$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft File: q2JivH0C7BrUi3HamLc9IqNi2vA.mft (raw, json) Hash identifier: +nA0JXb8rN2EQigG0qu/mP/PKL4cNBCOfTyG8jMin0I= Subject key identifier: 9A:F2:20:DB:00:18:77:D9:84:35:6A:94:0F:E3:E8:3E:0B:D2:47:63 Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 36F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft Manifest number: 3608 Signing time: Mon 20 Jul 2026 14:30:09 +0000 Manifest this update: Mon 20 Jul 2026 14:30:08 +0000 Manifest next update: Mon 27 Jul 2026 14:30:08 +0000 Files and hashes: 1: q2JivH0C7BrUi3HamLc9IqNi2vA.crl (hash: boEKycmv/NVvszfaZ8xpkfuHK9ziqOqAoO4hq7sRMSM=) 2: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (hash: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk=) 3: 4C9925F2A4C911E782854F50C4F9AE02.roa (hash: NUP0co51SrQ7MBIOUbm3rcePgeq0Qam5xEhiKSlEwl4=) 4: 4D5247EEA4C911E782854F50C4F9AE02.roa (hash: rEfB0wTEVedizbjd1aa4stNP7Lpi5g6RaGy1a4umZiM=) 5: D4B25B928C6B11F09545B981C4F9AE02.roa (hash: Vuo+8i5V4Znap+Qs1dOcHdE1nAFejMLQYP5EDIvQcjU=) 6: 78123422B0CD11E58B55FC73C4F9AE02.roa (hash: w/xkPDWtvjzhfQW3Zf8fDbO/CqBdGqSzN3GtrP1PUo8=) 7: F1F087928C6B11F0B1A50E82C4F9AE02.roa (hash: kuzwCvIHtKelM7oshMzAb2U462l4e0HmxA10PXja6PA=) 8: 7B938024B0CD11E58B55FC73C4F9AE02.roa (hash: /QQiHNO+P4zS7clMch+1xG2dmlltL/7vNQJGue0Q24E=) 9: 7F4D30ACB0CD11E58B55FC73C4F9AE02.roa (hash: N79DDK5pn6TCAon8GJdsX02x5/pCsRg1kmXulJOa3DU=) 10: 9C193BAC08C511EDBC862E48C4F9AE02.roa (hash: SJVE7ZBsoRSsliTmJf9TKg9PsayamV5jFN7WqlX3xvc=) 11: 8207CCA0906C11EC86E8B711C4F9AE02.roa (hash: HGBUZghw2mrH37viSTYGdL7UxbtP3kpsrCzGnWhLnVU=) 12: 4BF67550A4C911E782854F50C4F9AE02.roa (hash: f3qU6tlwehhcmw+j9t9F4SExzXSKSjEABu7b7Oi3kuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14070 (0x36f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Jul 20 14:30:08 2026 GMT Not After : Jul 27 14:30:08 2026 GMT Subject: CN=6a5e30f0-796d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:4a:ab:a2:ba:2f:9d:3c:f0:40:26:d4:23: 78:31:52:df:5e:b7:00:da:af:c1:a0:a7:39:c2:84: 90:9f:79:a3:59:e9:cc:90:91:7b:1c:3d:81:bf:38: 3b:21:ea:11:df:64:34:88:0e:43:10:ed:d3:c3:3c: 53:c5:41:2d:0d:d5:3a:91:cf:cf:50:2c:2f:3e:36: 14:ef:28:0c:14:14:53:e8:14:cf:60:04:45:40:51: 30:e3:1a:d1:ee:9b:f6:42:42:39:6f:40:99:44:0a: d2:9a:d8:6d:c3:43:aa:47:d4:e5:a3:fd:d7:17:bb: 04:e6:ba:7f:52:fc:ec:8c:71:f9:eb:68:00:05:27: 31:4a:9b:29:1f:9f:3b:53:59:5e:c5:ea:56:0f:b7: 5e:9c:fe:3c:af:6a:fc:c2:26:db:f3:c9:e0:be:88: