$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft File: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft (raw, json) Hash identifier: hK/2Sk2JIjNiV3kUuQre3PEReCvk/zdIphsYyhxUAvc= Subject key identifier: 7B:65:D0:35:9D:5C:D9:50:6D:19:B5:BA:02:61:78:58:1B:02:35:26 Authority key identifier: AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C Certificate issuer: /CN=A91AC075/serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft Manifest number: 3F Signing time: Sun 05 Jul 2026 09:14:37 +0000 Manifest this update: Sun 05 Jul 2026 09:14:36 +0000 Manifest next update: Sun 12 Jul 2026 09:14:36 +0000 Files and hashes: 1: qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl (hash: GkvQSmvt+njg4spsca0lkCnZjj0UQrinCMs/2Qds3s8=) 2: CDBA019C39F311F1ADEB5DEEC0833773.roa (hash: iidMH4KhBMhVgK4N0PlQBp3CYB4iLSSSQ1RpsnRFm3E=) 3: 4D14307E1C2C11F186EF2187353D8C67.roa (hash: 8n1lBtRiuUToqQoaz+XovDqW+aJBw7UTosZ8OjYJOZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 09:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC075, serialNumber=AAD81799F64870B91A09D2C04B87D0F9607EF01C Validity Not Before: Jul 5 09:14:36 2026 GMT Not After : Jul 12 09:14:36 2026 GMT Subject: CN=6a4a207c-7c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:69:10:0b:a3:dd:fb:78:fe:2e:16:e0:3e:af: f4:d1:64:33:d3:45:81:d9:93:c3:3e:d1:49:16:6b: e1:53:46:5a:93:a7:11:5a:92:02:9e:b5:a2:30:91: 1b:e3:2f:52:99:62:89:46:c3:94:e2:2a:a3:66:88: 23:e6:58:5f:70:6b:56:4f:9a:5a:69:a4:78:09:12: ab:39:dd:4b:cd:59:4a:03:1d:b7:5a:ba:b4:78:60: e7:a1:d1:c5:81:51:ee:8a:66:b4:4a:77:e1:4c:de: c7:b4:c7:9b:cd:cd:e2:5a:22:46:37:51:3e:b1:e1: c5:52:1f:43:b5:b4:06:a5:83:10:0b:e3:74:f1:6a: 45:22:57:50:f6:1d:84:0e:39:1e:7d:d9:7f:09:a6: 08:eb:5e:56:e4:50:fa:d1:2b:8f:f4:3d:ba:26:62: 4b:26:d1:31:cb:6b:2a:58:59:3d:1b:dd:e9:a2:c7: b8:ab:a8:99:74:af:87:3b:30:e2:61:87:3f:d9:6b: b4:69:ee:4b:11:a4:a7:5d:c1:d7:ce:0a:aa:ec:af: 7d:8e:15:65:17:5c:73:b6:42:f7:22:b4:54:ab:d9: 34:ef:20:e0:a6:36:2c:c8:d9:30:fc:75:e5:d3:05: b0:09:b2:b4:f6:c0:50:61:68:c9:6e:40:5f:3f:99: 48:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:65:D0:35:9D:5C:D9:50:6D:19:B5:BA:02:61:78:58:1B:02:35:26 X509v3 Authority Key Identifier: keyid:AA:D8:17:99:F6:48:70:B9:1A:09:D2:C0:4B:87:D0:F9:60:7E:F0:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC075/D67784301C2A11F19DD1604B353D8C67/qtgXmfZIcLkaCdLAS4fQ-WB-8Bw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0f:e7:5a:6e:aa:cd:14:b6:ec:01:f9:ae:10:93:ad:e2:c3: