$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft File: S0QUrmheSI9CsbZH7qAd67DE86A.mft (raw, json) Hash identifier: c7VHyCkZG4hQNScYLLzSYJhE2sa6srP04+D75yGp4lM= Subject key identifier: 19:60:34:34:CC:38:FA:7A:04:3E:46:B4:D2:C7:5F:F0:F4:26:CD:B5 Authority key identifier: 4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 Certificate issuer: /CN=A91A9B1B/serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Certificate serial: 0358 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft Manifest number: 034C Signing time: Thu 23 Jul 2026 01:54:23 +0000 Manifest this update: Thu 23 Jul 2026 01:54:22 +0000 Manifest next update: Thu 30 Jul 2026 01:54:22 +0000 Files and hashes: 1: S0QUrmheSI9CsbZH7qAd67DE86A.crl (hash: Iynk5Vw0IP5PQcH7kgAWDVTiceIQYNjCjKbRtklyv7c=) 2: B3F935160E0F11ED89E89675C4F9AE02.roa (hash: VgeFEtMT/M7sth0/aY0YUIbWeg643mp39smFMavgcMo=) 3: B4A58FE60E0F11ED89E89675C4F9AE02.roa (hash: h4h9VFlilMq7CKoOcwRr0fslyRPoCa6/sTUwfmGzOxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 856 (0x358) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B1B, serialNumber=4B4414AE685E488F42B1B647EEA01DEBB0C4F3A0 Validity Not Before: Jul 23 01:54:22 2026 GMT Not After : Jul 30 01:54:22 2026 GMT Subject: CN=6a61744e-8dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:07:52:a6:60:df:15:89:fb:78:27:d1:e0:ef: 66:5a:f6:1f:78:c6:4d:3e:90:7a:ac:c2:2f:56:24: 78:f1:26:d8:2c:6b:22:e7:13:dc:a7:36:9a:a6:c3: 49:d3:b1:63:b8:97:9f:eb:19:79:62:d8:55:0a:cd: b1:5f:4f:5e:28:04:2a:d3:f7:e0:1b:78:29:b5:58: aa:83:66:f8:9e:2f:1f:98:14:37:2a:28:d9:3b:6d: 3f:fc:24:e3:f4:d0:49:c8:a6:51:50:71:76:55:76: 1c:04:12:a2:a8:fe:22:06:b0:96:b5:5e:7a:b1:4f: 5b:27:de:3f:ef:2b:94:4b:f0:a6:fc:f9:ee:42:a6: 0a:01:f9:fa:73:78:80:12:34:5f:28:90:e0:a6:80: c4:b1:1b:62:af:de:7e:82:44:20:ae:92:42:26:59: 8b:fc:69:44:15:40:48:fb:33:96:52:b9:2a:5f:90: de:df:31:35:e0:9d:42:21:71:b8:06:ab:8e:96:ab: 6e:05:68:ad:55:25:51:1d:34:74:0b:ed:22:b1:0f: 68:ee:bc:19:52:fd:e3:3d:94:45:e8:77:13:92:a6: 0a:d6:c1:c6:19:5a:b7:6b:0b:b4:97:41:98:30:c8: 77:92:ed:ef:96:cc:e3:cb:6e:24:8a:91:0a:7d:3b: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:60:34:34:CC:38:FA:7A:04:3E:46:B4:D2:C7:5F:F0:F4:26:CD:B5 X509v3 Authority Key Identifier: keyid:4B:44:14:AE:68:5E:48:8F:42:B1:B6:47:EE:A0:1D:EB:B0:C4:F3:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0QUrmheSI9CsbZH7qAd67DE86A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B1B/4B3864D80E0B11EDA8D12E58C4F9AE02/S0QUrmheSI9CsbZH7qAd67DE86A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5f:21:82:b8:0f:98:c6:87:f0:1e:d5:a6:cd:0c:cf:b3:ad: b1:83:84:42:0e:bb:bd:b6:4b:88:74:fb:72:de:85:21:2d:22: ba:fa:88:9d:47:61:e9:26:90:8b:f5:f1:35:fa:e8:d6:b8:29: 57:bf:c5:88:0f:60:7a:fc:d6:60:0f:d6:48:3d:e4:92:26:38: bc:87:3c:27:14:26:91:8c:28:de:81:02:86:4b:d1:ad:ad:d1: 44:d0:6b:da:bf:de:81:95:1d:f5:9d:b9:78:1d:ad:44:73:8d: 5c:e2:c0:31:d9:b2:2a:d9:ec:34:e1:c6:6e:41:2e:8d:a2:a9: 56:49:3e:40:5b:ff:05:b7:1b:f6:51:0d:4a:13:6d:48:e3:77: 5b:b0:8b:9d:d2:24:34:e8:eb:ca:9d:67:26:44:46:ed:00:ca: 64:70:34:a9:b7:42:27:0b:3b:d0:86:ad:e7:74:f7:6b:8c:a0: 42:6c:c5:17:68:16:1d:16:dc:fc:78:f2:be:77:fb:5d:08:33: 3e:81:4f:eb:31:23:71:b4:5f:c8:da:a1:d5:44:d1:47:1b:ab: f1:49:ec:a0:d5:5f:a6:03:65:45:05:45:b1:20:b4:18:aa:e2: a0:a2:4b:9f:1c:ba:5f:d3:4a:c9:27:3e:df:20:94:ba:4f:d0: db:f3:e7:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCMUIxMTAvBgNVBAUTKDRCNDQxNEFFNjg1RTQ4OEY0MkIxQjY0N0VFQTAxREVC QjBDNEYzQTAwHhcNMjYwNzIzMDE1NDIyWhcNMjYwNzMwMDE1NDIyWjAYMRYwFAYD VQQDEw02YTYxNzQ0ZS04ZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArAdSpmDfFYn7eCfR4O9mWvYfeMZNPpB6rMIvViR48SbYLGsi5xPcpzaapsNJ 07FjuJef6xl5YthVCs2xX09eKAQq0/fgG3gptViqg2b4ni8fmBQ3KijZO20//CTj 9NBJyKZRUHF2VXYcBBKiqP4iBrCWtV56sU9bJ94/7yuUS/Cm/PnuQqYKAfn6c3iA EjRfKJDgpoDEsRtir95+gkQgrpJCJlmL/GlEFUBI+zOWUrkqX5De3zE14J1CIXG4 BquOlqtuBWitVSVRHTR0C+0isQ9o7rwZUv3jPZRF6HcTkqYK1sHGGVq3awu0l0GY MMh3ku3vlszjy24kipEKfTsePwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBlgNDTM OPp6BD5GtNLHX/D0Js21MB8GA1UdIwQYMBaAFEtEFK5oXkiPQrG2R+6gHeuwxPOg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIxQi80QjM4NjREODBF MEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJOUNzYlpIN3FBZDY3REU4 NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MwUVVybWhlU0k5Q3NiWkg3cUFkNjdERTg2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIxQi80QjM4NjREODBFMEIxMUVEQThEMTJFNThDNEY5QUUwMi9TMFFVcm1oZVNJ OUNzYlpIN3FBZDY3REU4NkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXl8hgrgPmMaH8B7Vps0Mz7OtsYOEQg67vbZLiHT7ct6FIS0iuvqInUdh6SaQ i/XxNfro1rgpV7/FiA9gevzWYA/WSD3kkiY4vIc8JxQmkYwo3oEChkvRra3RRNBr 2r/egZUd9Z25eB2tRHONXOLAMdmyKtnsNOHGbkEujaKpVkk+QFv/Bbcb9lENShNt SON3W7CLndIkNOjryp1nJkRG7QDKZHA0qbdCJws70Iat53T3a4ygQmzFF2gWHRbc /Hjyvnf7XQgzPoFP6zEjcbRfyNqh1UTRRxur8UnsoNVfpgNlRQVFsSC0GKrioKJL nxy6X9NKySc+3yCUuk/Q2/Pnlg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:22:49 2026 by rpki-client