$ rpki-client -vvf rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft File: q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft (raw, json) Hash identifier: 1ubFjl+qVH9e2H0cHYfFWldeJQ90eXzArCwwaYliTm4= Subject key identifier: 6E:6E:AC:89:4B:BF:70:66:31:BD:57:CF:DF:84:D2:4E:15:32:F4:A4 Authority key identifier: AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 Certificate issuer: /CN=A9172989/serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft Manifest number: 7D Signing time: Wed 05 Aug 2026 09:25:18 +0000 Manifest this update: Wed 05 Aug 2026 09:25:17 +0000 Manifest next update: Wed 12 Aug 2026 09:25:17 +0000 Files and hashes: 1: q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl (hash: HpjCMWMYifBwJxWNz4XLVjAifheLiqhfDlg72tcmHW8=) 2: 0FB60AEED6D711F085B1D0E884D3641D.roa (hash: F1265JguS11gp2J6OEHqaooyI1SAzSWA0Nwq1O/s41g=) 3: 3CBCF5BED6D911F0B064CD5C85D3641D.roa (hash: sM6CeOH9Bgvv3iRWHhGYzH5sAI6j1iD3slAlqraB/mI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 09:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172989, serialNumber=AB69C74025489AFD61747FF9335B147E20BB25D4 Validity Not Before: Aug 5 09:25:17 2026 GMT Not After : Aug 12 09:25:17 2026 GMT Subject: CN=6a73017e-ded5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:d3:a8:37:99:b9:d4:ef:05:23:3f:fa:d6: de:10:43:6e:ba:cc:cf:8e:be:ed:25:e5:7e:87:a3: e7:a1:1f:e5:20:09:bd:1f:d8:d1:a1:08:0f:59:cf: 70:20:43:44:2d:7b:96:cd:e5:88:85:44:3f:3d:c6: 2d:c4:15:4e:40:74:67:f4:68:63:30:2d:86:61:0c: d6:41:19:87:d0:50:bd:06:84:11:bd:6b:58:b5:db: 8e:e8:1c:84:69:a9:c6:f9:4f:9b:23:c5:57:e4:ce: 4a:83:7a:6a:83:8b:03:b9:86:17:3e:20:37:54:53: 88:a3:f1:43:0d:3c:3f:9a:ec:f0:f0:de:96:c3:6b: 59:79:c6:c9:59:7d:d8:cd:23:1c:0c:cd:4a:29:5a: c2:9a:37:c9:46:15:cb:0c:c3:9d:1b:e0:18:72:34: 62:ba:6c:a0:92:21:db:5f:d8:7f:4a:f4:c0:fb:fe: 44:34:57:94:fa:c2:e5:a8:9e:94:e5:06:4e:92:84: 2e:20:87:6e:bb:04:7f:51:52:cf:df:37:a0:da:b1: ea:12:0d:9a:3d:05:3e:40:44:0d:c5:c0:43:ea:d3: 14:ee:d2:ce:ea:c2:93:46:6b:17:b6:fe:c9:d4:13: 46:fe:c3:cf:fc:21:78:bb:64:c5:48:99:e1:b6:20: ff:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6E:AC:89:4B:BF:70:66:31:BD:57:CF:DF:84:D2:4E:15:32:F4:A4 X509v3 Authority Key Identifier: keyid:AB:69:C7:40:25:48:9A:FD:61:74:7F:F9:33:5B:14:7E:20:BB:25:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2nHQCVImv1hdH_5M1sUfiC7JdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172989/EFFDD714D6D511F0B06384B581D3641D/q2nHQCVImv1hdH_5M1sUfiC7JdQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:51:6c:12:0d:b5:38:b4:5b:18:24:ce:e0:af:60:b1:71:91: 