$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft File: 1AI0WEr2BZHzfdP7on68uFzHZWo.mft (raw, json) Hash identifier: GUW3WpUhWtPeALuZQdgQwJJrs5BpE4VJKb6gfS0fgD4= Subject key identifier: 9E:59:F5:D8:5A:4B:81:4A:C8:E5:98:C9:37:AA:E6:3E:2A:79:19:E4 Authority key identifier: D4:02:34:58:4A:F6:05:91:F3:7D:D3:FB:A2:7E:BC:B8:5C:C7:65:6A Certificate issuer: /CN=A91E27F3/serialNumber=D40234584AF60591F37DD3FBA27EBCB85CC7656A Certificate serial: 3571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft Manifest number: 3569 Signing time: Wed 22 Jul 2026 15:07:46 +0000 Manifest this update: Wed 22 Jul 2026 15:07:45 +0000 Manifest next update: Wed 29 Jul 2026 15:07:45 +0000 Files and hashes: 1: 1AI0WEr2BZHzfdP7on68uFzHZWo.crl (hash: vLbPUqJgfQL2D0KP6y9tHEEFlE19dOI4KMNhpA6O7rM=) 2: 1B4B4FC2152F11ECB72E546FC4F9AE02.roa (hash: grlNN+mm97djcRhLgczSf6yBI8MB1/S7/60D7ODVKSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.crl rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27F3, serialNumber=D40234584AF60591F37DD3FBA27EBCB85CC7656A Validity Not Before: Jul 22 15:07:45 2026 GMT Not After : Jul 29 15:07:45 2026 GMT Subject: CN=6a60dcc2-b437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:eb:0c:d2:3a:5c:82:4b:f4:fd:11:6a:11:85: 2b:77:67:75:9f:89:14:75:db:c3:52:b6:94:50:a0: 1c:c2:13:62:51:2d:e9:21:dd:8b:28:9f:36:4f:4f: d2:48:a2:ab:91:6e:83:b4:32:15:57:76:b7:73:3e: d2:aa:72:00:23:f4:37:4d:99:35:c0:c7:0f:08:98: 92:94:db:3a:70:d3:7d:55:68:78:2a:bc:1a:ca:03: e5:b1:ea:b3:73:38:55:f6:b1:25:61:82:e3:bb:38: f7:e9:67:9f:8b:6d:ef:ea:62:64:e4:61:f5:25:6f: e2:07:f2:7d:ac:ad:d1:c7:05:ce:9d:33:8f:26:85: aa:6a:18:fb:f0:a9:f0:09:2d:89:09:f4:4d:c9:36: ef:c3:9c:e2:89:8f:b7:f8:01:6a:3d:90:79:1a:a3: 71:ef:b0:d2:95:12:38:54:e8:4b:6e:9f:0e:6e:52: 59:a1:54:c0:40:69:28:da:16:5d:31:10:cb:17:0f: b7:4d:e0:84:bd:df:25:84:7f:ef:5b:9d:f1:31:16: 55:1e:d2:0f:05:ea:ac:9e:b0:c7:6e:e0:97:3c:8b: 94:c2:78:8d:22:04:9e:63:2e:87:08:e9:57:a3:ae: 68:db:1f:0f:98:3b:62:a2:58:5a:ac:ec:d8:a3:5a: 88:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:59:F5:D8:5A:4B:81:4A:C8:E5:98:C9:37:AA:E6:3E:2A:79:19:E4 X509v3 Authority Key Identifier: keyid:D4:02:34:58:4A:F6:05:91:F3:7D:D3:FB:A2:7E:BC:B8:5C:C7:65:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:8d:17:53:78:07:56:75:2d:94:cf:07:f6:98:c1:34:c1:6c: 