$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: jNi9is/Nr5jyBNQK0deSy6ptF6kWts3y61Pl8DZU/OU= Subject key identifier: 2E:BE:BE:81:E3:19:7C:50:B9:98:A2:64:7D:1B:B9:11:03:D1:23:4F Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: F7 Signing time: Tue 25 Aug 2026 06:23:46 +0000 Manifest this update: Tue 25 Aug 2026 06:23:45 +0000 Manifest next update: Tue 01 Sep 2026 06:23:45 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: cQ3FxUBzeyHQ0zfcOnLgPmpRHCLwGjSeSChIDd6W/9w=) 2: 9BE1C9D08C4511F1BC8E54F45411F970.roa (hash: Sbq/BmihJlFQZ8/ZS3AcJsWDmVD1eWHySOf7VOwUdak=) 3: 1FC17CE2EB2D11F0971959663D6F56BC.roa (hash: aI9DlzDvvLFMVVyO/coQSpjqyPYkqJnDOZuQHUXRHk8=) 4: C3DCFE54EB2911F0BD7173483B6F56BC.roa (hash: hZQbMZ8wBZ3CYwiXTphoVD9Fsf34oefbQ7yrGVzjULw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 06:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Aug 25 06:23:45 2026 GMT Not After : Sep 1 06:23:45 2026 GMT Subject: CN=6a8d34f2-76d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3f:d5:44:af:b8:71:ce:cd:18:32:a8:c0:05: 61:b7:6d:1e:e1:25:65:26:86:63:c0:39:a8:4b:b6: a2:14:ca:cb:6d:73:c6:05:e8:ba:22:bc:98:35:53: b0:68:ff:7f:c9:09:58:83:2c:4d:30:6f:79:e8:3a: 6f:0c:63:2a:64:82:5d:1c:da:27:cf:16:a0:51:98: 46:23:17:9c:76:b9:4b:1d:b3:cf:1c:f1:ce:25:4c: 18:b5:ee:d2:10:f0:3e:d7:8a:d2:05:6b:53:af:f3: fa:7b:91:d7:ef:f0:6e:77:f1:30:f3:40:ff:04:0c: cb:46:e7:16:56:7e:f8:00:ad:a0:e0:3f:98:dd:2f: 81:47:af:b2:84:52:a3:42:cc:88:37:d5:d0:00:d0: 94:54:9e:f5:64:49:9e:d5:c1:8f:5a:6d:ba:27:0a: 21:16:fa:08:ba:01:81:d3:33:c4:20:1e:6c:e4:3a: dd:d6:bb:cc:98:39:e0:7f:88:e3:59:76:35:e2:0e: 97:3d:c2:bb:38:61:d1:68:3c:1e:77:30:fa:16:ae: ae:2f:40:11:3e:44:a4:11:9c:3c:1d:bd:e8:10:b8: 09:a3:72:d1:fc:d1:fb:73:b3:4a:80:74:40:d4:82: ad:19:0a:c6:b2:ee:34:92:d0:63:cc:47:8e:41:08: 60:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BE:BE:81:E3:19:7C:50:B9:98:A2:64:7D:1B:B9:11:03:D1:23:4F X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:9b:d5:78:63:61:7a:af:14:8b:d7:e8:27:7a:d0:62:f4:cd: 37:1d:96:3b:b4:44:67:88:a4:00:a9:47:7c:da:77:a5:ee:eb: 0e:09:e1:24:d2:5e:0a:18:2c:e2:b6:45:b1:10:c3:6e:db:8a: 7a:36:cb:ae:40:5b:8a:87:f6:8e:9f:48:79:96:63:42:ff:db: 8a:69:a2:67:09:33:5e:07:ee:a6:2c:c8:04:3f:75:2f:fc:15: ca:b7:cd:01:ad:a0:63:f7:0f:43:40:05:16:b4:19:77:b0:10: aa:88:69:19:92:c4:a5:0d:e6:cd:d8:31:5b:11:fc:ad:2a:18: 94:24:ee:cd:9e:22:0e:6f:52:d1:9b:80:02:c1:7a:b4:87:b4: 51:80:3a:8a:ec:23:97:f2:0d:32:a9:44:f7:06:9c:57:f9:0a: e5:ec:4c:32:6d:0c:5d:e2:f5:53:8e:a4:b2:26:e1:d3:c8:24: 98:d5:e1:08:5b:70:e3:67:26:cd:ad:42:7e:db:1f:f9:50:b7: 73:45:ef:57:09:fa:c8:12:cd:b9:f7:dd:97:ac:2e:19:48:51: 3b:d3:1a:42:c7:da:a8:f7:3b:4a:1d:3d:da:71:38:1b:70:52: 78:16:09:70:27:5d:a6:88:3c:02:b3:b5:d5:9c:81:26:58:5b: cd:d0:c2:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEFCNTNEOTkyODEwMkI5MTlEQjdDNTQ2NUM4REQ1RkYy NjY3NDQzQjMwHhcNMjYwODI1MDYyMzQ1WhcNMjYwOTAxMDYyMzQ1WjAYMRYwFAYD VQQDEw02YThkMzRmMi03NmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvj/VRK+4cc7NGDKowAVht20e4SVlJoZjwDmoS7aiFMrLbXPGBei6IryYNVOw aP9/yQlYgyxNMG956DpvDGMqZIJdHNonzxagUZhGIxecdrlLHbPPHPHOJUwYte7S EPA+14rSBWtTr/P6e5HX7/Bud/Ew80D/BAzLRucWVn74AK2g4D+Y3S+BR6+yhFKj QsyIN9XQANCUVJ71ZEme1cGPWm26JwohFvoIugGB0zPEIB5s5Drd1rvMmDngf4jj WXY14g6XPcK7OGHRaDwedzD6Fq6uL0ARPkSkEZw8Hb3oELgJo3LR/NH7c7NKgHRA 1IKtGQrGsu40ktBjzEeOQQhgKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6+voHj GXxQuZiiZH0buRED0SNPMB8GA1UdIwQYMBaAFKtT2ZKBArkZ23xUZcjdX/JmdEOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9EODRFN0JGMjND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VSbmJmRlJseU4xZjhtWjBR N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VS bmJmRlJseU4xZjhtWjBRN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYZvVeGNheq8Ui9foJ3rQYvTNNx2WO7REZ4ikAKlHfNp3pe7rDgnhJNJeChgs 4rZFsRDDbtuKejbLrkBbiof2jp9IeZZjQv/bimmiZwkzXgfupizIBD91L/wVyrfN Aa2gY/cPQ0AFFrQZd7AQqohpGZLEpQ3mzdgxWxH8rSoYlCTuzZ4iDm9S0ZuAAsF6 tIe0UYA6iuwjl/INMqlE9wacV/kK5exMMm0MXeL1U46ksibh08gkmNXhCFtw42cm za1Cftsf+VC3c0XvVwn6yBLNuffdl6wuGUhRO9MaQsfaqPc7Sh092nE4G3BSeBYJ cCddpog8ArO11ZyBJlhbzdDCxA== -----END CERTIFICATE-----Generated at Wed Aug 26 01:01:18 2026 by rpki-client