$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft File: vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft (raw, json) Hash identifier: rkdNHbmY6vFmzbPI6oSq3+Em3GMFk/tKSD6qUJrwOVo= Subject key identifier: 94:0D:3F:32:F8:E9:EF:76:45:45:43:73:0D:B0:CC:0A:F5:65:FA:84 Authority key identifier: BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4 Certificate issuer: /CN=A91BF7D7/serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft Manifest number: 2C Signing time: Tue 21 Jul 2026 10:38:02 +0000 Manifest this update: Tue 21 Jul 2026 10:38:02 +0000 Manifest next update: Tue 28 Jul 2026 10:38:02 +0000 Files and hashes: 1: vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl (hash: +WA/HmtW1wCMdpf+UWdp1BSuhnwLlzOLN/seIiijuHI=) 2: 87331106446F11F1B67309509A833773.roa (hash: XggpXhcMUOMqUyl7v/7VH6Vt4POC4iPTSWjovesXRFA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF7D7, serialNumber=BD0FB2FAD87122839A738C4941937907EA5C3FD4 Validity Not Before: Jul 21 10:38:02 2026 GMT Not After : Jul 28 10:38:02 2026 GMT Subject: CN=6a5f4c0a-bdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:f5:db:43:a9:50:ac:5b:9d:36:0e:1b:32: 0e:95:e9:2c:42:d2:c0:27:2b:b3:55:f5:36:9d:4e: 17:84:8f:9d:bc:49:52:d1:7d:37:08:bb:f9:5b:f2: c1:e0:05:69:ff:cd:2d:e5:cc:f1:4e:b7:ca:f7:fc: 49:71:b7:77:2e:60:ff:9b:39:41:f9:e6:b8:2d:35: 0f:8c:39:31:ad:19:e1:4e:51:88:f5:3d:43:4d:b6: 42:08:42:dd:3a:04:c8:9b:ba:26:4b:97:2c:ca:50: 64:bb:60:93:fa:58:85:20:0a:7a:7e:de:c2:81:d0: aa:ec:f0:d8:79:95:04:fd:da:6f:0e:5a:12:61:59: 3f:4c:d0:44:f5:4c:67:e7:e1:7f:ff:63:59:4b:fd: 05:55:35:e6:7f:c9:c6:23:e3:fe:30:c8:9c:b5:96: 5b:f4:48:d7:db:1e:a3:94:63:cf:43:31:24:c0:70: 1b:b6:10:cb:42:de:13:20:2f:e3:96:84:c0:7d:a2: fd:16:a4:a4:a3:68:ec:cc:22:d1:05:5a:f7:ca:b1: d6:4a:f0:31:20:45:09:12:12:69:12:26:0b:b3:0e: eb:59:bd:ae:e7:fa:eb:cd:89:01:84:cd:83:f0:6f: ea:17:9d:94:41:d9:65:b0:ed:8b:24:a3:f4:b5:df: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0D:3F:32:F8:E9:EF:76:45:45:43:73:0D:B0:CC:0A:F5:65:FA:84 X509v3 Authority Key Identifier: keyid:BD:0F:B2:FA:D8:71:22:83:9A:73:8C:49:41:93:79:07:EA:5C:3F:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/vQ-y-thxIoOac4xJQZN5B-pcP9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/820E2C74446A11F1A5622F6E97833773/vQ-y-thxIoOac4xJQZN5B-pcP9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:49:99:bf:48:ce:b3:e8:27:b7:4b:cb:e0:84:2f:d6:65:2b: 