$ rpki-client -vvf rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft File: QIyZnDwewBZElFs0d6nyI061eRw.mft (raw, json) Hash identifier: wJG/xg7LEydmF+kO2S0cSrOz0CJG8vxx2dXIWXfZ8Ck= Subject key identifier: BC:91:C3:A4:B1:FD:4E:5C:4A:FC:9D:40:42:D1:6D:1E:DE:EB:63:AC Authority key identifier: 40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C Certificate issuer: /CN=A91650A5/serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Certificate serial: 2591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft Manifest number: 2565 Signing time: Mon 20 Jul 2026 15:49:47 +0000 Manifest this update: Mon 20 Jul 2026 15:49:46 +0000 Manifest next update: Mon 27 Jul 2026 15:49:46 +0000 Files and hashes: 1: QIyZnDwewBZElFs0d6nyI061eRw.crl (hash: SyYTqqMU2yGVrYSh3N2AAxTWlVn1JHVeTiMI6nRa1Ak=) 2: ABA9F4B8AF8411EABF9F844DC4F9AE02.roa (hash: /w4t5dhbmQEa84JEDJ39VitjjFskPm/mEpnYuZ0T6wQ=) 3: 2486E806F0E311EAA1C58D62C4F9AE02.roa (hash: l+zP+x/ZY9cq3nbV4r5XpYolKqUr/0Lu8hDJSfvQgkI=) 4: 50A2F64264BC11E8ACC7951EC4F9AE02.roa (hash: 6oC3s9zXSmCynBY9z0T8TeaSrJ6gHinauk9Zr2y+ucg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9617 (0x2591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650A5, serialNumber=408C999C3C1EC01644945B3477A9F2234EB5791C Validity Not Before: Jul 20 15:49:46 2026 GMT Not After : Jul 27 15:49:46 2026 GMT Subject: CN=6a5e439a-0bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8c:1c:4f:4c:fb:fc:51:32:9a:e5:b5:cd:9c: bb:0e:bb:dd:37:cd:d1:af:db:21:81:3d:07:aa:f5: f1:eb:ad:24:b7:95:cf:18:c5:b8:f5:f4:bc:06:45: 53:72:6b:ea:96:09:7b:a2:81:ff:02:22:44:6b:d5: 31:a8:4b:cf:b2:57:a5:0c:9a:47:be:e1:5c:66:bd: 60:0c:78:3e:f6:7c:0d:64:77:49:43:78:40:ad:71: 1e:d4:eb:bf:57:3d:d3:60:8f:9b:fc:c7:12:44:ae: bb:d1:ef:e9:cf:5d:cd:e3:a9:a6:81:9d:61:b5:1f: 0e:fc:01:ab:64:40:ac:f2:20:0d:e5:6a:34:f6:14: 42:bf:ec:fd:9e:06:1a:bf:a7:31:e6:c7:aa:9f:0d: 4e:95:f2:4f:c7:61:ce:55:cc:2e:78:e2:a0:ef:05: 14:e7:3e:a3:15:9c:98:c6:bd:c7:8d:85:00:79:91: 08:90:ec:f8:52:28:d2:3a:a2:84:12:a1:c3:a2:45: 84:68:79:5b:03:14:b0:ab:4c:ff:a6:61:80:e9:08: cb:4b:92:f7:50:07:8b:44:cb:8f:eb:e4:a4:b1:3b: 57:ba:00:35:a2:bd:76:93:ac:0a:9a:73:7c:5f:dc: 84:36:42:a0:77:c5:55:e8:f9:58:fd:79:e9:a1:51: dd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:91:C3:A4:B1:FD:4E:5C:4A:FC:9D:40:42:D1:6D:1E:DE:EB:63:AC X509v3 Authority Key Identifier: keyid:40:8C:99:9C:3C:1E:C0:16:44:94:5B:34:77:A9:F2:23:4E:B5:79:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QIyZnDwewBZElFs0d6nyI061eRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650A5/17DFB35A46E611E5B08DA17BC4F9AE02/QIyZnDwewBZElFs0d6nyI061eRw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:d0:fa:01:03:5b:2d:84:8b:a2:40:3a:cb:32:a4:aa:a3:e8: e1:48:7f:97:df:2e:1e:e8:89:86:b0:a3:69:d4:ab:d4:36:be: 14:33:a6:d5:54:6d:e8:6f:87:2e:ac:d4:76:12:1f:63:d6:95: 05:72:a6:44:48:44:52:96:ac:33:3e:ee:26:a2:29:76:ba:d7: cf:7b:13:72:3d:98:4e:3b:85:93:60:94:35:61:b0:10:2a:ef: 3d:fe:4b:4f:8b:03:63:1a:b2:df:e6:15:8a:86:ac:38:51:3e: 36:af:89:7f:b4:85:22:5c:27:d7:81:b4:43:57:2b:c2:c6:de: 85:31:f0:5a:e1:8d:78:4a:24:ed:86:3e:85:56:96:06:bd:dd: a3:a5:91:f6:8f:dc:eb:63:cf:d7:1b:ec:1e:2c:e0:a0:57:cb: be:59:c8:bd:f9:6a:8c:ed:59:17:51:5e:d2:96:f5:e6:90:00: 35:bd:92:b8:0d:98:52:48:d2:a6:1a:68:f6:c2:1f:99:9b:28: 43:fe:4c:08:e1:fd:1b:46:fb:04:61:05:f7:5d:e2:14:19:0c: 5f:e7:a7:c9:c5:71:21:5f:4e:32:35:26:4e:9a:08:a8:94:f9: b6:ad:f8:74:d7:5c:fb:ae:84:d9:bc:22:89:cb:f5:41:e0:42: 43:1f:6a:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwQTUxMTAvBgNVBAUTKDQwOEM5OTlDM0MxRUMwMTY0NDk0NUIzNDc3QTlGMjIz NEVCNTc5MUMwHhcNMjYwNzIwMTU0OTQ2WhcNMjYwNzI3MTU0OTQ2WjAYMRYwFAYD VQQDEw02YTVlNDM5YS0wYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkYwcT0z7/FEymuW1zZy7DrvdN83Rr9shgT0HqvXx660kt5XPGMW49fS8BkVT cmvqlgl7ooH/AiJEa9UxqEvPslelDJpHvuFcZr1gDHg+9nwNZHdJQ3hArXEe1Ou/ Vz3TYI+b/McSRK670e/pz13N46mmgZ1htR8O/AGrZECs8iAN5Wo09hRCv+z9ngYa v6cx5seqnw1OlfJPx2HOVcwueOKg7wUU5z6jFZyYxr3HjYUAeZEIkOz4UijSOqKE EqHDokWEaHlbAxSwq0z/pmGA6QjLS5L3UAeLRMuP6+SksTtXugA1or12k6wKmnN8 X9yENkKgd8VV6PlY/XnpoVHdBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLyRw6Sx /U5cSvydQELRbR7e62OsMB8GA1UdIwQYMBaAFECMmZw8HsAWRJRbNHep8iNOtXkc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBBNS8xN0RGQjM1QTQ2 RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdCWkVsRnMwZDZueUkwNjFl UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FJeVpuRHdld0JaRWxGczBkNm55STA2MWVSdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTBBNS8xN0RGQjM1QTQ2RTYxMUU1QjA4REExN0JDNEY5QUUwMi9RSXlabkR3ZXdC WkVsRnMwZDZueUkwNjFlUncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAodD6AQNbLYSLokA6yzKkqqPo4Uh/l98uHuiJhrCjadSr1Da+FDOm1VRt6G+H LqzUdhIfY9aVBXKmREhEUpasMz7uJqIpdrrXz3sTcj2YTjuFk2CUNWGwECrvPf5L T4sDYxqy3+YVioasOFE+Nq+Jf7SFIlwn14G0Q1crwsbehTHwWuGNeEok7YY+hVaW Br3do6WR9o/c62PP1xvsHizgoFfLvlnIvflqjO1ZF1Fe0pb15pAANb2SuA2YUkjS phpo9sIfmZsoQ/5MCOH9G0b7BGEF913iFBkMX+enycVxIV9OMjUmTpoIqJT5tq34 dNdc+66E2bwiicv1QeBCQx9qqw== -----END CERTIFICATE-----Generated at Tue Jul 21 10:05:06 2026 by rpki-client