$ rpki-client -vvf rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft File: QgHlq32GvGha8R8C3mhAUVttgFg.mft (raw, json) Hash identifier: xnHJpG5kFirpaPj8j0nQJtr/Yg1CZR1qPF5G6zOY7+I= Subject key identifier: D7:04:F7:68:32:42:5B:10:D4:46:61:40:60:80:9F:91:5B:65:D9:7D Authority key identifier: 42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 Certificate issuer: /CN=A91454B0/serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Certificate serial: 3571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft Manifest number: 3571 Signing time: Tue 18 Aug 2026 14:40:12 +0000 Manifest this update: Tue 18 Aug 2026 14:40:11 +0000 Manifest next update: Tue 25 Aug 2026 14:40:11 +0000 Files and hashes: 1: QgHlq32GvGha8R8C3mhAUVttgFg.crl (hash: vLlcP4xnAXhR3bQZ5GjwWHmwIh7BGF7EL4de/nNdZ2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 14:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454B0, serialNumber=4201E5AB7D86BC685AF11F02DE6840515B6D8058 Validity Not Before: Aug 18 14:40:11 2026 GMT Not After : Aug 25 14:40:11 2026 GMT Subject: CN=6a846ecc-77ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:2c:da:a1:5f:1c:71:15:0a:7d:dd:dc:57: 73:db:3d:0d:f6:81:db:cf:eb:2e:50:21:a3:74:d1: 86:aa:ec:c8:b2:f2:cb:e8:9c:39:21:d0:b2:e7:9d: 6c:e2:e1:02:ad:29:b7:6d:4c:17:72:3c:61:f6:3d: 37:2f:38:71:b1:58:4d:90:0f:3c:1d:b5:2c:ca:c6: 79:cf:30:24:cb:25:f5:77:c7:4b:31:ae:bd:b4:ef: b0:57:b5:42:00:e5:04:94:85:6c:a1:e9:58:02:b6: b5:ab:07:61:30:4d:af:77:3b:f6:fc:e4:75:3d:0b: 63:68:2c:6a:55:56:a5:ae:49:0f:20:43:28:4a:da: 27:74:e9:23:95:f1:7a:0b:d3:f2:72:72:43:d1:03: ef:1a:72:71:cf:a1:cf:4f:cf:1c:94:1f:8a:b2:38: 6d:de:8f:a1:a5:07:83:d7:76:53:25:9c:16:f1:23: 36:75:f3:dc:ac:84:97:63:3b:92:ce:ec:93:45:26: e8:4e:7c:79:ad:4a:c7:26:e3:9b:3c:0e:45:fd:5f: f3:b1:80:94:df:b9:28:a8:77:da:35:aa:b1:b8:a7: 47:5c:22:83:86:c9:21:77:2f:15:1f:b6:b5:2d:89: f5:4e:52:70:eb:35:f7:53:3e:58:8e:c6:ee:7e:fe: 7e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:04:F7:68:32:42:5B:10:D4:46:61:40:60:80:9F:91:5B:65:D9:7D X509v3 Authority Key Identifier: keyid:42:01:E5:AB:7D:86:BC:68:5A:F1:1F:02:DE:68:40:51:5B:6D:80:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QgHlq32GvGha8R8C3mhAUVttgFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454B0/1CC4DDB61D8E11E2902E3CEC08B02CD2/QgHlq32GvGha8R8C3mhAUVttgFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:8f:05:a8:bd:62:ad:ec:98:b4:dd:e4:16:68:13:68:86:a7: 