$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json) Hash identifier: CnOF6LkBak5YTAV98t3lGAlwyPHBQ7N82u/uyc5Zg3I= Subject key identifier: 9E:C2:AA:CC:EA:BB:D6:E9:80:0C:A6:53:22:45:C9:C9:2E:98:96:22 Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft Manifest number: 07B7 Signing time: Wed 22 Jul 2026 22:08:47 +0000 Manifest this update: Wed 22 Jul 2026 22:08:47 +0000 Manifest next update: Wed 29 Jul 2026 22:08:47 +0000 Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: v6OrQ+x7TGXBR1lj0REMUVAt9oiRvqVE1fPL7m6G2P4=) 2: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: 0sgsytXNSBVA8tI+B+np2QJiF5EYk7ItL5UWLy6dAWE=) 3: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: Bluwv17U0E3bQxLMX6DjEXL7fkRDMsWwu/v38ekvil0=) 4: C707808A7C0211F1B99BE3648FA30FBC.roa (hash: 9ssE+0/Wd9/Zy6emzy+4Q/4vapOHX+2nKdVogJqzems=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Jul 22 22:08:47 2026 GMT Not After : Jul 29 22:08:47 2026 GMT Subject: CN=6a613f6f-1172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:95:70:4f:ab:94:58:73:2e:de:11:06:27:7f: 87:12:e5:e5:77:0c:4c:71:f1:1e:4f:54:53:cd:76: 80:b0:d0:bf:8e:a3:8f:3d:df:c4:c1:56:dc:c8:8f: 72:c5:30:76:bd:76:0a:43:ee:a9:63:65:96:50:f7: 73:30:e4:8e:50:93:02:51:14:e7:89:4e:94:5b:07: 15:f2:e1:33:c7:c4:e4:db:f5:73:9d:63:46:17:2e: 5a:c5:f9:24:6a:46:ac:40:9d:75:25:68:e8:42:fa: 73:a2:66:ce:47:e6:e1:19:8d:bb:ea:89:a7:1f:ff: e4:c8:ee:0e:43:e6:1d:e9:3b:e4:1f:aa:4f:fc:a8: 27:be:0d:7f:14:2e:93:8d:34:41:58:56:9d:ed:6b: a5:b1:fa:98:30:48:19:20:34:57:8b:c1:df:83:54: 94:10:8c:c5:9c:84:55:6a:aa:5e:f6:5d:df:b7:ad: 94:ef:88:b4:1e:39:c1:42:fa:50:70:37:25:6d:54: 4c:94:c1:7b:c1:d6:17:92:84:ef:f5:cf:ae:8e:55: 2a:17:6e:60:5e:c8:2a:31:38:04:4a:dc:03:2a:a0: 15:4b:2d:bf:a8:b8:1f:2a:f7:93:11:91:18:66:24: 34:bc:9f:da:89:75:d5:0c:c1:92:a7:88:2b:0e:4c: be:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C2:AA:CC:EA:BB:D6:E9:80:0C:A6:53:22:45:C9:C9:2E:98:96:22 X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:e8:7e:bd:55:b0:60:16:73:ec:ae:16:45:af:2a:0d:c1:c7: 7f:10:b7:a3:83:72:86:3d:dd:79:07:46:b0:17:a5:82:e4:5f: 39:2a:00:35:80:dd:c0:2c:10:46:95:4f:1e:2b:fe:0b:5e:55: 19:42:8b:36:f1:95:25:70:15:12:c7:df:45:4b:9d:bb:29:43: c4:d9:3f:85:25:65:66:12:b6:f4:21:42:d6:b3:35:42:00:69: 65:50:ff:d3:98:1e:88:ef:00:33:5b:10:98:b5:82:e4:73:3c: 54:7f:87:4c:38:39:98:52:3f:76:0a:63:49:5f:6a:dc:5b:17: 30:cd:da:9a:f5:f7:2a:14:51:ef:09:38:7c:24:33:71:be:06: 8f:c9:e2:30:c2:8e:9a:f2:06:3b:84:00:50:ae:37:ed:72:03: 6f:15:43:9e:75:4a:49:92:7f:e8:06:d6:9b:2b:87:46:1f:f3: b9:dd:aa:f2:ec:ad:36:f8:0a:1a:ad:77:63:17:ac:38:1d:9b: 2c:12:2e:b0:f3:bf:49:da:7c:f4:8b:fb:be:e2:0d:3e:1a:bb: 6c:ba:e7:e0:46:b0:bf:31:93:91:5a:f7:3a:ca:8b:4d:84:ec: b1:47:c1:b4:76:e8:06:ef:76:5b:d2:ec:9f:31:57:cc:3e:56: 69:67:07:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjYwNzIyMjIwODQ3WhcNMjYwNzI5MjIwODQ3WjAYMRYwFAYD VQQDEw02YTYxM2Y2Zi0xMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpVwT6uUWHMu3hEGJ3+HEuXldwxMcfEeT1RTzXaAsNC/jqOPPd/EwVbcyI9y xTB2vXYKQ+6pY2WWUPdzMOSOUJMCURTniU6UWwcV8uEzx8Tk2/VznWNGFy5axfkk akasQJ11JWjoQvpzombOR+bhGY276omnH//kyO4OQ+Yd6TvkH6pP/Kgnvg1/FC6T jTRBWFad7WulsfqYMEgZIDRXi8Hfg1SUEIzFnIRVaqpe9l3ft62U74i0HjnBQvpQ cDclbVRMlMF7wdYXkoTv9c+ujlUqF25gXsgqMTgEStwDKqAVSy2/qLgfKveTEZEY ZiQ0vJ/aiXXVDMGSp4grDky+mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7Cqszq u9bpgAymUyJFyckumJYiMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1 WXl0Vm5VbkZzZTh6TGFROHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsOh+vVWwYBZz7K4WRa8qDcHHfxC3o4Nyhj3deQdGsBelguRfOSoANYDdwCwQ RpVPHiv+C15VGUKLNvGVJXAVEsffRUuduylDxNk/hSVlZhK29CFC1rM1QgBpZVD/ 05geiO8AM1sQmLWC5HM8VH+HTDg5mFI/dgpjSV9q3FsXMM3amvX3KhRR7wk4fCQz cb4Gj8niMMKOmvIGO4QAUK437XIDbxVDnnVKSZJ/6AbWmyuHRh/zud2q8uytNvgK Gq13YxesOB2bLBIusPO/Sdp89Iv7vuINPhq7bLrn4EawvzGTkVr3OsqLTYTssUfB tHboBu92W9LsnzFXzD5WaWcH8g== -----END CERTIFICATE-----Generated at Fri Jul 24 07:45:31 2026 by rpki-client