$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft File: poP2ckwCoT8tOc8vIVAL4AOA3eM.mft (raw, json) Hash identifier: 0JYnepuSzRMjS56g4Ug9B+jrK6YlnPmPiLWLvgF9O3Y= Subject key identifier: 81:E4:12:7B:C6:E1:41:C3:19:47:26:9C:3B:23:C9:30:F5:F8:77:16 Authority key identifier: A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 Certificate issuer: /CN=A91A8D22/serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Certificate serial: 35DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft Manifest number: 3598 Signing time: Wed 22 Jul 2026 14:45:57 +0000 Manifest this update: Wed 22 Jul 2026 14:45:57 +0000 Manifest next update: Wed 29 Jul 2026 14:45:57 +0000 Files and hashes: 1: poP2ckwCoT8tOc8vIVAL4AOA3eM.crl (hash: uu1N/ROBG89pyOiVuJzbtyD2wrWEdP/edw9UCs67wLk=) 2: 42DAE250C8C711F08A7B6740C4F9AE02.roa (hash: RvDR+CwV5r8nXBYVtiJ4seGZbUdvtwvjuoEWjfxE9n4=) 3: 97F461E0C8CB11F0BFB08139C4F9AE02.roa (hash: DG9csTjYXt2owT4jULXXaVRko/sw17eGl0Moy3hQJ9M=) 4: wGPGePjqMgc7O9VlK9N_NzYu_zk.asa (hash: 1HPOe96YtIkM08vj2RnCFhV19py8iKGC4sKM4sZfT5k=) 5: A90BA98C74D011F19600C7755BA30FBC.roa (hash: 5g7W5ahRCXrfAoDmqnCGQYfrzLhobtl8/QoaS07b9B4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13787 (0x35db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8D22, serialNumber=A683F6724C02A13F2D39CF2F21500BE00380DDE3 Validity Not Before: Jul 22 14:45:57 2026 GMT Not After : Jul 29 14:45:57 2026 GMT Subject: CN=6a60d7a5-cc7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e0:ab:a9:b1:b9:ca:56:a1:9d:29:96:ed:05: 25:fa:5b:36:30:0f:40:c2:7f:1a:e1:c5:f8:77:14: f3:f5:f6:01:cd:27:97:3e:94:b6:af:a8:4c:61:43: 2c:1d:bd:6c:b9:e2:39:b1:47:7f:26:36:72:33:e6: 41:54:29:f9:bb:15:56:54:1a:4f:7a:87:f6:47:60: 4d:20:4b:bb:d6:76:01:25:3d:f4:4c:72:34:9d:f8: 05:9a:de:cf:33:ba:51:a3:88:bf:00:ca:66:a6:05: 0d:a3:1a:a6:07:ec:55:7f:5a:4b:6a:bb:8b:d1:5a: 51:c9:bc:ea:6d:14:67:50:0a:b1:9c:bd:c5:dd:22: 80:6e:50:3e:bd:56:f0:8e:67:c3:14:48:5c:23:ad: b8:05:36:e8:f7:5b:db:f7:97:e1:dd:d9:8e:b1:25: bb:61:71:c8:40:a7:65:45:d0:89:73:d9:d1:81:9f: 93:6d:46:1f:a4:72:64:4a:94:f1:72:7a:81:2d:2d: 13:1c:fa:be:19:8f:54:67:3c:8e:e2:93:38:1b:1b: 7a:08:fd:d6:e1:35:c9:13:7f:67:f0:65:72:97:99: cc:c8:ba:b1:ca:ba:51:81:e4:6c:be:3e:a9:4c:a6: 69:5e:e9:b2:e5:eb:9a:8c:00:43:0e:45:7a:13:2c: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E4:12:7B:C6:E1:41:C3:19:47:26:9C:3B:23:C9:30:F5:F8:77:16 X509v3 Authority Key Identifier: keyid:A6:83:F6:72:4C:02:A1:3F:2D:39:CF:2F:21:50:0B:E0:03:80:DD:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poP2ckwCoT8tOc8vIVAL4AOA3eM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8D22/252697981D9211E2B618CAF408B02CD2/poP2ckwCoT8tOc8vIVAL4AOA3eM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:59:8d:87:33:f7:a2:a5:f6:00:7e:86:7e:98:35:38:7c:cf: d9:ec:3d:e2:b2:3a:fe:68:68:6f:2c:c5:94:98:43:80:3d:0c: 5f:7f:63:55:89:c8:56:0d:2f:21:ea:af:ec:b4:3f:e4:4b:66: b3:7f:9f:10:d3:67:08:8e:06:21:4f:c7:96:cd:59:7c:e0:64: 1f:a4:b3:32:ac:f0:df:a3:66:88:c3:07:c6:d2:da:85:ad:f6: 07:84:8e:48:a0:19:35:5d:b9:51:c1:29:d0:53:3b:07:f6:9f: e9:9b:05:d6:53:f6:b3:cb:27:a6:76:70:d3:0c:45:f1:5c:66: 32:d0:c8:5d:bc:cf:ad:fe:d9:22:d0:fa:9a:b7:1d:33:01:fa: e9:70:05:73:dd:9c:4e:3a:05:4d:2c:0d:c2:29:f4:d8:62:27: 5d:a5:86:0c:8a:ea:b5:9d:fb:2f:05:1f:07:c5:fc:e4:03:60: 95:dc:03:ff:78:95:b8:a3:59:b9:d2:ab:b3:40:be:17:5e:03: b9:15:7c:ea:2a:b5:9f:f1:b1:78:e6:a3:21:8d:7f:6b:5c:ac: 37:5f:58:a6:c0:70:3e:68:53:31:cb:93:f5:62:95:4c:72:2e: 6a:ea:de:b7:0e:37:67:a3:1d:90:02:2b:40:47:99:20:47:e8: 0c:fe:79:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThEMjIxMTAvBgNVBAUTKEE2ODNGNjcyNEMwMkExM0YyRDM5Q0YyRjIxNTAwQkUw MDM4MERERTMwHhcNMjYwNzIyMTQ0NTU3WhcNMjYwNzI5MTQ0NTU3WjAYMRYwFAYD VQQDEw02YTYwZDdhNS1jYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3uCrqbG5ylahnSmW7QUl+ls2MA9Awn8a4cX4dxTz9fYBzSeXPpS2r6hMYUMs Hb1sueI5sUd/JjZyM+ZBVCn5uxVWVBpPeof2R2BNIEu71nYBJT30THI0nfgFmt7P M7pRo4i/AMpmpgUNoxqmB+xVf1pLaruL0VpRybzqbRRnUAqxnL3F3SKAblA+vVbw jmfDFEhcI624BTbo91vb95fh3dmOsSW7YXHIQKdlRdCJc9nRgZ+TbUYfpHJkSpTx cnqBLS0THPq+GY9UZzyO4pM4Gxt6CP3W4TXJE39n8GVyl5nMyLqxyrpRgeRsvj6p TKZpXumy5euajABDDkV6EyylRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHkEnvG 4UHDGUcmnDsjyTD1+HcWMB8GA1UdIwQYMBaAFKaD9nJMAqE/LTnPLyFQC+ADgN3j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEQyMi8yNTI2OTc5ODFE OTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29UOHRPYzh2SVZBTDRBT0Ez ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvUDJja3dDb1Q4dE9jOHZJVkFMNEFPQTNlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEQyMi8yNTI2OTc5ODFEOTIxMUUyQjYxOENBRjQwOEIwMkNEMi9wb1AyY2t3Q29U OHRPYzh2SVZBTDRBT0EzZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZFmNhzP3oqX2AH6Gfpg1OHzP2ew94rI6/mhobyzFlJhDgD0MX39jVYnIVg0v Ieqv7LQ/5Etms3+fENNnCI4GIU/Hls1ZfOBkH6SzMqzw36NmiMMHxtLaha32B4SO SKAZNV25UcEp0FM7B/af6ZsF1lP2s8snpnZw0wxF8VxmMtDIXbzPrf7ZItD6mrcd MwH66XAFc92cTjoFTSwNwin02GInXaWGDIrqtZ37LwUfB8X85ANgldwD/3iVuKNZ udKrs0C+F14DuRV86iq1n/GxeOajIY1/a1ysN19YpsBwPmhTMcuT9WKVTHIuaure tw43Z6MdkAIrQEeZIEfoDP55XA== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:26 2026 by rpki-client