59:b6:fd:dd:12:0a:43:00:62:95:10:8d:b3:85:e2:99:e2:07: 11:be:1b:e0:ad:01:36:33:10:43:d9:f2:ee:98:88:a9:a1:2a: 2d:b5:be:11:81:dd:e1:72:b1:34:c7:a1:77:63:2c:ce:bf:2f: 27:92:b5:60:f1:a0:51:a7:38:c5:10:9c:42:64:30:47:ea:15: c7:a4:c7:d8:89:69:0c:5d:a4:fa:90:16:08:23:15:a1:6e:81: 53:03:29:27:58:77:d0:21:61:38:b4:27:99:2e:f1:87:d3:0b: 52:41:45:e7:dc:9f:20:6d:0c:1a:bf:0b:83:6e:68:99:26:1c: e6:2b:d3:00:7b:1d:9c:21:df:e2:be:8d:8a:bf:48:e4:22:fb: c9:5e:9f:3e:ed:c3:93:8e:68:ba:e5:be:a0:9c:a1:fb:8f:02: f0:75:22:ef:55:83:2b:e8:3c:5f:70:0e:35:d9:72:4e:53:59: de:90:d3:c8:ea:7a:b6:6c:5f:5d:12:33:8b:5a:cc:7f:62:5d: b9:f5:5b:10:13:fd:60:34:73:41:ea:72:7b:6f:c3:e9:80:41: ef:ec:48:c9:e9:2c:40:e8:d0:e1:d0:20:4a:cd:49:97:66:53: 4e:a0:a4:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI5ODkxMTAvBgNVBAUTKEFCNjlDNzQwMjU0ODlBRkQ2MTc0N0ZGOTMzNUIxNDdF MjBCQjI1RDQwHhcNMjYwODA1MDkyNTE3WhcNMjYwODEyMDkyNTE3WjAYMRYwFAYD VQQDEw02YTczMDE3ZS1kZWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfzTqDeZudTvBSM/+tbeEENuuszPjr7tJeV+h6PnoR/lIAm9H9jRoQgPWc9w IENELXuWzeWIhUQ/PcYtxBVOQHRn9GhjMC2GYQzWQRmH0FC9BoQRvWtYtduO6ByE aanG+U+bI8VX5M5Kg3pqg4sDuYYXPiA3VFOIo/FDDTw/muzw8N6Ww2tZecbJWX3Y zSMcDM1KKVrCmjfJRhXLDMOdG+AYcjRiumygkiHbX9h/SvTA+/5ENFeU+sLlqJ6U 5QZOkoQuIIduuwR/UVLP3zeg2rHqEg2aPQU+QEQNxcBD6tMU7tLO6sKTRmsXtv7J 1BNG/sPP/CF4u2TFSJnhtiD/gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG5urIlL v3BmMb1Xz9+E0k4VMvSkMB8GA1UdIwQYMBaAFKtpx0AlSJr9YXR/+TNbFH4guyXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjk4OS9FRkZERDcxNEQ2 RDUxMUYwQjA2Mzg0QjU4MUQzNjQxRC9xMm5IUUNWSW12MWhkSF81TTFzVWZpQzdK ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EybkhRQ1ZJbXYxaGRIXzVNMXNVZmlDN0pkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjk4OS9FRkZERDcxNEQ2RDUxMUYwQjA2Mzg0QjU4MUQzNjQxRC9xMm5IUUNWSW12 MWhkSF81TTFzVWZpQzdKZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS1FsEg21OLRbGCTO4K9gsXGRWbb93RIKQwBilRCNs4XimeIHEb4b4K0BNjMQ Q9ny7piIqaEqLbW+EYHd4XKxNMehd2Mszr8vJ5K1YPGgUac4xRCcQmQwR+oVx6TH 2IlpDF2k+pAWCCMVoW6BUwMpJ1h30CFhOLQnmS7xh9MLUkFF59yfIG0MGr8Lg25o mSYc5ivTAHsdnCHf4r6Nir9I5CL7yV6fPu3Dk45ouuW+oJyh+48C8HUi71WDK+g8 X3AONdlyTlNZ3pDTyOp6tmxfXRIzi1rMf2JdufVbEBP9YDRzQepye2/D6YBB7+xI yeksQOjQ4dAgSs1Jl2ZTTqCkhw== -----END CERTIFICATE-----Generated at Thu Aug 6 08:39:44 2026 by rpki-client