$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft File: R4tJDpOd3d8hrKx4y5MZinuBRIU.mft (raw, json) Hash identifier: y6vVaPG97Aq4sGuISvn0yMbOUBFfh5jSuybm7G+paoA= Subject key identifier: 3A:A3:FE:A8:2E:97:EE:7D:B2:EF:AD:44:B9:C2:84:F0:61:4C:05:B8 Authority key identifier: 47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 Certificate issuer: /CN=A91427E2/serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft Manifest number: 0148 Signing time: Thu 23 Jul 2026 06:54:58 +0000 Manifest this update: Thu 23 Jul 2026 06:54:57 +0000 Manifest next update: Thu 30 Jul 2026 06:54:57 +0000 Files and hashes: 1: R4tJDpOd3d8hrKx4y5MZinuBRIU.crl (hash: IqRvoD6HlnZ2IxeNWV6m918TTAJ/0nL+2/ILsetBHOs=) 2: 534DAEB2935111EF98AA8C86C4F9AE02.roa (hash: 5eXsqyDi4zXv3lkd2PQOUbJIFyY5qvfFcyW7Q/IiG9Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=478B490E939DDDDF21ACAC78CB93198A7B814485 Validity Not Before: Jul 23 06:54:57 2026 GMT Not After : Jul 30 06:54:57 2026 GMT Subject: CN=6a61bac2-3b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c2:bc:52:a6:36:db:c4:5c:45:62:56:50:e3: a0:3e:4e:1f:14:4e:c0:53:49:df:1b:cf:e1:de:c5: b7:f7:ff:f9:de:17:30:85:26:71:28:ab:c7:37:86: 67:ca:cd:16:98:ba:49:12:8d:7f:05:3e:e5:9d:f9: bd:06:a8:2a:ac:c5:3f:9a:9d:f8:dc:b9:d7:aa:88: b1:b3:14:30:18:c6:37:16:c4:81:b5:5d:e7:de:e1: 8f:4f:61:93:ab:4c:5b:1e:9c:e3:51:a6:22:84:9c: c1:f3:bf:eb:2d:36:37:d6:8a:72:09:34:04:30:ab: 6c:4f:59:05:8e:92:d1:dc:4b:88:f4:d0:92:cd:aa: 0d:a4:f8:4e:a0:67:4d:78:cb:75:f7:f4:e0:94:dd: 51:4c:37:72:00:c2:33:2d:0f:e1:42:f9:9e:ae:b7: 8e:d2:db:91:0c:e7:46:a0:d8:d0:95:36:7e:d6:bf: ab:83:3e:72:2c:73:3d:27:df:58:19:58:33:41:57: d8:e5:1e:67:1a:16:0b:a1:4f:14:1d:47:2c:b9:84: c6:7e:da:09:56:8c:e7:75:f2:3d:fa:4c:3f:7f:19: a9:cf:e9:27:c9:4a:e2:55:f0:20:2d:08:b3:2c:6c: 45:53:a1:d1:e2:61:6f:76:0f:5e:51:68:9f:64:3e: 68:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A3:FE:A8:2E:97:EE:7D:B2:EF:AD:44:B9:C2:84:F0:61:4C:05:B8 X509v3 Authority Key Identifier: keyid:47:8B:49:0E:93:9D:DD:DF:21:AC:AC:78:CB:93:19:8A:7B:81:44:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R4tJDpOd3d8hrKx4y5MZinuBRIU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/783DFBC4935011EFBACE004CC4F9AE02/R4tJDpOd3d8hrKx4y5MZinuBRIU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ea:54:57:f9:bd:52:dc:7b:89:c1:ee:f3:d3:a4:5f:28:78: 74:12:b1:0d:0c:b6:dc:73:d8:af:3e:c3:01:e7:30:14:54:17: 23:7b:46:93:4c:10:87:f8:ca:ba:77:16:d9:65:36:2d:f1:36: 82:8a:a5:bb:52:36:2c:a6:b4:13:f5:26:de:77:65:06:c5:58: 09:d1:51:28:2a:04:1d:7d:aa:56:60:07:fe:55:7d:09:66:17: 26:66:bb:83:ed:08:f8:32:fc:bc:d3:73:f5:fd:0b:a5:4c:7d: cc:7a:02:84:18:af:d9:59:33:37:10:41:88:6e:f7:d5:3a:9d: dd:94:87:57:34:c9:d6:67:f2:41:5f:ee:56:e8:e4:37:c9:39: df:d5:6a:42:8c:0b:f4:8d:8e:1a:5d:9c:84:c5:a2:83:6b:71: c1:fb:a4:c0:46:d4:bd:c4:f8:90:b0:56:71:49:9c:97:69:96: 43:c8:5e:55:14:53:46:35:ec:7a:6c:fc:71:f4:eb:1c:9b:44: c6:db:80:ac:04:83:3f:dc:05:a5:e7:5e:01:15:4e:ff:71:c0: 2e:1c:9c:2c:d3:be:b4:f8:8d:1a:a4:5c:85:88:d2:a2:97:eb: df:ec:45:bc:1a:a0:ff:41:3a:b4:3d:ae:ae:7d:aa:0f:cb:c7: da:be:ff:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKDQ3OEI0OTBFOTM5REREREYyMUFDQUM3OENCOTMxOThB N0I4MTQ0ODUwHhcNMjYwNzIzMDY1NDU3WhcNMjYwNzMwMDY1NDU3WjAYMRYwFAYD VQQDEw02YTYxYmFjMi0zYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8K8UqY228RcRWJWUOOgPk4fFE7AU0nfG8/h3sW39//53hcwhSZxKKvHN4Zn ys0WmLpJEo1/BT7lnfm9BqgqrMU/mp343LnXqoixsxQwGMY3FsSBtV3n3uGPT2GT q0xbHpzjUaYihJzB87/rLTY31opyCTQEMKtsT1kFjpLR3EuI9NCSzaoNpPhOoGdN eMt19/TglN1RTDdyAMIzLQ/hQvmerreO0tuRDOdGoNjQlTZ+1r+rgz5yLHM9J99Y GVgzQVfY5R5nGhYLoU8UHUcsuYTGftoJVozndfI9+kw/fxmpz+knyUriVfAgLQiz LGxFU6HR4mFvdg9eUWifZD5ofwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDqj/qgu l+59su+tRLnChPBhTAW4MB8GA1UdIwQYMBaAFEeLSQ6Tnd3fIayseMuTGYp7gUSF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83ODNERkJDNDkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNkOGhyS3g0eTVNWmludUJS SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I0dEpEcE9kM2Q4aHJLeDR5NU1aaW51QlJJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83ODNERkJDNDkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi9SNHRKRHBPZDNk OGhyS3g0eTVNWmludUJSSVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXupUV/m9Utx7icHu89OkXyh4dBKxDQy23HPYrz7DAecwFFQXI3tGk0wQh/jK uncW2WU2LfE2goqlu1I2LKa0E/Um3ndlBsVYCdFRKCoEHX2qVmAH/lV9CWYXJma7 g+0I+DL8vNNz9f0LpUx9zHoChBiv2VkzNxBBiG731Tqd3ZSHVzTJ1mfyQV/uVujk N8k539VqQowL9I2OGl2chMWig2txwfukwEbUvcT4kLBWcUmcl2mWQ8heVRRTRjXs emz8cfTrHJtExtuArASDP9wFpedeARVO/3HALhycLNO+tPiNGqRchYjSopfr3+xF vBqg/0E6tD2urn2qD8vH2r7/+g== -----END CERTIFICATE-----Generated at Thu Jul 23 23:01:20 2026 by rpki-client