$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft File: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft (raw, json) Hash identifier: ef+mQ71Hm0GW96xNiQpyEyoJ4XAzoSwKC3AIdsqqFRU= Subject key identifier: C4:F2:96:5C:A0:15:EB:2B:8D:14:89:C7:22:3E:5D:ED:30:06:34:2E Authority key identifier: 6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE Certificate issuer: /CN=A91CE978/serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Certificate serial: 3630 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft Manifest number: 35BD Signing time: Thu 23 Jul 2026 23:18:38 +0000 Manifest this update: Thu 23 Jul 2026 23:18:38 +0000 Manifest next update: Thu 30 Jul 2026 23:18:38 +0000 Files and hashes: 1: ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl (hash: 0qZsyFXDYPxkm3BCMOF4A9S75xRublNx3XZVoM9LJo0=) 2: D79607EEDCDD11EE85DBEB12C4F9AE02.roa (hash: 8+4nPBH0mKjruMVqsF1eFTkdvjJp7WM7Sk6y7pERmRQ=) 3: D343067C86EC11F19E006003A7EE528E.roa (hash: MwabdDtsR88t/I1zQatof0zHAy5NQHDXaMUX2ZWtv1k=) 4: 64E2B628BE4911EE897F291BC4F9AE02.roa (hash: mK73bfSEN6zR8+iXpbDtVPOlbDMpY+j7LIX++cafcEE=) 5: 29F7413CBB6011EEB59E5D81C4F9AE02.roa (hash: 5d46M17tPjCDpGTGqDqbIScbNZIYW2F1SqaVmxxIbOY=) 6: D2392E7886EC11F19E006003A7EE528E.roa (hash: /EKK1bYish9YkpKFk7lZQQfQE2DHY5Z3eS0D3n247UA=) 7: E6F73E22B99E11EEBF189021C4F9AE02.roa (hash: 8S+zuChDcqGL9ZeLsJ6JHvqala1ytBwLnGv387U8Cx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 23:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13872 (0x3630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE978, serialNumber=6A1E4F72847EB3699522C93D26773F0DF8396EBE Validity Not Before: Jul 23 23:18:38 2026 GMT Not After : Jul 30 23:18:38 2026 GMT Subject: CN=6a62a14e-d63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:f1:b8:35:a6:10:0a:c4:1d:a5:3e:8f:01: d0:67:f2:67:88:4f:1a:43:7d:7d:b8:7b:c7:1d:60: ef:a7:a9:b7:fd:8f:e7:73:7e:8a:13:01:1e:44:7e: 18:2c:74:56:ad:3d:6b:19:f1:f6:da:b9:75:a8:7f: 78:73:c7:c1:16:37:8c:5a:3e:c1:ef:8b:f2:5e:a3: 96:42:b5:ce:56:2e:2e:03:17:80:e6:88:3b:99:1a: 77:d1:4b:8d:73:d2:27:e2:5b:07:4c:97:76:ee:08: 3b:7d:4a:62:23:06:50:65:85:19:2d:ea:80:fe:e6: c6:20:cb:a1:d4:10:63:d1:fd:99:f8:6d:52:0b:db: 0a:11:4a:18:da:ee:2e:cf:34:7b:66:5a:9b:30:63: 26:cc:53:e2:37:e8:6f:b4:f8:7d:3e:09:94:50:a2: 22:60:a6:09:4e:c2:84:bf:eb:cc:6d:cd:2f:c2:6c: 83:68:e5:bd:bd:6b:1c:33:d3:03:c4:de:86:f3:c0: 34:cd:39:a7:23:20:f4:f7:be:d2:4a:54:50:74:6c: 7e:25:90:3b:48:8b:da:e4:26:16:c4:35:ca:e8:51: e4:76:c0:69:f4:99:c9:16:79:f7:e4:20:ec:0b:43: bf:db:2d:60:58:f9:41:3d:a3:d1:f0:ce:fb:30:dc: e4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F2:96:5C:A0:15:EB:2B:8D:14:89:C7:22:3E:5D:ED:30:06:34:2E