$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft File: httX5pD30wkpOii6fFX7ivN9Xb0.mft (raw, json) Hash identifier: DXJofZXzqbE5wlDUPeTuXE4A2brjyRN1mPyjprTR044= Subject key identifier: DF:A3:27:E2:13:11:FC:66:A6:EF:5C:02:D0:FA:C7:66:01:F7:E2:68 Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Certificate serial: 386A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft Manifest number: 3764 Signing time: Wed 22 Jul 2026 14:34:53 +0000 Manifest this update: Wed 22 Jul 2026 14:34:53 +0000 Manifest next update: Wed 29 Jul 2026 14:34:53 +0000 Files and hashes: 1: httX5pD30wkpOii6fFX7ivN9Xb0.crl (hash: 9Tu5dTxagMyQoKtNEsOOmyN1MgOR92m+y6HlL6CgymQ=) 2: 0F0E88A6192F11F183D9B1FC303D8C67.roa (hash: 5aKDuZwd3Wn+m9JFqN35rRMwxZf4PwI1YL49pBMgje4=) 3: 3B8DEC18F67C11EFA12FD55AC4F9AE02.roa (hash: Zntrf+XRFU/LUFPqt460t/df6T24vxpmkd5azGcAX5E=) 4: 803E1FB4844611F18199E4686DA30FBC.roa (hash: fb/gMuY4GCBBcmZDDJjLxvs0FTK9CO7zdEHnqESTxOE=) 5: F24EEED208C011F19DFF611F213D8C67.roa (hash: j8mZP70/+lxFmxKK+gaXtA4vlgcSiykk11UZrhv9x1I=) 6: 15B06ACE01B211F1A8498BCA6C6F56BC.roa (hash: 5xNdDoLkpm/cKB7fxSHaoDjqTsi17ChXNYz70KIoKrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14442 (0x386a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Validity Not Before: Jul 22 14:34:53 2026 GMT Not After : Jul 29 14:34:53 2026 GMT Subject: CN=6a60d50d-a6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:0c:a7:70:19:4a:4a:a0:28:19:7d:12:e1: 66:67:cd:dc:a9:59:e0:d7:6e:f6:9d:c6:dd:99:95: 7c:77:f1:28:af:7b:bb:0a:1f:b4:44:66:1d:f6:5e: 56:e7:fb:36:83:9f:14:ee:62:27:e4:d3:1e:16:8e: b7:6d:5b:13:a8:4b:c6:7a:94:06:e9:4a:81:55:35: d0:d6:a0:b5:5a:0d:76:d3:6d:8d:79:d4:3f:cd:b1: c0:4f:3c:09:41:4a:58:a9:0c:de:2c:2c:85:23:45: c5:ab:82:4e:b3:39:6b:6e:0a:fa:c7:0a:e4:b2:88: 9a:c3:6b:61:ed:39:13:76:44:eb:e8:77:25:e2:8a: 8d:ee:27:98:a6:55:e8:fc:d2:1d:ed:6e:b1:dd:5e: 83:92:9a:8b:69:2c:d2:29:1e:8e:f9:73:2c:89:99: 24:3f:9e:de:ea:92:25:94:bc:36:cf:57:dc:09:a4: 72:b2:76:84:57:54:74:97:7a:36:f3:85:bf:7b:3b: 70:6f:d4:33:b9:b0:ab:be:f2:a2:e1:2c:47:b5:66: 9a:bd:ee:65:2b:3a:6f:37:d1:e1:d5:5f:e4:34:c9: 39:1d:3e:c3:66:97:93:6c:c6:e4:b0:2a:39:37:3a: 94:cb:53:5e:a0:dc:a9:62:e4:e5:12:3b:4b:ce:e8: 87:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A3:27:E2:13:11:FC:66:A6:EF:5C:02:D0:FA:C7:66:01:F7:E2:68 X509v3 Authority Key Identifier: keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:2d:d5:67:c3:6e:26:91:5d:13:2b:cd:9e:2d:ea:9d:68:59: 5b:b8:f0:62:8e:76:d4:bd:77:5d:5f:55:73:ba:51:8d:d1:14: 6a:c2:b3:4d:7f:da:17:7b:d0:23:ee:a7:d7:d7:7c:d5:60:7e: 80:66:27:a6:08:fa:ce:71:32:fb:c0:e7:83:5e:ff:af:7a:43: a1:4f:5f:be:e4:28:47:02:27:a7:ec:e2:e1:33:f1:31:8b:28: 6d:93:9d:26:f4:07:d4:13:63:98:e2:01:b7:2c:53:91:32:a6: fb:df:1e:b0:e7:c3:ca:b0:f1:d9:7d:99:ae:74:71:a4:06:cc: a0:ad:9d:af:4d:33:f5:b4:87:f1:0a:06:f4:8b:f8:6a:aa:05: ce:12:59:e5:26:6c:96:ce:a6:02:98:e7:ac:76:35:5a:f8:6e: 9e:f3:f1:5f:5d:9e:9e:82:f8:3b:6a:6d:b5:82:3d:13:98:2c: 04:5f:47:31:2f:7f:cf:68:8a:f0:ce:95:0d:38:71:b9:a5:1b: 37:0d:29:14:3f:85:43:c0:71:6d:e0:a9:a8:b5:98:68:4b:27: 65:8d:92:7e:8b:f2:67:24:91:e6:1d:76:9d:05:77:4d:de:1b: cd:fa:93:0f:37:ca:a2:a1:46:6b:2d:c2:26:6c:9e:e4:6a:c0: 16:c6:b8:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB RjM3RDVEQkQwHhcNMjYwNzIyMTQzNDUzWhcNMjYwNzI5MTQzNDUzWjAYMRYwFAYD VQQDEw02YTYwZDUwZC1hNmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvVMMp3AZSkqgKBl9EuFmZ83cqVng1272ncbdmZV8d/Eor3u7Ch+0RGYd9l5W 5/s2g58U7mIn5NMeFo63bVsTqEvGepQG6UqBVTXQ1qC1Wg12022NedQ/zbHATzwJ QUpYqQzeLCyFI0XFq4JOszlrbgr6xwrksoiaw2th7TkTdkTr6Hcl4oqN7ieYplXo /NId7W6x3V6DkpqLaSzSKR6O+XMsiZkkP57e6pIllLw2z1fcCaRysnaEV1R0l3o2 84W/eztwb9QzubCrvvKi4SxHtWaave5lKzpvN9Hh1V/kNMk5HT7DZpeTbMbksCo5 NzqUy1NeoNypYuTlEjtLzuiHdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+jJ+IT Efxmpu9cAtD6x2YB9+JoMB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTYwQS9COTk1M0RCQTFEOEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3 a3BPaWk2ZkZYN2l2TjlYYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtC3VZ8NuJpFdEyvNni3qnWhZW7jwYo521L13XV9Vc7pRjdEUasKzTX/aF3vQ I+6n19d81WB+gGYnpgj6znEy+8Dng17/r3pDoU9fvuQoRwInp+zi4TPxMYsobZOd JvQH1BNjmOIBtyxTkTKm+98esOfDyrDx2X2ZrnRxpAbMoK2dr00z9bSH8QoG9Iv4 aqoFzhJZ5SZsls6mApjnrHY1WvhunvPxX12enoL4O2pttYI9E5gsBF9HMS9/z2iK 8M6VDThxuaUbNw0pFD+FQ8BxbeCpqLWYaEsnZY2SfovyZySR5h12nQV3Td4bzfqT DzfKoqFGay3CJmye5GrAFsa4MQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:16:45 2026 by rpki-client