$ rpki-client -vvvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: zWup+hOV+nX4syNozUh0+CDG8uqEq5Set1lonwOe9UE= Subject key identifier: EF:71:B7:0A:EB:75:69:AE:49:BA:E7:BF:87:B2:59:27:59:FE:83:ED Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 046B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 045D Signing time: Tue 25 Aug 2026 00:02:03 +0000 Manifest this update: Tue 25 Aug 2026 00:02:02 +0000 Manifest next update: Tue 01 Sep 2026 00:02:02 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: dAlG/OCyqKY9Lp6IrVlDsoxUffAJOI3g1TfmiX++iLQ=) 2: 61138FD0708111F1AFA81DDF7CA30FBC.roa (hash: UXuyg07q384x+vqE80NFlYLxxP2h+t2gXIe3OeSv7hI=) 3: ADDCA5F4BA2911F0B6E66A71C4F9AE02.roa (hash: YHAl4wyL5lBLADe3tYGJfQq5g48eFSMbVbWuT+BMPaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 00:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1131 (0x46b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: Aug 25 00:02:02 2026 GMT Not After : Sep 1 00:02:02 2026 GMT Subject: CN=6a8cdb7b-e31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:41:9a:47:a9:d7:e7:bc:4c:2a:02:0c:94: 61:93:01:56:90:c3:03:6e:3f:cf:3a:7d:b7:97:b8: 1e:90:e4:51:ac:95:40:8d:a0:3a:1a:a2:54:7c:83: af:16:a5:07:d1:73:ba:14:f5:73:45:b4:ad:58:9c: f9:8a:4b:41:e2:7e:f8:7c:2f:44:67:c7:d1:20:71: 7f:04:f0:6a:c7:2f:4e:23:f9:43:91:d0:bb:c6:6c: 05:1f:e9:31:b5:a1:0a:5d:79:a3:9c:60:f4:0a:22: 47:66:b9:03:7e:e2:65:08:ac:8b:0b:6d:a3:3d:d5: 64:de:01:f2:e8:7f:c0:56:09:a5:35:5e:63:02:6f: f6:67:f1:c9:5e:6d:78:3e:7f:b3:ad:d3:b8:7d:a8: 80:03:24:1d:fa:2a:c6:5e:38:21:46:27:f7:46:58: f6:20:3d:54:5b:e4:69:2e:fb:c3:88:40:1e:e7:e3: 81:4e:72:94:94:67:f7:b0:39:22:df:79:55:95:f2: ae:d0:62:9d:d4:30:3f:be:1d:d8:e7:b0:3a:95:d6: 3d:27:8d:ca:ab:40:9e:3f:78:09:ca:ba:e3:05:eb: e6:43:2b:ca:ff:e1:7b:66:7c:8a:4c:f2:0e:ac:b2: 5a:5d:29:db:92:2d:61:4c:44:27:fe:06:f0:96:b0: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:71:B7:0A:EB:75:69:AE:49:BA:E7:BF:87:B2:59:27:59:FE:83:ED X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e4:41:b4:d4:50:d0:7e:32:0e:81:10:b0:3b:2c:4e:40:63: 3e:c6:49:60:32:e4:19:c9:ff:bc:02:b2:8c:92:00:3f:c4:44: e0:f5:8d:10:a8:8e:f3:d0:cd:c8:27:c5:a5:81:15:70:90:84: d0:38:48:95:68:a4:f6:76:83:a9:35:1a:86:0a:7a:a0:d9:e0: 04:a6:fb:4e:e6:8a:de:eb:cf:69:a7:53:76:42:64:38:df:7c: 26:49:bc:c6:17:d0:88:50:eb:f3:cc:40:38:0b:c9:32:fc:53: 3b:aa:b1:80:e1:18:5b:d0:54:53:79:61:ae:21:e2:4c:e2:73: 0f:c0:cf:b3:ec:20:25:d1:22:3d:cc:bd:25:da:68:ea:0f:b6: 03:0d:d6:f1:45:a8:42:5b:7b:e8:35:0a:d8:8d:88:e1:b9:4a: 00:ca:eb:31:bd:a3:1a:7b:1d:e0:67:c5:c2:8c:9f:7e:00:e9: 82:83:31:c4:a7:2c:5f:82:b0:5c:6c:f8:9c:f0:1b:94:39:cd: 4b:77:ce:62:f1:72:e9:ce:50:af:08:a9:b5:04:ea:42:db:1d: 4b:7d:8c:b7:d4:5a:96:70:ce:53:ae:e2:87:8e:dc:e7:3b:9e: 7a:3d:f7:59:76:cd:04:69:36:ed:c6:a0:a2:c9:50:2e:16:86: 20:04:80:e4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjYwODI1MDAwMjAyWhcNMjYwOTAxMDAwMjAyWjAYMRYwFAYD VQQDEw02YThjZGI3Yi1lMzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0itBmkep1+e8TCoCDJRhkwFWkMMDbj/POn23l7gekORRrJVAjaA6GqJUfIOv FqUH0XO6FPVzRbStWJz5iktB4n74fC9EZ8fRIHF/BPBqxy9OI/lDkdC7xmwFH+kx taEKXXmjnGD0CiJHZrkDfuJlCKyLC22jPdVk3gHy6H/AVgmlNV5jAm/2Z/HJXm14 Pn+zrdO4faiAAyQd+irGXjghRif3Rlj2ID1UW+RpLvvDiEAe5+OBTnKUlGf3sDki 33lVlfKu0GKd1DA/vh3Y57A6ldY9J43Kq0CeP3gJyrrjBevmQyvK/+F7ZnyKTPIO rLJaXSnbki1hTEQn/gbwlrDNQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO9xtwrr dWmuSbrnv4eyWSdZ/oPtMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOuRBtNRQ0H4yDoEQsDssTkBjPsZJYDLkGcn/vAKyjJIAP8RE4PWNEKiO89DN yCfFpYEVcJCE0DhIlWik9naDqTUahgp6oNngBKb7TuaK3uvPaadTdkJkON98Jkm8 xhfQiFDr88xAOAvJMvxTO6qxgOEYW9BUU3lhriHiTOJzD8DPs+wgJdEiPcy9Jdpo 6g+2Aw3W8UWoQlt76DUK2I2I4blKAMrrMb2jGnsd4GfFwoyffgDpgoMxxKcsX4Kw XGz4nPAblDnNS3fOYvFy6c5QrwiptQTqQtsdS32Mt9RalnDOU67ih47c5zueej33 WXbNBGk27cagoslQLhaGIASA5A== -----END CERTIFICATE-----Generated at Wed Aug 26 23:06:30 2026 by rpki-client