$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: p5yduXcUqn9ijvBIQAS2hTOmgP4MQtTKLGnUM00ULYg= Subject key identifier: 7E:EA:B2:F4:4C:C1:B1:76:21:C2:D3:5F:C6:5F:75:44:F4:70:EC:49 Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0C3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0C1F Signing time: Wed 22 Jul 2026 19:07:45 +0000 Manifest this update: Wed 22 Jul 2026 19:07:44 +0000 Manifest next update: Wed 29 Jul 2026 19:07:44 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: 47rWcMhZaqasM3msG4y2k2LObRDEQHpPFe5j7ZicuBI=) 2: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: kq7sx+cXw+m9S0qiyAa+VcKr/WKvuChbXwIbeJRy3rg=) 3: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: ZdWgxsTDmp2SCgpKV/pUzjdMnUTtasFIwHsMjvPLzoQ=) 4: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: qP73CAez9BA/Kxf0LXcrxOa4cBuTk6ek4TGHHpeWEII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3135 (0xc3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Jul 22 19:07:44 2026 GMT Not After : Jul 29 19:07:44 2026 GMT Subject: CN=6a611501-3684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a7:8a:46:88:8d:7d:51:b2:66:55:5d:7d:bf: d6:e6:77:74:51:c9:39:8c:78:91:6b:a9:c8:47:80: 4f:ed:a0:72:29:8e:e7:81:9a:0b:df:ce:b0:b0:1b: 49:ae:a3:b0:89:12:e1:93:44:79:6d:7e:dc:da:c1: 49:b0:75:fd:d6:08:1c:0f:a7:c4:f0:0d:81:a7:37: 53:20:1a:a1:5b:a2:91:ff:96:0f:d4:df:22:78:24: 86:1e:d7:d8:92:18:b3:d5:a4:2a:f7:5f:60:03:08: b7:49:3d:ab:66:84:b5:c4:2f:3f:84:00:cc:fe:4f: 92:b6:80:3d:c6:5c:2c:76:67:25:22:44:61:c3:78: 7d:22:dd:90:67:96:ff:3d:aa:2f:92:0c:0f:8b:83: 94:b5:f2:e5:ee:1f:22:aa:fe:60:3a:96:be:e1:19: 18:71:6e:ef:a9:2d:cb:76:00:a3:a5:27:07:a1:08: 82:d7:45:2d:8d:f7:55:91:30:d6:b8:a1:e2:85:94: 50:a9:01:78:7a:1b:fe:66:9a:41:53:c2:bf:67:6c: c3:ed:89:cd:3c:a0:b9:f7:ba:ae:21:f4:38:a9:72: 1b:d2:54:62:b8:ac:31:68:1c:01:05:59:01:53:f5: 17:09:97:70:7f:8f:1a:42:9c:11:a6:58:18:34:c7: fb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EA:B2:F4:4C:C1:B1:76:21:C2:D3:5F:C6:5F:75:44:F4:70:EC:49 X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4a:98:98:45:22:c7:d4:12:38:a8:8c:61:40:a9:dc:ad:0f: e0:14:04:61:d3:f3:78:d8:34:66:98:c9:bb:27:64:47:1d:86: 55:9a:ca:d1:4b:1c:76:2a:09:b5:f9:17:d6:b5:9b:d0:2f:4e: f3:56:47:5b:69:78:5c:c3:62:0f:bc:0d:63:78:ee:c9:45:4a: 09:e0:bf:00:71:e3:b1:55:17:63:1a:99:a0:59:bf:85:e9:61: be:3e:13:d9:b2:f1:46:76:9a:f6:b8:fa:56:94:02:d8:35:94: 5d:83:55:00:9d:73:eb:cc:09:05:b2:a8:f9:30:7d:8e:18:04: 1a:ad:f4:68:1a:85:21:70:35:d3:0c:51:c1:00:c7:09:d1:da: ef:21:9e:40:90:bd:e6:28:dc:ed:df:20:8d:e6:ef:f1:5b:4b: 88:42:58:bb:7c:a2:7c:b2:fd:fd:f1:ce:21:83:42:8d:b2:20: a8:11:79:11:c0:d8:40:ba:fe:24:c4:e3:f8:4c:56:52:2d:8f: 66:e9:9f:ea:3d:08:29:c3:c5:61:e0:b9:1e:7a:0e:39:f4:54: 46:8e:54:ef:37:64:9a:84:49:f7:80:7a:94:3f:4a:8b:3d:69: 4d:55:73:7e:0b:ee:5f:2a:f4:4d:8a:07:4b:6f:32:7b:0e:f1: 33:3a:80:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjYwNzIyMTkwNzQ0WhcNMjYwNzI5MTkwNzQ0WjAYMRYwFAYD VQQDEw02YTYxMTUwMS0zNjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aeKRoiNfVGyZlVdfb/W5nd0Uck5jHiRa6nIR4BP7aByKY7ngZoL386wsBtJ rqOwiRLhk0R5bX7c2sFJsHX91ggcD6fE8A2BpzdTIBqhW6KR/5YP1N8ieCSGHtfY khiz1aQq919gAwi3ST2rZoS1xC8/hADM/k+StoA9xlwsdmclIkRhw3h9It2QZ5b/ PaovkgwPi4OUtfLl7h8iqv5gOpa+4RkYcW7vqS3LdgCjpScHoQiC10UtjfdVkTDW uKHihZRQqQF4ehv+ZppBU8K/Z2zD7YnNPKC597quIfQ4qXIb0lRiuKwxaBwBBVkB U/UXCZdwf48aQpwRplgYNMf7qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH7qsvRM wbF2IcLTX8ZfdUT0cOxJMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb0qYmEUix9QSOKiMYUCp3K0P4BQEYdPzeNg0ZpjJuydkRx2GVZrK0UscdioJ tfkX1rWb0C9O81ZHW2l4XMNiD7wNY3juyUVKCeC/AHHjsVUXYxqZoFm/helhvj4T 2bLxRnaa9rj6VpQC2DWUXYNVAJ1z68wJBbKo+TB9jhgEGq30aBqFIXA10wxRwQDH CdHa7yGeQJC95ijc7d8gjebv8VtLiEJYu3yifLL9/fHOIYNCjbIgqBF5EcDYQLr+ JMTj+ExWUi2PZumf6j0IKcPFYeC5HnoOOfRURo5U7zdkmoRJ94B6lD9Kiz1pTVVz fgvuXyr0TYoHS28yew7xMzqAJA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:59:40 2026 by rpki-client