$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: 7+7PqamjG+mo4sFytM5K+4R1YiPdZTAVdPkAkKc+BiE= Subject key identifier: 5B:D7:3A:49:55:FE:21:6F:29:6B:95:C9:83:11:D6:83:D5:A1:FC:12 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 02C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 02B3 Signing time: Thu 23 Jul 2026 02:35:35 +0000 Manifest this update: Thu 23 Jul 2026 02:35:35 +0000 Manifest next update: Thu 30 Jul 2026 02:35:35 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: yTpr1T0yOUV0yjUOiZ84/iiGp3BNEN7z0CSzuNd/4A8=) 2: 8F14EDAA70B911EDB6E1F81BC4F9AE02.roa (hash: niAe7uFd21HH6WERU7iTs3hEOi8m5PmAvBhzB5K4rB0=) 3: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: P6xx3LV0yIZz7Bt3wASwzM1QkFL56uH39jrYrM1xsJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 709 (0x2c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Jul 23 02:35:35 2026 GMT Not After : Jul 30 02:35:35 2026 GMT Subject: CN=6a617df7-16cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:34:67:fa:75:3e:e9:45:47:05:63:42:6f:8b: 41:32:50:07:b6:27:55:a6:48:19:e1:16:db:a6:df: 58:78:7d:ed:00:b7:75:eb:4e:62:b2:e1:8f:80:58: dd:f4:49:f7:7b:fe:bc:82:6e:b8:ec:40:3e:4e:f3: cb:8d:b3:c4:13:1d:c7:33:ab:58:12:f9:e0:18:53: b5:6f:88:3c:af:eb:19:62:44:cc:8d:60:32:20:65: 60:95:71:8f:b4:78:59:3b:d3:3f:80:d8:2f:81:96: 3e:d4:03:12:8a:2b:e4:15:82:d5:30:3f:e2:0e:fa: dc:3d:b1:e4:82:be:29:1e:0b:63:c2:fb:f2:9d:99: eb:a8:a7:0a:db:c7:e0:11:e2:00:bf:e7:71:92:a7: 35:8c:e0:71:33:bf:ab:ed:c1:e7:d7:4f:f1:7e:68: 87:fc:b6:1d:9c:b2:b0:97:63:78:bf:0f:63:99:b8: 44:c6:3a:ae:70:8c:0a:ce:1b:94:88:c9:1e:06:6c: 57:07:55:fb:05:4d:f2:47:9e:b2:27:62:0b:74:44: 79:73:15:46:81:36:7e:ab:83:74:7b:06:49:fb:2e: 15:3c:c0:bc:1d:83:53:13:02:e1:27:98:c3:92:bd: b3:6c:a0:17:a4:1c:d3:dc:a6:c8:16:9d:e1:f6:7b: 5d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D7:3A:49:55:FE:21:6F:29:6B:95:C9:83:11:D6:83:D5:A1:FC:12 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:4c:19:13:7f:61:ff:f8:ee:13:68:cc:84:08:af:16:18:f1: f7:f4:d1:f2:c2:c4:fa:a6:1c:a9:da:53:d4:49:f7:a5:e7:66: a6:cd:90:e7:53:6a:fb:86:7d:c2:46:ac:fa:99:10:89:06:e9: 3a:06:58:2d:8d:25:c9:0a:fa:fb:11:7e:a7:9a:5f:79:66:28: ef:67:a5:44:d7:aa:10:0d:40:10:55:99:63:2f:6f:27:1d:75: 6b:6e:cf:96:b5:f0:02:bc:13:59:24:21:06:2b:9a:0b:40:a0: ff:f3:76:7f:b3:ae:e0:03:27:a1:e3:8e:d6:52:fa:a3:6f:80: 17:c0:53:a5:ff:ad:9a:1d:42:94:89:b8:2d:3a:ea:e0:2f:33: c8:86:bd:4e:7f:43:9b:5b:13:8d:ab:c4:08:40:f9:96:e2:4f: 59:87:7e:ff:09:bf:18:73:99:67:1c:bb:30:87:98:82:b0:78: ae:a0:e4:58:a1:87:2e:b8:fb:fc:59:a0:24:12:2a:b6:b8:13: 61:3c:df:be:bb:8c:0b:d3:4e:27:0e:c3:39:ad:87:06:ae:d3: 64:29:36:a0:f2:f0:15:64:85:50:a3:2b:46:5b:70:27:c4:0a: c8:3e:1c:9e:2d:54:de:6d:9e:86:99:ea:7f:05:77:c1:67:4c: 63:d2:db:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjYwNzIzMDIzNTM1WhcNMjYwNzMwMDIzNTM1WjAYMRYwFAYD VQQDEw02YTYxN2RmNy0xNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiTRn+nU+6UVHBWNCb4tBMlAHtidVpkgZ4Rbbpt9YeH3tALd1605isuGPgFjd 9En3e/68gm647EA+TvPLjbPEEx3HM6tYEvngGFO1b4g8r+sZYkTMjWAyIGVglXGP tHhZO9M/gNgvgZY+1AMSiivkFYLVMD/iDvrcPbHkgr4pHgtjwvvynZnrqKcK28fg EeIAv+dxkqc1jOBxM7+r7cHn10/xfmiH/LYdnLKwl2N4vw9jmbhExjqucIwKzhuU iMkeBmxXB1X7BU3yR56yJ2ILdER5cxVGgTZ+q4N0ewZJ+y4VPMC8HYNTEwLhJ5jD kr2zbKAXpBzT3KbIFp3h9ntd9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFvXOklV /iFvKWuVyYMR1oPVofwSMB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJEwZE39h//juE2jMhAivFhjx9/TR8sLE+qYcqdpT1En3pedmps2Q51Nq+4Z9 wkas+pkQiQbpOgZYLY0lyQr6+xF+p5pfeWYo72elRNeqEA1AEFWZYy9vJx11a27P lrXwArwTWSQhBiuaC0Cg//N2f7Ou4AMnoeOO1lL6o2+AF8BTpf+tmh1ClIm4LTrq 4C8zyIa9Tn9Dm1sTjavECED5luJPWYd+/wm/GHOZZxy7MIeYgrB4rqDkWKGHLrj7 /FmgJBIqtrgTYTzfvruMC9NOJw7DOa2HBq7TZCk2oPLwFWSFUKMrRltwJ8QKyD4c ni1U3m2ehpnqfwV3wWdMY9LbTg== -----END CERTIFICATE-----Generated at Thu Jul 23 21:56:11 2026 by rpki-client