X509v3 Authority Key Identifier: keyid:6A:1E:4F:72:84:7E:B3:69:95:22:C9:3D:26:77:3F:0D:F8:39:6E:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE978/3223F35E1D9811E28A8C2E8208B02CD2/ah5PcoR-s2mVIsk9Jnc_Dfg5br4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:1f:f8:92:61:df:58:4a:24:28:39:25:b3:be:09:f0:8d:31: 92:48:e8:16:eb:a7:e5:b1:97:73:5d:8b:b0:57:76:77:5a:12: f5:ea:15:19:17:90:a4:12:8b:1e:91:e2:11:91:99:3a:d4:ee: ff:72:53:ec:bb:85:a5:be:4d:42:4a:0a:12:86:52:fe:30:ae: b9:b2:df:4f:e4:af:42:cd:0e:c7:0e:ec:59:92:22:67:d2:cd: ea:45:30:ac:96:56:6e:18:1c:07:76:d8:75:f2:ac:21:1a:b0: 4d:de:75:dd:cf:74:ed:bb:8a:11:3a:a5:a5:e9:c1:79:d3:d5: cb:5d:0f:4d:b2:45:a9:01:00:ae:61:e9:c4:9e:78:94:17:05: 2e:1c:d9:08:89:9c:64:98:67:56:f5:92:ee:02:c7:b7:35:6e: e6:9e:f4:1a:91:55:49:b8:12:38:29:ca:ba:46:49:2d:6f:47: f4:07:35:d3:b1:e7:42:d5:f4:fd:90:77:e1:fc:19:d6:4f:f9: 97:84:52:18:61:13:a5:b9:e3:c3:00:16:69:1e:db:b6:11:00: 99:f7:12:65:6e:27:bc:2e:88:df:a9:71:a0:b6:a9:8f:38:70: cb:2d:85:b5:3a:5a:f3:ab:26:da:58:12:03:8e:71:7e:68:60: e8:43:54:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U5NzgxMTAvBgNVBAUTKDZBMUU0RjcyODQ3RUIzNjk5NTIyQzkzRDI2NzczRjBE RjgzOTZFQkUwHhcNMjYwNzIzMjMxODM4WhcNMjYwNzMwMjMxODM4WjAYMRYwFAYD VQQDEw02YTYyYTE0ZS1kNjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlW3xuDWmEArEHaU+jwHQZ/JniE8aQ319uHvHHWDvp6m3/Y/nc36KEwEeRH4Y LHRWrT1rGfH22rl1qH94c8fBFjeMWj7B74vyXqOWQrXOVi4uAxeA5og7mRp30UuN c9In4lsHTJd27gg7fUpiIwZQZYUZLeqA/ubGIMuh1BBj0f2Z+G1SC9sKEUoY2u4u zzR7ZlqbMGMmzFPiN+hvtPh9PgmUUKIiYKYJTsKEv+vMbc0vwmyDaOW9vWscM9MD xN6G88A0zTmnIyD0977SSlRQdGx+JZA7SIva5CYWxDXK6FHkdsBp9JnJFnn35CDs C0O/2y1gWPlBPaPR8M77MNzkiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTyllyg FesrjRSJxyI+Xe0wBjQuMB8GA1UdIwQYMBaAFGoeT3KEfrNplSLJPSZ3Pw34OW6+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTk3OC8zMjIzRjM1RTFE OTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMybVZJc2s5Sm5jX0RmZzVi cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FoNVBjb1ItczJtVklzazlKbmNfRGZnNWJyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk3OC8zMjIzRjM1RTFEOTgxMUUyOEE4QzJFODIwOEIwMkNEMi9haDVQY29SLXMy bVZJc2s5Sm5jX0RmZzVicjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKx/4kmHfWEokKDkls74J8I0xkkjoFuun5bGXc12LsFd2d1oS9eoVGReQpBKL HpHiEZGZOtTu/3JT7LuFpb5NQkoKEoZS/jCuubLfT+SvQs0Oxw7sWZIiZ9LN6kUw rJZWbhgcB3bYdfKsIRqwTd513c907buKETqlpenBedPVy10PTbJFqQEArmHpxJ54 lBcFLhzZCImcZJhnVvWS7gLHtzVu5p70GpFVSbgSOCnKukZJLW9H9Ac107HnQtX0 /ZB34fwZ1k/5l4RSGGETpbnjwwAWaR7bthEAmfcSZW4nvC6I36lxoLapjzhwyy2F tTpa86sm2lgSA45xfmhg6ENUeA== -----END CERTIFICATE-----Generated at Fri Jul 24 09:25:50 2026 by rpki-client