$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft File: pKVwtST2YpG2kJvyMTPV24NQQe0.mft (raw, json) Hash identifier: FML703zpnuDhioix8X9Zjt1uEXq+jJvJOt/bkYMS/j0= Subject key identifier: F3:B0:FA:1B:22:02:67:96:BD:4A:70:AC:99:27:93:3C:A0:EE:95:57 Authority key identifier: A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED Certificate issuer: /CN=A91A6C1A/serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft Manifest number: 1A Signing time: Thu 23 Jul 2026 11:04:55 +0000 Manifest this update: Thu 23 Jul 2026 11:04:55 +0000 Manifest next update: Thu 30 Jul 2026 11:04:55 +0000 Files and hashes: 1: pKVwtST2YpG2kJvyMTPV24NQQe0.crl (hash: COUTYYboJ3hmIlr3m1ovS838im4tSocbN0RWExgtF6A=) 2: 8B417B6064AA11F19AE9C6D58F47A888.roa (hash: p4PsoFtVmoyNxlXYNhF8Qpg25SbCbP43gXrqt/3vkfE=) 3: 694EC58664AE11F189DF701D9347A888.roa (hash: uf1w2K+QavHMr69P1XIOXrrKK1vFbrU3GZGJb7MtqTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6C1A, serialNumber=A4A570B524F66291B6909BF23133D5DB835041ED Validity Not Before: Jul 23 11:04:55 2026 GMT Not After : Jul 30 11:04:55 2026 GMT Subject: CN=6a61f557-406d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:64:84:6a:a9:90:ee:97:11:dd:0e:fa:df: 08:5a:7c:a2:be:73:be:be:0c:e7:80:04:91:f2:ad: 0d:e4:d0:03:59:bf:19:3b:82:87:e9:75:1a:c0:5a: bc:89:51:c8:7b:98:ae:d3:f6:7d:aa:0d:e5:46:ad: 19:48:ed:14:30:8e:28:aa:0c:f8:a4:36:a3:22:c3: 20:50:2b:51:e7:a1:93:c3:80:63:ee:e9:41:67:b5: 3b:af:1a:7b:81:09:30:e4:22:64:c2:9d:d9:31:dd: aa:85:bb:1b:21:ab:f6:20:cf:8f:0b:b8:8f:ba:64: c9:12:4b:15:58:7c:9b:e3:17:af:6d:8f:a5:e9:6c: da:2e:f6:f4:9f:cc:07:5b:88:05:3b:d8:3b:4a:10: 8a:e8:ce:0e:eb:2d:09:e1:21:e0:81:52:b2:a4:37: 69:d1:c4:45:ab:56:89:33:57:3a:f5:20:66:58:b5: 4c:f9:0b:b5:e4:9d:c4:3a:17:f4:82:42:ee:b7:3e: 47:16:b2:a4:a9:17:74:33:07:f3:05:9d:6c:03:4a: 25:a3:ab:a5:f4:43:7b:6b:53:97:4d:5a:f8:a3:5b: 56:61:88:c2:cf:b0:85:88:6d:24:9f:1d:df:3b:50: 62:ea:32:b7:5f:97:a5:31:a6:76:e5:b5:38:02:56: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B0:FA:1B:22:02:67:96:BD:4A:70:AC:99:27:93:3C:A0:EE:95:57 X509v3 Authority Key Identifier: keyid:A4:A5:70:B5:24:F6:62:91:B6:90:9B:F2:31:33:D5:DB:83:50:41:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pKVwtST2YpG2kJvyMTPV24NQQe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6C1A/E12C4CA464A911F1B65F56B28F47A888/pKVwtST2YpG2kJvyMTPV24NQQe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:04:d8:5a:52:07:5f:09:34:05:fc:ad:52:43:62:d9:c1:53: 