$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: i8EJm1fWGluHAMqsni5xkakFzvsSKnbXf5VBecQSvxE= Subject key identifier: EB:51:D6:F7:EF:DF:E6:EB:7E:E1:CF:6E:97:A3:3F:A8:EE:12:43:87 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 0102 Signing time: Thu 23 Jul 2026 08:05:59 +0000 Manifest this update: Thu 23 Jul 2026 08:05:58 +0000 Manifest next update: Thu 30 Jul 2026 08:05:58 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: 0+WUjPJ2INqTVjQHvL+oYiCPA+nHHZ/s71E5M939C1Y=) 2: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: FmJuf298hS3Cq5FkDNYaTuFTUFK1cdgTe8R72xFRVHQ=) 3: 692243D640AA11F096F2746AC4F9AE02.roa (hash: hrId0XK3QT59rfCxOyEsibtNRieUfn4KutYpjg3t3lE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Jul 23 08:05:58 2026 GMT Not After : Jul 30 08:05:58 2026 GMT Subject: CN=6a61cb67-8e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:14:85:c5:3c:cb:11:5d:a2:51:ed:30:08: 26:ad:69:8a:20:ec:77:b4:d7:7b:fe:ab:82:7e:a9: b8:80:33:ba:7e:72:50:e3:18:a2:d7:15:ae:7a:7d: d6:9c:0c:d6:8e:0b:a2:2a:32:11:22:2a:11:e7:25: 84:da:06:1c:f4:bb:06:a7:be:5a:d6:fd:f2:a8:06: c5:b1:c9:98:fc:7a:18:ca:80:c4:82:2b:4d:47:02: 55:51:70:55:3e:32:23:5e:ba:2e:5b:0c:92:cd:d3: af:dd:4c:e2:75:44:54:d8:32:3b:43:78:31:2b:01: 53:18:ef:09:ad:42:6c:bf:7b:03:db:00:ce:a8:2d: 82:d6:88:64:87:c7:a6:2c:3d:24:0a:5b:96:4a:16: f9:83:be:35:ce:ed:66:be:00:4e:c9:bb:77:8f:a9: 0f:fa:b2:0a:e8:77:94:a1:0b:b8:1d:1c:c8:11:ff: 94:ae:44:47:45:6e:6d:97:5d:86:4f:d3:c8:ce:14: f1:28:09:2c:1e:ba:9d:c2:1c:b8:a3:85:31:aa:79: 2f:47:ac:4e:07:32:58:6e:13:a2:3e:51:3a:99:bb: 5d:2c:d3:ae:7d:ec:b4:97:b7:4d:fa:2c:5e:bf:92: c0:5d:db:1e:8b:9f:f3:9d:0a:ee:1e:f2:19:5d:45: db:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:51:D6:F7:EF:DF:E6:EB:7E:E1:CF:6E:97:A3:3F:A8:EE:12:43:87 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:61:a9:a4:ea:80:7b:63:b1:f1:34:66:bb:34:6e:d7:e8:e7: d9:ba:40:70:54:83:19:d1:6c:c8:af:27:47:09:3f:9f:f7:75: 44:51:5b:98:25:0f:80:24:ba:f0:2f:c7:0e:3d:7d:f8:f1:0e: 46:04:5e:d8:d3:5f:11:17:5a:5a:3d:36:9c:61:e8:fc:a1:17: 1e:28:7f:80:1d:65:d0:20:02:f5:8e:0a:0f:5c:09:98:3f:59: 46:04:1b:34:7a:e8:03:3f:96:4c:b2:4a:76:5c:e7:0a:40:87: 80:a4:7f:f7:c3:cf:ff:6d:e3:e7:4f:ec:a6:60:48:7b:35:e7: f2:8c:af:d5:ec:57:ba:0b:14:89:f3:c8:94:eb:27:aa:fc:5b: ea:70:63:d4:36:5f:b8:c9:ea:d6:4a:b4:7d:88:3f:08:69:61: 2b:99:03:42:30:8e:59:0b:5f:32:95:b1:4b:8b:23:71:ab:7b: 9e:4e:35:d7:33:56:c2:bd:ac:d8:46:b2:75:50:f6:86:b0:3e: 59:f2:b9:f0:08:08:1a:7c:71:6c:f5:25:0b:3e:5b:c6:75:7d: 9e:19:bc:34:80:4f:14:d9:66:7c:78:4d:9d:6d:8e:cd:9e:c7: c7:6e:43:9c:c4:f3:f5:bd:25:d5:d0:d3:c9:27:fd:ef:29:df: 5f:f2:f1:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC NTY1MzlEOTkwHhcNMjYwNzIzMDgwNTU4WhcNMjYwNzMwMDgwNTU4WjAYMRYwFAYD VQQDEw02YTYxY2I2Ny04ZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNQUhcU8yxFdolHtMAgmrWmKIOx3tNd7/quCfqm4gDO6fnJQ4xii1xWuen3W nAzWjguiKjIRIioR5yWE2gYc9LsGp75a1v3yqAbFscmY/HoYyoDEgitNRwJVUXBV PjIjXrouWwySzdOv3UzidURU2DI7Q3gxKwFTGO8JrUJsv3sD2wDOqC2C1ohkh8em LD0kCluWShb5g741zu1mvgBOybt3j6kP+rIK6HeUoQu4HRzIEf+UrkRHRW5tl12G T9PIzhTxKAksHrqdwhy4o4UxqnkvR6xOBzJYbhOiPlE6mbtdLNOufey0l7dN+ixe v5LAXdsei5/znQruHvIZXUXbFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOtR1vfv 3+brfuHPbpejP6juEkOHMB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0 MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1V amc3UGI1eHdOam0xWlRuWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkGGppOqAe2Ox8TRmuzRu1+jn2bpAcFSDGdFsyK8nRwk/n/d1RFFbmCUPgCS6 8C/HDj19+PEORgRe2NNfERdaWj02nGHo/KEXHih/gB1l0CAC9Y4KD1wJmD9ZRgQb NHroAz+WTLJKdlznCkCHgKR/98PP/23j50/spmBIezXn8oyv1exXugsUifPIlOsn qvxb6nBj1DZfuMnq1kq0fYg/CGlhK5kDQjCOWQtfMpWxS4sjcat7nk411zNWwr2s 2EaydVD2hrA+WfK58AgIGnxxbPUlCz5bxnV9nhm8NIBPFNlmfHhNnW2OzZ7Hx25D nMTz9b0l1dDTySf97ynfX/LxMg== -----END CERTIFICATE-----Generated at Fri Jul 24 21:06:51 2026 by rpki-client