$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft File: cpJMv-NjcwP3sTdsjPca22H7bDk.mft (raw, json) Hash identifier: QFNSYHsIGElXIdduXNOdgC+LiHlZ6VOkjxz7lL6tsyw= Subject key identifier: 5A:E3:DF:76:8F:C4:9F:16:94:0F:5D:9D:AF:01:C8:B3:8B:17:B1:11 Authority key identifier: 72:92:4C:BF:E3:63:73:03:F7:B1:37:6C:8C:F7:1A:DB:61:FB:6C:39 Certificate issuer: /CN=A91D09BC/serialNumber=72924CBFE3637303F7B1376C8CF71ADB61FB6C39 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft Manifest number: 017C Signing time: Thu 23 Jul 2026 07:06:22 +0000 Manifest this update: Thu 23 Jul 2026 07:06:21 +0000 Manifest next update: Thu 30 Jul 2026 07:06:21 +0000 Files and hashes: 1: cpJMv-NjcwP3sTdsjPca22H7bDk.crl (hash: XEcvRWk1hTWeD5WwgDxV0euHaekBoJvhgQtHZPowBPM=) 2: 526AF16A3C7B11F1B0CB2EC97EEE528E.roa (hash: /a4QOETR5wBQx4lL0BfTBrG9hDYCg/Ec1yCZX3YiOH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=72924CBFE3637303F7B1376C8CF71ADB61FB6C39 Validity Not Before: Jul 23 07:06:21 2026 GMT Not After : Jul 30 07:06:21 2026 GMT Subject: CN=6a61bd6d-d232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:31:6f:7b:11:20:66:d1:fd:9a:e4:d2:bd:2e: 0d:34:2a:55:78:47:2a:54:2d:c8:7b:a7:fe:4f:ef: 38:81:4a:00:09:f7:f9:fa:c4:58:bc:14:db:80:c0: 19:8a:06:ff:9e:f1:a3:1e:e3:b4:8e:50:d3:4d:24: 63:0e:d9:20:4e:2d:ce:89:b5:b0:d1:c0:ca:da:7a: 6c:e2:e7:0a:9c:68:7f:44:bd:c9:04:1d:8c:26:84: f3:28:86:7b:4f:71:ce:f4:f8:00:9f:67:99:1f:77: 03:41:c7:ac:0b:8c:d0:68:14:4b:25:b5:66:5b:6f: 31:4d:05:7f:f3:ca:1c:67:c6:09:36:37:37:dc:95: 90:6b:44:c8:8b:cf:b3:3d:fe:7a:61:d6:54:f7:2d: ce:32:2d:6c:71:9f:bd:26:00:e1:12:8c:38:d2:78: 24:7a:ac:ad:c7:08:17:52:30:50:c7:76:ea:70:0e: fd:66:22:d5:c5:9f:16:c8:76:71:02:3a:56:1f:9f: 05:3b:7a:5a:73:5f:e3:99:9c:fb:d6:bf:df:ca:38: f1:88:2c:5f:39:14:65:ff:3a:8d:5b:c3:8c:07:fc: 82:43:95:55:dd:42:20:07:2d:4c:24:7e:47:60:ed: a1:b9:2b:dc:ee:e0:af:47:b7:60:82:fa:9d:f4:b8: 2b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E3:DF:76:8F:C4:9F:16:94:0F:5D:9D:AF:01:C8:B3:8B:17:B1:11 X509v3 Authority Key Identifier: keyid:72:92:4C:BF:E3:63:73:03:F7:B1:37:6C:8C:F7:1A:DB:61:FB:6C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:66:d6:47:72:42:fa:91:60:fa:62:9b:7b:cf:bd:9d:40:5c: 