$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft File: SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft (raw, json) Hash identifier: lyyI7rQUE+miRfmLoYw0wUr8T+xenPaGm92JMaU+hS0= Subject key identifier: 86:42:22:B4:49:BA:EF:1B:F7:4D:64:0D:EF:D4:D5:DB:48:68:6D:A2 Authority key identifier: 4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 Certificate issuer: /CN=A91CF364/serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Certificate serial: 0A0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft Manifest number: 0A04 Signing time: Wed 22 Jul 2026 20:12:36 +0000 Manifest this update: Wed 22 Jul 2026 20:12:35 +0000 Manifest next update: Wed 29 Jul 2026 20:12:35 +0000 Files and hashes: 1: SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl (hash: IpqxXIdlt4X06clhq59GyiM4qNsSvH6rbUhtL8VyU/k=) 2: 1DEAACDA9F8511EABAA10F3BC4F9AE02.roa (hash: XourWZvjWeRYuoG4eJzATWITu2fMjkfcMaCSGMduRx8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2573 (0xa0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF364, serialNumber=4A73B16D2EE9E9CD4C3FC0BD61091C489053D436 Validity Not Before: Jul 22 20:12:35 2026 GMT Not After : Jul 29 20:12:35 2026 GMT Subject: CN=6a612434-15a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:33:23:d8:a3:8c:a3:e8:3e:2f:70:34:65: 69:b6:47:af:8a:96:77:0a:66:13:2b:8f:8b:b2:31: 8b:3f:2d:f1:80:9c:47:4d:f0:f9:16:b4:57:1c:a3: 85:fb:62:71:6f:ba:7b:6a:aa:6f:71:5a:55:e5:9f: 40:d2:87:d5:6e:a8:a4:43:66:8b:4c:3d:4b:ee:e7: 1a:15:e6:a8:a4:ac:30:93:a5:1f:6b:12:9c:6a:98: 99:7e:70:a3:28:3a:77:8b:ea:50:d7:ac:90:04:60: 3d:2f:bc:ca:1c:33:97:0a:8b:72:8d:59:8c:b9:81: f7:51:eb:72:66:4b:12:a2:04:7f:88:7a:5e:c6:04: 07:c5:37:dd:5f:99:c2:4b:f3:8b:ac:23:ce:36:c6: da:66:40:1e:ad:b6:c4:10:9d:96:67:3d:19:23:87: b7:36:8c:67:7f:57:bd:3c:84:2f:70:93:83:48:bf: d7:05:81:31:a1:ac:28:af:93:71:2e:59:d7:dc:c5: c1:a0:63:bd:a0:0b:34:32:95:5e:da:20:6f:d1:e9: 3a:93:8e:97:a8:de:7d:d8:f0:81:28:16:a8:38:6b: 31:5a:35:c8:08:2f:a8:3c:7a:ce:a7:b1:37:cd:d1: 6f:17:d1:50:64:7a:a3:47:6e:8c:29:b0:3d:22:40: e4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:42:22:B4:49:BA:EF:1B:F7:4D:64:0D:EF:D4:D5:DB:48:68:6D:A2 X509v3 Authority Key Identifier: keyid:4A:73:B1:6D:2E:E9:E9:CD:4C:3F:C0:BD:61:09:1C:48:90:53:D4:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SnOxbS7p6c1MP8C9YQkcSJBT1DY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF364/716A59AC9F8311EA93149135C4F9AE02/SnOxbS7p6c1MP8C9YQkcSJBT1DY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:ef:69:ae:0d:ce:1c:57:63:00:ce:a7:ae:64:4e:ba:fb:e3: