$ rpki-client -vvf rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft File: 40gJvFtFT8eZSH_u2tcCEkAkYjo.mft (raw, json) Hash identifier: q789JJOjsLK5hfJUjfQQ3BzwiXAH26YnL+h/KkwW1EU= Subject key identifier: 3F:B0:C9:76:94:B4:45:C6:16:38:36:77:B4:DE:D6:96:08:D3:DE:C4 Authority key identifier: E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A Certificate issuer: /CN=A91734C9/serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft Manifest number: 0C8D Signing time: Wed 22 Jul 2026 18:56:09 +0000 Manifest this update: Wed 22 Jul 2026 18:56:08 +0000 Manifest next update: Wed 29 Jul 2026 18:56:08 +0000 Files and hashes: 1: 40gJvFtFT8eZSH_u2tcCEkAkYjo.crl (hash: prIOnY9aDnfO39NQ8Y7e+FrvCNW6+5f2qLXvWllkJzE=) 2: 78CFD3CC225E11EA8BD18A62C4F9AE02.roa (hash: LA1zhuDO8oOV5U+SWHLv48B4wlsZkTvLHZIw98i6K60=) 3: 783907BC225E11EA8BD18A62C4F9AE02.roa (hash: cD+tWMa2tCm5TnaY019r+91dmxm4eQDA6fv1coCGHU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91734C9, serialNumber=E34809BC5B454FC799487FEEDAD702124024623A Validity Not Before: Jul 22 18:56:08 2026 GMT Not After : Jul 29 18:56:08 2026 GMT Subject: CN=6a611249-b2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:a0:d2:2c:4f:e2:06:56:85:50:06:fc:00: 79:ea:26:3f:35:b0:f2:06:8d:63:47:8d:53:d7:f8: d0:c3:0b:7f:0f:8a:0f:67:62:e1:a1:0f:27:47:60: 27:6c:34:31:e7:ff:24:99:d1:3b:f8:63:a4:ed:90: 56:ea:2f:c6:06:6c:eb:e2:37:d6:21:d2:e5:7b:bf: 12:8e:87:4d:69:20:bc:ee:c1:0c:06:a2:ce:43:bf: bd:f7:a7:f8:15:7f:81:6a:68:22:bc:11:d7:68:68: cc:03:52:ce:9f:3c:4a:d3:60:96:a1:35:37:9f:99: e5:7a:a9:f9:dc:72:fe:c2:b0:9a:84:29:c8:32:6b: eb:aa:11:89:58:60:59:c7:d2:2b:8a:ca:2c:e0:e6: b8:42:85:50:28:87:a5:6e:3e:ae:60:e6:19:7f:1d: 69:d5:a9:57:92:fd:82:0d:18:f3:4d:0b:07:74:fe: 14:37:99:43:b9:ab:4f:6d:de:46:91:a1:02:0e:c0: cd:b2:4c:2b:85:d2:1e:1c:64:0c:41:a3:68:a2:aa: ff:39:1f:85:9f:1b:c9:fb:cd:3a:40:00:32:52:64: 35:62:b6:9d:22:4a:6a:b0:10:e8:90:c3:64:f0:da: f6:67:ca:44:fb:d8:9f:24:ee:69:ec:25:ff:47:3b: b6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B0:C9:76:94:B4:45:C6:16:38:36:77:B4:DE:D6:96:08:D3:DE:C4 X509v3 Authority Key Identifier: keyid:E3:48:09:BC:5B:45:4F:C7:99:48:7F:EE:DA:D7:02:12:40:24:62:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40gJvFtFT8eZSH_u2tcCEkAkYjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91734C9/6736024A225D11EABACFC960C4F9AE02/40gJvFtFT8eZSH_u2tcCEkAkYjo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:1b:15:e8:af:e1:e5:51:d6:2a:b4:df:a9:75:fb:6f:c6:ad: