$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft File: q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft (raw, json) Hash identifier: O7wDVPdu3gq1qo/aG04gT7fzMdrLRkKooIrPN2ugT+U= Subject key identifier: 1F:5A:A0:66:CB:13:DE:31:1A:40:0E:49:41:0C:D9:46:5A:E4:7F:86 Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 Certificate issuer: /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Certificate serial: 03D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft Manifest number: 0CA0 Signing time: Sun 12 Jul 2026 20:20:24 +0000 Manifest this update: Sun 12 Jul 2026 20:20:23 +0000 Manifest next update: Sun 19 Jul 2026 20:20:23 +0000 Files and hashes: 1: q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl (hash: MmLgTT2j+B/XE2upt+0TbvmQaA9fKqUNP5wMhxjJcYo=) 2: 2AD1C746940111F0B07D7068C4F9AE02.roa (hash: AIsLYj1Q0Ri7p3sC6uZCzxYzj0O4+4SA75lfHau1SqU=) 3: 3DD8C628940111F09204AF71C4F9AE02.roa (hash: rKjGeR3bW3KsKLNlokaXVqhFpQOnZispIcGW123rOaY=) 4: FC358296CFA011EDA4AC5B18C4F9AE02.roa (hash: XL/ZcgALP761TCI8hEan3K78GIrb6EiGTeA4Vn2wUJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Jul 2026 18:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 978 (0x3d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76 Validity Not Before: Jul 12 20:20:23 2026 GMT Not After : Jul 19 20:20:23 2026 GMT Subject: CN=6a53f707-ba46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7b:42:59:ad:25:6d:be:ab:c4:4b:92:ec:23: 32:65:f0:8c:f9:35:fc:79:9e:3a:52:42:a8:7c:53: e9:d1:89:7a:66:36:62:46:8d:8c:d6:3f:5a:0d:6f: 3e:c7:95:92:62:4e:d5:f7:46:19:a4:c7:37:e3:88: c9:75:e7:79:2e:6b:a1:03:c4:a1:36:66:6d:e4:66: cb:2f:51:6d:9e:00:fb:48:e5:1c:58:73:fe:c0:9b: c8:3d:5b:84:8a:89:e0:ff:96:2a:e3:fd:79:75:aa: 39:ad:50:05:c2:83:de:e3:1b:cb:d2:71:7a:b1:f4: 6d:e0:18:b3:3e:49:d7:26:2e:d3:83:e2:88:e4:18: 0a:fa:58:c1:9a:78:20:52:63:b6:b8:1f:8d:61:ee: 44:b0:25:32:c4:f2:5d:9e:43:f4:77:37:4a:17:64: 4c:54:df:25:40:de:ea:70:a3:0c:14:b4:2b:86:9d: d2:18:ed:7a:32:d2:90:93:a7:c7:e1:88:b8:16:45: 35:5c:53:4e:85:6d:82:d5:be:d4:49:38:df:f6:32: 7a:bb:1a:e2:42:05:f1:35:b7:ae:33:5d:d1:2c:2f: 2d:96:7f:2a:e6:49:16:55:b6:f0:1e:83:9f:28:78: b3:2e:b9:e2:d0:62:c9:6b:d7:02:0c:4e:5b:3d:34: 6a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5A:A0:66:CB:13:DE:31:1A:40:0E:49:41:0C:D9:46:5A:E4:7F:86 X509v3 Authority Key Identifier: keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:27:a3:9f:61:47:f5:27:1b:42:03:73:85:18:41:a3:2c:a0: ed:e5:e6:a9:ce:7d:ab:bf:da:90:94:51:3c:27:c3:e6:bd:0b: 55:ff:d8:02:61:d8:cb:77:08:66:b5:3f:46:05:e8:26:e2:67: ae:9b:a6:fa:d0:aa:33:83:0a:20:e1:34:11:10:56:a5:fe:1b: d9:d0:09:88:f4:a2:7a:c3:85:cd:fd:67:d3:2f:83:c8:78:c9: 05:93:72:9b:bd:ea:f4:a6:1d:e0:cc:32:41:bb:28:54:02:41: 85:ef:4f:3e:56:b6:03:07:f0:c5:6c:6b:7e:78:4d:34:80:48: 99:c5:b4:ef:2b:5f:56:70:7c:c7:ae:da:70:97:d5:77:0a:11: d6:38:12:f2:85:44:3f:d1:b1:09:d1:a6:d7:34:ea:80:f2:1a: f6:f3:45:4d:d0:4e:7a:7c:ca:7e:a4:98:5e:ab:20:87:f2:1b: 6f:1d:49:7e:36:8e:cd:42:0f:ba:45:9d:7e:cb:62:dc:14:80: 47:09:d1:13:46:30:7f:37:87:4e:d8:6f:41:cb:0a:11:c5:49: 48:b2:5b:06:24:e2:19:b3:9b:cd:11:10:ac:5e:d7:19:52:16: c5:ad:03:96:e0:e0:53:37:49:a6:3a:3e:e8:8b:2a:64:d7:14: 34:18:af:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEFCNjdFODJGQzg2QUFDQTgyQUNGRjhEQzM2NDVDRDcx NjEwMTNGNzYwHhcNMjYwNzEyMjAyMDIzWhcNMjYwNzE5MjAyMDIzWjAYMRYwFAYD VQQDEw02YTUzZjcwNy1iYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXtCWa0lbb6rxEuS7CMyZfCM+TX8eZ46UkKofFPp0Yl6ZjZiRo2M1j9aDW8+ x5WSYk7V90YZpMc344jJded5LmuhA8ShNmZt5GbLL1FtngD7SOUcWHP+wJvIPVuE iong/5Yq4/15dao5rVAFwoPe4xvL0nF6sfRt4BizPknXJi7Tg+KI5BgK+ljBmngg UmO2uB+NYe5EsCUyxPJdnkP0dzdKF2RMVN8lQN7qcKMMFLQrhp3SGO16MtKQk6fH 4Yi4FkU1XFNOhW2C1b7USTjf9jJ6uxriQgXxNbeuM13RLC8tln8q5kkWVbbwHoOf KHizLrni0GLJa9cCDE5bPTRqBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB9aoGbL E94xGkAOSUEM2UZa5H+GMB8GA1UdIwQYMBaAFKtn6C/IaqyoKs/43DZFzXFhAT92 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJLZ3F6X2pjTmtYTmNXRUJQ M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EyZm9MOGhxcktncXpfamNOa1hOY1dFQlAzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9xMmZvTDhocXJL Z3F6X2pjTmtYTmNXRUJQM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVCejn2FH9ScbQgNzhRhBoyyg7eXmqc59q7/akJRRPCfD5r0LVf/YAmHYy3cI ZrU/RgXoJuJnrpum+tCqM4MKIOE0ERBWpf4b2dAJiPSiesOFzf1n0y+DyHjJBZNy m73q9KYd4MwyQbsoVAJBhe9PPla2AwfwxWxrfnhNNIBImcW07ytfVnB8x67acJfV dwoR1jgS8oVEP9GxCdGm1zTqgPIa9vNFTdBOenzKfqSYXqsgh/Ibbx1JfjaOzUIP ukWdfsti3BSARwnRE0YwfzeHTthvQcsKEcVJSLJbBiTiGbObzREQrF7XGVIWxa0D luDgUzdJpjo+6IsqZNcUNBiv+w== -----END CERTIFICATE-----Generated at Sun Jul 12 22:34:55 2026 by rpki-client