$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: G0qC4RXQPc3zV4e9ypmwzdoyNBUOLFF7RJqrgkbz1Ks= Subject key identifier: 32:D2:99:2A:7B:21:8D:30:D3:83:36:FF:49:3E:99:CB:42:58:94:6E Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 029B Signing time: Thu 23 Jul 2026 02:49:00 +0000 Manifest this update: Thu 23 Jul 2026 02:49:00 +0000 Manifest next update: Thu 30 Jul 2026 02:49:00 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: sNS6gZ+fztcynrKnOUl8oSUit4TmTgiru3qrxnXLwJE=) 2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: ll1SbuQqvTvXz+W/3qaivS8wQz00+kN4RdwzaNK6/rU=) 3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: hJnEJ9xJtcK65uU+a2lYLQG493yZ6VM20lGCXAUnZKA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Jul 23 02:49:00 2026 GMT Not After : Jul 30 02:49:00 2026 GMT Subject: CN=6a61811c-489d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:77:1f:c3:64:9d:5c:40:15:47:7b:1d:dd:aa: 96:ab:7d:df:72:7a:fa:0b:46:ac:ab:54:22:03:64: c1:31:0f:0a:ab:f0:d6:24:57:b5:c5:ff:6a:9a:4c: a4:46:0c:a1:41:67:8c:44:4b:fc:56:34:7a:22:6c: 20:b3:da:fa:e5:38:b9:79:22:65:d4:d4:f8:a4:78: 28:ee:af:bd:66:38:c9:60:50:6a:ca:40:ed:b8:b2: 0f:81:c6:f3:9d:47:84:81:35:73:9a:43:af:cd:c6: b4:72:c7:b8:7b:d4:a8:ae:30:b6:df:e3:b4:70:28: ff:04:d5:7d:cd:b3:aa:85:bd:7d:1c:d5:19:b7:87: 0e:33:ca:75:c2:61:07:0a:ef:76:ba:8f:3d:49:4f: 90:bc:d9:3e:8e:cf:87:a4:88:95:d0:d7:d1:99:27: 91:48:33:fd:cb:06:f2:0c:46:3a:a7:71:d3:40:45: 6e:4e:11:4b:6a:d1:f2:7d:24:6a:5e:2f:b1:b1:c3: 2f:cd:75:38:4c:3d:b3:a7:e2:9a:bc:0a:c8:7a:3a: 99:d1:7f:ff:61:9e:06:2a:3d:98:17:cc:95:b7:b1: 98:24:a5:10:2e:0e:f9:1e:0a:21:2a:18:8d:e4:bf: 34:ad:68:a4:95:a9:a9:af:26:ab:d2:a2:ed:44:1b: ab:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D2:99:2A:7B:21:8D:30:D3:83:36:FF:49:3E:99:CB:42:58:94:6E X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e9:4f:1a:98:30:ea:d9:4c:a5:34:f5:5c:ba:cf:ce:12:96: 8c:2e:01:ba:4d:67:d1:33:87:dd:54:fb:10:47:62:2a:9b:d2: 94:ff:31:ac:32:c0:a1:67:34:2f:c0:83:ae:31:8e:08:f4:20: f9:8a:33:5d:e3:4b:d5:77:d5:1d:14:f3:f2:f4:b6:f3:52:9f: 99:1d:57:0d:23:49:37:85:88:7d:77:3e:db:96:ca:b1:4c:1e: be:47:27:49:4c:26:38:38:8a:23:b3:cd:04:cc:7e:83:46:59: f1:f5:c1:98:57:f0:62:af:8a:fb:3b:ed:49:15:4d:90:f4:fc: 80:b9:71:03:71:38:02:49:e0:be:33:09:6a:8e:a3:4d:f7:b5: e0:19:62:56:38:0a:da:12:63:67:57:96:be:32:96:cc:df:0f: 1a:fa:29:fa:11:31:8d:4f:15:ac:e3:cb:f0:43:41:72:65:24: ea:9a:64:66:ab:a6:1c:dc:ed:00:e8:61:36:02:9b:ee:f2:cd: f0:71:bf:08:cf:2b:a9:ee:bb:f5:ce:87:23:66:e9:72:bb:42: 3f:76:8b:7a:a4:40:af:37:67:6a:f7:54:2a:74:f4:3f:75:c1: 10:bb:ce:50:88:35:d5:62:0b:f9:b8:f3:98:61:79:8f:2e:56: 01:3e:6c:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjYwNzIzMDI0OTAwWhcNMjYwNzMwMDI0OTAwWjAYMRYwFAYD VQQDEw02YTYxODExYy00ODlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm3cfw2SdXEAVR3sd3aqWq33fcnr6C0asq1QiA2TBMQ8Kq/DWJFe1xf9qmkyk RgyhQWeMREv8VjR6Imwgs9r65Ti5eSJl1NT4pHgo7q+9ZjjJYFBqykDtuLIPgcbz nUeEgTVzmkOvzca0cse4e9SorjC23+O0cCj/BNV9zbOqhb19HNUZt4cOM8p1wmEH Cu92uo89SU+QvNk+js+HpIiV0NfRmSeRSDP9ywbyDEY6p3HTQEVuThFLatHyfSRq Xi+xscMvzXU4TD2zp+KavArIejqZ0X//YZ4GKj2YF8yVt7GYJKUQLg75HgohKhiN 5L80rWiklampryar0qLtRBurTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLSmSp7 IY0w04M2/0k+mctCWJRuMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMOlPGpgw6tlMpTT1XLrPzhKWjC4Buk1n0TOH3VT7EEdiKpvSlP8xrDLAoWc0 L8CDrjGOCPQg+YozXeNL1XfVHRTz8vS281KfmR1XDSNJN4WIfXc+25bKsUwevkcn SUwmODiKI7PNBMx+g0ZZ8fXBmFfwYq+K+zvtSRVNkPT8gLlxA3E4AkngvjMJao6j Tfe14BliVjgK2hJjZ1eWvjKWzN8PGvop+hExjU8VrOPL8ENBcmUk6ppkZqumHNzt AOhhNgKb7vLN8HG/CM8rqe679c6HI2bpcrtCP3aLeqRArzdnavdUKnT0P3XBELvO UIg11WIL+bjzmGF5jy5WAT5szQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:35:33 2026 by rpki-client