$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: 8s88SrTka4Uzv3pMYS+irFDaXQPZgFTyS77Pm0SxqR0= Subject key identifier: 38:40:25:E3:FE:F5:67:41:74:F8:28:E1:AE:22:B1:99:6A:95:94:72 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 01F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 01E4 Signing time: Thu 23 Jul 2026 04:53:18 +0000 Manifest this update: Thu 23 Jul 2026 04:53:17 +0000 Manifest next update: Thu 30 Jul 2026 04:53:17 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: zsAno5eePYc2HgXS00Ncp+I1vmT2FQfrjvu96iNVEQk=) 2: BF8E316480F311F1948786A865A30FBC.roa (hash: PeNghzeUXrf6ti+HRsaZOotNYnd+fY4xMOkVpf/Gtss=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: PppVk2NI0XPWKna+ZtR6ofXLD7gkTcUleObVM6K34rE=) 4: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: mmPmljEgq/UT3GHcfHd5W8JqbEjou9e+RRjhVJG9hpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 503 (0x1f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Jul 23 04:53:17 2026 GMT Not After : Jul 30 04:53:17 2026 GMT Subject: CN=6a619e3d-2c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:2d:56:0b:c9:0d:8e:d3:81:c1:53:a9:04: 3d:3b:cb:6c:cc:37:ba:e9:8f:d2:c0:7a:48:d5:f9: 13:c0:9b:81:e4:36:95:ba:97:21:fd:36:9c:ee:92: cd:93:27:7d:65:4d:bc:36:22:35:32:05:63:19:48: 40:aa:a0:d8:42:94:96:0a:6d:e2:ca:30:33:7a:75: f4:f1:bd:3a:4b:07:9a:17:1f:aa:8a:f9:20:5a:60: 93:30:c5:1c:27:35:81:e1:91:5c:25:fc:6f:29:40: f4:e8:54:22:b2:d0:02:4f:8e:42:14:7d:24:28:83: 59:dd:7d:39:30:67:69:3d:47:86:69:2e:31:ba:fe: 33:2d:0c:80:6a:49:39:e5:67:37:81:d7:44:99:0c: 4f:41:52:bc:25:60:57:50:93:92:61:dd:d8:b0:b2: 6c:c2:98:6a:89:0d:70:bb:8a:00:f5:b1:9d:fc:84: 77:c0:ce:07:35:93:9f:4f:c5:b1:17:3f:37:8e:4b: 10:7f:1c:82:82:e3:60:51:d0:44:5b:dc:15:95:ca: d6:f1:68:0f:00:20:01:4a:b3:8c:75:8c:fc:49:33: 72:da:fa:a7:45:ed:19:c0:77:93:c3:40:ab:e5:89: 41:cc:2c:0b:54:76:bf:aa:d5:b3:b3:4a:d6:51:c6: 65:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:40:25:E3:FE:F5:67:41:74:F8:28:E1:AE:22:B1:99:6A:95:94:72 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:97:c0:56:12:8e:c0:83:5e:98:e2:49:a0:a8:d3:57:d3:37: e8:d6:10:39:55:20:9f:de:5d:aa:29:e1:f8:48:8f:3f:bd:aa: 2e:73:b9:94:b2:25:52:5d:02:7c:d1:dd:60:b2:4e:8f:30:d4: 37:59:18:f0:c9:6d:07:61:c9:25:4d:55:c1:91:0f:e0:31:97: b3:65:50:e3:46:a7:6b:9a:65:67:73:04:b8:0e:ac:f3:17:d5: bb:11:a2:3f:1b:c9:76:34:41:f5:d5:37:e5:51:ea:12:ac:e1: e6:fe:21:e9:4d:18:a9:71:44:e0:7b:96:43:ee:98:58:51:5e: 70:e9:d2:d6:b4:bb:25:e7:8c:47:28:50:5f:df:b9:2f:08:21: 76:c8:82:92:71:94:da:b8:47:57:83:ca:68:ce:98:50:9c:cf: de:86:77:5c:77:5b:fc:76:6c:0e:25:99:2e:81:00:0d:6b:e6: b2:24:8e:43:a1:2d:80:7c:56:d0:8a:6c:17:f5:66:0f:ed:ab: b4:76:ad:c5:21:bd:62:3f:cd:99:2a:2d:dd:13:f8:4b:d0:14: 41:ff:d5:bc:35:97:4e:6d:94:c9:54:37:a9:b5:2e:d6:22:59: 54:21:46:78:bf:03:e3:62:28:cc:e9:d3:3d:1a:fc:7e:08:30: bf:21:9c:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjYwNzIzMDQ1MzE3WhcNMjYwNzMwMDQ1MzE3WjAYMRYwFAYD VQQDEw02YTYxOWUzZC0yYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodktVgvJDY7TgcFTqQQ9O8tszDe66Y/SwHpI1fkTwJuB5DaVupch/Tac7pLN kyd9ZU28NiI1MgVjGUhAqqDYQpSWCm3iyjAzenX08b06SweaFx+qivkgWmCTMMUc JzWB4ZFcJfxvKUD06FQistACT45CFH0kKINZ3X05MGdpPUeGaS4xuv4zLQyAakk5 5Wc3gddEmQxPQVK8JWBXUJOSYd3YsLJswphqiQ1wu4oA9bGd/IR3wM4HNZOfT8Wx Fz83jksQfxyCguNgUdBEW9wVlcrW8WgPACABSrOMdYz8STNy2vqnRe0ZwHeTw0Cr 5YlBzCwLVHa/qtWzs0rWUcZlIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDhAJeP+ 9WdBdPgo4a4isZlqlZRyMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASJfAVhKOwINemOJJoKjTV9M36NYQOVUgn95dqinh+EiPP72qLnO5lLIlUl0C fNHdYLJOjzDUN1kY8MltB2HJJU1VwZEP4DGXs2VQ40ana5plZ3MEuA6s8xfVuxGi PxvJdjRB9dU35VHqEqzh5v4h6U0YqXFE4HuWQ+6YWFFecOnS1rS7JeeMRyhQX9+5 LwghdsiCknGU2rhHV4PKaM6YUJzP3oZ3XHdb/HZsDiWZLoEADWvmsiSOQ6EtgHxW 0IpsF/VmD+2rtHatxSG9Yj/NmSot3RP4S9AUQf/VvDWXTm2UyVQ3qbUu1iJZVCFG eL8D42IozOnTPRr8fggwvyGcZw== -----END CERTIFICATE-----Generated at Fri Jul 24 06:43:18 2026 by rpki-client