d4:22:29:d9:c1:2b:20:79:48:93:06:52:e3:80:b1:c4:02:9d: 79:59:d6:c1:f7:8f:cc:33:90:71:6b:e8:33:c4:9a:85:d9:ac: 99:d5:ac:2e:42:8e:9b:61:47:76:b8:51:a4:91:f7:02:5d:e6: ef:ac:a6:ae:05:fa:94:33:b1:fb:ef:be:4b:48:bc:3f:d1:3b: 19:f7:7b:65:04:94:23:ef:2a:cd:a2:6b:24:2c:44:be:04:52: c3:d1:b5:87:f3:45:b0:77:a4:3f:bd:37:f2:b6:64:2f:54:bf: c6:f2:83:5a:ff:e1:4d:c3:b6:d3:34:08:6b:4f:06:78:77:93: a1:11:79:78:de:a9:1f:eb:70:fd:e1:b5:24:3d:a0:20:af:13: 4f:bb:37:54:c6:a9:92:7e:7f:2c:3a:28:52:f1:55:4f:db:9a: e3:b6:f0:df:14:90:48:8c:aa:c1:7a:71:fc:cb:2e:79:8d:51: 6f:56:9b:5f:91:0d:98:20:98:e7:f5:c7:45:66:62:d3:02:4c: f8:76:3b:24:c1:86:2f:81:52:4a:61:8e:8b:a3:af:f9:dc:e5: 66:ce:9e:53:37:cf:74:51:23:11:62:e8:5e:ee:34:ae:47:20: f4:92:6f:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM0QzkxMTAvBgNVBAUTKEUzNDgwOUJDNUI0NTRGQzc5OTQ4N0ZFRURBRDcwMjEy NDAyNDYyM0EwHhcNMjYwNzIyMTg1NjA4WhcNMjYwNzI5MTg1NjA4WjAYMRYwFAYD VQQDEw02YTYxMTI0OS1iMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoOg0ixP4gZWhVAG/AB56iY/NbDyBo1jR41T1/jQwwt/D4oPZ2LhoQ8nR2An bDQx5/8kmdE7+GOk7ZBW6i/GBmzr4jfWIdLle78SjodNaSC87sEMBqLOQ7+996f4 FX+BamgivBHXaGjMA1LOnzxK02CWoTU3n5nleqn53HL+wrCahCnIMmvrqhGJWGBZ x9Irisos4Oa4QoVQKIelbj6uYOYZfx1p1alXkv2CDRjzTQsHdP4UN5lDuatPbd5G kaECDsDNskwrhdIeHGQMQaNooqr/OR+FnxvJ+806QAAyUmQ1YradIkpqsBDokMNk 8Nr2Z8pE+9ifJO5p7CX/Rzu2mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD+wyXaU tEXGFjg2d7Te1pYI097EMB8GA1UdIwQYMBaAFONICbxbRU/HmUh/7trXAhJAJGI6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzRDOS82NzM2MDI0QTIy NUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4ZVpTSF91MnRjQ0VrQWtZ am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwZ0p2RnRGVDhlWlNIX3UydGNDRWtBa1lqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzRDOS82NzM2MDI0QTIyNUQxMUVBQkFDRkM5NjBDNEY5QUUwMi80MGdKdkZ0RlQ4 ZVpTSF91MnRjQ0VrQWtZam8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgBsV6K/h5VHWKrTfqXX7b8at1CIp2cErIHlIkwZS44CxxAKdeVnWwfePzDOQ cWvoM8SahdmsmdWsLkKOm2FHdrhRpJH3Al3m76ymrgX6lDOx++++S0i8P9E7Gfd7 ZQSUI+8qzaJrJCxEvgRSw9G1h/NFsHekP7038rZkL1S/xvKDWv/hTcO20zQIa08G eHeToRF5eN6pH+tw/eG1JD2gIK8TT7s3VMapkn5/LDooUvFVT9ua47bw3xSQSIyq wXpx/MsueY1Rb1abX5ENmCCY5/XHRWZi0wJM+HY7JMGGL4FSSmGOi6Ov+dzlZs6e UzfPdFEjEWLoXu40rkcg9JJvNA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:20:41 2026 by rpki-client