$ rpki-client -vvf rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft File: S_PofKK5q1lZdiDQT8BUEY1-09k.mft (raw, json) Hash identifier: q4NQ21gvZvkC+naXXCJQn6zJIIARq5LgzKpn0O9qFfQ= Subject key identifier: 3E:98:F9:B4:9E:AC:EF:66:D9:BD:7C:75:D5:5F:99:F9:D8:45:12:BE Authority key identifier: 4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 Certificate issuer: /CN=A9191B71/serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft Manifest number: 0407 Signing time: Thu 23 Jul 2026 01:17:28 +0000 Manifest this update: Thu 23 Jul 2026 01:17:28 +0000 Manifest next update: Thu 30 Jul 2026 01:17:28 +0000 Files and hashes: 1: S_PofKK5q1lZdiDQT8BUEY1-09k.crl (hash: DzZYgkGT/UfmztnGPEk+uqvzONB8wK0cVJyUaIeejHM=) 2: 5A48B534C6C811ECA5A9AB33C4F9AE02.roa (hash: KxT8vQKIHFK7Gk3hZ5CxcVmRf+RluSRn51YSF+ICMIo=) 3: 5734DF38D56811EF89A7D332C4F9AE02.roa (hash: +ePsXEldU8XwZr86Pjr8gpmcjv5LOq79B94UDeNsGa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191B71, serialNumber=4BF3E87CA2B9AB59597620D04FC054118D7ED3D9 Validity Not Before: Jul 23 01:17:28 2026 GMT Not After : Jul 30 01:17:28 2026 GMT Subject: CN=6a616ba8-c971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cc:41:e9:32:15:c6:ac:c2:75:13:52:68:f2: 00:0b:33:24:a7:d6:f9:31:72:2a:ba:fb:b8:4b:15: e5:9d:b0:9f:4c:da:7a:2e:42:cf:d0:da:a8:a5:8d: 6c:d0:4b:b8:ef:1c:6a:f3:5d:40:22:88:38:7e:f2: c4:15:01:d0:c3:5b:85:bd:59:1c:9b:14:73:5f:64: 63:b1:22:8a:b9:52:2f:ea:da:6b:1a:55:e4:39:dd: 61:2f:d0:b4:e7:1c:0a:3d:a8:3b:1f:85:96:d8:1c: 9e:43:96:29:4e:b0:b9:5c:d5:00:01:68:ea:4a:80: a9:f7:46:12:97:e9:1b:1c:81:73:0d:85:c4:c2:b8: f2:ae:70:10:f9:7e:b1:97:e9:2d:04:c0:84:5c:ff: a2:3a:aa:24:ac:4a:e1:2d:7b:8d:86:de:c0:1d:99: 76:a5:4d:cc:23:a4:d0:1a:c2:61:b4:73:b6:ee:99: e6:0a:3e:09:a0:f4:5f:2b:07:a4:69:99:5f:55:7e: 23:6f:51:00:d4:94:db:b0:31:dc:17:6b:85:a0:2e: 07:d6:60:e1:34:87:02:46:50:94:2b:8d:a8:7b:00: 72:a4:60:d0:a8:85:bd:c5:ae:bb:bb:72:7a:b0:29: eb:d1:63:c2:82:54:d2:5f:b4:c1:2e:28:94:9e:bf: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:98:F9:B4:9E:AC:EF:66:D9:BD:7C:75:D5:5F:99:F9:D8:45:12:BE X509v3 Authority Key Identifier: keyid:4B:F3:E8:7C:A2:B9:AB:59:59:76:20:D0:4F:C0:54:11:8D:7E:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S_PofKK5q1lZdiDQT8BUEY1-09k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191B71/B849BA12C60411ECB906915CC4F9AE02/S_PofKK5q1lZdiDQT8BUEY1-09k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:2d:8d:d3:93:0a:d2:49:f7:ef:9b:3c:0b:84:28:45:f4:7d: 