$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: RPVenh6UsVaecbu4koZSIkT6UD2bfhkHYVESIP+28F8= Subject key identifier: EB:BE:82:40:65:D9:14:60:88:D6:5A:E0:77:DC:C3:72:B3:AC:61:2C Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0C23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0C0C Signing time: Wed 22 Jul 2026 19:09:15 +0000 Manifest this update: Wed 22 Jul 2026 19:09:15 +0000 Manifest next update: Wed 29 Jul 2026 19:09:15 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: 9OOYV1fTkSF5Wr6m/5li2buCgM+GuT5wx9lh4Z/6BdM=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: 9OFSK2ChXxMiDwCW+T5F/rViLCQZW9lND/if0koTJTw=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: hU7OMHsTj6hL7vgEEXYSl72Q/STHSktutJc1O2+u9S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:09:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3107 (0xc23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Jul 22 19:09:15 2026 GMT Not After : Jul 29 19:09:15 2026 GMT Subject: CN=6a61155b-2479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:5a:dd:cf:25:1f:64:04:fc:85:68:9e:08: fb:0e:65:4a:9f:45:2a:f9:3e:83:c0:fe:b8:1c:2b: db:2f:fc:6f:e6:02:c9:06:48:68:93:2f:62:68:bf: 15:99:70:00:0a:04:59:fb:77:4e:c2:0f:6a:bb:dd: 60:8e:60:1f:ed:df:d9:e7:b3:a6:5e:ad:de:c8:f9: c1:e3:e6:95:17:19:24:b1:a9:8a:d5:01:3f:72:98: 88:70:c1:c6:73:fd:b4:27:d5:bf:4a:3f:48:fe:b2: 8b:9e:76:88:86:ae:b5:c1:7e:12:fe:71:ee:7f:92: 48:57:31:55:83:f3:e5:4e:6e:0a:d8:92:6e:16:f7: fa:dc:14:94:aa:29:ad:70:a6:b2:08:8f:d7:09:ba: 8f:ec:e7:dd:d0:c5:cb:23:01:0e:52:62:9a:22:33: be:7f:22:be:d3:dd:52:67:a2:29:75:4e:e2:f9:6f: f3:d3:bf:c4:da:07:dc:b7:5a:bc:02:b1:7c:e3:4a: b6:07:bd:0d:e2:55:73:69:89:35:de:9f:4d:12:fc: 7d:49:b9:0c:43:49:4a:27:fe:85:ac:2e:9f:03:13: ca:88:69:61:f4:4b:c1:76:fc:91:76:72:c0:ba:9f: cf:0d:da:3b:0b:4f:0f:01:43:d7:63:7d:d6:93:e8: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BE:82:40:65:D9:14:60:88:D6:5A:E0:77:DC:C3:72:B3:AC:61:2C X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ad:2c:04:9d:c4:14:c1:67:f6:b7:05:91:76:57:1b:f1:ea: 01:45:d9:c1:bb:94:c3:2c:17:ad:f5:db:01:25:f1:1b:7c:a2: 49:57:2d:ae:36:94:c4:ea:c6:3a:94:bf:ca:93:7d:e1:4b:f5: 42:be:19:3c:a1:67:ff:08:62:97:fb:38:d2:cc:78:f8:a0:39: 4e:eb:ed:97:2d:a7:99:49:af:2f:eb:9c:fa:f1:24:33:51:4d: 8f:f3:93:51:b9:0f:35:c8:ab:70:0d:fa:77:17:4d:82:7f:63: e9:55:40:7e:d7:fd:c3:99:68:af:b9:53:b1:84:77:85:63:60: 89:06:be:1c:57:6a:a8:af:67:68:ad:24:cb:83:7f:e7:4c:65: 53:27:20:2a:5c:46:ac:d4:08:a9:32:81:2a:68:b5:d1:98:3e: 22:1d:6e:15:d2:b5:79:5c:bb:fd:d2:c5:5f:8d:eb:13:bb:e5: 76:cb:8b:a5:05:2d:02:d4:0e:48:99:74:c0:e4:19:56:13:af: b8:85:23:fe:f6:14:33:19:f2:b3:29:f7:b3:25:88:a5:7c:29: 40:e4:0d:84:dd:01:94:d0:31:d7:a9:c0:de:7c:fa:a7:7c:bc: 73:27:5a:c3:97:e9:15:03:32:b7:95:71:07:2f:cd:8c:cf:e9: f8:da:6f:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjYwNzIyMTkwOTE1WhcNMjYwNzI5MTkwOTE1WjAYMRYwFAYD VQQDEw02YTYxMTU1Yi0yNDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjxFa3c8lH2QE/IVongj7DmVKn0Uq+T6DwP64HCvbL/xv5gLJBkhoky9iaL8V mXAACgRZ+3dOwg9qu91gjmAf7d/Z57OmXq3eyPnB4+aVFxkksamK1QE/cpiIcMHG c/20J9W/Sj9I/rKLnnaIhq61wX4S/nHuf5JIVzFVg/PlTm4K2JJuFvf63BSUqimt cKayCI/XCbqP7Ofd0MXLIwEOUmKaIjO+fyK+091SZ6IpdU7i+W/z07/E2gfct1q8 ArF840q2B70N4lVzaYk13p9NEvx9SbkMQ0lKJ/6FrC6fAxPKiGlh9EvBdvyRdnLA up/PDdo7C08PAUPXY33Wk+hEeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOu+gkBl 2RRgiNZa4Hfcw3KzrGEsMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWK0sBJ3EFMFn9rcFkXZXG/HqAUXZwbuUwywXrfXbASXxG3yiSVctrjaUxOrG OpS/ypN94Uv1Qr4ZPKFn/whil/s40sx4+KA5Tuvtly2nmUmvL+uc+vEkM1FNj/OT UbkPNcircA36dxdNgn9j6VVAftf9w5lor7lTsYR3hWNgiQa+HFdqqK9naK0ky4N/ 50xlUycgKlxGrNQIqTKBKmi10Zg+Ih1uFdK1eVy7/dLFX43rE7vldsuLpQUtAtQO SJl0wOQZVhOvuIUj/vYUMxnysyn3syWIpXwpQOQNhN0BlNAx16nA3nz6p3y8cyda w5fpFQMyt5VxBy/NjM/p+NpvxQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:26:26 2026 by rpki-client