$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: cEb54u9N5GouKa/KULvixhqHPWjUnYVTO7PEFiRAOkQ= Subject key identifier: F9:91:F9:D1:E1:CF:DB:6E:8E:54:A0:39:FB:71:BB:1C:26:1F:2E:86 Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 058C Signing time: Thu 23 Jul 2026 00:04:24 +0000 Manifest this update: Thu 23 Jul 2026 00:04:23 +0000 Manifest next update: Thu 30 Jul 2026 00:04:23 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: wwoXTOLQyrVnbrYp4ErvPM/wcCzIyKOkF5js15TYcx8=) 2: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: ly19W/Muv8BDmpRPmS2Fe3o0q7TToeFH9ObD8f2QW9g=) 3: 1295B5943FA611EF94664041C4F9AE02.roa (hash: hapzzVKt9oxlCLEwYHK4MTLp4PI8BfiasqodqBtyfb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: Jul 23 00:04:23 2026 GMT Not After : Jul 30 00:04:23 2026 GMT Subject: CN=6a615a88-66fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:66:57:84:4f:14:6f:75:84:a3:e0:dc:b7: a9:ce:93:2d:9a:53:d1:bb:20:68:fd:37:ce:7e:f4: a3:42:f1:66:48:1e:c8:01:ab:d9:8e:cf:d3:ba:a9: 38:d4:32:cf:52:02:56:68:a3:1e:64:ac:ea:9a:04: ae:9f:6e:fd:8f:37:26:c4:77:67:88:41:8e:6c:65: 2b:c6:f6:69:23:f3:56:a7:3b:3a:e8:e9:d4:e1:49: 79:70:49:3a:80:c3:ed:c6:87:d3:df:47:67:4e:50: 5f:db:67:41:bb:3d:e0:f0:a5:df:d4:ae:17:54:3b: 81:08:c8:e9:71:96:33:3f:01:c5:18:ef:b0:66:fb: 4d:04:17:aa:57:ab:63:3e:cd:a4:55:62:78:a2:36: a1:48:5d:15:bf:1d:70:65:ba:29:ee:e9:73:d1:cb: d1:a1:76:48:4b:8f:32:fb:b8:e3:99:e8:22:3a:c5: 0d:d8:25:d0:61:2b:91:b7:5b:dd:ab:49:c0:38:8b: 7b:4b:c2:05:0b:f4:dc:e5:f8:e9:36:0f:ef:77:5f: a1:9b:7b:2d:a5:b3:91:f0:52:5b:38:89:6e:b4:4b: 48:9e:bc:cb:f8:52:52:85:49:9b:2b:05:a7:1f:10: 1b:62:69:91:aa:d7:3f:5e:b1:8b:a4:58:c4:78:48: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:91:F9:D1:E1:CF:DB:6E:8E:54:A0:39:FB:71:BB:1C:26:1F:2E:86 X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f7:e4:10:2d:8b:e0:bf:07:7a:30:3a:fe:ee:ae:d0:7d:02: c0:df:a9:3d:2b:71:4d:99:5f:7c:f7:48:19:74:df:c6:06:80: a9:3f:31:1f:63:97:e0:ca:07:93:a9:98:0c:a0:8e:7d:66:70: 76:58:06:a1:c5:a2:2c:f9:52:a3:49:12:47:a6:6e:76:9f:57: 55:ce:e0:d7:42:71:eb:45:96:f3:07:d0:5f:ae:14:32:07:31: c6:7a:b8:c5:de:f8:c8:6d:bb:55:01:7d:43:d3:7e:0a:60:db: 70:c7:d7:4a:9f:ca:dc:f0:86:35:86:c3:f4:d1:fc:bf:d4:9d: 9f:9f:61:cc:90:b9:50:e8:fb:4f:73:ef:49:db:1b:44:ee:01: 15:80:c1:e5:8c:ae:b0:8a:b0:b3:b6:20:83:38:f8:b8:91:38: d8:27:1d:32:4e:5a:77:8e:87:ea:5f:cf:57:17:d3:24:6e:10: 99:b1:41:de:78:c4:1a:f4:d6:ec:40:e2:bc:05:f5:b4:29:df: 88:7e:ec:4c:c4:04:a5:2c:f1:cc:ef:b3:bc:fd:98:c1:c2:d1: e7:7e:3e:7c:5f:d4:5d:d3:fb:d3:d9:b5:5d:f1:f2:2a:bf:54: c4:b7:b8:39:3d:c6:7b:81:dd:7e:12:e1:6a:ec:cf:dd:82:c0: 7c:22:b5:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjYwNzIzMDAwNDIzWhcNMjYwNzMwMDAwNDIzWjAYMRYwFAYD VQQDEw02YTYxNWE4OC02NmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoThmV4RPFG91hKPg3LepzpMtmlPRuyBo/TfOfvSjQvFmSB7IAavZjs/Tuqk4 1DLPUgJWaKMeZKzqmgSun279jzcmxHdniEGObGUrxvZpI/NWpzs66OnU4Ul5cEk6 gMPtxofT30dnTlBf22dBuz3g8KXf1K4XVDuBCMjpcZYzPwHFGO+wZvtNBBeqV6tj Ps2kVWJ4ojahSF0Vvx1wZbop7ulz0cvRoXZIS48y+7jjmegiOsUN2CXQYSuRt1vd q0nAOIt7S8IFC/Tc5fjpNg/vd1+hm3stpbOR8FJbOIlutEtInrzL+FJShUmbKwWn HxAbYmmRqtc/XrGLpFjEeEhgFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmR+dHh z9tujlSgOftxuxwmHy6GMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKvfkEC2L4L8HejA6/u6u0H0CwN+pPStxTZlffPdIGXTfxgaAqT8xH2OX4MoH k6mYDKCOfWZwdlgGocWiLPlSo0kSR6Zudp9XVc7g10Jx60WW8wfQX64UMgcxxnq4 xd74yG27VQF9Q9N+CmDbcMfXSp/K3PCGNYbD9NH8v9Sdn59hzJC5UOj7T3PvSdsb RO4BFYDB5YyusIqws7Yggzj4uJE42CcdMk5ad46H6l/PVxfTJG4QmbFB3njEGvTW 7EDivAX1tCnfiH7sTMQEpSzxzO+zvP2YwcLR534+fF/UXdP709m1XfHyKr9UxLe4 OT3Ge4HdfhLhauzP3YLAfCK1/Q== -----END CERTIFICATE-----Generated at Thu Jul 23 21:32:49 2026 by rpki-client