$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft File: raez5kKEQOUk2gaDhqHt8yH4gR4.mft (raw, json) Hash identifier: 5YUZfMqhyPa6DZx3UO2YfwXXFgdjeV8ozD3S5p7eHQ0= Subject key identifier: 3A:62:7A:BF:61:3F:42:D6:F5:B8:BD:93:80:3A:44:46:D1:A9:97:CB Authority key identifier: AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E Certificate issuer: /CN=A91D7103/serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft Manifest number: 0224 Signing time: Thu 23 Jul 2026 04:00:39 +0000 Manifest this update: Thu 23 Jul 2026 04:00:39 +0000 Manifest next update: Thu 30 Jul 2026 04:00:39 +0000 Files and hashes: 1: raez5kKEQOUk2gaDhqHt8yH4gR4.crl (hash: UcXwVCOIm04ETpiE5zKW95ECJXrIQcBs7fNZEL03K/s=) 2: EFB54FEC42D211EE9D8A0832C4F9AE02.roa (hash: 6PnVAS1g7LHhPhFEbNomaCcQC2sh7domCqwSzK4ikhg=) 3: 1E35039C42D511EEAE5F803AC4F9AE02.roa (hash: NAyqjXxHew3fTgSiTUVKkUKTCbweGmMoTZZqsBbKNGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7103, serialNumber=ADA7B3E6428440E524DA068386A1EDF321F8811E Validity Not Before: Jul 23 04:00:39 2026 GMT Not After : Jul 30 04:00:39 2026 GMT Subject: CN=6a6191e7-8e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:43:5c:52:c0:36:14:99:b4:f3:a1:f7:ac: 42:e1:47:0b:57:8a:56:fe:12:c2:dd:51:8d:55:0c: 11:88:0b:eb:2c:0c:45:3b:7b:e3:a2:1a:89:39:ea: 51:d8:27:ae:77:a6:78:28:d6:11:0d:f6:d4:06:38: b3:3c:c1:22:6f:d5:e1:78:cd:b4:1b:ab:85:88:93: d6:e2:c6:81:a6:9c:ca:a5:30:06:a5:b4:a5:59:e3: c8:7d:97:a0:76:b9:9b:45:2e:95:3f:e9:50:a6:5e: c0:94:1a:8f:38:ef:7d:2f:5a:01:70:2c:db:1b:c1: b5:ff:12:19:3c:01:6c:57:01:97:44:e8:78:bc:47: 2e:dd:c1:bc:6f:c5:1c:66:45:34:5d:9e:22:cd:7f: f1:68:11:11:16:20:77:7b:11:d1:07:3b:68:f2:5a: 1c:8e:94:74:0d:42:60:07:42:41:e5:33:72:be:d7: a1:38:1c:ce:9c:36:30:8a:9f:fa:83:5d:99:7b:9d: 78:10:19:f4:84:ac:fe:26:21:a9:a5:9a:c6:e6:e3: d8:ea:50:d3:f0:64:65:5f:7e:5c:7c:17:6f:fc:6d: ac:bf:da:27:fc:ec:27:fe:8a:e7:e9:6c:4b:4e:b9: f4:4a:d3:3e:02:71:f5:71:92:7c:2a:12:f6:a2:e1: 38:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:7A:BF:61:3F:42:D6:F5:B8:BD:93:80:3A:44:46:D1:A9:97:CB X509v3 Authority Key Identifier: keyid:AD:A7:B3:E6:42:84:40:E5:24:DA:06:83:86:A1:ED:F3:21:F8:81:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/raez5kKEQOUk2gaDhqHt8yH4gR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7103/7AB8112A42D211EEB7C4D01EC4F9AE02/raez5kKEQOUk2gaDhqHt8yH4gR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:3c:64:c3:02:29:e3:6e:bd:15:db:29:b8:1a:b7:21:da:1f: