$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft File: lGqi80z6-eS9bjRboJqd6bnC0U0.mft (raw, json) Hash identifier: AfSo+xDK0wzXFc3ausLaDuVpGMTUaqYEMxYiJY1FTBQ= Subject key identifier: C6:08:B7:79:C1:25:D5:AC:48:36:C0:C1:38:FF:C4:D9:E9:0D:3D:77 Authority key identifier: 94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D Certificate issuer: /CN=A91CAA69/serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Certificate serial: 0F3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft Manifest number: 0F26 Signing time: Wed 22 Jul 2026 17:45:57 +0000 Manifest this update: Wed 22 Jul 2026 17:45:56 +0000 Manifest next update: Wed 29 Jul 2026 17:45:56 +0000 Files and hashes: 1: lGqi80z6-eS9bjRboJqd6bnC0U0.crl (hash: yvLGJGmsvBDerCux9EXhBe/4vmcjQdpqH6igpCdwr54=) 2: DF5D49F6985611ECBE7ED328C4F9AE02.roa (hash: iGmNhe2U/JgHU115UXZMlUMKdd/xk6VCuDolUguecP8=) 3: DECBB040985611ECBE7ED328C4F9AE02.roa (hash: idv/2IXVQV4s0FcPaBXiyKtcotl1AiWEqCu1Wl2Gwy8=) 4: 1FAB60EE9EB111E99ED10D84C4F9AE02.roa (hash: JoDyF1+0/uHXUe4b6JwZuFvOHh5ZoEWfFz+rLvuX/DE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3901 (0xf3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAA69, serialNumber=946AA2F34CFAF9E4BD6E345BA09A9DE9B9C2D14D Validity Not Before: Jul 22 17:45:56 2026 GMT Not After : Jul 29 17:45:56 2026 GMT Subject: CN=6a6101d5-e55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e0:03:84:ea:37:59:0d:42:c0:1c:c8:c9:3a: 4d:02:1e:a0:2d:59:ca:b2:1e:59:69:73:74:43:b8: 60:1e:04:5e:e1:e9:73:cb:34:94:71:4c:5c:ad:75: 7e:ed:d8:9a:15:6b:c5:d0:3e:11:13:84:15:73:41: 15:bd:1c:84:3a:2f:80:db:66:3a:a8:ae:9b:48:92: 26:0e:1e:45:75:87:d5:b9:1d:71:ee:88:85:ca:12: 98:63:37:94:a2:9a:b9:66:3b:6d:a0:11:2a:56:39: 8e:8b:8d:54:57:31:48:cc:5c:f5:b4:1b:93:7a:a6: b5:0a:1d:98:ba:5b:9e:f8:c1:92:51:70:a8:9b:f3: 73:dc:0c:49:1b:f7:a0:f1:88:57:23:fd:db:05:ad: 7d:b1:ea:c2:73:59:76:25:e5:27:1b:8e:37:34:16: ba:a2:64:de:d1:8e:3e:5c:25:a4:ca:9b:83:88:6d: 2e:a3:37:83:1b:fe:8f:d4:fe:4c:3f:88:ea:d3:42: ea:f9:81:d7:74:29:01:64:b4:6d:36:0a:15:cb:86: 24:d5:bb:ad:99:60:37:94:54:66:7f:b1:63:d1:ba: cf:51:ca:31:00:24:6c:8f:b1:a7:6c:45:2b:90:ee: b6:15:e0:fb:c8:b4:19:74:81:64:4b:29:c6:bb:93: ed:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:08:B7:79:C1:25:D5:AC:48:36:C0:C1:38:FF:C4:D9:E9:0D:3D:77 X509v3 Authority Key Identifier: keyid:94:6A:A2:F3:4C:FA:F9:E4:BD:6E:34:5B:A0:9A:9D:E9:B9:C2:D1:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lGqi80z6-eS9bjRboJqd6bnC0U0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAA69/40E1FC9C9EB011E9B07E7A82C4F9AE02/lGqi80z6-eS9bjRboJqd6bnC0U0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:70:0d:c7:2c:90:3d:cf:a4:21:9c:ae:30:10:98:92:95:43: fe:ae:f2:83:8e:17:12:d9:98:1a:c1:38:84:da:4f:88:42:cc: 18:9b:65:74:58:d5:55:10:ad:96:79:c0:7a:95:1d:e2:f7:4d: b5:d6:24:be:50:50:34:19:12:7d:0f:af:75:b5:57:06:30:70: 8b:cb:3a:34:e5:37:87:d2:a1:49:e6:82:be:df:a4:54:ef:f7: 0f:1f:1b:8f:1c:2c:2b:62:52:a0:d9:9f:4e:b1:ad:26:b3:f0: 65:08:82:7e:af:8f:91:46:1d:5a:67:c1:18:14:27:4e:db:91: 21:1b:a4:d6:c4:56:12:b9:ab:3c:89:06:75:db:e5:e3:c4:66: 8b:d0:cc:f2:8f:f1:7e:05:f2:5a:7f:c9:e5:27:76:f8:a9:df: 39:e6:49:37:27:9d:4e:d9:db:73:b7:de:f7:ff:a2:3c:29:5f: e5:a7:d2:b7:a5:f8:17:2a:8e:93:24:7f:e0:c8:d8:8b:aa:a9: 11:40:7d:f4:a1:51:61:5b:26:db:a8:09:8e:4d:f3:26:88:4a: 42:4b:94:ea:6b:48:88:d2:0d:9c:97:c5:f6:10:1a:08:16:2f: ff:c7:3e:a8:13:9a:25:67:21:2c:46:4f:3e:49:9d:7e:bf:4e: 5b:d3:ec:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FBNjkxMTAvBgNVBAUTKDk0NkFBMkYzNENGQUY5RTRCRDZFMzQ1QkEwOUE5REU5 QjlDMkQxNEQwHhcNMjYwNzIyMTc0NTU2WhcNMjYwNzI5MTc0NTU2WjAYMRYwFAYD VQQDEw02YTYxMDFkNS1lNTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquADhOo3WQ1CwBzIyTpNAh6gLVnKsh5ZaXN0Q7hgHgRe4elzyzSUcUxcrXV+ 7diaFWvF0D4RE4QVc0EVvRyEOi+A22Y6qK6bSJImDh5FdYfVuR1x7oiFyhKYYzeU opq5ZjttoBEqVjmOi41UVzFIzFz1tBuTeqa1Ch2Yulue+MGSUXCom/Nz3AxJG/eg 8YhXI/3bBa19serCc1l2JeUnG443NBa6omTe0Y4+XCWkypuDiG0uozeDG/6P1P5M P4jq00Lq+YHXdCkBZLRtNgoVy4Yk1butmWA3lFRmf7Fj0brPUcoxACRsj7GnbEUr kO62FeD7yLQZdIFkSynGu5PtTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYIt3nB JdWsSDbAwTj/xNnpDT13MB8GA1UdIwQYMBaAFJRqovNM+vnkvW40W6Canem5wtFN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUE2OS80MEUxRkM5QzlF QjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1lUzlialJib0pxZDZibkMw VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xHcWk4MHo2LWVTOWJqUmJvSnFkNmJuQzBVMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUE2OS80MEUxRkM5QzlFQjAxMUU5QjA3RTdBODJDNEY5QUUwMi9sR3FpODB6Ni1l UzlialJib0pxZDZibkMwVTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnXANxyyQPc+kIZyuMBCYkpVD/q7yg44XEtmYGsE4hNpPiELMGJtldFjVVRCt lnnAepUd4vdNtdYkvlBQNBkSfQ+vdbVXBjBwi8s6NOU3h9KhSeaCvt+kVO/3Dx8b jxwsK2JSoNmfTrGtJrPwZQiCfq+PkUYdWmfBGBQnTtuRIRuk1sRWErmrPIkGddvl 48Rmi9DM8o/xfgXyWn/J5Sd2+KnfOeZJNyedTtnbc7fe9/+iPClf5afSt6X4FyqO kyR/4MjYi6qpEUB99KFRYVsm26gJjk3zJohKQkuU6mtIiNINnJfF9hAaCBYv/8c+ qBOaJWchLEZPPkmdfr9OW9Ps8Q== -----END CERTIFICATE-----Generated at Fri Jul 24 09:00:09 2026 by rpki-client