7a:08:a8:eb:00:0f:49:a9:e4:74:4e:4c:fd:5c:a5:b3:ac:5e: d7:bb:4b:70:ed:db:67:ee:27:a0:74:4d:df:e1:9b:9b:6d:0e: eb:a5:a3:32:2f:c2:65:43:93:d5:f7:b6:72:8e:b8:f5:99:9a: f3:c8:81:7f:b1:be:3d:e2:59:b3:10:d3:43:ac:7e:8e:91:e1: 2b:27:6c:44:1d:10:c7:40:09:49:e9:ef:7f:4b:b6:e8:f0:b1: 13:90:69:b4:2c:b3:09:b9:a7:78:d2:e7:ca:03:a7:14:50:46: 68:85:d5:33:d9:46:98:11:84:13:27:6a:80:f3:67:dd:ec:8c: 7c:39:fb:86:6d:ea:a2:47:0c:ca:9c:04:5e:12:89:87:ab:90: 4f:7c:89:f1:fd:e1:94:e0:55:6f:e4:00:d5:f3:11:f0:68:01: 3d:b7:9f:73:0d:54:c8:fb:64:36:a0:6d:2f:76:c1:f8:93:2d: a1:ce:36:8c:a5:63:c5:0b:75:59:e8:5f:e9:05:c9:70:b2:f6: a6:96:26:f4:0d:92:0b:bf:d1:b5:bb:c8:d8:d8:e5:b4:b8:5e: 2d:a4:7a:14:b7:81:38:89:73:05:d5:34:a5:64:92:6a:9c:2b: 50:b3:87:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFCNzExMTAvBgNVBAUTKDRCRjNFODdDQTJCOUFCNTk1OTc2MjBEMDRGQzA1NDEx OEQ3RUQzRDkwHhcNMjYwNzIzMDExNzI4WhcNMjYwNzMwMDExNzI4WjAYMRYwFAYD VQQDEw02YTYxNmJhOC1jOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwcxB6TIVxqzCdRNSaPIACzMkp9b5MXIquvu4SxXlnbCfTNp6LkLP0NqopY1s 0Eu47xxq811AIog4fvLEFQHQw1uFvVkcmxRzX2RjsSKKuVIv6tprGlXkOd1hL9C0 5xwKPag7H4WW2ByeQ5YpTrC5XNUAAWjqSoCp90YSl+kbHIFzDYXEwrjyrnAQ+X6x l+ktBMCEXP+iOqokrErhLXuNht7AHZl2pU3MI6TQGsJhtHO27pnmCj4JoPRfKwek aZlfVX4jb1EA1JTbsDHcF2uFoC4H1mDhNIcCRlCUK42oewBypGDQqIW9xa67u3J6 sCnr0WPCglTSX7TBLiiUnr9tCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD6Y+bSe rO9m2b18ddVfmfnYRRK+MB8GA1UdIwQYMBaAFEvz6HyiuatZWXYg0E/AVBGNftPZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUI3MS9CODQ5QkExMkM2 MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXExbFpkaURRVDhCVUVZMS0w OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NfUG9mS0s1cTFsWmRpRFFUOEJVRVkxLTA5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUI3MS9CODQ5QkExMkM2MDQxMUVDQjkwNjkxNUNDNEY5QUUwMi9TX1BvZktLNXEx bFpkaURRVDhCVUVZMS0wOWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEi2N05MK0kn375s8C4QoRfR9egio6wAPSankdE5M/Vyls6xe17tLcO3bZ+4n oHRN3+Gbm20O66WjMi/CZUOT1fe2co649Zma88iBf7G+PeJZsxDTQ6x+jpHhKyds RB0Qx0AJSenvf0u26PCxE5BptCyzCbmneNLnygOnFFBGaIXVM9lGmBGEEydqgPNn 3eyMfDn7hm3qokcMypwEXhKJh6uQT3yJ8f3hlOBVb+QA1fMR8GgBPbefcw1UyPtk NqBtL3bB+JMtoc42jKVjxQt1Wehf6QXJcLL2ppYm9A2SC7/RtbvI2NjltLheLaR6 FLeBOIlzBdU0pWSSapwrULOHVA== -----END CERTIFICATE-----Generated at Fri Jul 24 09:06:53 2026 by rpki-client