$ rpki-client -vvf rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft File: QJmwCEN2qeBM7XxnirxoWN2fhRo.mft (raw, json) Hash identifier: YXjcf8s3eCPlgfZ5IwxMP1mgmx5m/gqXc8Vp+RTWaOA= Subject key identifier: E4:17:81:20:7F:2E:39:8B:CF:42:5F:80:54:EC:60:02:2A:1D:98:D9 Authority key identifier: 40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A Certificate issuer: /CN=A919BCD9/serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Certificate serial: 0D45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft Manifest number: 0D31 Signing time: Sat 04 Jul 2026 18:08:08 +0000 Manifest this update: Sat 04 Jul 2026 18:08:07 +0000 Manifest next update: Sat 11 Jul 2026 18:08:07 +0000 Files and hashes: 1: QJmwCEN2qeBM7XxnirxoWN2fhRo.crl (hash: vkOQQnQPFalZfTke9m2CxXFFeRWVePhK6kFSUbDxlfs=) 2: E56CD3E8FF8311E9B1B99628C4F9AE02.roa (hash: yk+S2an59M1qblQEC/oVwNcQBVVUiZw+ShOuw7y2Rac=) 3: E4B59AA2FF8311E9B1B99628C4F9AE02.roa (hash: y4vcTjeolSMrmAigiZozXMraZgaOak5oYF52X7KfAMI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 18:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3397 (0xd45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BCD9, serialNumber=4099B0084376A9E04CED7C678ABC6858DD9F851A Validity Not Before: Jul 4 18:08:07 2026 GMT Not After : Jul 11 18:08:07 2026 GMT Subject: CN=6a494c08-e335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:88:e2:94:25:98:4f:be:86:33:31:8d:96: de:17:73:23:66:20:59:b2:22:df:38:63:f0:98:e9: ac:22:f1:ab:fe:48:f0:81:ab:cb:7a:e3:76:47:97: ea:4a:18:36:27:9c:40:88:9c:63:cf:b0:eb:fb:04: 10:e0:bf:ba:7f:8d:82:67:9f:e2:be:bb:53:fb:9f: e8:6f:c5:f8:9e:35:e7:87:a5:30:78:c5:25:49:3d: e7:d2:62:ef:cd:f3:82:0f:87:0b:ec:35:f1:d9:23: b4:06:b5:3f:b5:05:4c:86:75:5d:e8:e5:37:21:56: aa:22:69:31:89:ab:2a:5e:8a:c1:b9:ba:42:26:7f: 2e:0c:6a:42:66:74:0c:99:34:87:25:89:1a:d4:b5: e0:de:e6:a5:dc:7e:1e:66:e8:b3:fe:ae:ea:de:83: 31:3d:b2:f5:f6:c8:5f:6c:37:1c:ee:23:09:24:68: 51:1c:6d:4b:e0:2e:f1:e3:93:da:e6:a8:9a:a7:df: 25:58:50:68:ab:d4:1c:e6:56:6a:d8:14:59:ca:d0: ea:2e:60:af:e0:6a:eb:96:9f:44:b3:58:17:4e:bb: 80:8e:f9:f4:71:6f:b6:e8:47:bb:28:3e:4c:a3:6b: b6:43:6f:50:bd:0b:3c:ce:c7:2e:2a:1d:8a:76:1c: 70:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:17:81:20:7F:2E:39:8B:CF:42:5F:80:54:EC:60:02:2A:1D:98:D9 X509v3 Authority Key Identifier: keyid:40:99:B0:08:43:76:A9:E0:4C:ED:7C:67:8A:BC:68:58:DD:9F:85:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QJmwCEN2qeBM7XxnirxoWN2fhRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BCD9/17B78F16FF8211E9B402FC24C4F9AE02/QJmwCEN2qeBM7XxnirxoWN2fhRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:87:37:c8:ef:42:a4:5d:97:ab:c5:20:92:f5:cc:00:bf:0c: 