$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft File: UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json) Hash identifier: JtQvatkiWUkq1tHgNyULLqA1BfGh1BUziL+bVkBTKOg= Subject key identifier: 03:BF:55:18:9C:58:F5:B9:C7:80:C1:D9:A5:54:2F:3B:6F:0E:85:4C Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 Certificate issuer: /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Certificate serial: 0BEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft Manifest number: 0BC3 Signing time: Wed 22 Jul 2026 19:23:29 +0000 Manifest this update: Wed 22 Jul 2026 19:23:29 +0000 Manifest next update: Wed 29 Jul 2026 19:23:29 +0000 Files and hashes: 1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: GNJQBV7IPcp5RS/qHY1o88DRbP1bVOj3AemnvOTQE4k=) 2: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: y3tBCZ/zj5uXK4iELgDoXwmRBCPYOm3bLLdNGBDaIUc=) 3: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: GKFcFl36b7LnjNX4oCJ7zVjBqwtdvTCKUrd14r3mvVc=) 4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: STVj2nhR43tdaUjvSJVzwF108t0kdD6iF4pS76haPJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:23:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3051 (0xbeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266 Validity Not Before: Jul 22 19:23:29 2026 GMT Not After : Jul 29 19:23:29 2026 GMT Subject: CN=6a6118b1-fc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:94:21:86:3d:4a:90:f3:a5:e9:a6:b4:7b:8a: 79:09:b0:20:9a:ec:4f:35:42:a0:ed:33:39:21:b8: 12:74:2b:25:5a:45:52:b5:1f:bc:fa:23:f7:e4:52: a2:ae:2b:cb:40:b7:21:c5:e8:27:88:e8:ee:d3:eb: 55:47:6e:aa:09:a2:1f:52:72:70:26:24:9e:d1:59: 69:52:56:0b:72:df:9d:68:03:20:5a:46:e2:8e:a4: f9:79:e9:1c:52:42:98:29:7e:23:f9:3e:23:5d:61: 1d:60:b7:3a:fc:6c:bd:92:2d:95:26:40:9b:2f:f2: 46:e7:f1:c5:4f:69:ee:70:16:1e:e1:da:70:c2:c0: f7:18:87:1c:c8:43:db:8c:20:cd:c9:d9:9d:5a:68: 20:45:ef:ce:2a:ca:df:13:35:77:c1:60:ce:99:b5: 34:d9:8b:7a:5f:cf:ab:8c:a2:25:23:e2:40:ee:0f: 8d:bc:19:7b:a4:b7:b8:90:94:fa:a0:b4:bf:e3:7d: a5:3f:0d:fc:41:18:16:c8:2b:ae:ee:e3:38:4d:a6: 12:9c:03:8e:aa:96:07:f3:49:b5:b4:b6:49:dd:c9: 76:b1:2d:74:54:7f:7a:13:b4:01:5b:3f:03:16:b9: 7f:40:d2:a6:d8:16:2f:7e:78:ca:2b:4d:94:e4:d2: 88:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BF:55:18:9C:58:F5:B9:C7:80:C1:D9:A5:54:2F:3B:6F:0E:85:4C X509v3 Authority Key Identifier: keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:7b:2c:57:47:81:d1:c0:e4:20:6f:20:f1:46:d4:f5:8c:48: 84:ba:6e:4e:de:8c:8b:8a:0c:94:d7:89:a1:6c:c0:ef:34:51: ac:fb:eb:02:f4:2e:a5:ce:d9:c9:ec:a7:85:a5:14:fb:e6:ba: 78:2b:2e:c0:4c:da:56:92:38:51:4f:db:00:43:b9:1b:60:93: 78:8a:d4:58:67:3b:2c:b2:90:84:ca:19:d5:c0:3b:52:68:71: 22:eb:63:f1:db:66:57:50:a5:d6:8e:9e:c4:28:42:68:7b:90: 63:3a:78:a3:70:52:10:ff:2a:e5:6f:b1:e1:63:fb:3c:f2:94: 82:6b:61:67:96:7f:d5:db:ee:ac:96:ef:90:90:83:a6:86:c6: 48:20:52:b7:11:f8:7f:49:99:ed:0f:60:c2:7e:df:44:01:ba: 57:0a:24:3a:1b:0f:60:e0:4b:c2:25:9c:6f:34:12:ff:a7:02: c3:6b:2e:cc:6b:4d:d8:46:bc:81:b9:f0:62:5d:58:af:7e:04: 9a:ff:00:82:67:96:06:e5:27:e3:2c:0f:22:e7:24:ec:80:77: 14:97:d7:c5:75:f5:5c:1c:34:44:13:d0:04:7c:db:20:8b:55: 13:dc:9a:48:1c:9f:6a:96:1c:04:2f:cb:65:b2:dc:6e:12:ef: 4d:9e:d4:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx RjFEMzMyNjYwHhcNMjYwNzIyMTkyMzI5WhcNMjYwNzI5MTkyMzI5WjAYMRYwFAYD VQQDEw02YTYxMThiMS1mYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpQhhj1KkPOl6aa0e4p5CbAgmuxPNUKg7TM5IbgSdCslWkVStR+8+iP35FKi rivLQLchxegniOju0+tVR26qCaIfUnJwJiSe0VlpUlYLct+daAMgWkbijqT5eekc UkKYKX4j+T4jXWEdYLc6/Gy9ki2VJkCbL/JG5/HFT2nucBYe4dpwwsD3GIccyEPb jCDNydmdWmggRe/OKsrfEzV3wWDOmbU02Yt6X8+rjKIlI+JA7g+NvBl7pLe4kJT6 oLS/432lPw38QRgWyCuu7uM4TaYSnAOOqpYH80m1tLZJ3cl2sS10VH96E7QBWz8D Frl/QNKm2BYvfnjKK02U5NKIHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAO/VRic WPW5x4DB2aVULztvDoVMMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV bFFvNXc5RXdsS2NmSFRNbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF3ssV0eB0cDkIG8g8UbU9YxIhLpuTt6Mi4oMlNeJoWzA7zRRrPvrAvQupc7Z yeynhaUU++a6eCsuwEzaVpI4UU/bAEO5G2CTeIrUWGc7LLKQhMoZ1cA7UmhxIutj 8dtmV1Cl1o6exChCaHuQYzp4o3BSEP8q5W+x4WP7PPKUgmthZ5Z/1dvurJbvkJCD pobGSCBStxH4f0mZ7Q9gwn7fRAG6VwokOhsPYOBLwiWcbzQS/6cCw2suzGtN2Ea8 gbnwYl1Yr34Emv8AgmeWBuUn4ywPIuck7IB3FJfXxXX1XBw0RBPQBHzbIItVE9ya SByfapYcBC/LZbLcbhLvTZ7UyQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:19:42 2026 by rpki-client