$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft File: CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json) Hash identifier: eP0GYCX7TsSvidsxmpFtZkecAFW1BHoIliEI2grZDWc= Subject key identifier: 2E:88:12:E7:94:42:EA:31:58:F7:CB:60:39:DD:01:E9:B5:4B:3E:8B Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 Certificate issuer: /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft Manifest number: 034F Signing time: Thu 23 Jul 2026 01:55:14 +0000 Manifest this update: Thu 23 Jul 2026 01:55:14 +0000 Manifest next update: Thu 30 Jul 2026 01:55:14 +0000 Files and hashes: 1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: n8t0XBTEfrrgE1Mwu4TRaOJbrU7gx0u2WwxbK+TBxRc=) 2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: QM3TZDb9n+aQx7/1/HX5pDRtbQ+ME0yE/NNbiA3qbqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Validity Not Before: Jul 23 01:55:14 2026 GMT Not After : Jul 30 01:55:14 2026 GMT Subject: CN=6a617482-a1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3c:af:01:1d:66:1b:e1:6f:50:5f:3e:81:32: ff:ee:1c:3c:03:74:0c:d0:f8:61:9d:d2:8b:bb:d8: 25:f5:fe:c4:cf:52:e6:d5:15:8d:9d:db:73:bb:4b: c9:45:6f:b9:91:2c:20:50:c1:dc:8c:1d:ea:20:45: 06:a5:7e:22:1d:a7:03:34:ea:a3:09:9a:00:04:61: a4:c1:c2:64:07:6e:24:73:72:48:74:5a:6b:8d:94: 91:99:d6:8e:54:73:f0:ca:e5:ec:67:7b:a2:2d:66: 57:6e:55:39:cc:66:d8:af:34:05:44:c6:a4:8a:96: f4:c0:fa:4c:76:6f:26:ed:a2:d5:eb:ea:ca:64:3e: 0b:5f:cd:f1:6f:33:5e:70:34:e1:22:cb:c5:3a:88: c4:7b:6f:34:f2:4f:7f:66:b1:2d:e1:8b:1d:c3:10: 07:f5:15:a7:55:4a:e6:8a:98:c2:3f:ec:5c:47:90: 3d:85:a3:a8:0f:b4:60:7b:34:4e:35:87:99:ba:2c: 2f:24:4d:da:ed:df:18:14:39:35:33:2f:33:3c:3a: 6b:e1:b3:c9:28:6c:32:86:44:52:64:fc:95:f3:8e: 51:75:e5:44:a8:37:45:9c:b3:a1:c2:72:01:da:cb: 27:6a:22:c0:ce:6c:68:db:ea:70:8e:4d:30:09:bc: 61:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:88:12:E7:94:42:EA:31:58:F7:CB:60:39:DD:01:E9:B5:4B:3E:8B X509v3 Authority Key Identifier: keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:94:b1:65:12:5d:b2:a2:ce:d6:61:f1:24:ea:18:c5:24:29: 61:2c:31:07:ea:c9:c0:84:d2:4e:41:ef:33:a5:06:e3:4e:a5: d4:b0:b3:5f:74:7c:38:83:19:dc:27:a4:a2:a0:b7:48:76:06: c4:9e:e2:fe:3f:96:f4:39:45:65:d2:2e:4c:16:34:e0:ae:44: 85:93:2b:88:b2:53:5d:9d:cf:7c:48:ab:44:d2:50:b5:c3:2f: 4f:35:9d:b9:f5:c4:79:d3:8e:4d:34:b4:78:d6:cc:c6:4c:9b: cd:02:59:16:b1:b1:28:7b:2b:df:61:c2:94:40:ae:0a:79:c6: 7a:71:6d:3c:d1:12:7b:7f:6c:1d:4d:ab:23:15:f7:20:39:31: 28:b9:22:9b:e3:b3:f3:e8:9b:9e:47:50:19:1d:e8:51:79:2f: a7:c1:93:4c:39:07:1b:09:0a:eb:c2:27:47:df:56:36:ce:e6: 1e:09:33:a9:63:10:e2:b1:30:a7:91:13:a6:b6:00:77:ac:0b: 71:e2:6b:b8:6d:bb:64:db:f5:76:d6:fa:11:5e:b2:95:79:82: 0b:12:e5:a0:58:c2:86:c0:53:1a:85:ab:89:86:10:6a:f8:f0: 6e:74:1c:fe:d7:89:e9:57:ba:a3:67:3b:70:9f:4f:da:7d:15: 83:4d:c5:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QzExMTAvBgNVBAUTKDBBNDMxNjNDQkVCMUJGNzk4QzlDRTQxQzFDNUU3NEEx Qzg4MzdBQzYwHhcNMjYwNzIzMDE1NTE0WhcNMjYwNzMwMDE1NTE0WjAYMRYwFAYD VQQDEw02YTYxNzQ4Mi1hMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApjyvAR1mG+FvUF8+gTL/7hw8A3QM0PhhndKLu9gl9f7Ez1Lm1RWNndtzu0vJ RW+5kSwgUMHcjB3qIEUGpX4iHacDNOqjCZoABGGkwcJkB24kc3JIdFprjZSRmdaO VHPwyuXsZ3uiLWZXblU5zGbYrzQFRMakipb0wPpMdm8m7aLV6+rKZD4LX83xbzNe cDThIsvFOojEe2808k9/ZrEt4YsdwxAH9RWnVUrmipjCP+xcR5A9haOoD7RgezRO NYeZuiwvJE3a7d8YFDk1My8zPDpr4bPJKGwyhkRSZPyV845RdeVEqDdFnLOhwnIB 2ssnaiLAzmxo2+pwjk0wCbxhAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6IEueU QuoxWPfLYDndAem1Sz6LMB8GA1UdIwQYMBaAFApDFjy+sb95jJzkHBxedKHIg3rG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVDMS9DQkU2QkM3NDBG MDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYzbU1uT1FjSEY1MG9jaURl c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrTVdQTDZ4djNtTW5PUWNIRjUwb2NpRGVzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVDMS9DQkU2QkM3NDBGMDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYz bU1uT1FjSEY1MG9jaURlc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn5SxZRJdsqLO1mHxJOoYxSQpYSwxB+rJwITSTkHvM6UG406l1LCzX3R8OIMZ 3CekoqC3SHYGxJ7i/j+W9DlFZdIuTBY04K5EhZMriLJTXZ3PfEirRNJQtcMvTzWd ufXEedOOTTS0eNbMxkybzQJZFrGxKHsr32HClECuCnnGenFtPNESe39sHU2rIxX3 IDkxKLkim+Oz8+ibnkdQGR3oUXkvp8GTTDkHGwkK68InR99WNs7mHgkzqWMQ4rEw p5ETprYAd6wLceJruG27ZNv1dtb6EV6ylXmCCxLloFjChsBTGoWriYYQavjwbnQc /teJ6Ve6o2c7cJ9P2n0Vg03Flg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:34:12 2026 by rpki-client