6e:10:e0:12:ee:49:6b:b8:87:90:ed:0f:49:a2:6f:ce:78:b6: 8c:c0:d1:df:5c:2d:0c:18:60:0d:f0:ec:98:0f:a8:8b:09:15: dd:a3:4b:ff:b8:a9:b5:c5:92:96:75:6c:a3:49:ec:7c:71:e5: f8:79:59:bb:3f:e5:93:1b:8d:62:2b:b0:31:02:c3:6a:4f:19: 5c:14:44:74:8f:ef:22:04:0d:30:4b:e3:3c:b3:0f:64:43:2a: 1f:82:b9:5e:92:3e:b1:2b:42:8f:dc:43:94:29:76:d1:55:59: 86:e3:8e:51:a4:4d:96:63:6f:18:22:d8:91:a3:df:83:3c:86: 73:ae:63:42:d8:12:ac:07:b5:d2:54:e3:00:4f:c7:04:fa:e8: 1e:c6:fd:07:7b:55:fb:0a:40:79:3f:63:de:0f:af:eb:35:b9: b7:2c:a2:92:fc:1a:86:e4:9e:db:9f:bb:03:30:41:ee:61:cb: 2b:da:26:49:11:62:a6:44:c8:5c:08:50:85:b6:16:c3:67:c2: 90:8c:0a:fb:fa:4d:09:50:0f:9e:d4:b8:93:db:c5:2a:4c:28: 1b:39:d4:3c:0e:7c:6b:b2:6c:cc:ab:85:fb:b2:e7:45:d5:73: d1:d7:a7:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDRDkxMTAvBgNVBAUTKDQwOTlCMDA4NDM3NkE5RTA0Q0VEN0M2NzhBQkM2ODU4 REQ5Rjg1MUEwHhcNMjYwNzA0MTgwODA3WhcNMjYwNzExMTgwODA3WjAYMRYwFAYD VQQDEw02YTQ5NGMwOC1lMzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT2I4pQlmE++hjMxjZbeF3MjZiBZsiLfOGPwmOmsIvGr/kjwgavLeuN2R5fq Shg2J5xAiJxjz7Dr+wQQ4L+6f42CZ5/ivrtT+5/ob8X4njXnh6UweMUlST3n0mLv zfOCD4cL7DXx2SO0BrU/tQVMhnVd6OU3IVaqImkxiasqXorBubpCJn8uDGpCZnQM mTSHJYka1LXg3ual3H4eZuiz/q7q3oMxPbL19shfbDcc7iMJJGhRHG1L4C7x45Pa 5qiap98lWFBoq9Qc5lZq2BRZytDqLmCv4Grrlp9Es1gXTruAjvn0cW+26Ee7KD5M o2u2Q29QvQs8zscuKh2Kdhxw0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQXgSB/ LjmLz0JfgFTsYAIqHZjZMB8GA1UdIwQYMBaAFECZsAhDdqngTO18Z4q8aFjdn4Ua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkNEOS8xN0I3OEYxNkZG ODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFlQk03WHhuaXJ4b1dOMmZo Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FKbXdDRU4ycWVCTTdYeG5pcnhvV04yZmhSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkNEOS8xN0I3OEYxNkZGODIxMUU5QjQwMkZDMjRDNEY5QUUwMi9RSm13Q0VOMnFl Qk03WHhuaXJ4b1dOMmZoUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY4c3yO9CpF2Xq8UgkvXMAL8MbhDgEu5Ja7iHkO0PSaJvzni2jMDR31wtDBhg DfDsmA+oiwkV3aNL/7iptcWSlnVso0nsfHHl+HlZuz/lkxuNYiuwMQLDak8ZXBRE dI/vIgQNMEvjPLMPZEMqH4K5XpI+sStCj9xDlCl20VVZhuOOUaRNlmNvGCLYkaPf gzyGc65jQtgSrAe10lTjAE/HBProHsb9B3tV+wpAeT9j3g+v6zW5tyyikvwahuSe 25+7AzBB7mHLK9omSRFipkTIXAhQhbYWw2fCkIwK+/pNCVAPntS4k9vFKkwoGznU PA58a7JszKuF+7LnRdVz0denlA== -----END CERTIFICATE-----Generated at Sun Jul 5 07:51:45 2026 by rpki-client