$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft File: aGr0G8M9rvgo-rSuSjoNWHutDT8.mft (raw, json) Hash identifier: wncv1VxAKCycPU6ygU8a1TyG/ARpvkp6Sn4JYqJqONc= Subject key identifier: F8:9E:70:5C:BF:29:31:26:1B:44:BA:F5:94:7A:EF:0C:67:0D:28:99 Authority key identifier: 68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F Certificate issuer: /CN=A91E4D3D/serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft Manifest number: 066F Signing time: Wed 22 Jul 2026 23:19:47 +0000 Manifest this update: Wed 22 Jul 2026 23:19:47 +0000 Manifest next update: Wed 29 Jul 2026 23:19:47 +0000 Files and hashes: 1: aGr0G8M9rvgo-rSuSjoNWHutDT8.crl (hash: 1Ok0+cVFP7S+kPbkePj0CLv5O2CgIbcgpKSxR3NpnVs=) 2: 63FEB4F8D97411EBB8CC3F40C4F9AE02.roa (hash: GBummmykHnsRNOp2UTZVHW61aelGglaz1bE3tCnWo5M=) 3: 40310456D8D211EB97FF5586C4F9AE02.roa (hash: ljhzAAAHOEbQtw8/O2WirKoWv6XtLYHxhjuJKY3iiZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D3D, serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Validity Not Before: Jul 22 23:19:47 2026 GMT Not After : Jul 29 23:19:47 2026 GMT Subject: CN=6a615013-fa9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:30:1a:f2:71:6c:5f:2b:cf:57:f2:e5:21: 69:bb:2b:83:12:47:40:11:23:b9:d6:50:5a:b0:e4: b0:25:ef:58:9e:a7:c9:24:a6:c4:09:57:d2:b7:2a: e1:57:1b:c0:df:a3:24:74:26:aa:9b:a8:0d:c0:25: c6:f3:68:34:43:42:5c:c4:13:e6:a2:ab:50:ee:56: b2:87:0c:c9:ca:ce:2f:40:a3:c0:4c:e5:af:bb:d9: 6c:6d:0c:3f:bc:ea:df:67:44:1d:8f:0f:ef:bb:e1: 1d:0b:04:d8:39:fd:59:8c:aa:25:aa:b6:2b:95:dd: df:52:31:6f:da:25:b3:e7:24:ed:a5:99:63:d8:c2: 9d:87:78:15:24:f8:38:ae:0e:c7:ad:75:27:0b:a9: f7:fb:7c:16:9f:83:cc:3e:3a:8e:72:be:34:d2:07: c4:d3:8b:f4:84:70:31:36:a9:72:12:f9:63:66:b5: ee:e3:fd:48:5d:5c:52:bc:12:66:8d:1c:ba:f8:4d: a1:89:49:85:49:f7:49:06:63:91:72:67:1d:da:b5: 25:4f:bd:6d:0e:b2:90:1a:cd:d7:c0:37:91:85:ab: 47:35:97:13:d8:e6:3a:7b:51:1d:2f:c8:78:55:8b: 8e:1e:93:22:2e:02:06:74:12:ca:db:56:45:8e:81: 09:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9E:70:5C:BF:29:31:26:1B:44:BA:F5:94:7A:EF:0C:67:0D:28:99 X509v3 Authority Key Identifier: keyid:68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:8c:ea:2e:b4:10:d9:46:0c:32:a3:10:97:84:6d:2c:ce:d4: 74:de:85:2d:26:ab:68:aa:9d:62:01:66:56:d4:11:dd:51:99: 13:ec:a8:82:98:5f:91:78:fe:3a:bc:be:d1:2c:45:da:a3:11: 9d:4a:13:07:ec:f9:47:ff:c8:a9:81:cc:26:b4:07:a2:07:ae: 40:f7:49:df:e5:0c:fc:b1:33:e9:89:f3:9f:cd:fe:c3:ca:2c: 05:4e:cf:07:5b:92:d6:fa:0a:da:ef:6f:ff:cb:f9:fd:c9:d5: 0b:4f:48:0b:07:7c:60:d5:dc:14:06:60:32:34:ff:be:e4:c0: b4:36:c8:ee:56:d5:ed:04:c8:bc:e2:32:89:71:54:02:a3:75: 19:2c:29:62:58:10:e1:72:54:9b:ef:64:1a:89:27:e2:60:46: 3e:9f:25:5e:f6:8b:ad:3a:89:3b:c0:2e:f1:c2:89:7e:0d:5b: 93:01:46:68:89:b1:85:53:ac:9a:c8:7d:89:31:ef:e8:c2:97: 5a:ba:ed:15:9b:70:f1:1e:53:93:16:9d:00:7d:01:7c:b1:fb: 6b:b2:28:9c:15:97:15:9c:7c:ce:6a:d8:e3:03:42:f6:a2:f9: 73:96:c8:9e:40:45:a0:06:f9:af:79:35:eb:d2:20:52:b2:0a: 3d:eb:79:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREM0QxMTAvBgNVBAUTKDY4NkFGNDFCQzMzREFFRjgyOEZBQjRBRTRBM0EwRDU4 N0JBRDBEM0YwHhcNMjYwNzIyMjMxOTQ3WhcNMjYwNzI5MjMxOTQ3WjAYMRYwFAYD VQQDEw02YTYxNTAxMy1mYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnwYwGvJxbF8rz1fy5SFpuyuDEkdAESO51lBasOSwJe9YnqfJJKbECVfStyrh VxvA36MkdCaqm6gNwCXG82g0Q0JcxBPmoqtQ7layhwzJys4vQKPATOWvu9lsbQw/ vOrfZ0Qdjw/vu+EdCwTYOf1ZjKolqrYrld3fUjFv2iWz5yTtpZlj2MKdh3gVJPg4 rg7HrXUnC6n3+3wWn4PMPjqOcr400gfE04v0hHAxNqlyEvljZrXu4/1IXVxSvBJm jRy6+E2hiUmFSfdJBmORcmcd2rUlT71tDrKQGs3XwDeRhatHNZcT2OY6e1EdL8h4 VYuOHpMiLgIGdBLK21ZFjoEJiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPiecFy/ KTEmG0S69ZR67wxnDSiZMB8GA1UdIwQYMBaAFGhq9BvDPa74KPq0rko6DVh7rQ0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9BNzBBOEZFRUQ4 QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2Z28tclN1U2pvTldIdXRE VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FHcjBHOE05cnZnby1yU3VTam9OV0h1dERUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEQzRC9BNzBBOEZFRUQ4QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2 Z28tclN1U2pvTldIdXREVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt4zqLrQQ2UYMMqMQl4RtLM7UdN6FLSaraKqdYgFmVtQR3VGZE+yogphfkXj+ Ory+0SxF2qMRnUoTB+z5R//IqYHMJrQHogeuQPdJ3+UM/LEz6Ynzn83+w8osBU7P B1uS1voK2u9v/8v5/cnVC09ICwd8YNXcFAZgMjT/vuTAtDbI7lbV7QTIvOIyiXFU AqN1GSwpYlgQ4XJUm+9kGokn4mBGPp8lXvaLrTqJO8Au8cKJfg1bkwFGaImxhVOs msh9iTHv6MKXWrrtFZtw8R5TkxadAH0BfLH7a7IonBWXFZx8zmrY4wNC9qL5c5bI nkBFoAb5r3k169IgUrIKPet58w== -----END CERTIFICATE-----Generated at Fri Jul 24 03:13:49 2026 by rpki-client