c9:58:d5:d4:0a:61:80:e3:a4:cf:22:9e:7d:64:43:8f:5a:29: 6a:0c:7e:c2:58:45:c5:44:5f:18:52:07:9f:54:d7:45:0d:8b: 9a:7b:94:f1:4b:3f:53:98:56:f8:89:b5:68:01:66:fd:c1:1f: b3:1a:af:97:32:02:cc:33:8e:a8:95:12:fd:b1:7b:63:79:16: d2:42:75:b3:6f:a3:ef:7d:e8:60:80:d0:6f:93:a0:c7:5c:fa: 91:55:57:c7:4c:f7:65:b0:2e:43:d5:8a:e9:24:fa:09:02:33: a1:46:95:ff:92:43:69:13:c5:d4:58:a7:30:7f:a2:67:ce:09: 40:39:9d:99:f1:d7:90:01:f6:cc:e7:61:a4:84:46:aa:50:a5: 4a:aa:eb:64:3a:69:1a:11:7c:4d:b9:ce:cd:bd:a4:c2:ab:1a: ab:44:5f:4a:11:a4:70:79:a0:05:96:4c:29:43:d2:f7:15:55: c1:79:b3:36:2f:3f:5d:2b:79:dc:99:97:59:4f:63:c9:4c:7c: 78:67:ea:57:74:fb:bb:4c:37:fe:4b:bf:e9:4f:38:4a:38:b6: 96:0f:fd:2e:1d:b0:1b:f9:26:4a:9d:cf:e9:da:8f:8e:bd:db: 7e:33:4f:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzA3NTExMC8GA1UEBRMoQUFEODE3OTlGNjQ4NzBCOTFBMDlEMkMwNEI4N0QwRjk2 MDdFRjAxQzAeFw0yNjA3MDUwOTE0MzZaFw0yNjA3MTIwOTE0MzZaMBgxFjAUBgNV BAMTDTZhNGEyMDdjLTdjNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCVaRALo937eP4uFuA+r/TRZDPTRYHZk8M+0UkWa+FTRlqTpxFakgKetaIwkRvj L1KZYolGw5TiKqNmiCPmWF9wa1ZPmlpppHgJEqs53UvNWUoDHbdaurR4YOeh0cWB Ue6KZrRKd+FM3se0x5vNzeJaIkY3UT6x4cVSH0O1tAalgxAL43TxakUiV1D2HYQO OR592X8JpgjrXlbkUPrRK4/0PbomYksm0THLaypYWT0b3emix7irqJl0r4c7MOJh hz/Za7Rp7ksRpKddwdfOCqrsr32OFWUXXHO2QvcitFSr2TTvIOCmNizI2TD8deXT BbAJsrT2wFBhaMluQF8/mUgfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUe2XQNZ1c 2VBtGbW6AmF4WBsCNSYwHwYDVR0jBBgwFoAUqtgXmfZIcLkaCdLAS4fQ+WB+8Bww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDMDc1L0Q2Nzc4NDMwMUMy QTExRjE5REQxNjA0QjM1M0Q4QzY3L3F0Z1htZlpJY0xrYUNkTEFTNGZRLVdCLThC dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXRnWG1mWkljTGthQ2RMQVM0ZlEtV0ItOEJ3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD MDc1L0Q2Nzc4NDMwMUMyQTExRjE5REQxNjA0QjM1M0Q4QzY3L3F0Z1htZlpJY0xr YUNkTEFTNGZRLVdCLThCdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCMD+dabqrNFLbsAfmuEJOt4sPJWNXUCmGA46TPIp59ZEOPWilqDH7CWEXFRF8Y UgefVNdFDYuae5TxSz9TmFb4ibVoAWb9wR+zGq+XMgLMM46olRL9sXtjeRbSQnWz b6PvfehggNBvk6DHXPqRVVfHTPdlsC5D1YrpJPoJAjOhRpX/kkNpE8XUWKcwf6Jn zglAOZ2Z8deQAfbM52GkhEaqUKVKqutkOmkaEXxNuc7NvaTCqxqrRF9KEaRweaAF lkwpQ9L3FVXBebM2Lz9dK3ncmZdZT2PJTHx4Z+pXdPu7TDf+S7/pTzhKOLaWD/0u HbAb+SZKnc/p2o+Ovdt+M08z -----END CERTIFICATE-----Generated at Tue Jul 7 10:45:51 2026 by rpki-client