07:4a:7d:89:1c:85:f2:b3:84:45:10:ec:c4:1b:ec:08:59:67: e3:0d:f7:9b:e5:02:ad:28:2b:42:ac:73:18:b8:30:96:87:64: 84:87:d0:38:a4:d3:13:4f:5a:d2:d1:53:c9:32:fb:d2:a6:a1: d2:6f:20:2f:be:cc:16:fd:66:ce:9d:7f:64:70:5f:23:0c:33: 26:0d:59:14:96:a5:2a:cb:48:41:65:bf:a9:27:84:33:89:79: 6c:77:58:58:fd:42:ae:48:42:a0:e8:c1:13:dd:96:2d:93:55: 8a:04:f5:5a:80:82:16:c2:0b:7c:6e:17:02:ba:d0:9c:cf:0e: c4:05:61:b7:0f:8a:94:d4:f1:97:d6:fe:62:62:e2:eb:3e:f3: f4:07:1f:7b:f5:d6:52:5c:83:33:52:a5:bd:a5:84:b3:8f:1f: ae:0c:67:d1:1a:09:4b:39:0f:81:44:d1:95:de:f6:cb:0e:c4: 08:84:f7:7c:f6:22:92:47:e0:d2:24:0d:76:ad:07:73:26:be: 8d:07:ae:a7:c7:0f:b2:40:bb:12:d8:d8:6d:40:06:5b:1c:16: e2:2d:45:97:1b:32:f0:b8:72:8a:d4:91:1d:ec:de:d1:8a:9c: 36:13:45:56 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkMxQTExMC8GA1UEBRMoQTRBNTcwQjUyNEY2NjI5MUI2OTA5QkYyMzEzM0Q1REI4 MzUwNDFFRDAeFw0yNjA3MjMxMTA0NTVaFw0yNjA3MzAxMTA0NTVaMBgxFjAUBgNV BAMTDTZhNjFmNTU3LTQwNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZZ2SEaqmQ7pcR3Q763whafKK+c76+DOeABJHyrQ3k0ANZvxk7gofpdRrAWryJ Uch7mK7T9n2qDeVGrRlI7RQwjiiqDPikNqMiwyBQK1HnoZPDgGPu6UFntTuvGnuB CTDkImTCndkx3aqFuxshq/Ygz48LuI+6ZMkSSxVYfJvjF69tj6XpbNou9vSfzAdb iAU72DtKEIrozg7rLQnhIeCBUrKkN2nRxEWrVokzVzr1IGZYtUz5C7XkncQ6F/SC Qu63PkcWsqSpF3QzB/MFnWwDSiWjq6X0Q3trU5dNWvijW1ZhiMLPsIWIbSSfHd87 UGLqMrdfl6UxpnbltTgCVvzhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU87D6GyIC Z5a9SnCsmSeTPKDulVcwHwYDVR0jBBgwFoAUpKVwtST2YpG2kJvyMTPV24NQQe0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2QzFBL0UxMkM0Q0E0NjRB OTExRjFCNjVGNTZCMjhGNDdBODg4L3BLVnd0U1QyWXBHMmtKdnlNVFBWMjROUVFl MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcEtWd3RTVDJZcEcya0p2eU1UUFYyNE5RUWUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 QzFBL0UxMkM0Q0E0NjRBOTExRjFCNjVGNTZCMjhGNDdBODg4L3BLVnd0U1QyWXBH MmtKdnlNVFBWMjROUVFlMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAeBNhaUgdfCTQF/K1SQ2LZwVMHSn2JHIXys4RFEOzEG+wIWWfjDfeb5QKtKCtC rHMYuDCWh2SEh9A4pNMTT1rS0VPJMvvSpqHSbyAvvswW/WbOnX9kcF8jDDMmDVkU lqUqy0hBZb+pJ4QziXlsd1hY/UKuSEKg6MET3ZYtk1WKBPVagIIWwgt8bhcCutCc zw7EBWG3D4qU1PGX1v5iYuLrPvP0Bx979dZSXIMzUqW9pYSzjx+uDGfRGglLOQ+B RNGV3vbLDsQIhPd89iKSR+DSJA12rQdzJr6NB66nxw+yQLsS2NhtQAZbHBbiLUWX GzLwuHKK1JEd7N7Ripw2E0VW -----END CERTIFICATE-----Generated at Thu Jul 23 23:41:29 2026 by rpki-client