$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft File: Qql4rYPdXtKaTl3bYbVvExelpaQ.mft (raw, json) Hash identifier: jLm8Dhppup/g9shU6qMnfiSr7MhLQplzGwu1VqWWVlc= Subject key identifier: A0:2C:77:A4:44:E3:06:98:DC:0E:39:60:D1:3C:E7:B9:47:53:9C:D3 Authority key identifier: 42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 Certificate issuer: /CN=A91D4803/serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft Manifest number: 061B Signing time: Tue 18 Aug 2026 23:10:08 +0000 Manifest this update: Tue 18 Aug 2026 23:10:07 +0000 Manifest next update: Tue 25 Aug 2026 23:10:07 +0000 Files and hashes: 1: Qql4rYPdXtKaTl3bYbVvExelpaQ.crl (hash: vyY/bE2R2rmXsdqi4asFSHzZSvwq+Qk0SSeuWrwrpas=) 2: 2B1B8C92F9E511EBBB9B5D22C4F9AE02.roa (hash: XNmP7Zo2Gu2ysZZkwdUo+plqL0kQKyZ4CkwaD9acTw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Aug 2026 23:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4803, serialNumber=42A978AD83DD5ED29A4E5DDB61B56F1317A5A5A4 Validity Not Before: Aug 18 23:10:07 2026 GMT Not After : Aug 25 23:10:07 2026 GMT Subject: CN=6a84e64f-baa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:c3:a5:dd:35:1e:23:19:39:91:a8:50:6c: fe:70:e2:a1:d8:d6:e7:95:a6:1b:de:7d:eb:be:3a: 58:07:7f:b6:01:68:de:0b:1b:cb:22:f3:9c:2f:26: 2f:ce:70:cb:e6:94:b4:b6:8d:ab:51:e0:5c:90:fe: 40:f8:24:91:c5:94:8e:68:36:3c:99:89:a3:f9:a9: 8a:92:33:df:7a:1d:b2:7f:b6:30:23:f4:a0:39:81: 9d:5c:20:a7:2d:3a:ec:20:61:f7:74:dd:24:18:1b: dc:7f:34:a9:c2:2c:2d:ff:72:ae:15:d6:00:f0:3a: b8:8a:96:02:ec:83:06:d4:b2:14:26:f8:87:5d:b0: dd:c4:a6:21:b4:58:75:be:e7:76:52:f2:d7:fc:3c: f5:e8:f5:1d:60:02:3e:4b:e6:f4:ff:13:e7:06:25: 34:61:26:56:45:09:26:42:b3:a1:d9:5f:cf:a5:4a: 0c:38:67:3a:71:be:8b:9d:f2:04:3b:0b:56:95:fe: 29:68:30:82:52:83:af:bf:43:0a:74:d5:c4:fe:bb: 21:bc:a8:4b:35:e4:b4:aa:ea:be:9e:57:92:36:fc: 51:0b:cc:95:7a:3a:72:b1:62:3b:c3:90:84:72:a6: 1d:3e:64:ae:bc:22:ed:f5:1e:50:2e:d3:3e:af:78: 16:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:77:A4:44:E3:06:98:DC:0E:39:60:D1:3C:E7:B9:47:53:9C:D3 X509v3 Authority Key Identifier: keyid:42:A9:78:AD:83:DD:5E:D2:9A:4E:5D:DB:61:B5:6F:13:17:A5:A5:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qql4rYPdXtKaTl3bYbVvExelpaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4803/80F034BEF9E111EBA32CE21BC4F9AE02/Qql4rYPdXtKaTl3bYbVvExelpaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:fb:0a:94:13:3d:2b:bf:f1:7f:9e:5c:a3:2b:67:cf:c5:74: