRIyadwdrYK4Xl9dutsxcZIAY/dRY a8RhlaLcqkPQ4g7dZHvRodEEfCwK8hlwjHOPTaYT3lx2v2TKJaYKJbD/XVpTA2kL LajgG9v5v/uFu5ANwl/E+sm5FA== -----END CERTIFICATE-----Generated at Tue Jul 21 23:22:55 2026 by rpki-client