$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json) Hash identifier: PLfPOh7G9rLXkyF5qrmYBQVuFR7RpP92Psn4Sm6uui0= Subject key identifier: 2B:10:6E:0B:D6:EA:A9:09:8D:E9:91:65:D5:78:7C:22:1A:3D:FE:75 Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft Manifest number: 02BF Signing time: Thu 23 Jul 2026 02:25:10 +0000 Manifest this update: Thu 23 Jul 2026 02:25:10 +0000 Manifest next update: Thu 30 Jul 2026 02:25:10 +0000 Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: C3O53F1Qie9wNauGIl2F3CIlkHnLuP//q1vy0mjAWZA=) 2: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: EgHfoXDPWkSf9EMELvfB9wprgOdP6M6i5C22XOX+eIg=) 3: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: 9LFaLc8meqLBp289mlYACBm+5v+NFT6EUQrjqf3aYig=) 4: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: eg3pUwfwQDE+9YQzOG9BMq0Bkyet7crQzC1+mV0wngc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Validity Not Before: Jul 23 02:25:10 2026 GMT Not After : Jul 30 02:25:10 2026 GMT Subject: CN=6a617b86-0f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:59:cb:ef:7f:19:f7:3e:41:fe:c2:60:7e: d0:93:ed:ed:34:5c:a7:46:80:ed:8f:f6:c1:3a:67: 7e:a7:3a:73:cd:4c:65:58:b5:14:9b:2a:54:50:07: e8:43:3b:6b:e4:2f:f9:89:fb:c3:28:a5:59:d0:1c: 31:c1:84:0a:fb:14:5e:6b:08:a3:06:f8:a8:36:61: 19:cd:bc:02:16:52:06:ba:51:80:73:d7:76:f1:cb: 8e:a9:75:5d:f3:40:8e:94:9d:91:63:de:c6:04:c8: 80:e0:92:86:cf:16:95:30:5c:8c:0e:31:a1:b8:7c: 05:1d:04:b0:c7:b9:fa:57:8a:92:43:95:00:61:a3: 89:fd:f1:57:37:b0:32:16:5d:78:a8:44:c1:79:9c: 6b:53:2d:bb:2b:49:11:b6:b4:da:f8:3e:b2:6a:5a: 45:95:1e:be:91:43:ea:b3:7a:48:ff:12:44:a5:f6: 4c:85:28:0e:78:28:b8:8d:10:b1:15:83:7c:5b:a9: 61:e7:a1:8d:97:cb:cd:e7:b6:6e:3b:f8:68:ca:9f: 1b:e7:d7:32:2c:12:44:d4:11:f7:17:bf:67:c2:0f: b1:88:83:ad:1d:97:26:6e:85:56:dc:41:dc:18:38: 31:03:94:5d:44:a6:4d:42:99:e9:ba:46:64:d7:aa: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:10:6E:0B:D6:EA:A9:09:8D:E9:91:65:D5:78:7C:22:1A:3D:FE:75 X509v3 Authority Key Identifier: keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c4:61:c7:cb:22:0a:99:dd:b5:aa:d2:64:4d:c9:a6:00:ef: ba:a5:79:db:12:b2:ac:ed:61:7d:ab:41:88:9a:f0:1b:ad:6c: 16:30:19:c8:57:0b:a2:5d:14:0e:9c:1d:96:f3:cf:52:1c:22: 9a:20:46:30:2a:69:d8:d6:ce:6d:c6:16:1d:08:6a:3b:c2:23: 36:22:e6:d4:2d:f4:81:08:3c:c6:62:1b:93:b9:85:71:29:f2: b4:53:0a:2a:66:97:74:1a:b2:ce:b8:1b:96:7f:51:5e:1f:a4: 66:1e:ef:fd:b3:ed:db:bd:22:87:50:b9:45:54:85:27:33:c3: 80:f1:50:68:ab:18:ad:4a:d8:cc:20:57:ed:d5:12:f2:ee:13: 33:26:a0:27:6e:c7:93:0d:23:49:63:c5:06:e6:85:5f:90:43: 48:b3:7d:33:1b:2e:7b:91:5e:4c:e4:2d:a4:60:cf:aa:5e:34: e7:4d:24:97:9b:51:37:1e:76:0e:ba:96:ac:05:48:2b:a9:58: 90:50:89:5a:68:98:51:e3:2d:6b:2b:79:53:fa:76:b5:cf:4a: 18:be:80:2b:96:a0:0f:a6:37:a7:c9:a2:ce:65:58:c1:c9:87: 46:eb:db:42:aa:00:af:ea:87:49:3d:d7:2c:1d:38:d4:5d:31: 78:0f:17:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1 Rjg1MDNCMTQwHhcNMjYwNzIzMDIyNTEwWhcNMjYwNzMwMDIyNTEwWjAYMRYwFAYD VQQDEw02YTYxN2I4Ni0wZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuz1Zy+9/Gfc+Qf7CYH7Qk+3tNFynRoDtj/bBOmd+pzpzzUxlWLUUmypUUAfo Qztr5C/5ifvDKKVZ0BwxwYQK+xReawijBvioNmEZzbwCFlIGulGAc9d28cuOqXVd 80COlJ2RY97GBMiA4JKGzxaVMFyMDjGhuHwFHQSwx7n6V4qSQ5UAYaOJ/fFXN7Ay Fl14qETBeZxrUy27K0kRtrTa+D6yalpFlR6+kUPqs3pI/xJEpfZMhSgOeCi4jRCx FYN8W6lh56GNl8vN57ZuO/hoyp8b59cyLBJE1BH3F79nwg+xiIOtHZcmboVW3EHc GDgxA5RdRKZNQpnpukZk16phpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCsQbgvW 6qkJjemRZdV4fCIaPf51MB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj RFhjVmNkLUctTTFmaFFPeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVcRhx8siCpndtarSZE3JpgDvuqV52xKyrO1hfatBiJrwG61sFjAZyFcLol0U DpwdlvPPUhwimiBGMCpp2NbObcYWHQhqO8IjNiLm1C30gQg8xmIbk7mFcSnytFMK KmaXdBqyzrgbln9RXh+kZh7v/bPt270ih1C5RVSFJzPDgPFQaKsYrUrYzCBX7dUS 8u4TMyagJ27Hkw0jSWPFBuaFX5BDSLN9Mxsue5FeTOQtpGDPql40500kl5tRNx52 DrqWrAVIK6lYkFCJWmiYUeMtayt5U/p2tc9KGL6AK5agD6Y3p8mizmVYwcmHRuvb QqoAr+qHST3XLB041F0xeA8X/A== -----END CERTIFICATE-----Generated at Fri Jul 24 12:37:14 2026 by rpki-client