fa:fa:bd:a6:b6:78:68:a0:0e:56:71:39:30:5f:41:91:07:bc: 8b:1c:e7:e6:c8:21:29:9a:65:d4:1a:fd:3b:fa:47:e0:29:6e: 29:92:b7:18:8c:33:cd:03:b0:23:94:78:52:3e:ba:e7:48:e5: ca:0b:7e:89:ad:ef:ae:4a:cd:91:88:84:76:c2:9b:2e:aa:2e: bb:17:e6:69:49:d3:9a:fd:fc:f3:4d:c5:25:18:2d:cb:0c:4b: 25:9d:d8:1c:1a:bd:7b:74:14:48:e3:53:8a:1d:1c:23:7e:d5: 39:15:e6:ff:69:fe:52:aa:6c:85:c7:60:cc:4d:64:59:b2:f7: 63:2d:4f:7c:08:9f:ea:d6:62:77:8c:86:c1:2c:e8:f1:7f:80: 23:eb:c8:75:dc:4c:13:07:d5:d5:6a:b2:80:dc:2c:d7:f0:ff: 11:5f:d9:51:dc:e8:88:1e:61:1c:96:e9:a4:94:01:51:a4:4b: 39:8b:18:5a:56:3e:af:7e:e6:8e:d7:09:e7:68:82:7b:2d:05: dc:7f:85:31:09:e2:23:da:6f:a9:f5:b6:07:27:92:f8:8b:63: 5c:39:8f:a7:8d:34:60:98:18:24:2d:af:d9:3c:ba:fc:ff:d8: ff:cf:cb:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YzNjQxMTAvBgNVBAUTKDRBNzNCMTZEMkVFOUU5Q0Q0QzNGQzBCRDYxMDkxQzQ4 OTA1M0Q0MzYwHhcNMjYwNzIyMjAxMjM1WhcNMjYwNzI5MjAxMjM1WjAYMRYwFAYD VQQDEw02YTYxMjQzNC0xNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuW8zI9ijjKPoPi9wNGVptkevipZ3CmYTK4+LsjGLPy3xgJxHTfD5FrRXHKOF +2Jxb7p7aqpvcVpV5Z9A0ofVbqikQ2aLTD1L7ucaFeaopKwwk6UfaxKcapiZfnCj KDp3i+pQ16yQBGA9L7zKHDOXCotyjVmMuYH3UetyZksSogR/iHpexgQHxTfdX5nC S/OLrCPONsbaZkAerbbEEJ2WZz0ZI4e3Noxnf1e9PIQvcJODSL/XBYExoawor5Nx LlnX3MXBoGO9oAs0MpVe2iBv0ek6k46XqN592PCBKBaoOGsxWjXICC+oPHrOp7E3 zdFvF9FQZHqjR26MKbA9IkDkTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZCIrRJ uu8b901kDe/U1dtIaG2iMB8GA1UdIwQYMBaAFEpzsW0u6enNTD/AvWEJHEiQU9Q2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjM2NC83MTZBNTlBQzlG ODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZjMU1QOEM5WVFrY1NKQlQx RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NuT3hiUzdwNmMxTVA4QzlZUWtjU0pCVDFEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RjM2NC83MTZBNTlBQzlGODMxMUVBOTMxNDkxMzVDNEY5QUUwMi9Tbk94YlM3cDZj MU1QOEM5WVFrY1NKQlQxRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuu9prg3OHFdjAM6nrmROuvvj+vq9prZ4aKAOVnE5MF9BkQe8ixzn5sghKZpl 1Br9O/pH4CluKZK3GIwzzQOwI5R4Uj6650jlygt+ia3vrkrNkYiEdsKbLqouuxfm aUnTmv38803FJRgtywxLJZ3YHBq9e3QUSONTih0cI37VORXm/2n+UqpshcdgzE1k WbL3Yy1PfAif6tZid4yGwSzo8X+AI+vIddxMEwfV1WqygNws1/D/EV/ZUdzoiB5h HJbppJQBUaRLOYsYWlY+r37mjtcJ52iCey0F3H+FMQniI9pvqfW2ByeS+ItjXDmP p400YJgYJC2v2Ty6/P/Y/8/LMw== -----END CERTIFICATE-----Generated at Fri Jul 24 09:02:11 2026 by rpki-client