$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft File: cJdlx9TTMfTDasa-NH-mah8CNJA.mft (raw, json) Hash identifier: 2j2TwVmqJhaLHlSKSKpL14EwHEdJfnPXA5FtwwOxDKk= Subject key identifier: 59:F2:C8:CB:1C:10:6A:3B:8A:43:BE:0A:72:3F:26:57:DA:3B:32:9D Authority key identifier: 70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 Certificate issuer: /CN=A91AE85E/serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Certificate serial: 35C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft Manifest number: 358D Signing time: Wed 22 Jul 2026 14:18:24 +0000 Manifest this update: Wed 22 Jul 2026 14:18:24 +0000 Manifest next update: Wed 29 Jul 2026 14:18:24 +0000 Files and hashes: 1: cJdlx9TTMfTDasa-NH-mah8CNJA.crl (hash: kSXlItVnHKQP83OS20ximXcbfKGR8Oo4hSX3UpYQC9s=) 2: 392987D254F611E79DF7E643C4F9AE02.roa (hash: 7X7MqnwCg9AKC2Vx1jhncIIk4NudI1eSpazmHMekhvg=) 3: 09E2DC32B12B11E59337F35AC4F9AE02.roa (hash: 9fz8ROlxgIz9BeZ3bDwbubljhDBRymKASujcQJN55ag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13766 (0x35c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE85E, serialNumber=709765C7D4D331F4C36AC6BE347FA66A1F023490 Validity Not Before: Jul 22 14:18:24 2026 GMT Not After : Jul 29 14:18:24 2026 GMT Subject: CN=6a60d130-9cc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ce:3e:ec:fc:99:1b:e4:ea:45:93:46:fb:4e: cd:14:dc:16:f0:6c:e1:2b:26:a5:4d:58:a0:0a:26: 7c:ff:8f:b7:39:33:5a:83:d2:e6:c9:eb:92:e9:cc: 97:c9:da:23:74:f1:d7:2e:8b:05:1b:88:4d:b4:25: 99:db:d3:92:6c:e5:86:5c:7e:56:d5:ba:dc:ad:ce: 7c:87:81:c1:dc:46:fa:56:04:e8:1d:8b:c3:4d:0c: c8:df:08:e6:2c:be:b6:8f:40:64:db:4d:a1:29:e0: 88:5f:90:64:94:c8:c8:47:7d:6b:b1:da:03:d1:df: ca:50:e1:1f:14:a6:a5:87:20:53:d5:dc:e4:52:24: 8c:01:46:5c:74:17:39:81:44:d0:35:d4:28:50:0d: 72:81:8a:90:cb:62:31:07:dc:84:44:a2:47:cc:32: 6c:9c:b0:e2:e8:8f:85:b5:32:22:8f:a7:b1:0e:50: cb:18:35:61:7e:1a:e5:99:11:73:2c:80:54:61:f1: c8:b1:04:39:4b:8b:a0:60:8f:83:c7:aa:03:f5:06: 41:81:b6:a4:be:aa:3d:0a:62:48:b2:23:0d:cb:45: 3e:01:8a:7c:a1:b4:cf:c3:2c:3f:3c:f0:0f:f0:e2: 08:64:09:8f:30:6d:32:59:8d:e4:06:54:da:19:01: be:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F2:C8:CB:1C:10:6A:3B:8A:43:BE:0A:72:3F:26:57:DA:3B:32:9D X509v3 Authority Key Identifier: keyid:70:97:65:C7:D4:D3:31:F4:C3:6A:C6:BE:34:7F:A6:6A:1F:02:34:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJdlx9TTMfTDasa-NH-mah8CNJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE85E/0BED35261D6E11E2B04A61AF08B02CD2/cJdlx9TTMfTDasa-NH-mah8CNJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b3:ec:32:59:f3:a1:7e:ed:b8:76:46:7d:e4:72:a5:e0:14: 