ce:bf:a5:a1:75:3a:b7:6b:8e:d1:3b:b6:91:0f:14:96:d6:6b: 19:6d:3b:7a:f4:00:92:dc:ad:d2:d8:f2:1c:f8:44:27:73:25: aa:c1:e5:17:1e:50:9f:4d:97:ac:55:de:b4:a0:3a:b0:5a:08: 2c:73:b0:84:30:7f:6c:23:d0:9a:ee:e8:42:a9:b0:11:29:8d: 3f:32:1c:96:84:dc:b4:b4:7a:50:28:f8:ee:32:f2:ed:0a:ff: dc:4d:71:15:c7:6c:1c:aa:57:88:32:95:8f:d8:5d:70:3b:a7: 41:e3:32:32:23:a9:3b:fe:d5:3f:21:4f:ad:d6:2a:aa:4b:0b: 58:22:ee:a4:9b:60:97:7c:69:0e:d2:c7:fe:dd:a6:2e:54:50: 3d:09:e4:a1:67:57:08:0f:81:3c:f6:7c:4e:d9:1b:b0:58:85: 82:ea:f8:cd:a9:de:ed:21:d4:71:9d:d7:fe:1f:ab:12:39:11: 5a:36:40:d7:57:76:a3:dd:6f:05:b9:75:ca:45:e3:53:8b:37: 6a:0d:cd:a0:ad:dd:85:34:e9:87:43:be:6e:37:dd:6d:e0:44: c4:10:1c:87:34:c4:23:f1:9b:54:f5:5e:9b:a5:f2:05:34:e8: 99:13:db:20 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcxMDMxMTAvBgNVBAUTKEFEQTdCM0U2NDI4NDQwRTUyNERBMDY4Mzg2QTFFREYz MjFGODgxMUUwHhcNMjYwNzIzMDQwMDM5WhcNMjYwNzMwMDQwMDM5WjAYMRYwFAYD VQQDEw02YTYxOTFlNy04ZTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArotDXFLANhSZtPOh96xC4UcLV4pW/hLC3VGNVQwRiAvrLAxFO3vjohqJOepR 2Ceud6Z4KNYRDfbUBjizPMEib9XheM20G6uFiJPW4saBppzKpTAGpbSlWePIfZeg drmbRS6VP+lQpl7AlBqPOO99L1oBcCzbG8G1/xIZPAFsVwGXROh4vEcu3cG8b8Uc ZkU0XZ4izX/xaBERFiB3exHRBzto8locjpR0DUJgB0JB5TNyvtehOBzOnDYwip/6 g12Ze514EBn0hKz+JiGppZrG5uPY6lDT8GRlX35cfBdv/G2sv9on/Own/orn6WxL Trn0StM+AnH1cZJ8KhL2ouE4VwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDpier9h P0LW9bi9k4A6REbRqZfLMB8GA1UdIwQYMBaAFK2ns+ZChEDlJNoGg4ah7fMh+IEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzEwMy83QUI4MTEyQTQy RDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFPVWsyZ2FEaHFIdDh5SDRn UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JhZXo1a0tFUU9VazJnYURocUh0OHlINGdSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzEwMy83QUI4MTEyQTQyRDIxMUVFQjdDNEQwMUVDNEY5QUUwMi9yYWV6NWtLRVFP VWsyZ2FEaHFIdDh5SDRnUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArjxkwwIp4269FdspuBq3Idofzr+loXU6t2uO0Tu2kQ8UltZrGW07evQAktyt 0tjyHPhEJ3MlqsHlFx5Qn02XrFXetKA6sFoILHOwhDB/bCPQmu7oQqmwESmNPzIc loTctLR6UCj47jLy7Qr/3E1xFcdsHKpXiDKVj9hdcDunQeMyMiOpO/7VPyFPrdYq qksLWCLupJtgl3xpDtLH/t2mLlRQPQnkoWdXCA+BPPZ8TtkbsFiFgur4zane7SHU cZ3X/h+rEjkRWjZA11d2o91vBbl1ykXjU4s3ag3NoK3dhTTph0O+bjfdbeBExBAc hzTEI/GbVPVem6XyBTTomRPbIA== -----END CERTIFICATE-----Generated at Fri Jul 24 00:35:46 2026 by rpki-client