$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: JVQyaiN+QMMcw7LjDUH05oE5VTbYRW2uYDUpO2fVsxI= Subject key identifier: 56:9B:C9:A8:B7:3E:EB:9D:A5:13:47:28:DE:AC:81:A2:DA:33:F8:85 Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 04A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 0499 Signing time: Thu 23 Jul 2026 00:49:36 +0000 Manifest this update: Thu 23 Jul 2026 00:49:36 +0000 Manifest next update: Thu 30 Jul 2026 00:49:36 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: pxLtdkexlo3Uj0wKU49rmTeicokAyl7rG51vxzewltY=) 2: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=) 3: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1190 (0x4a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Jul 23 00:49:36 2026 GMT Not After : Jul 30 00:49:36 2026 GMT Subject: CN=6a616520-fe7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:0c:9f:af:7b:18:5f:dc:57:f8:1d:b8:4e: 0d:d3:b5:3c:af:97:11:dd:cb:1d:58:92:9e:c0:86: 38:d5:b9:d7:5c:d1:22:05:17:0e:26:33:ca:b7:51: 7b:34:14:54:e5:3e:31:3e:60:2e:0b:07:13:2d:cd: b3:f1:bc:c7:8c:30:7a:c8:f2:e9:3b:7f:50:d7:c7: 6a:ee:56:05:3c:66:9c:5c:6f:d3:b4:5e:ab:e3:b6: 7f:79:e2:ec:fe:66:d1:5a:d5:38:b9:9a:5e:9d:03: cd:89:48:05:d3:d2:b5:26:78:65:cf:5c:d5:b6:e4: f3:29:38:6a:bf:c2:f4:2d:ec:6b:27:6a:51:40:6d: e7:bb:65:68:ca:33:ec:ad:6f:01:f8:d3:a6:57:44: 68:8c:f2:93:9c:82:c1:ac:3d:35:97:4f:9f:24:fa: c0:a9:c3:4c:15:42:5f:c6:dc:ea:bc:b2:1b:2e:6a: 16:b6:ea:5a:1c:b3:b6:eb:db:64:83:96:2c:b9:2c: d9:e1:df:6e:77:37:49:0d:11:3e:6a:55:d3:65:40: 6a:9f:da:a2:62:23:89:1a:b3:91:06:c9:fe:0e:22: c5:a2:27:37:40:18:5b:28:6e:de:b5:fe:10:5e:d0: c2:d3:ce:c2:84:0f:d4:a8:1d:d1:d2:92:7d:1f:44: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:9B:C9:A8:B7:3E:EB:9D:A5:13:47:28:DE:AC:81:A2:DA:33:F8:85 X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:35:0f:d6:e3:99:75:58:d0:d8:32:18:4f:30:a9:eb:e2:26: d4:a8:ce:d4:ae:fe:f7:91:44:80:ad:86:ac:95:02:0b:da:bf: af:0f:ed:5e:6b:94:19:06:00:e3:ae:a0:33:1f:de:99:6f:74: 44:15:62:b3:81:fd:f2:e3:24:49:42:eb:88:93:68:1a:aa:25: 76:ee:68:a3:e3:89:a1:f3:6f:29:98:55:95:c3:47:86:b2:4c: ef:aa:71:de:fe:b5:95:a8:80:ef:b4:5c:7b:8e:16:fd:4d:e9: a1:f0:09:8b:66:eb:9b:d0:5e:a2:d0:01:b6:ba:a4:1f:39:8b: 90:39:69:30:3d:f2:ef:0f:ae:9b:45:2b:87:93:0e:bd:11:00: a3:f8:32:cf:8a:92:59:86:79:51:e4:0d:e5:e9:38:9a:95:eb: a7:7b:d8:36:26:91:ef:31:0e:bb:7a:b2:3e:a5:41:87:c3:6f: d7:72:9c:ee:99:d1:63:fc:8f:5b:6a:54:d7:65:ce:a2:ed:74: 3d:91:b5:26:1d:c2:08:b3:f2:f0:4f:27:66:98:4f:31:e5:2a: 6c:1f:ed:9d:d2:6f:9f:c0:df:c8:7c:f4:ff:d1:dc:9a:c0:b0: 7f:93:d8:77:b9:d8:a4:07:04:df:49:5f:8a:09:4f:32:d4:c4: f2:0a:c2:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjYwNzIzMDA0OTM2WhcNMjYwNzMwMDA0OTM2WjAYMRYwFAYD VQQDEw02YTYxNjUyMC1mZTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ywMn697GF/cV/gduE4N07U8r5cR3csdWJKewIY41bnXXNEiBRcOJjPKt1F7 NBRU5T4xPmAuCwcTLc2z8bzHjDB6yPLpO39Q18dq7lYFPGacXG/TtF6r47Z/eeLs /mbRWtU4uZpenQPNiUgF09K1Jnhlz1zVtuTzKThqv8L0LexrJ2pRQG3nu2VoyjPs rW8B+NOmV0RojPKTnILBrD01l0+fJPrAqcNMFUJfxtzqvLIbLmoWtupaHLO269tk g5YsuSzZ4d9udzdJDRE+alXTZUBqn9qiYiOJGrORBsn+DiLFoic3QBhbKG7etf4Q XtDC087ChA/UqB3R0pJ9H0RmNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFabyai3 PuudpRNHKN6sgaLaM/iFMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABDUP1uOZdVjQ2DIYTzCp6+Im1KjO1K7+95FEgK2GrJUCC9q/rw/tXmuUGQYA 466gMx/emW90RBVis4H98uMkSULriJNoGqoldu5oo+OJofNvKZhVlcNHhrJM76px 3v61laiA77Rce44W/U3pofAJi2brm9BeotABtrqkHzmLkDlpMD3y7w+um0Urh5MO vREAo/gyz4qSWYZ5UeQN5ek4mpXrp3vYNiaR7zEOu3qyPqVBh8Nv13Kc7pnRY/yP W2pU12XOou10PZG1Jh3CCLPy8E8nZphPMeUqbB/tndJvn8DfyHz0/9HcmsCwf5PY d7nYpAcE30lfiglPMtTE8grCBg== -----END CERTIFICATE-----Generated at Thu Jul 23 23:03:15 2026 by rpki-client