9c:1f:b8:97:1b:ae:17:c9:70:9c:f4:bf:a0:90:5b:0a:bb:cc: 46:01:ae:53:cb:c3:49:e0:55:fe:b1:7a:f4:8f:48:05:e2:05: a8:e6:9d:ee:dc:94:08:59:8f:17:49:62:fd:ae:d0:ed:9c:62: e6:00:41:24:fa:18:3e:a9:57:e7:af:5e:ba:ae:b0:b9:27:14: 28:bb:9e:f6:9d:55:28:5f:16:ac:78:49:de:49:50:ce:f6:c3: 14:dd:9c:d9:e8:8f:57:28:d6:3d:7b:a1:0f:fd:2e:4f:83:eb: e9:d7:64:fe:65:cf:9e:da:eb:06:e6:28:79:05:d3:0d:e6:56: 49:a3:4f:82:ce:88:24:8c:65:95:2e:a6:6e:bd:06:80:81:a2: b6:59:e4:2d:59:82:7a:85:58:2d:60:97:49:29:c7:4b:07:b2: b8:64:6a:88:6b:98:dc:4f:4b:41:3d:c3:e4:1d:9b:ce:03:5d: 44:a0:49:61:88:ac:2e:ad:dd:f9:8c:5d:a2:6a:d7:72:fa:f7: 3a:c8:4d:30:bc:10:39:93:2a:eb:17:58:cb:8a:e8:2e:30:68: 15:01:5e:16:ff:a0:e3:3c:bf:83:04:1f:88:54:63:2e:a9:28: ef:4e:c0:f4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoNzI5MjRDQkZFMzYzNzMwM0Y3QjEzNzZDOENGNzFBREI2 MUZCNkMzOTAeFw0yNjA3MjMwNzA2MjFaFw0yNjA3MzAwNzA2MjFaMBgxFjAUBgNV BAMTDTZhNjFiZDZkLWQyMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcMW97ESBm0f2a5NK9Lg00KlV4RypULch7p/5P7ziBSgAJ9/n6xFi8FNuAwBmK Bv+e8aMe47SOUNNNJGMO2SBOLc6JtbDRwMraemzi5wqcaH9EvckEHYwmhPMohntP cc70+ACfZ5kfdwNBx6wLjNBoFEsltWZbbzFNBX/zyhxnxgk2NzfclZBrRMiLz7M9 /nph1lT3Lc4yLWxxn70mAOESjDjSeCR6rK3HCBdSMFDHdupwDv1mItXFnxbIdnEC OlYfnwU7elpzX+OZnPvWv9/KOPGILF85FGX/Oo1bw4wH/IJDlVXdQiAHLUwkfkdg 7aG5K9zu4K9Ht2CC+p30uCtXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWuPfdo/E nxaUD12drwHIs4sXsREwHwYDVR0jBBgwFoAUcpJMv+NjcwP3sTdsjPca22H7bDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyL2NwSk12LU5qY3dQM3NUZHNqUGNhMjJIN2JE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY3BKTXYtTmpjd1Azc1Rkc2pQY2EyMkg3YkRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw OUJDL0NCODgyRTdFQTcwNzExRUY5OUE1Nzc0MUM0RjlBRTAyL2NwSk12LU5qY3dQ M3NUZHNqUGNhMjJIN2JEay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBpZtZHckL6kWD6Ypt7z72dQFycH7iXG64XyXCc9L+gkFsKu8xGAa5Ty8NJ4FX+ sXr0j0gF4gWo5p3u3JQIWY8XSWL9rtDtnGLmAEEk+hg+qVfnr166rrC5JxQou572 nVUoXxaseEneSVDO9sMU3ZzZ6I9XKNY9e6EP/S5Pg+vp12T+Zc+e2usG5ih5BdMN 5lZJo0+CzogkjGWVLqZuvQaAgaK2WeQtWYJ6hVgtYJdJKcdLB7K4ZGqIa5jcT0tB PcPkHZvOA11EoElhiKwurd35jF2iatdy+vc6yE0wvBA5kyrrF1jLiuguMGgVAV4W /6DjPL+DBB+IVGMuqSjvTsD0 -----END CERTIFICATE-----Generated at Thu Jul 23 21:38:39 2026 by rpki-client