$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json) Hash identifier: G1RoN6k+Iv8rQOQK+qsyWAgtjxRfmfBMR9PeGuIF3Ek= Subject key identifier: 60:90:15:E5:DF:54:54:2A:FA:F7:3E:57:F2:01:CA:BE:D0:D4:42:DF Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 1111 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft Manifest number: 10F7 Signing time: Wed 22 Jul 2026 14:25:33 +0000 Manifest this update: Wed 22 Jul 2026 14:25:32 +0000 Manifest next update: Wed 29 Jul 2026 14:25:32 +0000 Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: LY1CShoX0qYnRXy+yyVnox8pNIN+GmnDiBxiskePU8o=) 2: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: dZjVpX0OHFb95lVF9Cf+7jCMCOq6ryMRIoLMcRSlevM=) 3: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: FcrkIqa4XDgVdyeOamaFQqlLus8d1JT70DNswdpetnU=) 4: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: QAfeG31AUJ9ysS7/jFhyhx6FaI+gxOiP1E4c7gwnNZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4369 (0x1111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Jul 22 14:25:32 2026 GMT Not After : Jul 29 14:25:32 2026 GMT Subject: CN=6a60d2dc-e0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fa:43:ac:09:1c:43:85:63:7e:e6:11:51:d0: 43:92:18:5a:b6:8d:75:85:68:17:86:b6:99:78:b9: 45:75:a7:a4:65:bb:a7:13:9a:38:52:b4:10:55:f7: 82:65:05:20:6a:89:67:f9:35:09:3e:9e:76:c1:9d: b2:4c:a9:3f:bd:c4:80:1f:6f:dc:09:42:22:a9:cd: 65:37:7c:81:49:dc:57:20:bd:fd:a1:eb:39:f0:05: d9:b1:e7:6e:34:91:bc:8e:cf:f7:31:44:d2:02:bf: a0:54:97:d5:48:75:93:74:81:87:d6:87:08:63:35: 2d:92:c2:d9:b3:f3:ae:cb:6a:a3:cf:b2:bf:9f:bf: 46:42:a8:a0:4d:8f:0d:a2:ba:a4:a5:5e:01:67:d4: 82:c4:0c:69:15:3e:ba:e3:24:29:65:6d:19:8d:20: 14:d8:57:60:0c:0b:3c:b5:2c:d6:cc:cc:9c:e4:43: d9:8d:de:f0:49:72:3d:35:7d:13:77:7b:95:03:a4: 5f:99:0a:f2:ef:19:e4:8d:52:0c:db:ac:9d:3f:12: 58:ef:3a:37:a8:cd:e1:b2:9b:94:5e:a9:1a:89:aa: e2:c0:d1:47:47:21:a7:b2:59:e6:57:fa:9f:30:60: de:fd:27:be:44:28:6a:1f:f1:d8:c3:e4:4f:1a:df: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:90:15:E5:DF:54:54:2A:FA:F7:3E:57:F2:01:CA:BE:D0:D4:42:DF X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:62:c6:7e:fe:73:31:a8:51:19:20:4a:5f:ae:a1:af:92:03: d1:cf:f7:f2:a9:56:80:cb:70:25:c1:a5:53:75:09:df:92:db: 75:86:0b:6c:2b:e6:95:58:35:8a:52:d3:f9:09:b9:70:e0:1a: 31:fc:7e:0b:2f:4b:7d:78:4b:e9:94:ed:09:ff:43:77:60:78: 12:d4:b6:90:c2:2c:1d:9e:5a:05:4b:72:12:76:02:69:45:61: c0:8b:46:c0:8c:69:e2:20:84:9b:b2:0f:91:95:f1:b3:e2:a3: c7:70:e1:9a:2a:2c:e7:42:39:e7:b5:81:e1:34:18:5a:ec:d1: ac:f6:2e:8f:12:c4:4d:ee:9d:0d:11:aa:80:e3:bf:02:c1:d1: 3a:39:44:b0:0c:62:f9:cf:93:f1:23:6d:f2:0b:fa:d1:75:09: 8f:be:9c:08:17:88:40:f8:2d:b9:7d:e1:8c:ef:f0:c5:4c:4c: b2:94:f7:d5:cb:c8:97:34:15:49:09:d6:a3:bc:4b:03:9c:62: 33:ac:0a:c9:45:ac:c1:7f:6f:44:96:48:4e:53:0c:5a:e4:55: 88:2d:5d:cc:fe:17:35:ec:66:66:f9:48:f4:f7:90:85:d3:7f: 8a:38:5f:23:22:58:fa:45:e7:6b:a0:36:48:53:a1:01:6e:f1: 6d:c3:f9:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjYwNzIyMTQyNTMyWhcNMjYwNzI5MTQyNTMyWjAYMRYwFAYD VQQDEw02YTYwZDJkYy1lMGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vpDrAkcQ4VjfuYRUdBDkhhato11hWgXhraZeLlFdaekZbunE5o4UrQQVfeC ZQUgaoln+TUJPp52wZ2yTKk/vcSAH2/cCUIiqc1lN3yBSdxXIL39oes58AXZsedu NJG8js/3MUTSAr+gVJfVSHWTdIGH1ocIYzUtksLZs/Ouy2qjz7K/n79GQqigTY8N orqkpV4BZ9SCxAxpFT664yQpZW0ZjSAU2FdgDAs8tSzWzMyc5EPZjd7wSXI9NX0T d3uVA6RfmQry7xnkjVIM26ydPxJY7zo3qM3hspuUXqkaiariwNFHRyGnslnmV/qf MGDe/Se+RChqH/HYw+RPGt8IjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGCQFeXf VFQq+vc+V/IByr7Q1ELfMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy8yQTU5NDBGMjRCQjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtE eFNVMEdNV0QwUE1iaEIxWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGWLGfv5zMahRGSBKX66hr5ID0c/38qlWgMtwJcGlU3UJ35LbdYYLbCvmlVg1 ilLT+Qm5cOAaMfx+Cy9LfXhL6ZTtCf9Dd2B4EtS2kMIsHZ5aBUtyEnYCaUVhwItG wIxp4iCEm7IPkZXxs+Kjx3Dhmios50I557WB4TQYWuzRrPYujxLETe6dDRGqgOO/ AsHROjlEsAxi+c+T8SNt8gv60XUJj76cCBeIQPgtuX3hjO/wxUxMspT31cvIlzQV SQnWo7xLA5xiM6wKyUWswX9vRJZITlMMWuRViC1dzP4XNexmZvlI9PeQhdN/ijhf IyJY+kXna6A2SFOhAW7xbcP5ig== -----END CERTIFICATE-----Generated at Thu Jul 23 21:50:22 2026 by rpki-client