$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: JAenz77e/x5B8CxLXmOGvvoTkvagaPHxA/yKhKhotws= Subject key identifier: 19:75:C4:03:C8:C6:20:3D:E8:30:A4:25:A8:78:2A:E7:F4:C8:D0:AF Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 12F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 12CC Signing time: Wed 22 Jul 2026 17:10:30 +0000 Manifest this update: Wed 22 Jul 2026 17:10:29 +0000 Manifest next update: Wed 29 Jul 2026 17:10:29 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: PSGPzQdYZFVr6Y5gCnG8LaWhnNgQ44q6mC6pikw8mlM=) 2: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: yX0Uzg9eTPoxhzg9lrLk/1K20OmA34T+jetmGie5oOM=) 3: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: QiP/Tw9hklight716IQFhsBaTNPHXt42nLTbqUKFQ1w=) 4: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: QNLelKdMSlDKmsbvqvRzrLkhu/2hfJJqmOa+I6J1bAk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:10:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4853 (0x12f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Jul 22 17:10:29 2026 GMT Not After : Jul 29 17:10:29 2026 GMT Subject: CN=6a60f986-ba2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b7:f6:e6:77:66:98:ab:87:87:8d:5f:75:3b: f0:7f:67:be:e9:f3:c1:55:c8:33:41:bc:53:22:da: eb:17:be:b4:b2:37:2b:56:bc:90:f8:20:c3:5d:db: 4b:10:ed:d1:23:99:d6:5b:f7:fb:94:70:89:df:c5: eb:a6:7b:3e:f2:26:e0:34:fc:d3:5b:45:8a:8d:2c: 18:01:c2:b7:d3:dd:b6:f6:26:34:8d:c3:ca:75:80: bf:1c:c8:c8:5d:7a:eb:e3:95:60:5a:d2:92:48:40: 8f:1d:d8:b5:ab:10:83:d7:0c:8c:c2:e1:6a:52:c9: 85:c7:0e:15:1c:bd:79:2a:11:1e:85:77:03:41:f5: 4b:d0:8c:90:84:6f:53:87:14:f6:2b:4d:95:ad:db: 06:64:ef:35:a6:52:32:32:7b:4a:04:70:c1:14:f8: de:6e:e0:18:00:5f:29:6b:41:f0:66:28:27:c5:91: 14:14:a7:d5:fa:26:d9:86:8f:33:59:ae:40:49:49: c1:79:89:51:f1:59:f9:e0:d7:36:5e:76:01:d6:8c: 52:e4:e0:5c:f3:d5:0f:c7:97:c4:cf:27:61:67:5b: 22:14:65:37:3e:fa:31:e0:2f:9b:ef:c9:b5:95:d7: ff:32:91:09:da:03:9e:9c:0f:63:aa:8d:90:34:fe: 21:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:75:C4:03:C8:C6:20:3D:E8:30:A4:25:A8:78:2A:E7:F4:C8:D0:AF X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:37:45:1e:1f:ec:56:a1:18:a3:d1:63:eb:ad:4d:e4:11:cd: 14:ae:5b:f1:25:da:6a:58:02:64:72:1f:aa:f6:cc:c6:f3:40: 9c:e2:5e:b4:d1:a6:e8:21:8f:42:cc:33:f5:30:55:0e:94:af: 43:95:9c:d5:04:37:8e:d7:69:0e:5d:a2:15:17:80:d6:cd:fb: 24:bd:b8:27:d8:85:73:06:0e:4d:a9:11:7d:2a:ce:6b:0b:5c: 42:75:2e:58:18:8a:b2:62:dc:69:8a:3d:c2:bc:8b:9e:c9:87: 05:05:cc:b7:7a:15:a1:4a:88:5a:f0:2b:64:9d:b1:fb:95:8e: 71:87:14:d2:8e:3d:14:11:e9:62:99:8d:d9:f8:16:48:af:bd: a0:5b:8c:ad:8f:b8:e7:d6:aa:e9:5a:99:c3:03:1c:8d:41:05: b5:7a:35:f4:4b:c5:d8:dd:52:62:29:ef:25:24:7b:75:de:0d: a9:03:72:e6:79:84:d2:23:c1:a0:e7:60:62:e7:e2:3f:eb:c2: 71:70:26:7b:63:ae:c9:53:5c:44:4d:0f:c6:ae:10:65:f7:a7: 52:62:cf:7d:d7:36:62:f9:ed:3e:40:fc:54:ee:32:1c:b9:16: d8:af:d1:a4:b8:e1:2f:73:10:48:e1:c6:f8:ae:17:2a:e2:2a: b4:36:c3:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjYwNzIyMTcxMDI5WhcNMjYwNzI5MTcxMDI5WjAYMRYwFAYD VQQDEw02YTYwZjk4Ni1iYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87f25ndmmKuHh41fdTvwf2e+6fPBVcgzQbxTItrrF760sjcrVryQ+CDDXdtL EO3RI5nWW/f7lHCJ38Xrpns+8ibgNPzTW0WKjSwYAcK309229iY0jcPKdYC/HMjI XXrr45VgWtKSSECPHdi1qxCD1wyMwuFqUsmFxw4VHL15KhEehXcDQfVL0IyQhG9T hxT2K02VrdsGZO81plIyMntKBHDBFPjebuAYAF8pa0HwZignxZEUFKfV+ibZho8z Wa5ASUnBeYlR8Vn54Nc2XnYB1oxS5OBc89UPx5fEzydhZ1siFGU3Pvox4C+b78m1 ldf/MpEJ2gOenA9jqo2QNP4h9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBl1xAPI xiA96DCkJah4Kuf0yNCvMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWTdFHh/sVqEYo9Fj661N5BHNFK5b8SXaalgCZHIfqvbMxvNAnOJetNGm6CGP Qswz9TBVDpSvQ5Wc1QQ3jtdpDl2iFReA1s37JL24J9iFcwYOTakRfSrOawtcQnUu WBiKsmLcaYo9wryLnsmHBQXMt3oVoUqIWvArZJ2x+5WOcYcU0o49FBHpYpmN2fgW SK+9oFuMrY+459aq6VqZwwMcjUEFtXo19EvF2N1SYinvJSR7dd4NqQNy5nmE0iPB oOdgYufiP+vCcXAme2OuyVNcRE0Pxq4QZfenUmLPfdc2YvntPkD8VO4yHLkW2K/R pLjhL3MQSOHG+K4XKuIqtDbD6Q== -----END CERTIFICATE-----Generated at Fri Jul 24 14:44:21 2026 by rpki-client