$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: UMnM1/EtQQUj2Cx44kTvwakrTbxajKCm1IrGqdiqGwc= Subject key identifier: 76:D9:D1:41:1A:67:73:0D:9E:52:0A:52:A4:C6:B1:82:FB:10:B2:88 Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 0698 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 0687 Signing time: Wed 22 Jul 2026 23:14:57 +0000 Manifest this update: Wed 22 Jul 2026 23:14:56 +0000 Manifest next update: Wed 29 Jul 2026 23:14:56 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: qkoDpVwBw22WMwkgqms04RsZ1bBheqFc+2y7PbvbUBY=) 2: 324C60ACDD2211F0BB0B52AC636F56BC.roa (hash: DeEQGurqm7eSpSsYzXwNaAtssPLf2RiuTFIL21AIcCE=) 3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: BIoQ+elASRB2TiBp78lt2ETWeyKSdC3Iplvz/Xmhi9o=) 4: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: Zg+eHPdVNDM4QI8KEgw81Og4McuXzxsHfkNcln3oKOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Jul 22 23:14:56 2026 GMT Not After : Jul 29 23:14:56 2026 GMT Subject: CN=6a614ef1-f9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a0:92:6f:36:9c:5a:cc:ed:b3:01:88:79:1e: 94:40:57:98:99:ba:84:7f:2c:66:c8:48:24:a0:05: 2d:a1:83:f3:20:54:37:f0:e1:bc:2c:be:b5:3a:a7: 76:82:62:77:a3:07:7c:21:3e:3b:e0:e1:b7:6b:92: fc:7b:49:89:90:03:9c:57:e8:25:d1:bf:65:98:9e: 1d:28:0e:cb:65:b3:75:11:52:06:8b:3f:d4:70:ea: 5f:a5:52:23:3e:85:ac:d3:17:89:e1:3f:c2:ff:2d: 08:1c:28:80:87:4d:6a:4d:59:6d:0f:5c:df:80:c6: 20:d2:4c:bc:20:67:ec:2b:00:af:3b:e4:79:ff:13: 4e:15:33:c8:df:9b:e2:82:22:40:0e:27:1f:e7:92: 16:f3:94:f7:2a:d0:22:05:63:ac:7c:58:0c:dc:44: 15:1d:95:e0:e5:6d:51:ff:99:63:84:dd:be:f5:fc: e3:cb:85:a6:c2:5b:d4:45:05:03:3e:ff:08:ee:6c: 26:01:36:3e:07:00:01:c2:52:0b:80:08:58:90:45: 5c:b5:b0:a6:80:87:ce:a7:d9:9f:58:e9:e2:e9:b0: 02:cd:c5:69:d2:3b:5a:49:7b:5f:ee:5c:c4:46:91: 1e:b6:af:74:f7:ff:c6:cc:77:71:97:b4:36:b0:02: f0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D9:D1:41:1A:67:73:0D:9E:52:0A:52:A4:C6:B1:82:FB:10:B2:88 X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:53:55:93:67:39:51:e7:bc:e0:3a:4a:6a:f5:61:c9:56:62: 8e:61:cf:f4:83:78:86:6e:d4:35:98:6a:04:48:82:37:33:9e: 96:df:12:96:f4:2c:d5:51:a2:af:cc:69:87:19:47:73:6c:b5: 41:51:3c:87:03:de:03:db:81:c2:82:88:e1:f6:88:63:99:ac: 1c:80:bc:37:13:f4:0c:e8:a9:29:9d:83:51:99:0d:19:af:68: d9:09:ac:0c:3c:3b:ff:f7:11:fc:43:af:1c:40:1b:ef:43:93: e7:43:1a:f0:79:86:f4:7c:24:d7:a5:d7:d5:29:34:47:69:c2: 5c:15:7c:d8:00:a0:22:65:14:be:9b:57:a9:3c:17:dc:e7:f1: 80:59:98:1f:4c:a9:a7:56:22:c7:ed:d8:c2:11:3a:0c:ea:cc: 7b:5e:95:fb:b6:87:f8:36:93:ee:18:1a:a9:a3:bf:76:65:41: 13:e9:f8:54:76:5d:4b:57:ba:4f:1e:cb:6a:b1:0a:76:d8:b1: 2d:85:b6:77:36:b8:0a:e8:7a:d1:f1:a9:98:ae:3f:50:d5:ca: 8f:7f:c0:94:e8:0a:6d:b5:a8:82:b9:2f:81:35:97:ed:c3:7b: e9:52:25:28:b6:f9:c6:78:72:33:99:db:d0:b9:0a:46:23:35: 7d:37:4f:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjYwNzIyMjMxNDU2WhcNMjYwNzI5MjMxNDU2WjAYMRYwFAYD VQQDEw02YTYxNGVmMS1mOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqCSbzacWsztswGIeR6UQFeYmbqEfyxmyEgkoAUtoYPzIFQ38OG8LL61Oqd2 gmJ3owd8IT474OG3a5L8e0mJkAOcV+gl0b9lmJ4dKA7LZbN1EVIGiz/UcOpfpVIj PoWs0xeJ4T/C/y0IHCiAh01qTVltD1zfgMYg0ky8IGfsKwCvO+R5/xNOFTPI35vi giJADicf55IW85T3KtAiBWOsfFgM3EQVHZXg5W1R/5ljhN2+9fzjy4WmwlvURQUD Pv8I7mwmATY+BwABwlILgAhYkEVctbCmgIfOp9mfWOni6bACzcVp0jtaSXtf7lzE RpEetq909//GzHdxl7Q2sALwnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbZ0UEa Z3MNnlIKUqTGsYL7ELKIMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS1NVk2c5Uee84DpKavVhyVZijmHP9IN4hm7UNZhqBEiCNzOelt8SlvQs1VGi r8xphxlHc2y1QVE8hwPeA9uBwoKI4faIY5msHIC8NxP0DOipKZ2DUZkNGa9o2Qms DDw7//cR/EOvHEAb70OT50Ma8HmG9Hwk16XX1Sk0R2nCXBV82ACgImUUvptXqTwX 3OfxgFmYH0ypp1Yix+3YwhE6DOrMe16V+7aH+DaT7hgaqaO/dmVBE+n4VHZdS1e6 Tx7LarEKdtixLYW2dza4Cuh60fGpmK4/UNXKj3/AlOgKbbWogrkvgTWX7cN76VIl KLb5xnhyM5nb0LkKRiM1fTdPSw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:02:50 2026 by rpki-client