$ rpki-client -vvf rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft File: 45B7SOaYfi_fztAe0B1As_Y9sRg.mft (raw, json) Hash identifier: oaS5TnwskxwAHZ9DQgZ8jH118B+RVrJ8e9HqFkEtZkk= Subject key identifier: 10:A4:B3:EA:0D:41:AC:7E:EC:DA:DA:42:A3:9C:19:CF:F1:D6:69:1B Authority key identifier: E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 Certificate issuer: /CN=A91297A2/serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft Manifest number: 0210 Signing time: Thu 23 Jul 2026 04:20:56 +0000 Manifest this update: Thu 23 Jul 2026 04:20:55 +0000 Manifest next update: Thu 30 Jul 2026 04:20:55 +0000 Files and hashes: 1: 45B7SOaYfi_fztAe0B1As_Y9sRg.crl (hash: rp9JBjNSqmhkASZSq1z+CqyNfoRVuiKl1ds/ud2Xw0M=) 2: B08503D8F8AA11EE91684140C4F9AE02.roa (hash: ViCudgIPygezvAtMJaZKmsZPceBqOw4Pvj8wkwoWduE=) 3: 624C3E865DB011F0875D570FC4F9AE02.roa (hash: vugsK16sJjvSr8OK0LSYKyoQkwn8bb1O/z7sIhYr5Cs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91297A2, serialNumber=E3907B48E6987E2FDFCED01ED01D40B3F63DB118 Validity Not Before: Jul 23 04:20:55 2026 GMT Not After : Jul 30 04:20:55 2026 GMT Subject: CN=6a6196a8-6dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:db:49:55:75:10:7d:b3:70:f7:bb:f6:fc: f8:06:ed:e1:66:4a:5d:38:68:5a:a0:05:11:be:07: 8e:ec:83:59:58:05:f3:80:c6:2a:4c:4d:e6:aa:74: 17:74:0a:66:14:76:a4:e3:08:3a:e5:89:ff:55:2f: 27:9f:a9:82:83:54:c4:96:43:79:40:8a:8d:ef:42: 56:c1:72:c1:d8:e4:89:6a:2f:e7:0d:f6:fa:8f:4d: 35:f8:59:49:a2:a7:7e:f7:d2:81:ee:24:6c:62:94: a7:3d:4f:e6:b1:31:76:bb:ed:ea:a6:70:50:dc:c9: 01:23:10:bb:e5:16:e3:32:fb:19:02:53:f3:7b:e0: aa:c2:b4:82:25:48:0b:3e:98:29:3d:b6:cf:19:23: 11:30:aa:81:e8:58:f5:ae:e9:87:61:00:3d:14:cb: 8c:6d:22:10:3e:07:5b:ca:5c:bf:f2:29:2f:4b:40: 6c:3a:96:f9:44:97:0a:4b:61:57:3a:2d:35:49:36: f5:47:4f:ba:6c:d0:9a:2f:cc:36:d3:b9:98:50:72: 18:a2:1c:cc:c8:cb:b4:b1:20:b2:fc:88:a0:1f:fb: df:eb:6a:90:a8:08:18:71:09:81:00:4f:3a:0c:56: 6c:0e:12:62:99:6f:7c:2e:ea:cf:4b:da:d2:9b:63: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A4:B3:EA:0D:41:AC:7E:EC:DA:DA:42:A3:9C:19:CF:F1:D6:69:1B X509v3 Authority Key Identifier: keyid:E3:90:7B:48:E6:98:7E:2F:DF:CE:D0:1E:D0:1D:40:B3:F6:3D:B1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45B7SOaYfi_fztAe0B1As_Y9sRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91297A2/B3DFC8846D6211EEB307CE19C4F9AE02/45B7SOaYfi_fztAe0B1As_Y9sRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:e1:e7:33:64:e7:38:47:f0:d1:10:98:3b:01:00:8f:52:0c: