$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: qdJzex31JZhxsGapKR1Z8fP+px7gSd9S/C4EwEIlweI= Subject key identifier: 4E:37:69:00:19:16:39:03:69:27:71:0D:0E:57:4C:A0:5F:6A:43:A0 Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0F5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0F48 Signing time: Wed 22 Jul 2026 17:43:06 +0000 Manifest this update: Wed 22 Jul 2026 17:43:06 +0000 Manifest next update: Wed 29 Jul 2026 17:43:06 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: bwSs5FmdaDJeFUTWeUrZqosNYBb+pCSmPu1Bmzon1yY=) 2: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: QgnZ4sc6Puwjs/s8k5cb77PzqC45+lyxM26KCi/2eRw=) 3: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 0pDPKVbVvWSeAR338iLPukYfLq9BMpbP9fcDOLwkjEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3933 (0xf5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Jul 22 17:43:06 2026 GMT Not After : Jul 29 17:43:06 2026 GMT Subject: CN=6a61012a-2b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:00:e0:a7:0b:c7:17:66:a9:4e:9e:66:87: d2:2b:1c:5c:03:f6:42:fd:f8:ef:fa:10:11:1d:67: 10:a2:13:90:75:0b:21:55:68:a6:f4:39:cd:1f:a0: e3:81:b8:d5:63:d0:d4:c9:93:a9:bc:3f:db:38:f5: 72:87:3e:b4:41:c0:6f:b5:e2:8e:2f:3f:2d:9a:49: e8:4f:3d:9b:f5:b3:4e:35:23:e8:b6:54:e1:fe:ff: 4a:5a:41:67:9d:a1:b4:c6:b7:a9:ac:d7:7b:8a:d7: f3:b8:49:c6:98:ac:64:b9:ae:33:f7:08:82:7d:d3: 05:24:f3:c3:f8:47:02:9c:da:e5:66:00:e3:6f:3a: 55:4f:96:11:c3:39:37:04:8d:3a:b0:22:b0:3b:e2: f8:55:64:68:e3:44:b3:92:28:be:24:dc:97:54:a6: 21:b6:f6:1b:81:dc:21:3f:de:e5:28:5e:a3:1e:78: 6b:82:01:97:aa:5c:14:49:7e:2a:19:fe:26:eb:e3: 9e:02:e3:3f:e5:cf:c3:08:0f:41:bb:fc:26:f1:38: 84:46:52:6e:56:da:7f:bf:2f:18:d5:d8:72:e5:6b: 8a:fe:b0:28:7b:ca:72:40:ab:c1:d4:35:ef:5a:cc: b1:8f:b2:76:95:2d:27:ff:ee:4f:40:e5:39:51:25: 3f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:37:69:00:19:16:39:03:69:27:71:0D:0E:57:4C:A0:5F:6A:43:A0 X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:05:96:c0:cf:5a:08:95:cb:ce:5e:93:39:0a:78:c2:82:40: a5:c1:a6:c7:7e:73:a8:9e:26:17:9c:b6:33:7b:3b:cc:9d:f5: f4:b1:f3:e7:10:ec:b4:c8:4c:1d:b4:03:1e:6c:d7:74:e7:dc: 85:78:cc:0a:24:74:1d:f1:99:f4:71:f4:a1:be:22:ea:ad:1a: 6a:c9:ba:0b:91:67:44:d7:76:81:71:43:86:5a:1e:5b:ca:d1: 09:39:3e:70:8d:7f:5b:9f:ec:76:43:07:33:0c:09:bd:0b:1b: 8a:c1:5c:a1:48:c8:dc:b4:9b:dc:5d:08:30:b6:d7:34:cb:0e: a0:3e:2a:c4:95:b6:44:46:26:f0:42:73:4c:59:f5:37:2f:fa: f4:6f:82:97:8e:8f:b1:44:c4:0d:f6:bc:c3:f0:30:3c:55:89: b5:24:9f:c9:e0:e9:aa:ea:16:af:1c:0d:33:cc:f1:8d:53:d2: a8:5a:8e:f5:f6:66:02:8e:41:11:be:88:82:43:ae:1c:bc:b2: 84:36:81:f2:f1:1c:ba:36:f5:2e:d6:47:cc:b0:63:2e:b3:36: bc:30:ef:32:0a:d9:67:e8:87:a2:26:59:db:2c:a9:bd:ec:bd: 32:46:ba:e0:ac:d6:0d:4a:6a:4c:eb:48:fe:c3:5d:fd:c8:ff: a0:01:0f:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjYwNzIyMTc0MzA2WhcNMjYwNzI5MTc0MzA2WjAYMRYwFAYD VQQDEw02YTYxMDEyYS0yYjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApa0A4KcLxxdmqU6eZofSKxxcA/ZC/fjv+hARHWcQohOQdQshVWim9DnNH6Dj gbjVY9DUyZOpvD/bOPVyhz60QcBvteKOLz8tmknoTz2b9bNONSPotlTh/v9KWkFn naG0xreprNd7itfzuEnGmKxkua4z9wiCfdMFJPPD+EcCnNrlZgDjbzpVT5YRwzk3 BI06sCKwO+L4VWRo40Szkii+JNyXVKYhtvYbgdwhP97lKF6jHnhrggGXqlwUSX4q Gf4m6+OeAuM/5c/DCA9Bu/wm8TiERlJuVtp/vy8Y1dhy5WuK/rAoe8pyQKvB1DXv Wsyxj7J2lS0n/+5PQOU5USU/FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE43aQAZ FjkDaSdxDQ5XTKBfakOgMB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOAWWwM9aCJXLzl6TOQp4woJApcGmx35zqJ4mF5y2M3s7zJ319LHz5xDstMhM HbQDHmzXdOfchXjMCiR0HfGZ9HH0ob4i6q0aasm6C5FnRNd2gXFDhloeW8rRCTk+ cI1/W5/sdkMHMwwJvQsbisFcoUjI3LSb3F0IMLbXNMsOoD4qxJW2REYm8EJzTFn1 Ny/69G+Cl46PsUTEDfa8w/AwPFWJtSSfyeDpquoWrxwNM8zxjVPSqFqO9fZmAo5B Eb6IgkOuHLyyhDaB8vEcujb1LtZHzLBjLrM2vDDvMgrZZ+iHoiZZ2yypvey9Mka6 4KzWDUpqTOtI/sNd/cj/oAEPNA== -----END CERTIFICATE-----Generated at Fri Jul 24 01:28:19 2026 by rpki-client