$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: KS6StpDkDjcD9o62LuBsSmavc0cgNRV6lCFEkJ1u3WA= Subject key identifier: A7:9C:E3:F0:6B:55:7B:27:DE:A5:D1:D3:0A:1E:B4:BA:57:BD:6B:51 Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 031E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 030D Signing time: Thu 23 Jul 2026 02:07:30 +0000 Manifest this update: Thu 23 Jul 2026 02:07:29 +0000 Manifest next update: Thu 30 Jul 2026 02:07:29 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: aXrQzJm5Tvb3rhwlVB7n7x9MrnMqMF38p/4SkfL7h9c=) 2: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: vLKPklVP43k6OROJ42PijdvI9ys2gzzUNgh6DMpb1V4=) 3: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: yGjZ2qr+BhGngGtcisuW8nAIXic6S3m8loWau7p/bRY=) 4: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: dkeJym/v87RKiKKUryyLDWvUYJU8ndSZ66o3idoC4+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:07:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Jul 23 02:07:29 2026 GMT Not After : Jul 30 02:07:29 2026 GMT Subject: CN=6a617761-839c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:60:7d:66:d1:48:a2:48:2e:1f:c8:da:5f: 9b:42:8b:2d:e4:7c:63:b5:60:0a:b5:ed:e8:86:dd: 6c:8a:81:63:e7:48:53:20:ee:7c:ef:a5:d9:fd:80: 0e:ea:db:de:f7:d1:07:35:55:1c:a7:bc:fc:10:ea: f5:39:23:d3:32:d1:b6:bb:eb:19:b8:02:e6:0c:d4: f0:09:f8:7f:2a:c5:87:ea:50:1f:8e:22:ac:44:92: a9:4a:2e:b4:ab:90:8c:6b:b8:8b:db:54:a5:77:9b: f2:c7:d1:a2:ab:77:12:38:0a:36:9c:78:84:2e:ad: f0:1b:5b:9c:12:6c:1e:ca:d2:8c:6c:02:49:81:c0: fb:23:e4:e2:b9:f4:69:3c:f5:87:cb:5d:dc:a9:46: 5a:06:df:12:65:4e:5d:6d:42:2c:c6:ac:e5:79:a0: 2f:d8:67:08:c7:d5:af:47:c3:a2:40:db:55:29:c6: 8f:65:22:ff:bb:bb:71:60:e1:c7:91:59:02:57:95: 33:c2:0a:3c:0b:98:6f:23:d1:7c:3c:2e:dc:64:74: 3e:7a:cf:be:c5:fd:de:2b:cd:a3:c0:cc:b9:e7:9d: ed:84:90:04:8b:36:9d:d7:31:8b:1e:ca:0c:e1:2e: 58:df:cd:64:e7:b4:14:4e:33:96:35:e6:c0:2e:ee: 70:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9C:E3:F0:6B:55:7B:27:DE:A5:D1:D3:0A:1E:B4:BA:57:BD:6B:51 X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:82:55:a9:36:93:1e:01:88:e1:66:76:58:b2:4f:7f:af:b7: 87:a5:e4:46:d3:33:68:d6:9b:96:5c:0d:52:b9:2b:4b:3a:65: 7d:84:55:32:80:82:54:68:45:de:bf:e3:2d:64:6b:5f:fe:59: 2e:ae:d3:56:fc:eb:29:ed:b3:d2:4f:f4:fc:59:63:50:cd:49: 87:a7:4e:85:45:13:e3:f6:fc:a9:a7:67:c1:3c:58:c4:d5:e6: a3:b3:e7:00:2a:bf:54:58:b5:8d:7a:48:13:2b:92:0b:4e:90: 2d:9d:33:f8:d7:e7:1f:86:ba:14:a3:dc:15:f3:ba:78:ab:59: 1c:30:c4:3d:a9:9a:b8:b9:fb:c9:f2:d0:39:c2:fb:83:58:fe: ad:a6:dc:d3:42:58:05:0a:a7:36:0b:d2:53:eb:79:05:17:21: 31:8c:f6:43:46:5b:6e:dc:3f:dc:38:bd:86:f6:bd:66:f5:67: aa:0d:3a:b2:8b:86:c4:c0:ed:56:d4:6a:82:e3:22:27:af:67: 96:46:a6:ef:db:a6:49:87:9f:53:f1:5c:98:02:f1:da:46:21: ed:2b:c6:08:9f:4e:5f:c3:e7:22:23:5d:b8:a0:86:b3:3f:cf: dd:b2:6a:0a:0a:7a:8e:10:ee:fa:c4:38:1b:0c:b3:f6:7c:18: bb:b5:8a:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjYwNzIzMDIwNzI5WhcNMjYwNzMwMDIwNzI5WjAYMRYwFAYD VQQDEw02YTYxNzc2MS04MzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVlgfWbRSKJILh/I2l+bQost5HxjtWAKte3oht1sioFj50hTIO5876XZ/YAO 6tve99EHNVUcp7z8EOr1OSPTMtG2u+sZuALmDNTwCfh/KsWH6lAfjiKsRJKpSi60 q5CMa7iL21Sld5vyx9Giq3cSOAo2nHiELq3wG1ucEmweytKMbAJJgcD7I+TiufRp PPWHy13cqUZaBt8SZU5dbUIsxqzleaAv2GcIx9WvR8OiQNtVKcaPZSL/u7txYOHH kVkCV5Uzwgo8C5hvI9F8PC7cZHQ+es++xf3eK82jwMy5553thJAEizad1zGLHsoM 4S5Y381k57QUTjOWNebALu5wSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKec4/Br VXsn3qXR0woetLpXvWtRMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJIJVqTaTHgGI4WZ2WLJPf6+3h6XkRtMzaNabllwNUrkrSzplfYRVMoCCVGhF 3r/jLWRrX/5ZLq7TVvzrKe2z0k/0/FljUM1Jh6dOhUUT4/b8qadnwTxYxNXmo7Pn ACq/VFi1jXpIEyuSC06QLZ0z+NfnH4a6FKPcFfO6eKtZHDDEPamauLn7yfLQOcL7 g1j+rabc00JYBQqnNgvSU+t5BRchMYz2Q0Zbbtw/3Di9hva9ZvVnqg06souGxMDt VtRqguMiJ69nlkam79umSYefU/FcmALx2kYh7SvGCJ9OX8PnIiNduKCGsz/P3bJq Cgp6jhDu+sQ4Gwyz9nwYu7WKxA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:24:02 2026 by rpki-client