$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json) Hash identifier: I+HEuob21Hp6/zoJK4VncGHoipaKy9Im256yEJLeMGQ= Subject key identifier: FA:90:87:E9:58:98:32:BF:26:D1:F1:EB:D1:DD:69:3A:F3:C4:4C:BC Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 0B2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft Manifest number: 0B0B Signing time: Wed 22 Jul 2026 19:43:27 +0000 Manifest this update: Wed 22 Jul 2026 19:43:26 +0000 Manifest next update: Wed 29 Jul 2026 19:43:26 +0000 Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: U0Q/liVLKNoMywd+z/slq6UGWVZ9Qbq6NvZ3ft0crUw=) 2: 6EE80A72F80A11F0BD0E5DB76F6F56BC.roa (hash: sUHEm0sthEP5Lto5Jyv7yFbAnqT7Ikn9wDCxjmSd04U=) 3: 6E71C43EF80A11F0BD0E5DB76F6F56BC.roa (hash: EAWXNHbw72NGXN5onuQ/WOahqrbdihDLckXMN5kD8CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2860 (0xb2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: Jul 22 19:43:26 2026 GMT Not After : Jul 29 19:43:26 2026 GMT Subject: CN=6a611d5e-9d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:63:c9:9c:ab:f8:f4:77:3d:ab:fd:1b:9c:dd: 1e:f1:52:9d:cb:b9:6f:ad:5b:67:9d:da:e5:17:b1: cd:f0:e4:e8:83:58:5a:9c:be:76:c1:31:dd:4b:71: 64:4d:ae:88:96:36:d8:02:4e:00:76:0c:eb:8a:4c: 30:87:5f:6a:7d:60:b8:97:41:cc:0d:2f:5f:ad:2d: 4a:09:a8:d5:2b:21:38:9b:ce:38:af:e2:33:0b:42: 7d:10:f1:1c:fe:12:6c:bb:48:79:49:c9:e0:09:fe: ec:7c:19:3f:55:8e:11:cc:d6:cd:b2:b0:9c:11:f6: ad:45:eb:43:84:4a:9f:c2:24:fe:c6:31:44:72:8b: e8:88:de:10:56:e6:50:2a:73:72:b4:f2:7b:9c:76: e7:e6:7c:d0:78:36:16:b1:d4:20:b3:9b:70:b5:c5: e2:30:22:d2:dc:17:ec:a7:68:2a:70:fb:e9:db:ae: f2:7c:8d:5c:18:89:19:9b:1f:0d:6c:00:95:5f:b1: 22:96:ce:42:81:6a:8e:c4:4c:22:08:d0:1d:49:21: 9d:56:28:2e:6b:6d:7c:cc:cc:db:58:8e:e6:38:3d: c3:93:d8:56:cb:bd:20:af:4c:2c:29:5d:ae:3f:b6: f8:03:ad:c6:ef:55:ac:90:3b:13:29:4d:e8:fa:c2: bf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:90:87:E9:58:98:32:BF:26:D1:F1:EB:D1:DD:69:3A:F3:C4:4C:BC X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:17:44:ae:50:55:36:6e:d6:62:c3:f2:64:0c:70:c8:ff:24: 3a:fa:a0:50:ad:51:f5:65:88:52:7e:43:22:24:33:24:f9:4f: af:d9:1e:29:1b:03:b2:a9:38:d7:d6:d4:c2:e1:c4:b8:a8:b4: 92:6c:d9:45:0f:4f:df:20:e2:e2:02:9b:1c:8b:58:ed:ad:d7: ca:8e:66:94:c3:57:77:e3:c0:d1:18:3f:30:fe:35:0d:c4:e9: 9b:59:27:ce:8b:d9:8a:64:3d:cc:fb:37:c1:69:83:22:23:c8: 17:f8:9c:36:f9:72:4d:07:6a:03:5b:a6:01:56:4c:30:2d:7e: 59:83:08:db:79:35:96:6a:e3:43:23:9e:f2:a9:23:83:dd:9a: b0:ed:df:c4:dd:0d:a0:fe:8d:b3:4d:1d:f8:ea:ec:44:17:1e: cb:80:eb:52:db:a8:cb:cc:b5:2a:af:7a:4f:53:0e:47:d8:ab: 63:ea:02:95:ab:fc:14:16:77:32:39:37:ec:f7:74:01:77:b6: b0:2d:25:4c:8d:cc:3b:ac:e0:4d:58:d8:0c:a8:d9:d8:65:4a: 12:0e:79:ea:ca:ed:77:f8:8c:21:38:fd:92:ea:82:3c:72:3d: ab:ca:55:ab:bb:c3:ad:e9:74:73:66:3f:07:1a:62:40:f2:fd: dc:9a:5b:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCywwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjYwNzIyMTk0MzI2WhcNMjYwNzI5MTk0MzI2WjAYMRYwFAYD VQQDEw02YTYxMWQ1ZS05ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2PJnKv49Hc9q/0bnN0e8VKdy7lvrVtnndrlF7HN8OTog1hanL52wTHdS3Fk Ta6IljbYAk4Adgzrikwwh19qfWC4l0HMDS9frS1KCajVKyE4m844r+IzC0J9EPEc /hJsu0h5ScngCf7sfBk/VY4RzNbNsrCcEfatRetDhEqfwiT+xjFEcovoiN4QVuZQ KnNytPJ7nHbn5nzQeDYWsdQgs5twtcXiMCLS3Bfsp2gqcPvp267yfI1cGIkZmx8N bACVX7Eils5CgWqOxEwiCNAdSSGdVigua218zMzbWI7mOD3Dk9hWy70gr0wsKV2u P7b4A63G71WskDsTKU3o+sK/kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPqQh+lY mDK/JtHx69HdaTrzxEy8MB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdxdErlBVNm7WYsPyZAxwyP8kOvqgUK1R9WWIUn5DIiQzJPlPr9keKRsDsqk4 19bUwuHEuKi0kmzZRQ9P3yDi4gKbHItY7a3Xyo5mlMNXd+PA0Rg/MP41DcTpm1kn zovZimQ9zPs3wWmDIiPIF/icNvlyTQdqA1umAVZMMC1+WYMI23k1lmrjQyOe8qkj g92asO3fxN0NoP6Ns00d+OrsRBcey4DrUtuoy8y1Kq96T1MOR9irY+oClav8FBZ3 Mjk37Pd0AXe2sC0lTI3MO6zgTVjYDKjZ2GVKEg556srtd/iMITj9kuqCPHI9q8pV q7vDrel0c2Y/BxpiQPL93JpbfA== -----END CERTIFICATE-----Generated at Fri Jul 24 09:34:49 2026 by rpki-client