$ rpki-client -vvf rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft File: 40OUNNCvshlJ60kGLwBsphEvOoQ.mft (raw, json) Hash identifier: yk4AoZiTXCkPJ/025bLl2bXibs0A5SyZOlXpijS5Fa4= Subject key identifier: 1A:6A:8D:8A:7E:3C:A6:A2:DA:CC:06:EF:2F:40:4E:0D:1A:D9:38:90 Authority key identifier: E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84 Certificate issuer: /CN=A91784CD/serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft Manifest number: 11 Signing time: Thu 23 Jul 2026 11:09:45 +0000 Manifest this update: Thu 23 Jul 2026 11:09:45 +0000 Manifest next update: Thu 30 Jul 2026 11:09:45 +0000 Files and hashes: 1: 40OUNNCvshlJ60kGLwBsphEvOoQ.crl (hash: 5Nyk8p9Zn4iQLEOjYaFerGsTZdy+rXYQmknlhslHpyQ=) 2: 7CE8E4446F9111F1A8C39A2C6CA30FBC.roa (hash: wEYk8+b/zlouMRDVVaad91i65oh9NEMZk+zI9rvUNyY=) 3: 38504AE86F9111F19A5C332C6CA30FBC.roa (hash: ctFJMNlLmb24KK/hUvuG9PeuIx9ZmlcOLpD5Hrci6io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91784CD, serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84 Validity Not Before: Jul 23 11:09:45 2026 GMT Not After : Jul 30 11:09:45 2026 GMT Subject: CN=6a61f679-4bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:07:dc:d3:aa:bd:17:cc:00:8c:75:63:54:ad: 79:88:67:49:c9:81:3a:7c:1d:c3:24:ac:fc:f5:37: 34:e8:ad:d3:28:f1:c1:47:27:c1:ec:b1:7a:57:c3: 11:5b:5d:55:30:7e:90:63:df:6b:ba:ec:a3:5f:8c: 39:50:ee:00:5a:1c:8c:e0:f5:85:4d:e0:34:c3:c7: 5f:45:12:c5:f7:21:4a:de:c9:19:51:f2:bd:06:26: a6:4b:57:e4:5a:d5:9c:32:2d:5d:0a:2a:78:c4:a5: 52:b5:68:5a:fc:02:eb:0f:cd:44:ae:60:37:5f:ff: ca:44:1a:4c:0d:51:29:aa:f7:d0:4a:51:fa:7a:2e: b6:58:e4:32:fa:28:aa:90:c2:29:e6:ac:90:c6:a1: 0e:6d:2a:93:86:9f:e0:8c:6c:59:63:e4:28:06:89: 40:24:46:2a:9b:24:42:fc:2d:9c:a1:73:7f:a6:7e: ab:3d:e7:99:3d:80:26:2b:47:99:c5:3c:9d:7e:1c: 50:18:06:8c:ff:60:dd:fb:c4:2c:8a:1a:78:f1:dd: c6:0f:51:69:a7:dc:21:44:69:51:d4:a8:88:06:42: 57:20:d1:55:68:20:3a:8e:6e:9d:1d:4d:a3:55:6a: 33:96:ee:b1:eb:c8:e8:7f:39:76:94:49:30:10:6d: ed:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6A:8D:8A:7E:3C:A6:A2:DA:CC:06:EF:2F:40:4E:0D:1A:D9:38:90 X509v3 Authority Key Identifier: keyid:E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:50:72:e6:2f:bd:2b:fb:96:00:1d:77:46:13:97:b8:22:52: fe:f1:8c:96:c9:fd:08:fb:ec:c3:c5:85:11:23:ac:13:6d:e8: