$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft (raw, json) Hash identifier: Ae8JyFtCVaflwLaGpVPVZeC7cOi1n0v1ITwRI7yqk60= Subject key identifier: 63:B0:0E:C9:1B:CB:0E:4B:15:36:E2:43:03:D8:A4:51:2C:95:42:74 Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft Manifest number: 02C1 Signing time: Thu 23 Jul 2026 04:40:10 +0000 Manifest this update: Thu 23 Jul 2026 04:40:10 +0000 Manifest next update: Thu 30 Jul 2026 04:40:10 +0000 Files and hashes: 1: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl (hash: bxmHQ3lglklR+V/vFIWtNmBVJGPgIeXBMA9oiJpg/cs=) 2: 218937DC5E5011F0B9404662C4F9AE02.roa (hash: TfhxYXEuzGwCmeMd3nNc0DOls3QWgWihrLMEBQlhbYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Jul 23 04:40:10 2026 GMT Not After : Jul 30 04:40:10 2026 GMT Subject: CN=6a619b2a-6022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:70:19:d6:12:29:77:a0:e2:6f:40:5a:c5:36: 5c:34:50:8c:55:be:c6:05:1b:85:79:47:f3:63:f5: 73:3e:0e:76:bb:ec:52:8e:2d:76:b6:7c:39:36:3c: d9:ad:cc:83:6c:0d:a5:77:c5:32:31:d0:3a:31:1c: 36:88:4f:e3:9c:60:6a:70:c7:9e:f2:1a:e6:57:f3: 9d:12:bf:e4:1f:91:19:e7:08:ab:d2:a3:39:f0:18: 62:d8:68:88:ca:69:63:62:63:f7:ab:03:7e:9f:91: 71:7c:43:80:b0:ae:64:ec:bb:02:10:4b:a2:4b:8e: 4a:1d:3f:e9:88:65:6c:2d:3c:eb:ba:df:a1:2b:41: d2:cd:53:5d:67:00:c1:99:03:64:cd:01:23:d0:9b: 5e:c5:20:35:6c:e4:a8:56:a5:b8:6a:20:5b:ca:d4: fb:03:35:ed:88:45:60:f7:08:8f:ba:20:31:8c:7f: c3:a2:37:62:b1:1f:55:a0:6d:f9:89:cb:43:05:35: 79:0b:08:79:36:b9:6d:ee:ed:3a:17:c5:4c:ab:6c: 16:62:c2:37:cb:92:8e:a8:e0:ca:bf:71:1e:df:d6: 60:c1:82:d9:f7:a2:e3:d6:0b:bf:89:b5:12:13:f7: 14:cc:be:76:96:d0:67:45:df:28:55:24:ba:68:da: 78:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B0:0E:C9:1B:CB:0E:4B:15:36:E2:43:03:D8:A4:51:2C:95:42:74 X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:97:2b:5b:91:6e:c3:5b:58:d6:2f:2c:6d:8f:3f:06:88:75: e5:ea:12:24:b4:74:15:ee:4e:c9:76:a3:37:d1:b9:31:09:62: bf:c0:db:93:17:d0:3e:04:ca:c6:7e:41:fb:09:47:2e:00:e6: b6:63:42:9c:94:4b:dd:1f:a7:4b:c3:eb:e8:ff:09:26:cb:d1: 9c:72:52:88:45:54:3e:94:12:94:da:d2:eb:de:14:8a:f1:fe: c6:e5:6f:57:c8:01:07:ac:93:03:b9:12:71:f8:b9:61:7d:83: b4:cf:d6:ca:15:34:42:0d:4b:3d:0f:e5:93:c2:4c:6a:06:50: 31:02:33:4f:01:66:2b:e4:3e:e8:f6:30:e7:6b:ae:5f:ad:8a: 4e:2c:34:f0:6c:a1:eb:52:fe:e8:24:d9:ad:66:9e:ba:52:67: 67:21:8c:a5:9d:66:1f:be:0b:24:f0:a8:88:c3:18:47:96:d9: ce:b2:ab:d6:21:d2:41:e9:1e:a9:fc:f0:a3:52:27:d1:e7:de: 38:1f:16:8a:a8:6e:3d:23:81:fa:31:24:06:4e:af:e1:99:6a: 9d:00:5d:e3:92:23:06:27:c1:e9:8e:2f:3b:75:6a:0f:d5:1a: dd:e1:66:aa:79:ba:be:3a:11:8d:6b:f3:df:ca:52:a2:3a:0f: ed:4a:ac:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDA4Nzc3RkEzODFCRjI1OEUwQ0FDMzdENTA5RUYwQkFD NzA2NjQ4NDQwHhcNMjYwNzIzMDQ0MDEwWhcNMjYwNzMwMDQ0MDEwWjAYMRYwFAYD VQQDEw02YTYxOWIyYS02MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXAZ1hIpd6Dib0BaxTZcNFCMVb7GBRuFeUfzY/VzPg52u+xSji12tnw5NjzZ rcyDbA2ld8UyMdA6MRw2iE/jnGBqcMee8hrmV/OdEr/kH5EZ5wir0qM58Bhi2GiI ymljYmP3qwN+n5FxfEOAsK5k7LsCEEuiS45KHT/piGVsLTzrut+hK0HSzVNdZwDB mQNkzQEj0JtexSA1bOSoVqW4aiBbytT7AzXtiEVg9wiPuiAxjH/DojdisR9VoG35 ictDBTV5Cwh5Nrlt7u06F8VMq2wWYsI3y5KOqODKv3Ee39ZgwYLZ96Lj1gu/ibUS E/cUzL52ltBnRd8oVSS6aNp4MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOwDskb yw5LFTbiQwPYpFEslUJ0MB8GA1UdIwQYMBaAFAh3f6OBvyWODKw31QnvC6xwZkhE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZNE1yRGZWQ2U4THJIQm1T RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZ NE1yRGZWQ2U4THJIQm1TRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANZcrW5Fuw1tY1i8sbY8/Boh15eoSJLR0Fe5OyXajN9G5MQliv8DbkxfQPgTK xn5B+wlHLgDmtmNCnJRL3R+nS8Pr6P8JJsvRnHJSiEVUPpQSlNrS694UivH+xuVv V8gBB6yTA7kScfi5YX2DtM/WyhU0Qg1LPQ/lk8JMagZQMQIzTwFmK+Q+6PYw52uu X62KTiw08Gyh61L+6CTZrWaeulJnZyGMpZ1mH74LJPCoiMMYR5bZzrKr1iHSQeke qfzwo1In0efeOB8WiqhuPSOB+jEkBk6v4ZlqnQBd45IjBifB6Y4vO3VqD9Ua3eFm qnm6vjoRjWvz38pSojoP7UqsYg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:16:20 2026 by rpki-client