$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft File: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json) Hash identifier: 7tdiHixcCQBQd8LBzhNOOyXj5shjQU5WcAVV3zNLgds= Subject key identifier: 87:AC:7B:3E:A4:36:2F:7B:3B:1D:CF:05:B0:C9:8A:10:AB:89:F8:89 Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 Certificate issuer: /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft Manifest number: 78 Signing time: Thu 23 Jul 2026 09:46:57 +0000 Manifest this update: Thu 23 Jul 2026 09:46:57 +0000 Manifest next update: Thu 30 Jul 2026 09:46:57 +0000 Files and hashes: 1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: LhksXmfNX6nBoYsauaFw86dfEbxbt08QBFzdogdY4z4=) 2: CF0F37FA1D1B11F1ACF733B0103D8C67.roa (hash: H5fMs/4SHZ+R2ioXCxpygGkCRluzXa/ZhyiVh3gWuO4=) 3: D0B6868A1D1B11F1ACF733B0103D8C67.roa (hash: jWdMxZZFTY4CsUZBn1lrTkWtYy/fDMYlI5r04PJk980=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63 Validity Not Before: Jul 23 09:46:57 2026 GMT Not After : Jul 30 09:46:57 2026 GMT Subject: CN=6a61e311-d704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fb:6d:df:bb:f7:a4:78:96:33:40:cb:5b:a3: 55:c7:67:3b:5b:bd:d1:00:6d:0e:06:b9:f8:94:70: 65:5d:2b:6c:4c:2c:a3:b0:1b:d5:15:6e:92:56:39: 22:59:34:f8:ff:ec:83:95:82:69:7b:db:90:88:b7: a7:51:d8:fc:43:96:9f:1a:12:b8:31:7e:70:ea:08: c7:97:9d:bc:64:08:9d:29:8b:68:e3:29:2a:48:eb: 65:e7:88:10:fc:16:8f:4d:b1:7e:ae:9b:a3:5b:c9: a7:0a:14:bc:4a:a6:21:1f:96:c6:2e:8c:ce:b8:88: aa:57:ce:7d:f1:23:98:78:5a:64:ba:6b:01:bd:a5: eb:59:84:25:2e:13:44:75:8d:3d:69:0b:4c:e2:20: 0f:50:a6:3e:1a:d8:a2:07:72:60:4e:5b:65:cb:fd: 35:53:d8:ff:78:09:c6:39:47:01:1f:29:77:c5:70: 3b:1a:b1:f9:c5:0a:f6:6c:4e:ab:39:bb:62:6b:ae: 0f:2d:f8:e5:54:40:95:1d:97:8b:0e:e4:09:ca:91: 65:0a:af:d1:0f:7d:79:03:f6:c3:b9:54:a9:4b:bc: 51:e7:bd:f6:7a:2e:86:6c:d2:67:df:c5:7f:41:3e: ea:fc:67:43:a7:60:44:cc:d4:ac:b9:7c:70:b8:a2: ee:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AC:7B:3E:A4:36:2F:7B:3B:1D:CF:05:B0:C9:8A:10:AB:89:F8:89 X509v3 Authority Key Identifier: keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3a:32:30:da:1c:f7:dc:6c:b8:ee:a2:75:e2:47:f5:e8:50: 2d:c5:92:94:68:37:01:98:c7:52:7e:da:f0:b6:db:ec:d6:e6: f1:f8:27:57:14:f6:69:c1:bd:8c:e5:ee:4c:6a:49:fc:fd:11: c6:68:33:d1:48:d9:ed:90:82:ab:e3:f7:26:cd:09:93:ff:c6: 3a:66:ca:f9:99:67:7f:8e:24:50:1e:92:c6:f1:05:ea:d2:fe: 41:e0:1e:96:d3:dc:5e:0b:1a:7e:d6:34:39:51:8d:66:27:f2: dd:77:e6:fa:c1:02:0d:01:8a:d6:4e:9b:25:80:d5:3c:79:e6: 9e:82:99:cd:78:62:5a:42:d5:b5:98:3b:b8:ff:8b:34:2a:75: a2:74:9f:fa:0f:c7:a7:16:30:29:ae:ea:84:6d:33:7b:73:a0: 87:93:0a:f6:76:27:70:e7:a7:4d:e9:a4:3a:4e:86:56:d9:1b: c3:a5:06:96:11:f1:da:64:d0:b5:74:25:01:b6:07:a6:98:fb: 82:6e:77:94:f1:06:44:a5:58:5c:ee:36:6a:77:83:03:62:57: d6:c9:35:35:75:ef:8f:79:92:b8:47:c9:7a:da:75:9a:b4:06: 82:33:92:36:e9:fe:09:36:da:56:f8:53:b1:ea:da:48:1a:8f: 5f:fe:99:bc -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QkFBMzExMC8GA1UEBRMoRjlBRTVFMkE5REM4MEI1MUVBQTc1NzcyNzhDM0RFMDYx QTgwQUI2MzAeFw0yNjA3MjMwOTQ2NTdaFw0yNjA3MzAwOTQ2NTdaMBgxFjAUBgNV BAMTDTZhNjFlMzExLWQ3MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDO+23fu/ekeJYzQMtbo1XHZztbvdEAbQ4GufiUcGVdK2xMLKOwG9UVbpJWOSJZ NPj/7IOVgml725CIt6dR2PxDlp8aErgxfnDqCMeXnbxkCJ0pi2jjKSpI62XniBD8 Fo9NsX6um6NbyacKFLxKpiEflsYujM64iKpXzn3xI5h4WmS6awG9petZhCUuE0R1 jT1pC0ziIA9Qpj4a2KIHcmBOW2XL/TVT2P94CcY5RwEfKXfFcDsasfnFCvZsTqs5 u2Jrrg8t+OVUQJUdl4sO5AnKkWUKr9EPfXkD9sO5VKlLvFHnvfZ6LoZs0mffxX9B Pur8Z0OnYETM1Ky5fHC4ou5JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUh6x7PqQ2 L3s7Hc8FsMmKEKuJ+IkwHwYDVR0jBBgwFoAU+a5eKp3IC1Hqp1dyeMPeBhqAq2Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURCQUEzLzFDMTc5MTNBRDkw RDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFIcXAxZHllTVBlQmhxQXEy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWE1ZUtwM0lDMUhxcDFkeWVNUGVCaHFBcTJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURC QUEzLzFDMTc5MTNBRDkwRDExRjA4NjgwRDVGMTdDRDM2NDFELy1hNWVLcDNJQzFI cXAxZHllTVBlQmhxQXEyTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBLOjIw2hz33Gy47qJ14kf16FAtxZKUaDcBmMdSftrwttvs1ubx+CdXFPZpwb2M 5e5Makn8/RHGaDPRSNntkIKr4/cmzQmT/8Y6Zsr5mWd/jiRQHpLG8QXq0v5B4B6W 09xeCxp+1jQ5UY1mJ/Ldd+b6wQINAYrWTpslgNU8eeaegpnNeGJaQtW1mDu4/4s0 KnWidJ/6D8enFjApruqEbTN7c6CHkwr2didw56dN6aQ6ToZW2RvDpQaWEfHaZNC1 dCUBtgemmPuCbneU8QZEpVhc7jZqd4MDYlfWyTU1de+PeZK4R8l62nWatAaCM5I2 6f4JNtpW+FOx6tpIGo9f/pm8 -----END CERTIFICATE-----Generated at Fri Jul 24 12:13:48 2026 by rpki-client