$ rpki-client -vvf rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft File: qdfTMxZtqSYb56g2YxgPO_DskKE.mft (raw, json) Hash identifier: 1tHXsjszPYAmMhastaRhIrUYKPl0pco/KTWJFQ36Cc8= Subject key identifier: D8:13:3E:37:72:37:03:6F:C8:6C:7A:91:D8:1B:84:6B:0B:C5:80:9B Authority key identifier: A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1 Certificate issuer: /CN=A911C4BC/serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft Manifest number: 1F Signing time: Tue 07 Jul 2026 10:11:52 +0000 Manifest this update: Tue 07 Jul 2026 10:11:51 +0000 Manifest next update: Tue 14 Jul 2026 10:11:51 +0000 Files and hashes: 1: qdfTMxZtqSYb56g2YxgPO_DskKE.crl (hash: FyjUZbOn2mLf15K/kW55NNYCF1OXCcYSoZaGKz1NoSA=) 2: 773251504B5D11F1927AF905AF833773.roa (hash: ZcLx3Mur14iOi3OHL35qFcyb/HZvqXpJ986YSagAmCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 10:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C4BC, serialNumber=A9D7D333166DA9261BE7A83663180F3BF0EC90A1 Validity Not Before: Jul 7 10:11:51 2026 GMT Not After : Jul 14 10:11:51 2026 GMT Subject: CN=6a4cd0e8-b2c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:67:ed:21:80:70:1a:e3:51:08:d7:16:6c:9a: 4e:4b:03:6e:ed:ce:c2:ac:6b:a6:81:34:78:c6:8d: 44:c3:8f:04:48:aa:54:40:d1:52:a4:ea:bd:1a:d3: ab:90:c9:28:67:16:9d:0e:18:16:88:8b:bc:ca:a4: 98:a9:e1:b8:56:a3:46:1b:9a:6e:19:34:f6:4f:a1: c2:a7:78:60:19:81:1c:ff:2c:a7:aa:c5:c1:0e:1a: d5:3c:5e:e1:d6:8d:95:b8:5f:2a:f6:c7:0b:cb:39: 3f:6a:9b:41:ee:c3:6a:cb:2b:af:d0:8f:47:a3:f5: 1f:d3:73:cc:f0:07:dc:24:09:af:e3:12:85:d4:97: f7:0b:7a:02:53:07:98:35:f5:2d:ea:21:a7:3b:b0: bf:0e:23:db:52:6e:ef:c0:16:99:5b:2a:44:ed:c1: ba:cf:db:fd:63:73:fb:be:a9:bd:7d:6b:f0:b2:40: a8:f7:5c:5f:8e:78:19:5b:f0:28:de:3d:02:bf:49: 95:cf:97:22:60:76:ec:cb:5d:15:9f:f2:51:ea:5d: 02:91:1f:b7:0e:f1:03:6f:54:4a:02:72:45:37:c6: fd:58:fa:4b:d6:1c:b4:de:69:3c:d5:f1:d6:ac:e1: 4b:c7:54:39:e1:be:ac:49:ca:18:4b:e4:3e:7f:b7: 1d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:13:3E:37:72:37:03:6F:C8:6C:7A:91:D8:1B:84:6B:0B:C5:80:9B X509v3 Authority Key Identifier: keyid:A9:D7:D3:33:16:6D:A9:26:1B:E7:A8:36:63:18:0F:3B:F0:EC:90:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qdfTMxZtqSYb56g2YxgPO_DskKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C4BC/0FA0ED804B5D11F188F2666EAE833773/qdfTMxZtqSYb56g2YxgPO_DskKE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:42:92:ca:5c:af:dd:f3:66:8d:95:97:20:59:34:38:d5:cc: 