$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft File: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft (raw, json) Hash identifier: eMdDkRLcXGaxGlg42aMjLjL/9UGduAUdLwZDT9hxsHQ= Subject key identifier: 72:C6:02:F4:89:E0:6D:73:34:07:B6:AB:BC:0E:EC:DF:05:9C:10:19 Authority key identifier: AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 Certificate issuer: /CN=A91C7E5B/serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft Manifest number: DC Signing time: Thu 09 Jul 2026 08:41:23 +0000 Manifest this update: Thu 09 Jul 2026 08:41:22 +0000 Manifest next update: Thu 16 Jul 2026 08:41:22 +0000 Files and hashes: 1: q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl (hash: 6pcRsDMKKnMEMjijCcx7Gs3RPDM5PYuT7aewGTAcxAY=) 2: C3DCFE54EB2911F0BD7173483B6F56BC.roa (hash: GRUkISuSjrdPycV7YoKPvCtNvhdJEKU1KQQr0iDkDpg=) 3: 1FC17CE2EB2D11F0971959663D6F56BC.roa (hash: w/3re6+mcHn3z7mWQlt9gMEkLcEqozWFLvA0qzfndLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 16 Jul 2026 08:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7E5B, serialNumber=AB53D9928102B919DB7C5465C8DD5FF2667443B3 Validity Not Before: Jul 9 08:41:22 2026 GMT Not After : Jul 16 08:41:22 2026 GMT Subject: CN=6a4f5eb3-28c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:74:9f:5a:95:29:c0:3c:f2:9f:24:d7:dd:bf: 97:2a:20:cf:f1:48:2f:55:8e:38:ea:d8:0f:59:a9: 50:c9:36:0f:41:26:a0:f6:c9:28:18:b5:dd:ee:34: 25:26:71:e3:f1:db:f3:11:db:0d:81:59:cc:a6:a3: b8:23:d0:04:b8:68:e4:8b:24:dc:0e:b1:26:54:26: 3f:44:bf:32:84:26:85:00:9a:80:fa:e7:51:bb:9a: c0:4e:70:d6:c3:dd:f5:e6:98:f1:eb:15:bf:6f:93: 89:98:db:db:4b:2c:6f:8c:42:cb:6d:11:43:bc:81: f2:76:fa:bf:7e:96:23:42:be:86:b0:58:63:2d:6d: 06:77:c1:03:4d:f9:23:e5:1b:d1:eb:76:f4:ad:f9: 2a:ca:7b:05:e8:97:5f:44:32:e0:75:68:9d:98:01: 55:db:84:3a:a2:97:f0:05:5c:d6:a3:2e:e5:9b:6b: 0c:cd:4d:9e:f2:07:d8:f1:ad:a6:80:73:75:39:63: c2:1b:bb:b9:86:48:09:65:5d:cf:29:c6:5a:b2:ef: 85:0f:56:3c:6e:59:4d:08:47:03:97:d9:31:a8:24: f7:b2:a1:67:74:44:69:72:9f:67:15:19:fb:b0:e7: 21:bb:d4:a8:9a:24:43:c3:ad:7f:0a:33:ec:d2:00: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C6:02:F4:89:E0:6D:73:34:07:B6:AB:BC:0E:EC:DF:05:9C:10:19 X509v3 Authority Key Identifier: keyid:AB:53:D9:92:81:02:B9:19:DB:7C:54:65:C8:DD:5F:F2:66:74:43:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7E5B/D84E7BF23C6E11F09D76A24DC4F9AE02/q1PZkoECuRnbfFRlyN1f8mZ0Q7M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:56:89:87:38:3f:e2:09:bd:9e:9c:23:3e:8a:44:a4:f6:c3: 