$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft File: 1QwK07StgdVVlFzH8_HuHB-t5hc.mft (raw, json) Hash identifier: lsy5W4g9pP1mKE601uVkjzHHGtjQVXL+6F4uUAcKS5o= Subject key identifier: 28:32:6B:19:2A:2D:14:4F:30:91:DA:CA:54:3C:D2:EC:78:C3:67:B2 Authority key identifier: D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 Certificate issuer: /CN=A91DB475/serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Certificate serial: 0BFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft Manifest number: 0BED Signing time: Mon 20 Jul 2026 19:15:21 +0000 Manifest this update: Mon 20 Jul 2026 19:15:20 +0000 Manifest next update: Mon 27 Jul 2026 19:15:20 +0000 Files and hashes: 1: 1QwK07StgdVVlFzH8_HuHB-t5hc.crl (hash: P6U2f5tK91yutCU6pGWl9mW8A3WLcPHys/W+Lmbusho=) 2: 74CA44AA049F11F087661234C4F9AE02.roa (hash: wKdTkyyXqkqw4zY6Mort6rY+08KcEGgpc9UUyZvX1D8=) 3: 1E6B12EC049F11F0AD5C7C33C4F9AE02.roa (hash: 52FStysb8y6SSS0DgpkYNnuMyVWPrRkIBtAubJdaP50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3071 (0xbff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB475, serialNumber=D50C0AD3B4AD81D555945CC7F3F1EE1C1FADE617 Validity Not Before: Jul 20 19:15:20 2026 GMT Not After : Jul 27 19:15:20 2026 GMT Subject: CN=6a5e73c9-f5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5a:51:53:03:fe:be:e5:94:da:89:55:c7:89: 24:5f:df:e6:0d:90:8b:b1:fd:42:a1:79:8d:c7:e9: 07:1a:59:36:f0:52:de:20:f6:4b:cb:bc:34:77:19: 31:e7:55:e8:32:d3:d4:0c:1e:cc:32:ba:b0:4a:20: f5:29:ff:e0:5a:bb:3d:0a:56:78:12:35:5d:5c:cc: e1:4d:65:80:9b:06:37:4a:24:10:f9:cb:bb:a5:34: 56:b7:28:84:27:cc:8d:4f:e2:b4:e9:2a:10:50:9f: 8b:6d:4b:3b:55:a8:72:16:de:43:fb:da:96:e9:5b: c5:15:61:04:79:ff:82:13:d9:81:55:f2:a9:23:73: 93:f9:f5:4c:da:e6:ae:43:64:c9:2b:9e:73:28:73: c4:c8:28:fb:98:86:85:b3:93:c5:62:1f:f0:ea:5b: 16:f0:3a:8e:b8:33:ce:40:5f:e0:1c:3d:a0:ef:c7: d2:16:c8:06:14:66:a1:d1:c7:1c:5c:30:d6:1a:b1: ac:38:fa:8b:b2:63:17:a2:67:f1:e9:d2:3f:b3:3d: 4e:5b:0e:63:94:3c:c1:b0:54:93:0d:cd:cd:fa:52: 6e:d6:9b:df:ad:0e:6f:c1:4a:aa:66:6b:c0:11:96: ee:c3:52:96:f4:53:eb:bf:37:8c:30:2c:82:03:23: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:32:6B:19:2A:2D:14:4F:30:91:DA:CA:54:3C:D2:EC:78:C3:67:B2 X509v3 Authority Key Identifier: keyid:D5:0C:0A:D3:B4:AD:81:D5:55:94:5C:C7:F3:F1:EE:1C:1F:AD:E6:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1QwK07StgdVVlFzH8_HuHB-t5hc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB475/208FB730417211EA98A3686DC4F9AE02/1QwK07StgdVVlFzH8_HuHB-t5hc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:db:2d:b3:66:8e:d3:79:f3:a0:02:a1:d5:ab:8a:2a:99:7d: