$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft File: -L4s6ssxJNZg8w-KJzgGZIr0PIc.mft (raw, json) Hash identifier: ZmTYNrmu6OP0PZiTV1HPlEJcUEciiNH58Hw1E5pFdHU= Subject key identifier: 3F:CC:C3:BF:B4:93:F8:B4:C7:A2:94:5A:63:A6:E1:0F:60:E2:EE:E3 Authority key identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 Certificate issuer: /CN=A91AFAAC/serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft Manifest number: DD Signing time: Thu 23 Jul 2026 08:21:14 +0000 Manifest this update: Thu 23 Jul 2026 08:21:14 +0000 Manifest next update: Thu 30 Jul 2026 08:21:14 +0000 Files and hashes: 1: -L4s6ssxJNZg8w-KJzgGZIr0PIc.crl (hash: vf6cs/S7/Til3eQhpT2XbuSLZoToEmGK4vwFUOeJ4f4=) 2: AE67395858D011F1B2604194A2833773.roa (hash: 0/14bImAgE2URSR4c1VW0n5tknPVytdkPxXZ0kflIto=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:21:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Validity Not Before: Jul 23 08:21:14 2026 GMT Not After : Jul 30 08:21:14 2026 GMT Subject: CN=6a61cefa-c596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:18:fa:be:94:5f:78:ab:6f:54:74:2b:e1:1a: 7d:ce:39:70:dd:0e:10:b5:c7:42:a8:1d:be:d3:b1: 72:93:77:6e:98:30:03:3d:82:08:8a:c4:77:74:34: 9e:7e:6b:9a:04:b6:01:5c:53:81:29:76:b4:6c:b1: 52:38:ba:d4:1c:c9:59:83:c7:63:e5:5d:f8:e8:29: 44:a9:70:0d:d1:7d:26:a4:73:79:ae:71:dd:e3:a0: 4a:43:09:66:09:5f:76:88:d8:fa:d1:63:4d:2a:1f: 4e:1b:21:9c:68:08:3f:39:24:0c:31:33:ef:76:0e: 82:d4:eb:e4:f2:ef:f3:23:dd:91:83:14:6c:e3:1a: 1f:5a:68:6c:22:4e:03:1f:8b:73:70:55:42:97:56: 14:d9:0e:2a:c8:94:df:16:5d:66:13:32:06:dc:3f: c4:17:12:69:f9:03:b1:76:14:15:40:a6:be:2a:52: bf:82:c8:43:89:cc:26:b6:39:f4:97:0b:37:28:5b: db:da:a9:e6:c5:29:9a:03:05:b7:7e:b0:d9:0d:30: c5:01:19:d0:4c:eb:94:29:0e:b1:31:fb:b4:d8:3b: b5:d8:53:92:46:28:90:45:f7:75:7e:d9:39:0d:63: 70:7f:e8:e2:8d:39:0d:65:ae:04:4a:36:13:78:74: 97:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CC:C3:BF:B4:93:F8:B4:C7:A2:94:5A:63:A6:E1:0F:60:E2:EE:E3 X509v3 Authority Key Identifier: keyid:F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:61:cd:b0:0f:be:98:e0:50:e1:6b:40:8d:47:f4:d2:d2:c6: 5a:11:4c:88:1e:33:63:5e:fd:ce:cb:83:f7:e7:05:5d:b7:8a: 17:7b:d5:f6:db:ff:8d:a3:44:43:a8:cb:f9:55:50:d5:70:8e: a2:7e:fa:52:5f:4d:9e:24:34:47:00:b3:d5:df:91:c2:e2:d5: 62:1e:0d:e2:f3:4f:16:69:57:ac:55:e2:3d:5f:21:74:9d:d3: 14:27:53:d4:07:4f:87:3d:d2:fc:02:7c:38:3c:31:bf:cb:c1: a6:e0:8c:da:a3:ac:ee:34:a2:5e:91:22:e4:3e:aa:9e:9f:b5: 56:6a:4e:a6:5e:a7:cc:c5:77:b7:39:c3:d7:e8:37:84:6f:e5: ca:c0:91:9c:f9:28:85:d7:4c:06:30:e8:9d:10:13:7c:40:27: 1d:18:b8:d1:8f:4e:50:40:3a:87:99:92:3c:3a:f1:9d:ff:76: 22:f0:a9:a8:13:94:12:59:9f:b1:ef:ca:b0:46:45:9e:af:ee: 25:bc:49:9e:db:d3:92:b3:11:d4:4d:a0:14:bc:1d:a3:1f:84: d5:4b:7d:4c:c7:71:fc:1d:a4:8c:48:80:c9:94:4c:d5:bc:8c: d9:f1:a2:f9:68:b6:8c:a8:18:2b:88:79:01:ab:b4:fc:79:7b: ab:d7:ec:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZBQUMxMTAvBgNVBAUTKEY4QkUyQ0VBQ0IzMTI0RDY2MEYzMEY4QTI3MzgwNjY0 OEFGNDNDODcwHhcNMjYwNzIzMDgyMTE0WhcNMjYwNzMwMDgyMTE0WjAYMRYwFAYD VQQDEw02YTYxY2VmYS1jNTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/Rj6vpRfeKtvVHQr4Rp9zjlw3Q4QtcdCqB2+07Fyk3dumDADPYIIisR3dDSe fmuaBLYBXFOBKXa0bLFSOLrUHMlZg8dj5V346ClEqXAN0X0mpHN5rnHd46BKQwlm CV92iNj60WNNKh9OGyGcaAg/OSQMMTPvdg6C1Ovk8u/zI92RgxRs4xofWmhsIk4D H4tzcFVCl1YU2Q4qyJTfFl1mEzIG3D/EFxJp+QOxdhQVQKa+KlK/gshDicwmtjn0 lws3KFvb2qnmxSmaAwW3frDZDTDFARnQTOuUKQ6xMfu02Du12FOSRiiQRfd1ftk5 DWNwf+jijTkNZa4ESjYTeHSXPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/Mw7+0 k/i0x6KUWmOm4Q9g4u7jMB8GA1UdIwQYMBaAFPi+LOrLMSTWYPMPiic4BmSK9DyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkFBQy81M0Q1NUNENjM1 NEExMUYwQkE3NjZFNENDNEY5QUUwMi8tTDRzNnNzeEpOWmc4dy1LSnpnR1pJcjBQ SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MNHM2c3N4Sk5aZzh3LUtKemdHWklyMFBJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkFBQy81M0Q1NUNENjM1NEExMUYwQkE3NjZFNENDNEY5QUUwMi8tTDRzNnNzeEpO Wmc4dy1LSnpnR1pJcjBQSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxmHNsA++mOBQ4WtAjUf00tLGWhFMiB4zY179zsuD9+cFXbeKF3vV9tv/jaNE Q6jL+VVQ1XCOon76Ul9NniQ0RwCz1d+RwuLVYh4N4vNPFmlXrFXiPV8hdJ3TFCdT 1AdPhz3S/AJ8ODwxv8vBpuCM2qOs7jSiXpEi5D6qnp+1VmpOpl6nzMV3tznD1+g3 hG/lysCRnPkohddMBjDonRATfEAnHRi40Y9OUEA6h5mSPDrxnf92IvCpqBOUElmf se/KsEZFnq/uJbxJntvTkrMR1E2gFLwdox+E1Ut9TMdx/B2kjEiAyZRM1byM2fGi +Wi2jKgYK4h5Aau0/Hl7q9fsrA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:40:35 2026 by rpki-client