$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft File: _edM0WVtTsrysOa7wxNdTrhAeCs.mft (raw, json) Hash identifier: KmRUsEvJTycb228m9HbWFN37ygz/evsRCheo6+fcdoM= Subject key identifier: 78:E1:82:3C:CB:98:F9:EC:BD:23:DA:77:D4:26:4F:82:F9:05:9B:79 Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft Manifest number: 0120 Signing time: Wed 22 Jul 2026 14:38:06 +0000 Manifest this update: Wed 22 Jul 2026 14:38:06 +0000 Manifest next update: Wed 29 Jul 2026 14:38:06 +0000 Files and hashes: 1: _edM0WVtTsrysOa7wxNdTrhAeCs.crl (hash: 01lpSOuTrwnev1sCJKZr2Rq4wHyGVclkM6E4XJx/Nfg=) 2: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (hash: I8tb2z2Hm/oVZ+/EtUi2cTvMADHbbnwoMnZaKJ+3/z0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 14:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Jul 22 14:38:06 2026 GMT Not After : Jul 29 14:38:06 2026 GMT Subject: CN=6a60d5ce-4756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:10:35:8a:5b:b7:af:41:ba:dc:0c:f1:82:19: fd:c9:6c:f2:3c:02:0a:60:13:93:0b:72:ca:c1:97: 33:c3:07:f5:2f:ae:9e:5b:39:24:15:34:2d:56:11: f8:96:5f:98:a4:2f:81:1b:6c:8b:65:46:0c:1d:ed: e6:12:ca:1b:8b:00:7b:b6:be:b5:15:ff:fd:38:47: ad:48:6f:f2:67:85:c9:e5:3a:53:3a:9f:20:68:46: 60:0c:0d:68:99:44:b7:fa:25:a1:d7:95:28:33:a2: d3:21:7d:9e:52:d4:ef:e0:89:7f:1d:c6:8b:e5:67: 07:ca:69:2b:39:f3:a4:9a:63:fb:db:9f:c4:ff:48: 90:82:38:74:9c:fb:5a:1f:e3:b1:d7:c4:14:00:2e: 79:28:df:87:bf:e5:01:9a:86:b9:05:11:95:29:f0: f8:25:6a:b9:59:07:98:c7:bb:fd:b7:34:78:82:ce: 64:85:ef:13:d4:5a:61:db:f0:3c:dd:2d:c5:15:50: 75:0e:b9:b6:f1:de:82:45:43:e6:cf:a2:37:5b:5c: 0d:73:4d:3b:66:6c:c6:83:5c:ff:cd:cb:fc:42:ae: 35:ba:ca:36:ec:21:fa:f4:28:05:48:58:70:d5:a5: 83:e4:27:1e:84:b8:04:61:3e:e5:41:99:e9:44:96: 9d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E1:82:3C:CB:98:F9:EC:BD:23:DA:77:D4:26:4F:82:F9:05:9B:79 X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:70:e3:5b:67:b6:36:b0:80:35:ab:f0:fd:02:fb:5e:ab:68: 0b:cd:d2:c4:6a:4a:61:bf:d6:2d:e7:a0:54:9f:2b:b0:1c:be: 22:35:e3:ba:d9:3a:92:7c:99:87:ed:86:91:36:7a:14:31:7f: 52:28:28:fa:c3:92:d0:71:c6:57:d9:ac:f7:39:ae:f7:dd:5f: d0:18:87:15:b5:16:4c:72:9d:61:06:d6:ef:9b:81:83:5d:c8: f4:30:8c:1e:02:84:88:44:43:78:d1:4d:64:8c:c9:52:d4:1f: d9:e2:d1:43:fa:6b:d2:8d:76:ac:8d:8b:ce:21:b7:38:d0:9d: 11:a2:85:40:3f:95:f4:cd:e9:e4:e3:f8:76:92:28:54:74:4e: 42:f7:6c:08:e4:d0:8e:81:28:28:d1:a1:ad:b2:f3:32:9f:f5: be:30:95:35:3a:64:42:14:58:6e:e0:ce:e9:03:55:92:6c:e3: fb:52:04:91:39:87:9b:39:c4:39:b7:0c:63:b6:7d:24:1d:80: 33:bb:15:20:c3:ab:55:94:74:95:65:a9:ac:fd:53:ca:63:fb: de:cf:da:e7:c0:0f:5a:5b:98:a4:89:78:dc:2a:74:da:e7:fe: 7b:1d:fe:82:92:6b:69:01:cd:de:25:fc:66:f5:71:73:fd:9b: a4:4f:e8:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKEZERTc0Q0QxNjU2RDRFQ0FGMkIwRTZCQkMzMTM1RDRF Qjg0MDc4MkIwHhcNMjYwNzIyMTQzODA2WhcNMjYwNzI5MTQzODA2WjAYMRYwFAYD VQQDEw02YTYwZDVjZS00NzU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkRA1ilu3r0G63Azxghn9yWzyPAIKYBOTC3LKwZczwwf1L66eWzkkFTQtVhH4 ll+YpC+BG2yLZUYMHe3mEsobiwB7tr61Ff/9OEetSG/yZ4XJ5TpTOp8gaEZgDA1o mUS3+iWh15UoM6LTIX2eUtTv4Il/HcaL5WcHymkrOfOkmmP725/E/0iQgjh0nPta H+Ox18QUAC55KN+Hv+UBmoa5BRGVKfD4JWq5WQeYx7v9tzR4gs5khe8T1Fph2/A8 3S3FFVB1Drm28d6CRUPmz6I3W1wNc007ZmzGg1z/zcv8Qq41uso27CH69CgFSFhw 1aWD5CcehLgEYT7lQZnpRJad4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHjhgjzL mPnsvSPad9QmT4L5BZt5MB8GA1UdIwQYMBaAFP3nTNFlbU7K8rDmu8MTXU64QHgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC80MDdBMjVFQUQ4 N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRzcnlzT2E3d3hOZFRyaEFl Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC80MDdBMjVFQUQ4N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRz cnlzT2E3d3hOZFRyaEFlQ3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvHDjW2e2NrCANavw/QL7XqtoC83SxGpKYb/WLeegVJ8rsBy+IjXjutk6knyZ h+2GkTZ6FDF/Uigo+sOS0HHGV9ms9zmu991f0BiHFbUWTHKdYQbW75uBg13I9DCM HgKEiERDeNFNZIzJUtQf2eLRQ/pr0o12rI2LziG3ONCdEaKFQD+V9M3p5OP4dpIo VHROQvdsCOTQjoEoKNGhrbLzMp/1vjCVNTpkQhRYbuDO6QNVkmzj+1IEkTmHmznE ObcMY7Z9JB2AM7sVIMOrVZR0lWWprP1TymP73s/a58APWluYpIl43Cp02uf+ex3+ gpJraQHN3iX8ZvVxc/2bpE/oWA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:37:45 2026 by rpki-client