01:36:ce:3a:b0:6b:a5:21:54:80:77:e4:46:72:62:95:dc:7f: a7:d8:cf:bf:2b:c5:1d:1d:7b:7e:10:f4:98:ac:1a:83:c8:01: 99:20:cd:6a:af:5e:85:41:96:1d:10:5d:b5:f5:ec:3d:5c:0f: 64:0e:87:5b:b9:d5:5f:40:d3:b0:df:10:10:3d:6c:1e:dc:df: 54:e9:eb:ca:29:e3:1b:8b:76:3c:c4:50:15:bb:12:1d:28:e7: bb:c2:77:39:5b:e8:56:0e:17:bc:00:95:92:7f:0b:1e:3a:96: 84:57:7e:ce:92:31:82:20:d7:4d:7f:45:86:99:78:3a:18:9d: f1:8b:1e:d6:ed:50:7c:1d:e8:7d:52:ba:3b:f0:0e:2f:d9:44: 6c:86:11:f2:9d:64:f2:c4:12:47:bf:0d:c9:30:45:65:1c:40: c2:a3:98:d6:7a:67:e9:b1:f0:b4:7f:2e:76:23:72:1e:ed:cd: 1a:99:88:ac:d5:b3:02:ae:f9:cf:36:83:b5:9a:ba:a5:8f:bf: c9:c1:6a:4b:b1:44:b5:ff:89:61:83:4f:e5:ef:67:f0:4e:2c: b8:b3:ba:66:b0:2a:48:db:6c:aa:0d:e0:d0:b8:44:95:ce:44: 2f:bb:29:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdFNUIxMTAvBgNVBAUTKEFCNTNEOTkyODEwMkI5MTlEQjdDNTQ2NUM4REQ1RkYy NjY3NDQzQjMwHhcNMjYwNzA5MDg0MTIyWhcNMjYwNzE2MDg0MTIyWjAYMRYwFAYD VQQDEw02YTRmNWViMy0yOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynSfWpUpwDzynyTX3b+XKiDP8UgvVY446tgPWalQyTYPQSag9skoGLXd7jQl JnHj8dvzEdsNgVnMpqO4I9AEuGjkiyTcDrEmVCY/RL8yhCaFAJqA+udRu5rATnDW w9315pjx6xW/b5OJmNvbSyxvjELLbRFDvIHydvq/fpYjQr6GsFhjLW0Gd8EDTfkj 5RvR63b0rfkqynsF6JdfRDLgdWidmAFV24Q6opfwBVzWoy7lm2sMzU2e8gfY8a2m gHN1OWPCG7u5hkgJZV3PKcZasu+FD1Y8bllNCEcDl9kxqCT3sqFndERpcp9nFRn7 sOchu9SomiRDw61/CjPs0gD1ywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLGAvSJ 4G1zNAe2q7wO7N8FnBAZMB8GA1UdIwQYMBaAFKtT2ZKBArkZ23xUZcjdX/JmdEOz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0U1Qi9EODRFN0JGMjND NkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VSbmJmRlJseU4xZjhtWjBR N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3ExUFprb0VDdVJuYmZGUmx5TjFmOG1aMFE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0U1Qi9EODRFN0JGMjNDNkUxMUYwOUQ3NkEyNERDNEY5QUUwMi9xMVBaa29FQ3VS bmJmRlJseU4xZjhtWjBRN00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt1aJhzg/4gm9npwjPopEpPbDATbOOrBrpSFUgHfkRnJildx/p9jPvyvFHR17 fhD0mKwag8gBmSDNaq9ehUGWHRBdtfXsPVwPZA6HW7nVX0DTsN8QED1sHtzfVOnr yinjG4t2PMRQFbsSHSjnu8J3OVvoVg4XvACVkn8LHjqWhFd+zpIxgiDXTX9Fhpl4 Ohid8Yse1u1QfB3ofVK6O/AOL9lEbIYR8p1k8sQSR78NyTBFZRxAwqOY1npn6bHw tH8udiNyHu3NGpmIrNWzAq75zzaDtZq6pY+/ycFqS7FEtf+JYYNP5e9n8E4suLO6 ZrAqSNtsqg3g0LhElc5EL7spUQ== -----END CERTIFICATE-----Generated at Fri Jul 10 20:36:25 2026 by rpki-client