ec:2d:b9:75:a5:88:79:c6:09:11:18:f4:29:82:07:eb:49:0f: 80:17:2d:40:8e:92:8f:9d:db:e0:c7:cd:a3:8f:09:56:85:af: 03:50:05:e9:6a:47:95:2f:ee:29:bc:12:5c:ad:bd:ff:d4:50: 50:7c:7e:99:38:27:d1:b8:18:26:72:9e:af:7d:30:e2:e2:1a: ec:d6:e3:f6:46:9a:c9:d7:59:06:46:f7:a0:5a:4d:59:87:55: d4:c1:a3:61:49:96:10:32:a7:b0:a4:96:db:ba:20:c2:ae:69: 39:69:41:71:a1:7f:78:f3:d3:6d:eb:51:31:8c:be:81:4c:f1: 89:a7:64:4e:83:72:90:ab:49:23:df:73:ca:8f:61:37:31:e8: b3:86:a9:27:70:21:67:46:ba:4b:b3:4b:5b:9f:ef:63:c9:64: 94:67:0c:73:b7:87:c4:a0:75:3e:d9:29:cc:00:e3:d4:b0:33: 00:6f:da:de:6c:a7:65:1c:87:bf:37:ce:cf:8a:e1:da:be:e1: 68:1f:a8:0f:fc:3e:7b:a2:f5:a9:2c:94:3c:ff:50:bf:4d:8f: c7:5c:76:a1:6c:02:cd:05:5b:64:eb:bd:1f:70:76:2a:40:6e: 17:a3:20:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0NzUxMTAvBgNVBAUTKEQ1MEMwQUQzQjRBRDgxRDU1NTk0NUNDN0YzRjFFRTFD MUZBREU2MTcwHhcNMjYwNzIwMTkxNTIwWhcNMjYwNzI3MTkxNTIwWjAYMRYwFAYD VQQDEw02YTVlNzNjOS1mNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslpRUwP+vuWU2olVx4kkX9/mDZCLsf1CoXmNx+kHGlk28FLeIPZLy7w0dxkx 51XoMtPUDB7MMrqwSiD1Kf/gWrs9ClZ4EjVdXMzhTWWAmwY3SiQQ+cu7pTRWtyiE J8yNT+K06SoQUJ+LbUs7VahyFt5D+9qW6VvFFWEEef+CE9mBVfKpI3OT+fVM2uau Q2TJK55zKHPEyCj7mIaFs5PFYh/w6lsW8DqOuDPOQF/gHD2g78fSFsgGFGah0ccc XDDWGrGsOPqLsmMXomfx6dI/sz1OWw5jlDzBsFSTDc3N+lJu1pvfrQ5vwUqqZmvA EZbuw1KW9FPrvzeMMCyCAyNN9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgyaxkq LRRPMJHaylQ80ux4w2eyMB8GA1UdIwQYMBaAFNUMCtO0rYHVVZRcx/Px7hwfreYX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjQ3NS8yMDhGQjczMDQx NzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdkVlZsRnpIOF9IdUhCLXQ1 aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFRd0swN1N0Z2RWVmxGekg4X0h1SEItdDVoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjQ3NS8yMDhGQjczMDQxNzIxMUVBOThBMzY4NkRDNEY5QUUwMi8xUXdLMDdTdGdk VlZsRnpIOF9IdUhCLXQ1aGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFdsts2aO03nzoAKh1auKKpl97C25daWIecYJERj0KYIH60kPgBctQI6Sj53b 4MfNo48JVoWvA1AF6WpHlS/uKbwSXK29/9RQUHx+mTgn0bgYJnKer30w4uIa7Nbj 9kaayddZBkb3oFpNWYdV1MGjYUmWEDKnsKSW27ogwq5pOWlBcaF/ePPTbetRMYy+ gUzxiadkToNykKtJI99zyo9hNzHos4apJ3AhZ0a6S7NLW5/vY8lklGcMc7eHxKB1 PtkpzADj1LAzAG/a3mynZRyHvzfOz4rh2r7haB+oD/w+e6L1qSyUPP9Qv02Px1x2 oWwCzQVbZOu9H3B2KkBuF6MgAA== -----END CERTIFICATE-----Generated at Tue Jul 21 03:37:59 2026 by rpki-client