$ rpki-client -vvf rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft File: THDgIDLqWcKv1UGhhw10sEDRtqI.mft (raw, json) Hash identifier: QsP4nfUL2L7mhYbdjdvH4RRZFCRweLgi7/E2jeCrtCo= Subject key identifier: 74:09:59:3A:5E:38:5F:83:5F:8E:72:CD:8D:51:12:81:D8:F5:5F:F2 Authority key identifier: 4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 Certificate issuer: /CN=A91D615F/serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft Manifest number: 09E5 Signing time: Wed 22 Jul 2026 20:15:42 +0000 Manifest this update: Wed 22 Jul 2026 20:15:42 +0000 Manifest next update: Wed 29 Jul 2026 20:15:42 +0000 Files and hashes: 1: THDgIDLqWcKv1UGhhw10sEDRtqI.crl (hash: BqjoVwt6e64piuNVG9YXs0CqorRinhcxcGneC8QB3pY=) 2: 05CABF92A64111EAB544074CC4F9AE02.roa (hash: SF124PgFJdMgEInYT/GtV8Bi1Qw6o/zRPCKi4I6lOOw=) 3: 193128AAD15D11EE8BD5C02BC4F9AE02.roa (hash: GsGKse+jvZV0Ypq4tt+9yydVOYc4iOZZx7JlseayyeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:15:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D615F, serialNumber=4C70E02032EA59C2AFD541A1870D74B040D1B6A2 Validity Not Before: Jul 22 20:15:42 2026 GMT Not After : Jul 29 20:15:42 2026 GMT Subject: CN=6a6124ee-c286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:e8:03:07:f8:08:6c:3d:3b:aa:64:47:fa: 60:00:b2:e8:e3:87:c7:8d:d2:ce:7b:5b:6d:bf:ee: f2:4d:4b:7f:fe:83:63:c1:e1:a8:14:9f:88:05:ec: d0:f5:d9:fe:e3:7d:18:df:a7:73:e5:0b:3e:17:70: e4:64:40:4d:44:ef:5a:b2:a4:22:5a:c4:29:87:7b: bf:14:cb:1b:ce:76:89:9a:b1:3e:00:a0:81:ef:fc: f9:f6:6a:5b:62:c5:b4:3d:7f:7a:3e:29:7e:6b:a7: fd:fc:9b:a5:b7:93:1d:0d:5b:a1:81:23:98:cd:56: ef:00:3d:6a:c5:bb:51:33:23:fb:2d:62:85:5c:b3: cc:a2:64:70:af:42:e8:38:be:f1:17:77:34:47:9e: 9e:7b:c9:a0:4d:fe:66:41:cd:53:83:39:7e:ee:26: 8e:a6:e8:13:e7:14:56:81:73:27:ab:17:78:9b:b9: c5:c5:67:29:b6:bc:15:f3:00:b5:02:e8:d4:1b:94: 4f:0c:a4:51:d9:5c:6c:fe:15:e6:c6:1e:69:f4:81: c1:be:0e:26:a2:e4:82:97:f3:68:11:b9:9e:75:2c: 12:c3:1f:ea:55:1e:7f:4c:0c:31:36:12:ed:18:41: de:35:ce:db:be:6b:26:36:b2:4f:90:43:30:02:ca: 93:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:09:59:3A:5E:38:5F:83:5F:8E:72:CD:8D:51:12:81:D8:F5:5F:F2 X509v3 Authority Key Identifier: keyid:4C:70:E0:20:32:EA:59:C2:AF:D5:41:A1:87:0D:74:B0:40:D1:B6:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/THDgIDLqWcKv1UGhhw10sEDRtqI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D615F/F312CA26A63F11EA8D06824AC4F9AE02/THDgIDLqWcKv1UGhhw10sEDRtqI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:09:dd:1b:85:f2:fe:30:63:dc:2c:9e:01:ca:69:10:c5:1c: e7:60:23:5b:70:dd:d8:e0:18:b5:50:c3:da:80:54:70:77:92: 43:cd:3f:dd:81:ad:94:4e:6e:81:29:b4:d1:4e:5f:2b:39:95: a1:4f:91:b7:fa:59:58:af:7f:5e:23:ee:fa:87:08:2d:36:44: 92:2e:1d:f4:31:58:f7:eb:85:3f:5f:8a:38:4d:b4:22:0c:a5: f2:3d:45:75:d7:7e:1c:8c:bf:ea:41:58:45:36:c5:8a:90:64: 5e:cf:14:a6:9b:ed:b3:67:8c:4e:a0:66:31:db:80:dd:80:08: 5d:b6:fd:55:d2:64:ba:1a:f5:be:14:71:ef:e8:f8:5a:f7:b5: 4f:42:dd:d1:e1:97:0f:05:8e:1c:12:3d:b4:3b:4e:5d:4d:cc: 73:82:c8:06:4c:17:3f:64:a1:28:35:f9:b6:f9:4f:0e:db:70: 07:13:76:26:e0:e7:2b:6e:91:76:78:59:f2:76:c4:60:80:43: cd:ba:91:20:de:b3:d3:13:08:be:d0:4f:19:03:2d:d4:48:b7: 7e:db:ea:5f:f6:a9:c1:f2:1f:1f:8d:7e:72:8e:08:a0:65:c6: a3:bf:51:2f:11:92:bc:fc:bf:bc:31:90:78:dd:84:a8:b8:2d: b1:1a:c8:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYxNUYxMTAvBgNVBAUTKDRDNzBFMDIwMzJFQTU5QzJBRkQ1NDFBMTg3MEQ3NEIw NDBEMUI2QTIwHhcNMjYwNzIyMjAxNTQyWhcNMjYwNzI5MjAxNTQyWjAYMRYwFAYD VQQDEw02YTYxMjRlZS1jMjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAounoAwf4CGw9O6pkR/pgALLo44fHjdLOe1ttv+7yTUt//oNjweGoFJ+IBezQ 9dn+430Y36dz5Qs+F3DkZEBNRO9asqQiWsQph3u/FMsbznaJmrE+AKCB7/z59mpb YsW0PX96Pil+a6f9/Jult5MdDVuhgSOYzVbvAD1qxbtRMyP7LWKFXLPMomRwr0Lo OL7xF3c0R56ee8mgTf5mQc1Tgzl+7iaOpugT5xRWgXMnqxd4m7nFxWcptrwV8wC1 AujUG5RPDKRR2Vxs/hXmxh5p9IHBvg4mouSCl/NoEbmedSwSwx/qVR5/TAwxNhLt GEHeNc7bvmsmNrJPkEMwAsqTiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQJWTpe OF+DX45yzY1REoHY9V/yMB8GA1UdIwQYMBaAFExw4CAy6lnCr9VBoYcNdLBA0bai MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjE1Ri9GMzEyQ0EyNkE2 M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdjS3YxVUdoaHcxMHNFRFJ0 cUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RIRGdJRExxV2NLdjFVR2hodzEwc0VEUnRxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjE1Ri9GMzEyQ0EyNkE2M0YxMUVBOEQwNjgyNEFDNEY5QUUwMi9USERnSURMcVdj S3YxVUdoaHcxMHNFRFJ0cUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArwndG4Xy/jBj3CyeAcppEMUc52AjW3Dd2OAYtVDD2oBUcHeSQ80/3YGtlE5u gSm00U5fKzmVoU+Rt/pZWK9/XiPu+ocILTZEki4d9DFY9+uFP1+KOE20Igyl8j1F ddd+HIy/6kFYRTbFipBkXs8Uppvts2eMTqBmMduA3YAIXbb9VdJkuhr1vhRx7+j4 Wve1T0Ld0eGXDwWOHBI9tDtOXU3Mc4LIBkwXP2ShKDX5tvlPDttwBxN2JuDnK26R dnhZ8nbEYIBDzbqRIN6z0xMIvtBPGQMt1Ei3ftvqX/apwfIfH41+co4IoGXGo79R LxGSvPy/vDGQeN2EqLgtsRrI/g== -----END CERTIFICATE-----Generated at Fri Jul 24 00:33:03 2026 by rpki-client