$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft File: 38I-PZBdDoNoEhlZbQgimmlPrxM.mft (raw, json) Hash identifier: kXdMSNqSEuDWnmkiTzXqroplyDT6N6aW6X4vQl9bQDI= Subject key identifier: E6:82:B1:B6:09:ED:E9:E2:E4:3E:98:82:7A:F0:A2:C6:36:B7:3D:9A Authority key identifier: DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 Certificate issuer: /CN=A91E3D04/serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Certificate serial: 0F06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft Manifest number: 0EE5 Signing time: Wed 22 Jul 2026 17:50:39 +0000 Manifest this update: Wed 22 Jul 2026 17:50:38 +0000 Manifest next update: Wed 29 Jul 2026 17:50:38 +0000 Files and hashes: 1: 38I-PZBdDoNoEhlZbQgimmlPrxM.crl (hash: PDy2MFwkl+mb4KerYJ52BwL4rkDLY7yh65ra7JHYJQw=) 2: AB52C51AB96B11ECB44AC533C4F9AE02.roa (hash: 9DZO4gtEwqGm1N7r2iLEutY8W3IqMNDQEag8fkVAF7Q=) 3: 10E6D9CAB55C11ECA9565039C4F9AE02.roa (hash: 8ERTDv7Mz23v2Rbdakt8Gt3XJ8tL5M1Uk1kQf/u/YMs=) 4: AC641C88B96B11ECB44AC533C4F9AE02.roa (hash: x2dbHHpd6lHu6U/D+Z5h6UrLSps4ACkU8JTV2sRYFDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3846 (0xf06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D04, serialNumber=DFC23E3D905D0E83681219596D08229A694FAF13 Validity Not Before: Jul 22 17:50:38 2026 GMT Not After : Jul 29 17:50:38 2026 GMT Subject: CN=6a6102ee-2a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:24:00:3f:5a:7c:3b:bb:db:21:27:35:aa:22: f7:70:e9:74:fd:50:95:db:50:19:73:45:d0:dd:76: 83:98:69:47:a1:c6:a8:b5:13:64:be:f2:e2:31:a9: 5e:db:d7:5f:8d:61:5f:69:3b:e0:52:3c:cb:bc:9a: 0f:ec:47:82:6d:a9:bf:fd:73:01:76:54:18:42:42: 64:0f:6e:c5:eb:75:38:cb:b8:28:2a:11:4c:63:6e: 75:c9:c0:80:a0:88:a2:ac:77:53:2c:17:26:a0:8f: 94:0e:d5:01:67:ef:1e:2f:f3:f0:ff:56:6a:96:d5: c3:cb:93:60:cb:91:b1:62:6a:66:e1:df:36:04:ca: cd:cb:05:18:f5:34:d1:ed:10:c4:45:fa:55:70:c2: 15:2c:ee:72:2c:92:91:a7:53:21:17:19:c3:fa:f4: f2:41:51:5a:31:57:7c:60:cc:49:cc:02:26:c7:5d: 56:68:b2:d8:88:6e:83:3a:f9:e0:f6:8e:e6:72:2f: 62:e7:1e:71:e6:db:b9:d7:41:64:f4:a7:f9:76:34: 25:ad:cb:6e:cb:5a:5d:54:e4:b4:bd:bb:41:0b:9e: 85:84:86:56:41:c0:3a:57:b7:5b:0d:81:3a:71:ad: 58:34:1f:55:76:91:65:d2:83:bd:c7:9c:83:fb:0c: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:82:B1:B6:09:ED:E9:E2:E4:3E:98:82:7A:F0:A2:C6:36:B7:3D:9A X509v3 Authority Key Identifier: keyid:DF:C2:3E:3D:90:5D:0E:83:68:12:19:59:6D:08:22:9A:69:4F:AF:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38I-PZBdDoNoEhlZbQgimmlPrxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D04/7A17FE8EADD911E9B7409A72C4F9AE02/38I-PZBdDoNoEhlZbQgimmlPrxM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:ac:f0:d7:16:86:fb:05:ac:40:b6:86:00:2c:60:e8:a4:7b: 31:df:3a:a3:a6:51:98:ae:a8:62:80:08:6e:07:0a:da:34:a8: 4a:fa:e4:b7:49:fa:6e:39:91:50:ac:38:6d:d1:e4:ec:8d:d7: 16:3c:bd:24:af:06:6b:28:20:71:9e:31:64:0a:53:0d:dc:36: 97:22:93:34:7e:48:fe:55:77:7c:3b:a4:c0:d3:45:a5:92:46: 5d:8a:c9:ce:48:c4:25:0a:9b:7b:71:1c:d3:ff:d7:38:09:07: 9e:c2:8d:35:8a:90:c0:2d:0f:73:db:81:c1:01:63:fd:cf:d3: a2:fd:19:30:f5:37:5f:31:c4:57:8f:1f:4d:3c:5d:c3:4d:4f: 83:9b:70:4e:5d:d2:62:74:fb:f6:29:be:94:71:f9:22:8c:2a: 1f:35:26:d5:ab:43:14:c0:85:88:ca:43:46:b6:ff:ae:52:68: 06:02:26:67:9e:41:2b:94:98:a0:29:e6:c2:7c:b4:ba:49:95: c0:3e:5f:e2:50:0e:bc:a6:e4:70:1e:41:3a:c1:dc:78:d3:ba: d5:19:f1:09:eb:25:7a:96:8e:25:31:62:1b:cb:b1:af:bf:f8: a3:6e:fa:f8:d6:ec:e4:bb:c0:bb:2f:0d:8e:c2:e2:eb:b4:e5: 2f:7d:77:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMDQxMTAvBgNVBAUTKERGQzIzRTNEOTA1RDBFODM2ODEyMTk1OTZEMDgyMjlB Njk0RkFGMTMwHhcNMjYwNzIyMTc1MDM4WhcNMjYwNzI5MTc1MDM4WjAYMRYwFAYD VQQDEw02YTYxMDJlZS0yYTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhSQAP1p8O7vbISc1qiL3cOl0/VCV21AZc0XQ3XaDmGlHocaotRNkvvLiMale 29dfjWFfaTvgUjzLvJoP7EeCbam//XMBdlQYQkJkD27F63U4y7goKhFMY251ycCA oIiirHdTLBcmoI+UDtUBZ+8eL/Pw/1ZqltXDy5Ngy5GxYmpm4d82BMrNywUY9TTR 7RDERfpVcMIVLO5yLJKRp1MhFxnD+vTyQVFaMVd8YMxJzAImx11WaLLYiG6DOvng 9o7mci9i5x5x5tu510Fk9Kf5djQlrctuy1pdVOS0vbtBC56FhIZWQcA6V7dbDYE6 ca1YNB9VdpFl0oO9x5yD+wwChQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOaCsbYJ 7eni5D6YgnrwosY2tz2aMB8GA1UdIwQYMBaAFN/CPj2QXQ6DaBIZWW0IIpppT68T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QwNC83QTE3RkU4RUFE RDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERvTm9FaGxaYlFnaW1tbFBy eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4SS1QWkJkRG9Ob0VobFpiUWdpbW1sUHJ4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QwNC83QTE3RkU4RUFERDkxMUU5Qjc0MDlBNzJDNEY5QUUwMi8zOEktUFpCZERv Tm9FaGxaYlFnaW1tbFByeE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxazw1xaG+wWsQLaGACxg6KR7Md86o6ZRmK6oYoAIbgcK2jSoSvrkt0n6bjmR UKw4bdHk7I3XFjy9JK8GayggcZ4xZApTDdw2lyKTNH5I/lV3fDukwNNFpZJGXYrJ zkjEJQqbe3Ec0//XOAkHnsKNNYqQwC0Pc9uBwQFj/c/Tov0ZMPU3XzHEV48fTTxd w01Pg5twTl3SYnT79im+lHH5IowqHzUm1atDFMCFiMpDRrb/rlJoBgImZ55BK5SY oCnmwny0ukmVwD5f4lAOvKbkcB5BOsHceNO61RnxCeslepaOJTFiG8uxr7/4o276 +Nbs5LvAuy8NjsLi67TlL313yg== -----END CERTIFICATE-----Generated at Fri Jul 24 05:53:59 2026 by rpki-client