$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: CLP17Bp2eYQikYz/YC+8jFVWDwHMu8koYty+25eiKKg= Subject key identifier: 0C:62:FE:71:12:E1:A9:12:FE:08:ED:12:8C:7B:95:B9:67:68:6B:52 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0A5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 0A48 Signing time: Wed 22 Jul 2026 20:06:53 +0000 Manifest this update: Wed 22 Jul 2026 20:06:53 +0000 Manifest next update: Wed 29 Jul 2026 20:06:53 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: c8VmPkRGi8xuMuvETAYs1QR5vJNUaMNzd/UeMb4b8e0=) 2: 35831FCE937011EA8A795583C4F9AE02.roa (hash: KU74ZbX8QctQD6oWhNP2ZPDiRV7nlnVfxskUU58FW+U=) 3: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: pxNuh5srbtMxxnoUXoogGH47f0VhHR+2FLeTjpcucQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2654 (0xa5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Jul 22 20:06:53 2026 GMT Not After : Jul 29 20:06:53 2026 GMT Subject: CN=6a6122dd-5650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:73:1d:06:6f:f2:c4:99:35:8e:52:79:8f:f5: 63:80:9a:3e:c8:b7:b8:75:91:6b:46:36:7b:37:04: d8:f1:75:51:c3:66:f8:23:0e:b9:42:c3:6c:7b:af: 1d:63:47:d3:53:c2:95:a5:c8:75:c3:f4:c8:31:7d: f0:74:c7:0b:4d:e4:67:7b:38:8a:f2:7d:ae:a1:28: 35:a9:c5:48:c5:14:01:a9:91:85:f2:57:3d:e1:33: 41:93:ca:3e:09:0e:d0:bd:6a:d5:61:83:d7:17:fa: 95:e9:fb:04:d9:cc:35:da:e7:5b:7a:c5:d5:12:9b: c3:00:b4:50:ce:a9:72:89:7c:21:38:38:ff:e1:dd: 01:58:44:6a:5c:fe:e4:db:a4:28:31:d5:ee:bd:33: 80:6c:a0:91:89:33:13:e3:5c:9f:ca:3a:46:e2:57: 82:53:d1:9b:03:c2:ce:74:55:9f:61:1a:a7:19:20: 75:15:a6:12:64:0e:f0:08:53:66:c8:26:5c:03:08: 5c:1b:32:8a:08:55:59:5d:b0:fd:6f:81:4b:3b:14: 6f:a7:c2:67:de:b8:48:bc:b7:7e:e4:e6:2b:75:51: 63:ec:2a:a3:fe:7b:0e:01:3b:ba:71:58:6e:89:a7: d1:a6:8f:76:31:90:37:65:1e:27:aa:4e:38:b4:d6: 1e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:62:FE:71:12:E1:A9:12:FE:08:ED:12:8C:7B:95:B9:67:68:6B:52 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:dc:72:de:27:84:60:61:1d:4b:7e:ae:56:6c:00:34:01:59: e1:ae:8e:95:ca:84:cf:f0:59:b5:b0:b8:e2:91:95:52:e9:b1: 3d:f8:fc:2b:15:c2:54:90:9a:d3:60:49:db:73:93:6e:07:70: 0b:0e:1b:bd:3d:df:d7:c0:21:3d:2e:e8:1e:d4:60:e5:1d:d8: df:bd:2e:c4:26:b1:ca:ec:a1:9b:51:03:43:17:49:ec:2c:9b: 63:62:45:88:33:41:fe:3a:08:f4:0a:ea:fc:f0:05:e0:8c:a4: 68:69:1b:f8:13:8d:d4:99:8c:02:69:37:fc:1f:53:ea:9e:c7: cf:28:10:03:e3:8d:c4:63:02:47:38:a2:f8:93:96:22:5e:5f: e6:07:99:21:0c:48:41:d1:49:cd:08:82:f8:44:11:9e:ce:57: 64:1e:cd:8b:f3:7e:b9:b7:b1:f7:06:8d:6a:7c:b3:f3:bf:b1: e6:75:6a:ea:4e:6d:1a:49:6f:34:f7:f8:04:04:f2:de:f1:b9: e2:89:1d:0d:ac:95:40:af:ac:73:09:14:cd:88:aa:71:bb:e2: db:c6:3c:4d:5b:b1:71:8a:43:4a:39:52:73:ba:04:ae:6d:2e: 5c:50:8e:00:bb:b4:1f:e4:3e:4c:f2:c3:42:c2:9d:ff:1b:9c: cc:b4:6c:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjYwNzIyMjAwNjUzWhcNMjYwNzI5MjAwNjUzWjAYMRYwFAYD VQQDEw02YTYxMjJkZC01NjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi3MdBm/yxJk1jlJ5j/VjgJo+yLe4dZFrRjZ7NwTY8XVRw2b4Iw65QsNse68d Y0fTU8KVpch1w/TIMX3wdMcLTeRneziK8n2uoSg1qcVIxRQBqZGF8lc94TNBk8o+ CQ7QvWrVYYPXF/qV6fsE2cw12udbesXVEpvDALRQzqlyiXwhODj/4d0BWERqXP7k 26QoMdXuvTOAbKCRiTMT41yfyjpG4leCU9GbA8LOdFWfYRqnGSB1FaYSZA7wCFNm yCZcAwhcGzKKCFVZXbD9b4FLOxRvp8Jn3rhIvLd+5OYrdVFj7Cqj/nsOATu6cVhu iafRpo92MZA3ZR4nqk44tNYezQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxi/nES 4akS/gjtEox7lblnaGtSMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY9xy3ieEYGEdS36uVmwANAFZ4a6OlcqEz/BZtbC44pGVUumxPfj8KxXCVJCa 02BJ23OTbgdwCw4bvT3f18AhPS7oHtRg5R3Y370uxCaxyuyhm1EDQxdJ7CybY2JF iDNB/joI9Arq/PAF4IykaGkb+BON1JmMAmk3/B9T6p7HzygQA+ONxGMCRzii+JOW Il5f5geZIQxIQdFJzQiC+EQRns5XZB7Ni/N+ubex9waNanyz87+x5nVq6k5tGklv NPf4BATy3vG54okdDayVQK+scwkUzYiqcbvi28Y8TVuxcYpDSjlSc7oErm0uXFCO ALu0H+Q+TPLDQsKd/xuczLRshA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:07:22 2026 by rpki-client