4e:db:73:57:03:00:70:23:45:73:8f:8b:85:cc:a8:10:01:3d: fb:19:10:30:5d:fb:de:48:58:fd:94:ba:3b:57:7a:ea:b9:ab: 9b:14:03:56:a9:ec:ae:ae:dd:7f:d1:d8:d9:09:97:f4:37:82: 21:e9:d5:52:f1:30:c8:fc:1d:ae:ef:4d:8c:b9:82:cb:1c:02: fc:ae:80:92:6a:d6:ee:7b:60:d1:6c:e5:c2:79:7a:f9:0d:54: 98:3c:b9:3e:38:0d:e4:ce:70:41:3a:bd:9f:ce:bd:ae:e8:d2: 03:a2:f8:e7:ad:74:84:a2:7f:4f:7b:a4:5d:71:bf:a9:93:b6: e2:d3:e1:80:45:43:f3:3f:10:1a:d0:42:ab:a1:5f:b7:42:d6: ff:93:69:20:39:d6:f0:f7:5c:eb:e4:79:f7:f1:90:8f:6d:69: 6e:14:19:81:2d:f0:0c:79:47:5d:c6:ae:3b:de:be:b4:48:2c: 95:7f:ef:bc:74:49:38:bb:57:12:c2:c2:f9:ab:76:b8:36:5f: 73:29:6d:d3:89:64:f5:1e:0a:ce:8b:31:e2:5f:39:23:65:ac: 32:0e:0d:27:78:4f:eb:5f:a4:41:68:db:79:a1:5e:fb:ed:96: f5:c1:c1:68 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QzRCQzExMC8GA1UEBRMoQTlEN0QzMzMxNjZEQTkyNjFCRTdBODM2NjMxODBGM0JG MEVDOTBBMTAeFw0yNjA3MDcxMDExNTFaFw0yNjA3MTQxMDExNTFaMBgxFjAUBgNV BAMTDTZhNGNkMGU4LWIyYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSZ+0hgHAa41EI1xZsmk5LA27tzsKsa6aBNHjGjUTDjwRIqlRA0VKk6r0a06uQ yShnFp0OGBaIi7zKpJip4bhWo0Ybmm4ZNPZPocKneGAZgRz/LKeqxcEOGtU8XuHW jZW4Xyr2xwvLOT9qm0Huw2rLK6/Qj0ej9R/Tc8zwB9wkCa/jEoXUl/cLegJTB5g1 9S3qIac7sL8OI9tSbu/AFplbKkTtwbrP2/1jc/u+qb19a/CyQKj3XF+OeBlb8Cje PQK/SZXPlyJgduzLXRWf8lHqXQKRH7cO8QNvVEoCckU3xv1Y+kvWHLTeaTzV8das 4UvHVDnhvqxJyhhL5D5/tx1fAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2BM+N3I3 A2/IbHqR2BuEawvFgJswHwYDVR0jBBgwFoAUqdfTMxZtqSYb56g2YxgPO/DskKEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDNEJDLzBGQTBFRDgwNEI1 RDExRjE4OEYyNjY2RUFFODMzNzczL3FkZlRNeFp0cVNZYjU2ZzJZeGdQT19Ec2tL RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcWRmVE14WnRxU1liNTZnMll4Z1BPX0Rza0tFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD NEJDLzBGQTBFRDgwNEI1RDExRjE4OEYyNjY2RUFFODMzNzczL3FkZlRNeFp0cVNZ YjU2ZzJZeGdQT19Ec2tLRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMQpLKXK/d82aNlZcgWTQ41cxO23NXAwBwI0Vzj4uFzKgQAT37GRAwXfveSFj9 lLo7V3rquaubFANWqeyurt1/0djZCZf0N4Ih6dVS8TDI/B2u702MuYLLHAL8roCS atbue2DRbOXCeXr5DVSYPLk+OA3kznBBOr2fzr2u6NIDovjnrXSEon9Pe6Rdcb+p k7bi0+GARUPzPxAa0EKroV+3Qtb/k2kgOdbw91zr5Hn38ZCPbWluFBmBLfAMeUdd xq473r60SCyVf++8dEk4u1cSwsL5q3a4Nl9zKW3TiWT1HgrOizHiXzkjZawyDg0n eE/rX6RBaNt5oV777Zb1wcFo -----END CERTIFICATE-----Generated at Wed Jul 8 21:05:26 2026 by rpki-client