c9:ac:85:c1:6f:95:20:a1:6d:de:05:90:18:dd:11: c3:e2:9d:4b:ba:32:61:66:8d:68:00:e7:ae:ac:b8: 9d:6b:a7:1a:f9:98:3a:92:2c:ca:97:28:55:26:bc: 7c:8b:db:5e:a2:50:73:6b:6a:b0:4b:dc:2a:bd:6b: 03:2a:72:82:49:0c:ec:a3:15:e5:20:99:09:83:48: 0a:8a:a8:0a:e4:76:4c:15:c0:9f:54:21:0a:1b:8c: af:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F2:20:DB:00:18:77:D9:84:35:6A:94:0F:E3:E8:3E:0B:D2:47:63 X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:79:d1:45:07:01:1a:8c:38:bb:7e:14:df:0b:c9:9d:47:06: dd:e8:dc:38:6c:3c:fd:7a:aa:bc:ff:5c:e3:46:b0:ad:39:55: 40:09:d1:4e:89:17:7d:c6:73:00:59:2e:e5:a5:60:90:5d:b7: f4:39:fc:3a:a9:83:ae:94:88:ad:d9:2e:5b:4c:e9:57:28:62: 76:5e:13:1f:65:32:a9:8b:78:d6:d2:a4:a6:96:bd:b4:71:00: e0:26:62:ab:e7:af:4e:14:33:d6:56:a8:ac:94:5d:d4:32:5b: 44:b6:c3:8a:d5:c7:a4:12:34:45:57:f3:85:83:c0:56:fe:37: 5b:53:72:d2:2f:b4:01:54:0e:af:04:be:ca:af:16:67:a0:96: 88:09:41:d1:8f:3a:28:cb:b9:bf:3a:b3:45:c1:3d:67:ed:69: 9b:ff:6b:e9:cd:97:42:ee:f8:87:13:c5:36:9a:5f:8c:07:e5: 6a:5a:76:fa:1d:0a:9d:f9:8a:d0:b6:90:bd:4d:de:19:9d:fc: f1:6f:8e:55:fb:41:1f:c0:9d:2f:db:e1:14:b3:5b:14:a3:d8: 57:7b:57:d6:bc:46:6a:7d:98:e7:d2:a6:9c:cc:a2:0a:26:b7: d3:0d:cb:17:d8:e7:00:b3:1b:39:0d:37:db:28:2e:c2:ee:e3: 13:b9:ef:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjYwNzIwMTQzMDA4WhcNMjYwNzI3MTQzMDA4WjAYMRYwFAYD VQQDEw02YTVlMzBmMC03OTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2r5Kq6K6L5088EAm1CN4MVLfXrcA2q/BoKc5woSQn3mjWenMkJF7HD2Bvzg7 IeoR32Q0iA5DEO3TwzxTxUEtDdU6kc/PUCwvPjYU7ygMFBRT6BTPYARFQFEw4xrR 7pv2QkI5b0CZRArSmthtw0OqR9Tlo/3XF7sE5rp/UvzsjHH562gABScxSpspH587 U1lexepWD7denP48r2r8wibb88ngvojJrIXBb5UgoW3eBZAY3RHD4p1LujJhZo1o AOeurLida6ca+Zg6kizKlyhVJrx8i9teolBza2qwS9wqvWsDKnKCSQzsoxXlIJkJ g0gKiqgK5HZMFcCfVCEKG4yv7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJryINsA GHfZhDVqlA/j6D4L0kdjMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjQ1NC9ENEMzMEI0MjFEODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdC clVpM0hhbUxjOUlxTmkydkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeHnRRQcBGow4u34U3wvJnUcG3ejcOGw8/XqqvP9c40awrTlVQAnRTokXfcZz AFku5aVgkF239Dn8OqmDrpSIrdkuW0zpVyhidl4TH2UyqYt41tKkppa9tHEA4CZi q+evThQz1laorJRd1DJbRLbDitXHpBI0RVfzhYPAVv43W1Ny0i+0AVQOrwS+yq8W Z6CWiAlB0Y86KMu5vzqzRcE9Z+1pm/9r6c2XQu74hxPFNppfjAflalp2+h0KnfmK 0LaQvU3eGZ388W+OVftBH8CdL9vhFLNbFKPYV3tX1rxGan2Y59KmnMyiCia30w3L F9jnALMbOQ032yguwu7jE7nvzA== -----END CERTIFICATE-----Generated at Tue Jul 21 23:16:12 2026 by rpki-client