$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft File: qE54NmnC-ZeE80T80yP8-ZHMQPs.mft (raw, json) Hash identifier: dobudIdrKr7KhzDILvdFAhXWoRf6ZwWFLcaBI/qT304= Subject key identifier: D5:A6:3D:B8:9C:B3:50:EA:2A:01:F8:9F:CC:72:FF:A8:BA:FE:53:6E Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB Certificate issuer: /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Certificate serial: 02DC Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft Manifest number: 02CF Signing time: Mon 20 Jul 2026 22:28:56 +0000 Manifest this update: Mon 20 Jul 2026 22:28:55 +0000 Manifest next update: Mon 27 Jul 2026 22:28:55 +0000 Files and hashes: 1: qE54NmnC-ZeE80T80yP8-ZHMQPs.crl (hash: fvrE3YyNpEv809U2ZAZgun+2jywCAAvL0ztGXzuFOfE=) 2: 348854286B8F11ED9B07DD15C4F9AE02.roa (hash: eNAYougzbuaZdGltWBPETvzcwoF3xnsDkRlib322zSY=) 3: 11DD43BA80E411ED993FD824C4F9AE02.roa (hash: bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 22:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 732 (0x2dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB Validity Not Before: Jul 20 22:28:55 2026 GMT Not After : Jul 27 22:28:55 2026 GMT Subject: CN=6a5ea127-06d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:4a:52:fa:df:72:86:da:24:52:15:c5:34: d2:9f:77:7e:b5:48:3f:ea:e0:16:99:54:07:72:f7: 25:87:37:93:38:ce:97:a4:d6:5d:e4:7d:9f:b6:ca: d6:04:3c:3f:05:39:6b:12:35:54:cb:b8:ba:53:fb: af:59:e6:74:a1:14:0a:22:3d:98:3a:01:ff:56:0f: 6c:67:3b:34:97:00:08:34:0b:5f:ba:ac:4f:66:e4: fe:ba:52:aa:a8:3e:3c:93:17:83:45:11:af:95:2d: e6:0d:23:5d:7c:12:c8:b9:8f:9b:e3:0a:49:84:3e: e9:28:e6:c1:81:43:a1:4e:ca:e2:bd:8c:56:48:83: ad:38:bf:62:02:38:91:f1:9f:3e:68:d3:b1:63:bd: 9a:3d:c3:0f:b7:d8:93:b8:4a:5d:d4:75:0d:34:8a: 04:6b:52:53:e4:fb:e1:ec:7c:b5:c4:8b:9e:74:93: 84:6e:43:73:1e:a4:44:f4:db:1b:d8:22:71:4d:e7: 9e:f2:7e:aa:6d:8d:c4:79:ae:a1:cb:d9:1d:22:4c: 34:03:71:c6:bc:35:5f:66:b2:e4:79:fb:1f:9b:7a: a9:d6:41:06:4d:09:cf:af:a5:40:c1:2d:d2:96:19: 6f:b3:a6:3f:e8:d1:d8:79:e5:23:34:2c:71:78:e9: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A6:3D:B8:9C:B3:50:EA:2A:01:F8:9F:CC:72:FF:A8:BA:FE:53:6E X509v3 Authority Key Identifier: keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:98:df:3e:22:77:57:5e:f2:d8:8f:b0:b9:65:4f:1e:52:05: 72:78:f9:95:10:67:4f:cc:8b:a4:f0:ee:e5:bf:57:4b:bf:c5: b6:a9:1d:4e:15:eb:0b:a7:f0:65:39:7f:e1:c2:81:cc:6c:11: 9f:87:56:88:80:21:8d:f7:31:c7:62:a7:57:e1:21:d7:d1:a5: 25:be:cb:37:d5:4a:6f:75:c6:04:8e:dc:27:08:a0:77:fd:2b: 44:b8:13:33:45:b3:7e:cf:6b:0a:2d:80:ca:12:ac:7e:dc:77: 56:12:c4:e8:c6:c1:0e:80:a1:b9:71:f0:b5:ef:72:ed:58:1c: 3f:6e:09:77:0e:7d:4f:38:cf:81:e7:bb:a8:a8:64:27:e4:2e: e2:c9:77:89:cb:d2:c2:75:1b:96:ed:af:d5:94:ec:be:39:cf: 65:00:2f:5d:d6:d2:ac:5c:9f:3b:1f:a4:6c:ee:f5:f6:21:02: 3f:d0:9b:4a:d8:44:3e:82:51:8f:da:be:98:df:46:fd:74:9c: 64:7f:68:ba:7b:97:f6:ec:25:bc:87:b4:0d:24:f7:ec:61:a2: fe:24:aa:51:7d:79:8a:f2:62:3e:cf:cc:bb:92:2a:13:6a:7a: 11:68:4b:a3:4f:40:cf:0a:10:76:da:18:3a:8e:12:6d:b1:ed: b6:9e:99:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0QUMxMTAvBgNVBAUTKEE4NEU3ODM2NjlDMkY5OTc4NEYzNDRGQ0QzMjNGQ0Y5 OTFDQzQwRkIwHhcNMjYwNzIwMjIyODU1WhcNMjYwNzI3MjIyODU1WjAYMRYwFAYD VQQDEw02YTVlYTEyNy0wNmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTVKUvrfcobaJFIVxTTSn3d+tUg/6uAWmVQHcvclhzeTOM6XpNZd5H2ftsrW BDw/BTlrEjVUy7i6U/uvWeZ0oRQKIj2YOgH/Vg9sZzs0lwAINAtfuqxPZuT+ulKq qD48kxeDRRGvlS3mDSNdfBLIuY+b4wpJhD7pKObBgUOhTsrivYxWSIOtOL9iAjiR 8Z8+aNOxY72aPcMPt9iTuEpd1HUNNIoEa1JT5Pvh7Hy1xIuedJOEbkNzHqRE9Nsb 2CJxTeee8n6qbY3Eea6hy9kdIkw0A3HGvDVfZrLkefsfm3qp1kEGTQnPr6VAwS3S lhlvs6Y/6NHYeeUjNCxxeOmeewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWmPbic s1DqKgH4n8xy/6i6/lNuMB8GA1UdIwQYMBaAFKhOeDZpwvmXhPNE/NMj/PmRzED7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDRBQy8zNEJFQzVGNDQ0 NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1aZUU4MFQ4MHlQOC1aSE1R UHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3FFNTRObW5DLVplRTgwVDgweVA4LVpITVFQcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDRBQy8zNEJFQzVGNDQ0NEMxMUVEQkRBOTEyN0NDNEY5QUUwMi9xRTU0Tm1uQy1a ZUU4MFQ4MHlQOC1aSE1RUHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdpjfPiJ3V17y2I+wuWVPHlIFcnj5lRBnT8yLpPDu5b9XS7/FtqkdThXrC6fw ZTl/4cKBzGwRn4dWiIAhjfcxx2KnV+Eh19GlJb7LN9VKb3XGBI7cJwigd/0rRLgT M0Wzfs9rCi2AyhKsftx3VhLE6MbBDoChuXHwte9y7VgcP24Jdw59TzjPgee7qKhk J+Qu4sl3icvSwnUblu2v1ZTsvjnPZQAvXdbSrFyfOx+kbO719iECP9CbSthEPoJR j9q+mN9G/XScZH9ounuX9uwlvIe0DST37GGi/iSqUX15ivJiPs/Mu5IqE2p6EWhL o09AzwoQdtoYOo4SbbHttp6Z8g== -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:38 2026 by rpki-client