$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: Bg3VgA+PMOkf5OUNN7ChsZ7QiYSGXCPENeRUXrg40g4= Subject key identifier: 36:DC:17:C2:88:CF:3B:71:32:9F:70:7C:26:15:BD:7A:56:76:06:E0 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0DBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0DB2 Signing time: Wed 22 Jul 2026 18:07:59 +0000 Manifest this update: Wed 22 Jul 2026 18:07:59 +0000 Manifest next update: Wed 29 Jul 2026 18:07:59 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: rZtCKGSn7AgR6xbuHZU8GSOctIU5Fw5+C7Z3rw5YH18=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: oix3uz2iO7DhsNaPKdZjSYeOooosW/vMEsfqrJxUpws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:07:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3518 (0xdbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Jul 22 18:07:59 2026 GMT Not After : Jul 29 18:07:59 2026 GMT Subject: CN=6a6106ff-a542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:f9:fb:57:3d:b4:09:77:4a:d7:a3:f1:35: f2:71:d3:2d:dc:fb:a4:56:0c:d8:14:92:70:f6:47: 1b:e7:5a:8c:fd:ae:51:db:79:90:ff:0b:4e:72:11: 4c:a5:c1:6d:e3:25:a6:38:3e:51:2f:e3:21:3f:5f: f7:e0:72:ab:49:da:bd:81:4a:40:e5:86:07:eb:e7: b8:d9:ad:b0:1e:56:6d:00:3d:39:e3:04:85:12:59: 79:d4:6d:3f:b3:ca:7b:0b:4f:dc:5e:3b:f6:51:95: 45:8c:8c:3b:50:5e:ec:10:4c:2a:6f:ca:93:ca:50: d7:09:87:27:16:29:4c:fc:91:8d:f2:a5:71:35:2f: 79:15:91:47:d7:2a:9c:4c:81:69:e1:94:72:ef:8c: 9f:b7:0d:50:e3:b5:26:29:ed:82:9b:d9:71:4e:72: d1:e1:ec:55:e1:5f:29:37:7f:9b:0b:1c:78:84:03: fc:69:fa:36:d0:01:98:92:6e:af:70:93:1f:1a:fa: 27:cc:47:e6:12:46:f9:3b:02:d8:eb:63:9a:86:d0: 40:50:31:83:98:89:e4:c1:eb:30:db:86:0d:a7:d6: 09:dd:38:ab:71:68:11:82:01:18:31:42:97:97:9a: aa:8a:94:4b:e9:59:1f:7e:b8:f8:0c:de:9c:6a:61: d1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DC:17:C2:88:CF:3B:71:32:9F:70:7C:26:15:BD:7A:56:76:06:E0 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:7d:75:f7:cb:27:e1:ff:7b:bf:4a:8d:55:07:52:24:66:84: 95:6d:ba:23:22:8e:fc:39:fb:cc:2e:d7:d4:9a:e6:79:b1:db: c6:e1:32:30:99:9f:53:31:b0:d7:f0:ea:27:3f:da:86:d2:31: e0:02:79:35:0d:cd:36:7b:4d:be:b3:f4:05:78:33:11:a6:76: bd:54:73:13:28:96:e1:b1:23:94:8e:12:70:ae:2d:e1:8e:1a: 07:d3:97:67:b3:f7:48:bb:83:6f:94:23:b0:61:de:22:95:ae: 11:d9:1c:9b:91:49:e6:7d:47:ee:12:4d:53:66:21:f7:be:f0: 4d:31:a3:1e:26:c8:43:19:28:4b:42:da:ba:23:1f:db:63:63: 56:6b:12:5d:10:8b:e4:c0:05:bf:43:c9:c5:dc:36:15:24:71: 80:2c:77:82:2e:6d:1c:5c:64:83:51:b2:a8:67:ed:25:55:8b: b6:b3:39:0f:6c:4b:11:12:62:79:72:c3:0a:6f:06:c3:7d:01: 8a:ee:94:5d:19:8d:1d:bb:4a:aa:a6:cf:01:c1:62:0d:46:61: e3:7a:10:31:ff:52:10:56:19:16:67:eb:79:c1:10:53:53:73: b5:da:8c:75:ef:34:4e:14:f8:77:97:32:08:a9:3c:7e:c5:4d: e3:f6:a4:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjYwNzIyMTgwNzU5WhcNMjYwNzI5MTgwNzU5WjAYMRYwFAYD VQQDEw02YTYxMDZmZi1hNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssf5+1c9tAl3Stej8TXycdMt3PukVgzYFJJw9kcb51qM/a5R23mQ/wtOchFM pcFt4yWmOD5RL+MhP1/34HKrSdq9gUpA5YYH6+e42a2wHlZtAD054wSFEll51G0/ s8p7C0/cXjv2UZVFjIw7UF7sEEwqb8qTylDXCYcnFilM/JGN8qVxNS95FZFH1yqc TIFp4ZRy74yftw1Q47UmKe2Cm9lxTnLR4exV4V8pN3+bCxx4hAP8afo20AGYkm6v cJMfGvonzEfmEkb5OwLY62OahtBAUDGDmInkwesw24YNp9YJ3TircWgRggEYMUKX l5qqipRL6Vkffrj4DN6camHRDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbcF8KI zztxMp9wfCYVvXpWdgbgMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtH1198sn4f97v0qNVQdSJGaElW26IyKO/Dn7zC7X1JrmebHbxuEyMJmfUzGw 1/DqJz/ahtIx4AJ5NQ3NNntNvrP0BXgzEaZ2vVRzEyiW4bEjlI4ScK4t4Y4aB9OX Z7P3SLuDb5QjsGHeIpWuEdkcm5FJ5n1H7hJNU2Yh977wTTGjHibIQxkoS0LauiMf 22NjVmsSXRCL5MAFv0PJxdw2FSRxgCx3gi5tHFxkg1GyqGftJVWLtrM5D2xLERJi eXLDCm8Gw30Biu6UXRmNHbtKqqbPAcFiDUZh43oQMf9SEFYZFmfrecEQU1NztdqM de80ThT4d5cyCKk8fsVN4/akHg== -----END CERTIFICATE-----Generated at Fri Jul 24 13:00:51 2026 by rpki-client