99:70:28:d4:c0:13:6c:b6:1b:df:22:2d:e4:44:38:ed:d6:ae: 95:9d:c2:11:23:44:7b:b5:09:31:fa:a6:68:41:df:94:52:7d: 6a:f1:8a:60:fa:3c:25:11:61:d7:5d:7d:4f:85:47:4c:9a:90: 17:25:0a:84:64:ab:3d:b7:72:9a:4f:9e:f4:70:39:e1:f3:bb: b0:64:ca:d2:a3:d2:5b:ae:74:f9:bd:35:16:a0:a0:b1:cf:38: 75:50:02:d6:32:37:f1:35:06:43:ed:44:48:bd:9f:a6:97:7d: ac:01:25:6d:c8:f2:23:ce:e3:1b:13:8f:1f:60:17:1b:b1:8a: 5e:dc:33:44:83:c4:bc:ef:24:62:85:b0:cd:d1:29:83:72:b6: 63:fa:24:59:db:74:3e:e4:20:aa:a0:5f:c4:36:83:50:3a:c4: ff:b0:a3:e7:d5:8b:61:56:98:4c:76:1f:0b:e2:62:93:ea:71: 99:f4:5c:2d:fe:ac:8a:8d:d9:97:30:8a:f0:29:79:bc:db:b6: 9a:bd:4c:3b:6e:04:26:cc:15:49:84:0d:5f:e8:0e:3f:5a:9c: 8d:50:88:4b:33:17:49:9d:2d:b1:0d:08:81:31:5a:cf:21:ce: a5:4d:e5:e3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RjdENzExMC8GA1UEBRMoQkQwRkIyRkFEODcxMjI4MzlBNzM4QzQ5NDE5Mzc5MDdF QTVDM0ZENDAeFw0yNjA3MjExMDM4MDJaFw0yNjA3MjgxMDM4MDJaMBgxFjAUBgNV BAMTDTZhNWY0YzBhLWJkZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLSPXbQ6lQrFudNg4bMg6V6SxC0sAnK7NV9TadTheEj528SVLRfTcIu/lb8sHg BWn/zS3lzPFOt8r3/Elxt3cuYP+bOUH55rgtNQ+MOTGtGeFOUYj1PUNNtkIIQt06 BMibuiZLlyzKUGS7YJP6WIUgCnp+3sKB0Krs8Nh5lQT92m8OWhJhWT9M0ET1TGfn 4X//Y1lL/QVVNeZ/ycYj4/4wyJy1llv0SNfbHqOUY89DMSTAcBu2EMtC3hMgL+OW hMB9ov0WpKSjaOzMItEFWvfKsdZK8DEgRQkSEmkSJguzDutZva7n+uvNiQGEzYPw b+oXnZRB2WWw7Ysko/S139qHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUlA0/Mvjp 73ZFRUNzDbDMCvVl+oQwHwYDVR0jBBgwFoAUvQ+y+thxIoOac4xJQZN5B+pcP9Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJGN0Q3LzgyMEUyQzc0NDQ2 QTExRjFBNTYyMkY2RTk3ODMzNzczL3ZRLXktdGh4SW9PYWM0eEpRWk41Qi1wY1A5 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvdlEteS10aHhJb09hYzR4SlFaTjVCLXBjUDlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJG N0Q3LzgyMEUyQzc0NDQ2QTExRjFBNTYyMkY2RTk3ODMzNzczL3ZRLXktdGh4SW9P YWM0eEpRWk41Qi1wY1A5US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAaSZm/SM6z6Ce3S8vghC/WZSuZcCjUwBNsthvfIi3kRDjt1q6VncIRI0R7tQkx +qZoQd+UUn1q8Ypg+jwlEWHXXX1PhUdMmpAXJQqEZKs9t3KaT570cDnh87uwZMrS o9JbrnT5vTUWoKCxzzh1UALWMjfxNQZD7URIvZ+ml32sASVtyPIjzuMbE48fYBcb sYpe3DNEg8S87yRihbDN0SmDcrZj+iRZ23Q+5CCqoF/ENoNQOsT/sKPn1YthVphM dh8L4mKT6nGZ9Fwt/qyKjdmXMIrwKXm827aavUw7bgQmzBVJhA1f6A4/WpyNUIhL MxdJnS2xDQiBMVrPIc6lTeXj -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:54 2026 by rpki-client