60:bf:f4:79:89:e7:f1:db:1f:65:ed:a6:27:bf:f0:59:62:fb: fa:90:cc:5e:68:fa:23:b0:13:e8:e2:81:66:7d:52:42:e6:60: 6b:8b:e9:13:0f:2d:fe:c4:b7:03:f4:98:60:8a:33:6d:36:20: ee:7a:a1:ce:a4:08:22:6f:ff:90:64:17:e8:d9:f8:d4:47:88: 95:a5:12:db:9d:dc:5f:67:eb:c7:a4:77:f6:7c:42:e6:37:29: 3d:77:0d:e4:65:42:48:07:8c:55:0f:e8:13:5f:1a:47:f1:0a: 95:8c:ff:b1:5f:45:66:ab:20:4f:fc:57:6c:c8:e6:68:be:34: 24:e3:2e:6e:c3:a3:ab:38:1c:b5:16:f0:be:2a:c4:04:0e:4c: 79:86:7d:78:f9:fd:56:06:f0:f1:cf:8a:d6:0c:ec:8b:48:3a: 65:56:9e:af:fd:e9:83:cc:90:75:16:0f:48:47:86:de:49:91: 2c:9c:55:5f:1a:b5:75:20:13:a6:03:4b:26:66:7c:4a:4c:b0: 47:e3:8b:82:c9:f8:7e:e6:f0:84:7f:51:87:f4:0b:42:2a:80: dc:c2:33:19:21:6a:0f:33:f6:c6:3f:58:f0:d3:4e:6f:06:0e: 68:7d:06:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU4NUUxMTAvBgNVBAUTKDcwOTc2NUM3RDREMzMxRjRDMzZBQzZCRTM0N0ZBNjZB MUYwMjM0OTAwHhcNMjYwNzIyMTQxODI0WhcNMjYwNzI5MTQxODI0WjAYMRYwFAYD VQQDEw02YTYwZDEzMC05Y2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5s4+7PyZG+TqRZNG+07NFNwW8GzhKyalTVigCiZ8/4+3OTNag9LmyeuS6cyX ydojdPHXLosFG4hNtCWZ29OSbOWGXH5W1brcrc58h4HB3Eb6VgToHYvDTQzI3wjm LL62j0Bk202hKeCIX5BklMjIR31rsdoD0d/KUOEfFKalhyBT1dzkUiSMAUZcdBc5 gUTQNdQoUA1ygYqQy2IxB9yERKJHzDJsnLDi6I+FtTIij6exDlDLGDVhfhrlmRFz LIBUYfHIsQQ5S4ugYI+Dx6oD9QZBgbakvqo9CmJIsiMNy0U+AYp8obTPwyw/PPAP 8OIIZAmPMG0yWY3kBlTaGQG+DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFnyyMsc EGo7ikO+CnI/JlfaOzKdMB8GA1UdIwQYMBaAFHCXZcfU0zH0w2rGvjR/pmofAjSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTg1RS8wQkVEMzUyNjFE NkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1mVERhc2EtTkgtbWFoOENO SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKZGx4OVRUTWZURGFzYS1OSC1tYWg4Q05KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTg1RS8wQkVEMzUyNjFENkUxMUUyQjA0QTYxQUYwOEIwMkNEMi9jSmRseDlUVE1m VERhc2EtTkgtbWFoOENOSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJLPsMlnzoX7tuHZGfeRypeAUYL/0eYnn8dsfZe2mJ7/wWWL7+pDMXmj6I7AT 6OKBZn1SQuZga4vpEw8t/sS3A/SYYIozbTYg7nqhzqQIIm//kGQX6Nn41EeIlaUS 253cX2frx6R39nxC5jcpPXcN5GVCSAeMVQ/oE18aR/EKlYz/sV9FZqsgT/xXbMjm aL40JOMubsOjqzgctRbwvirEBA5MeYZ9ePn9Vgbw8c+K1gzsi0g6ZVaer/3pg8yQ dRYPSEeG3kmRLJxVXxq1dSATpgNLJmZ8SkywR+OLgsn4fubwhH9Rh/QLQiqA3MIz GSFqDzP2xj9Y8NNObwYOaH0GDA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:04:22 2026 by rpki-client