fa:0a:51:eb:10:9d:63:6d:00:32:41:74:54:7e:b7:b1:99:42: 9d:07:29:b9:84:65:e0:b9:83:fa:d7:c8:73:02:72:ce:91:cf: 4d:80:ee:ab:ae:5b:bb:98:11:e4:e8:8b:ec:94:84:b6:6f:93: 17:52:10:75:e9:f5:44:6b:97:e5:e4:7c:22:81:44:b5:01:b2: 62:02:ee:88:87:f5:b4:6d:79:41:14:99:f2:fb:eb:eb:f1:a7: 95:65:10:6f:d9:ce:59:e3:ff:b3:5e:a0:01:05:80:01:81:e4: 0e:38:e8:63:0a:90:4c:17:9b:b5:a9:06:2c:ba:f9:87:a7:48: e3:1f:3a:03:50:d8:0c:a9:5c:e0:ef:22:0a:c7:8e:a6:09:a5: b3:57:82:78:6e:98:67:69:71:f8:ae:3a:16:5f:51:a5:4d:34: da:d0:a3:90:2c:7a:4a:94:7b:b4:81:85:5d:e1:e9:66:2f:06: 8f:7e:d2:41:39:ae:fe:a4:c0:ae:fb:7a:b6:5f:74:a7:be:6c: 22:34:64:09:fd:4f:2a:ea:2c:58:90:2b:4c:e4:eb:7b:58:11: a1:2a:9b:b2:93:3b:17:77:6b:07:7a:52:40:91:9f:f6:ab:9c: e0:99:ea:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3QTIxMTAvBgNVBAUTKEUzOTA3QjQ4RTY5ODdFMkZERkNFRDAxRUQwMUQ0MEIz RjYzREIxMTgwHhcNMjYwNzIzMDQyMDU1WhcNMjYwNzMwMDQyMDU1WjAYMRYwFAYD VQQDEw02YTYxOTZhOC02ZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7XbSVV1EH2zcPe79vz4Bu3hZkpdOGhaoAURvgeO7INZWAXzgMYqTE3mqnQX dApmFHak4wg65Yn/VS8nn6mCg1TElkN5QIqN70JWwXLB2OSJai/nDfb6j001+FlJ oqd+99KB7iRsYpSnPU/msTF2u+3qpnBQ3MkBIxC75RbjMvsZAlPze+CqwrSCJUgL PpgpPbbPGSMRMKqB6Fj1rumHYQA9FMuMbSIQPgdbyly/8ikvS0BsOpb5RJcKS2FX Oi01STb1R0+6bNCaL8w207mYUHIYohzMyMu0sSCy/IigH/vf62qQqAgYcQmBAE86 DFZsDhJimW98LurPS9rSm2PCUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBCks+oN Qax+7NraQqOcGc/x1mkbMB8GA1UdIwQYMBaAFOOQe0jmmH4v387QHtAdQLP2PbEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTdBMi9CM0RGQzg4NDZE NjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZpX2Z6dEFlMEIxQXNfWTlz UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1QjdTT2FZZmlfZnp0QWUwQjFBc19ZOXNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTdBMi9CM0RGQzg4NDZENjIxMUVFQjMwN0NFMTlDNEY5QUUwMi80NUI3U09hWWZp X2Z6dEFlMEIxQXNfWTlzUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQuHnM2TnOEfw0RCYOwEAj1IM+gpR6xCdY20AMkF0VH63sZlCnQcpuYRl4LmD +tfIcwJyzpHPTYDuq65bu5gR5OiL7JSEtm+TF1IQden1RGuX5eR8IoFEtQGyYgLu iIf1tG15QRSZ8vvr6/GnlWUQb9nOWeP/s16gAQWAAYHkDjjoYwqQTBebtakGLLr5 h6dI4x86A1DYDKlc4O8iCseOpgmls1eCeG6YZ2lx+K46Fl9RpU002tCjkCx6SpR7 tIGFXeHpZi8Gj37SQTmu/qTArvt6tl90p75sIjRkCf1PKuosWJArTOTre1gRoSqb spM7F3drB3pSQJGf9quc4JnqzA== -----END CERTIFICATE-----Generated at Fri Jul 24 10:46:23 2026 by rpki-client