e9:5f:8e:61:a7:cf:7e:a6:59:ce:6b:e5:fd:8b:05:c3:b9:89: c9:76:15:22:d5:6d:a3:2b:28:02:9b:e5:72:5f:7d:ce:5b:50: 72:76:e8:fd:8f:d3:ec:86:52:fa:46:7c:91:8e:43:a3:d2:ea: 31:c5:cf:c0:a8:98:c8:d9:82:21:d9:b4:8d:fa:00:da:36:2a: 12:bb:46:2a:9b:ff:7b:c9:ac:47:57:3d:d5:05:e9:67:9b:47: 61:5c:03:22:d9:38:42:9e:ba:75:84:7e:09:2a:04:73:25:60: 9c:b6:58:43:9e:4e:ed:4b:50:48:07:dd:ff:33:e7:98:71:55: 08:0d:71:40:a8:1b:9f:c9:62:c5:31:d4:22:6a:4b:6a:ad:b6: 47:b3:90:02:d7:70:a1:8a:40:99:17:59:a5:f2:42:86:eb:9a: 7a:0c:9e:32:7f:ca:b5:c1:d2:3e:a5:a6:4c:46:61:24:cb:5a: c9:c4:8d:70:fe:46:e8:e7:49:96:04:c9:4a:e7:e6:87:7f:26: 59:10:3c:e6:60:97:dc:35:37:95:e0:b0:64:7d:28:68:f6:b0: fa:e4:f6:35:51:03:59:a6:b6:46:a3:a0:99:09:9b:ae:45:00: f3:da:d6:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MDMxMTAvBgNVBAUTKDQyQTk3OEFEODNERDVFRDI5QTRFNUREQjYxQjU2RjEz MTdBNUE1QTQwHhcNMjYwODE4MjMxMDA3WhcNMjYwODI1MjMxMDA3WjAYMRYwFAYD VQQDEw02YTg0ZTY0Zi1iYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCvDpd01HiMZOZGoUGz+cOKh2NbnlaYb3n3rvjpYB3+2AWjeCxvLIvOcLyYv znDL5pS0to2rUeBckP5A+CSRxZSOaDY8mYmj+amKkjPfeh2yf7YwI/SgOYGdXCCn LTrsIGH3dN0kGBvcfzSpwiwt/3KuFdYA8Dq4ipYC7IMG1LIUJviHXbDdxKYhtFh1 vud2UvLX/Dz16PUdYAI+S+b0/xPnBiU0YSZWRQkmQrOh2V/PpUoMOGc6cb6LnfIE OwtWlf4paDCCUoOvv0MKdNXE/rshvKhLNeS0quq+nleSNvxRC8yVejpysWI7w5CE cqYdPmSuvCLt9R5QLtM+r3gWVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAsd6RE 4waY3A45YNE857lHU5zTMB8GA1UdIwQYMBaAFEKpeK2D3V7Smk5d22G1bxMXpaWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgwMy84MEYwMzRCRUY5 RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0S2FUbDNiWWJWdkV4ZWxw YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FxbDRyWVBkWHRLYVRsM2JZYlZ2RXhlbHBhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgwMy84MEYwMzRCRUY5RTExMUVCQTMyQ0UyMUJDNEY5QUUwMi9RcWw0cllQZFh0 S2FUbDNiWWJWdkV4ZWxwYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxPsKlBM9K7/xf55coytnz8V06V+OYafPfqZZzmvl/YsFw7mJyXYVItVtoyso Apvlcl99zltQcnbo/Y/T7IZS+kZ8kY5Do9LqMcXPwKiYyNmCIdm0jfoA2jYqErtG Kpv/e8msR1c91QXpZ5tHYVwDItk4Qp66dYR+CSoEcyVgnLZYQ55O7UtQSAfd/zPn mHFVCA1xQKgbn8lixTHUImpLaq22R7OQAtdwoYpAmRdZpfJChuuaegyeMn/KtcHS PqWmTEZhJMtaycSNcP5G6OdJlgTJSufmh38mWRA85mCX3DU3leCwZH0oaPaw+uT2 NVEDWaa2RqOgmQmbrkUA89rWlw== -----END CERTIFICATE-----Generated at Wed Aug 19 14:28:25 2026 by rpki-client