ba:ab:33:f2:d5:8c:a6:74:f7:ef:f4:d0:80:d7:65:09:cf:c9: e6:0e:61:3d:a5:2d:91:cf:67:9b:b8:a1:6a:b0:64:75:b2:52: e9:2c:73:49:23:dc:3e:1d:44:d7:20:45:69:66:13:20:ec:20: 0f:02:ce:29:e3:d9:c1:67:eb:ec:8a:9d:19:49:20:4a:4f:c5: 09:a8:5e:52:db:50:e1:53:4a:d4:bf:ff:56:ea:cf:ad:69:d1: 11:64:a0:cd:84:2f:c7:ab:fd:cb:9c:04:8f:0d:c7:2c:1a:37: b5:9b:11:f8:14:af:eb:f6:c4:93:51:5d:cd:c2:b6:37:71:25: 6d:4f:4a:57:47:12:1f:eb:bd:69:b6:ae:4e:56:5b:96:28:10: 29:88:d8:3f:b4:be:97:7b:e0:ec:e4:e0:f2:06:bd:29:09:46: c0:6b:a3:d5:c8:3a:79:52:43:98:44:ee:1e:86:68:b4:65:38: 9b:af:13:a2:7d:26:17:01:82:f8:44:e1:a3:41:00:ff:db:49: 99:43:8a:f3:97:68:66:ad:32:9c:83:a7:83:9c:f6:ee:38:98: 6e:4e:1f:0a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODRDRDExMC8GA1UEBRMoRTM0Mzk0MzREMEFGQjIxOTQ5RUI0OTA2MkYwMDZDQTYx MTJGM0E4NDAeFw0yNjA3MjMxMTA5NDVaFw0yNjA3MzAxMTA5NDVaMBgxFjAUBgNV BAMTDTZhNjFmNjc5LTRiYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEB9zTqr0XzACMdWNUrXmIZ0nJgTp8HcMkrPz1NzTordMo8cFHJ8HssXpXwxFb XVUwfpBj32u67KNfjDlQ7gBaHIzg9YVN4DTDx19FEsX3IUreyRlR8r0GJqZLV+Ra 1ZwyLV0KKnjEpVK1aFr8AusPzUSuYDdf/8pEGkwNUSmq99BKUfp6LrZY5DL6KKqQ winmrJDGoQ5tKpOGn+CMbFlj5CgGiUAkRiqbJEL8LZyhc3+mfqs955k9gCYrR5nF PJ1+HFAYBoz/YN37xCyKGnjx3cYPUWmn3CFEaVHUqIgGQlcg0VVoIDqObp0dTaNV ajOW7rHryOh/OXaUSTAQbe17AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGmqNin48 pqLazAbvL0BODRrZOJAwHwYDVR0jBBgwFoAU40OUNNCvshlJ60kGLwBsphEvOoQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NENEL0NDRERBOTg2NkY5 MDExRjFBOEM5MDMyQjZDQTMwRkJDLzQwT1VOTkN2c2hsSjYwa0dMd0JzcGhFdk9v US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNDBPVU5OQ3ZzaGxKNjBrR0x3QnNwaEV2T29RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NENEL0NDRERBOTg2NkY5MDExRjFBOEM5MDMyQjZDQTMwRkJDLzQwT1VOTkN2c2hs SjYwa0dMd0JzcGhFdk9vUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnUHLmL70r+5YAHXdGE5e4IlL+8YyWyf0I++zDxYURI6wTbei6qzPy1YymdPfv 9NCA12UJz8nmDmE9pS2Rz2ebuKFqsGR1slLpLHNJI9w+HUTXIEVpZhMg7CAPAs4p 49nBZ+vsip0ZSSBKT8UJqF5S21DhU0rUv/9W6s+tadERZKDNhC/Hq/3LnASPDccs Gje1mxH4FK/r9sSTUV3NwrY3cSVtT0pXRxIf671ptq5OVluWKBApiNg/tL6Xe+Ds 5ODyBr0pCUbAa6PVyDp5UkOYRO4ehmi0ZTibrxOifSYXAYL4ROGjQQD/20mZQ4rz l2hmrTKcg6eDnPbuOJhuTh8K -----END CERTIFICATE-----Generated at Fri Jul 24 09:20:42 2026 by rpki-client