80:e2:28:6c:9a:c1:09:38:17:53:5b:79:69:a8:61:43:3b:77: b4:92:ea:67:20:2c:56:be:c4:98:db:1f:c4:b4:57:aa:73:26: d5:e7:24:3a:6c:c4:6b:be:10:45:c6:34:76:20:ff:8c:5a:61: 90:3c:93:4f:8b:fb:b8:73:31:2f:6a:a8:68:e5:71:63:c0:ac: 1d:f2:e5:26:e0:b1:9c:55:3d:d9:dd:11:60:13:b9:6a:f9:db: 5a:82:f1:b8:9f:40:78:b9:de:25:e5:45:b9:6f:a9:ca:a9:3f: ed:d0:28:81:f7:1a:ff:11:ff:ee:4c:85:1c:91:20:f2:2a:80: cd:9c:cf:46:a3:59:82:9f:c6:53:40:eb:37:4e:b4:4d:65:c1: be:e6:d6:c5:f8:30:29:96:00:ca:8a:6f:01:3e:e9:61:ee:37: 56:f5:c1:09:2f:ed:47:aa:6c:ad:be:e6:88:45:64:68:cc:87: 2c:b6:95:9f:be:f3:40:f6:d2:1e:ee:8e:fe:0d:08:ab:03:f4: ec:1f:19:d8:41:ad:1d:bc:58:0e:f6:59:44:57:15:04:b3:69: 12:87:d5:89:50:1c:8e:60:8a:7c:2a:1d:fa:fb:a1:3f:d2:e9: 05:46:bb:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3RjMxMTAvBgNVBAUTKEQ0MDIzNDU4NEFGNjA1OTFGMzdERDNGQkEyN0VCQ0I4 NUNDNzY1NkEwHhcNMjYwNzIyMTUwNzQ1WhcNMjYwNzI5MTUwNzQ1WjAYMRYwFAYD VQQDEw02YTYwZGNjMi1iNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtusM0jpcgkv0/RFqEYUrd2d1n4kUddvDUraUUKAcwhNiUS3pId2LKJ82T0/S SKKrkW6DtDIVV3a3cz7SqnIAI/Q3TZk1wMcPCJiSlNs6cNN9VWh4KrwaygPlseqz czhV9rElYYLjuzj36Wefi23v6mJk5GH1JW/iB/J9rK3RxwXOnTOPJoWqahj78Knw CS2JCfRNyTbvw5ziiY+3+AFqPZB5GqNx77DSlRI4VOhLbp8OblJZoVTAQGko2hZd MRDLFw+3TeCEvd8lhH/vW53xMRZVHtIPBeqsnrDHbuCXPIuUwniNIgSeYy6HCOlX o65o2x8PmDtiolharOzYo1qIEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5Z9dha S4FKyOWYyTeq5j4qeRnkMB8GA1UdIwQYMBaAFNQCNFhK9gWR833T+6J+vLhcx2Vq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdGMy9BNkRFMUNFODFE QTExMUUyQTMyRUYyOTMwOEIwMkNEMi8xQUkwV0VyMkJaSHpmZFA3b242OHVGekha V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBSTBXRXIyQlpIemZkUDdvbjY4dUZ6SFpXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdGMy9BNkRFMUNFODFEQTExMUUyQTMyRUYyOTMwOEIwMkNEMi8xQUkwV0VyMkJa SHpmZFA3b242OHVGekhaV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo40XU3gHVnUtlM8H9pjBNMFsgOIobJrBCTgXU1t5aahhQzt3tJLqZyAsVr7E mNsfxLRXqnMm1eckOmzEa74QRcY0diD/jFphkDyTT4v7uHMxL2qoaOVxY8CsHfLl JuCxnFU92d0RYBO5avnbWoLxuJ9AeLneJeVFuW+pyqk/7dAogfca/xH/7kyFHJEg 8iqAzZzPRqNZgp/GU0DrN060TWXBvubWxfgwKZYAyopvAT7pYe43VvXBCS/tR6ps rb7miEVkaMyHLLaVn77zQPbSHu6O/g0IqwP07B8Z2EGtHbxYDvZZRFcVBLNpEofV iVAcjmCKfCod+vuhP9LpBUa78A== -----END CERTIFICATE-----Generated at Thu Jul 23 22:51:41 2026 by rpki-client