17:fe:4d:d5:8b:12:12:9b:b7:ac:f1:2e:5c:61:8f:50:e6:1b: 8c:a2:f1:21:66:46:6d:ba:0c:00:d9:ba:21:5d:49:7d:28:73: 77:c1:15:0c:7c:1c:76:7f:84:c3:64:9e:0c:c5:3d:07:c3:0f: 0b:7d:0f:6f:e6:a7:5d:4f:69:c5:c2:8d:c8:9f:1a:a2:6c:f5: ce:20:4e:41:d2:c2:22:9e:68:01:07:d8:60:d6:ad:b7:e1:24: 4d:4c:41:10:b1:51:04:7e:34:ca:ab:80:fd:a7:5f:5e:fe:b5: 41:54:40:22:71:80:6b:ed:e0:93:8b:53:1b:6e:4a:0f:14:9b: be:98:f7:9f:2e:57:00:4c:7a:70:bf:d7:25:a9:36:03:3f:b1: a0:40:61:33:c2:7b:ac:9a:d0:cf:8c:2a:cb:ba:a3:3c:fc:f3: 76:28:30:16:98:34:c9:1c:da:d2:2c:d2:10:df:74:b6:6e:c7: 3c:67:a2:b1:23:6a:48:d5:29:a1:a7:f0:a1:17:7f:ef:b5:fc: d5:0e:46:f9:0b:8e:d5:b8:69:9f:f8:21:c9:f3:d7:aa:4d:e6: cf:82:2b:ee:5f:1d:c1:e3:4c:da:3b:c7:ea:76:0d:d9:6b:d6: cb:cd:2d:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QjAxMTAvBgNVBAUTKDQyMDFFNUFCN0Q4NkJDNjg1QUYxMUYwMkRFNjg0MDUx NUI2RDgwNTgwHhcNMjYwODE4MTQ0MDExWhcNMjYwODI1MTQ0MDExWjAYMRYwFAYD VQQDEw02YTg0NmVjYy03N2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxecs2qFfHHEVCn3d3Fdz2z0N9oHbz+suUCGjdNGGquzIsvLL6Jw5IdCy551s 4uECrSm3bUwXcjxh9j03LzhxsVhNkA88HbUsysZ5zzAkyyX1d8dLMa69tO+wV7VC AOUElIVsoelYAra1qwdhME2vdzv2/OR1PQtjaCxqVValrkkPIEMoStondOkjlfF6 C9PycnJD0QPvGnJxz6HPT88clB+Ksjht3o+hpQeD13ZTJZwW8SM2dfPcrISXYzuS zuyTRSboTnx5rUrHJuObPA5F/V/zsYCU37koqHfaNaqxuKdHXCKDhskhdy8VH7a1 LYn1TlJw6zX3Uz5Yjsbufv5+rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcE92gy QlsQ1EZhQGCAn5FbZdl9MB8GA1UdIwQYMBaAFEIB5at9hrxoWvEfAt5oQFFbbYBY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRCMC8xQ0M0RERCNjFE OEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZHaGE4UjhDM21oQVVWdHRn RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FnSGxxMzJHdkdoYThSOEMzbWhBVVZ0dGdGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRCMC8xQ0M0RERCNjFEOEUxMUUyOTAyRTNDRUMwOEIwMkNEMi9RZ0hscTMyR3ZH aGE4UjhDM21oQVVWdHRnRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAso8FqL1ireyYtN3kFmgTaIanF/5N1YsSEpu3rPEuXGGPUOYbjKLxIWZGbboM ANm6IV1JfShzd8EVDHwcdn+Ew2SeDMU9B8MPC30Pb+anXU9pxcKNyJ8aomz1ziBO QdLCIp5oAQfYYNatt+EkTUxBELFRBH40yquA/adfXv61QVRAInGAa+3gk4tTG25K DxSbvpj3ny5XAEx6cL/XJak2Az+xoEBhM8J7rJrQz4wqy7qjPPzzdigwFpg0yRza 0izSEN90tm7HPGeisSNqSNUpoafwoRd/77X81Q5G+QuO1bhpn/ghyfPXqk3mz4Ir 7l8dweNM2jvH6nYN2WvWy80tCA== -----END CERTIFICATE-----Generated at Wed Aug 19 12:54:49 2026 by rpki-client