$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft File: EhrxRNkD4_iJffD-0gcaFkd17U8.mft (raw, json) Hash identifier: ZalfIvTh/ISvFM9Y8OTOOqxgxm39APkrtwWa3+BZB3E= Subject key identifier: 31:4A:69:E8:CF:C9:C8:1C:6D:5B:39:52:0D:DC:CF:C7:24:9A:22:60 Authority key identifier: 12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F Certificate issuer: /CN=A91E554A/serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft Manifest number: 0153 Signing time: Thu 23 Jul 2026 06:53:58 +0000 Manifest this update: Thu 23 Jul 2026 06:53:58 +0000 Manifest next update: Thu 30 Jul 2026 06:53:58 +0000 Files and hashes: 1: EhrxRNkD4_iJffD-0gcaFkd17U8.crl (hash: JCBFU9QIFbt3+SPfYGpy2cq/8/rq+uU9g6ZhGSB2ITw=) 2: 01C9DEFC7DE811F1B49B5A6A63A30FBC.roa (hash: Ga1gZ7IxHn2IC+iE25UbgfqUt3X5U/1/OgUyd7yyVT0=) 3: E12300F27DE711F1A1F9DA6963A30FBC.roa (hash: CLjO1Bnvk0710BZL66L/XRdRq4LOS+bYZOmQijT3wNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F Validity Not Before: Jul 23 06:53:58 2026 GMT Not After : Jul 30 06:53:58 2026 GMT Subject: CN=6a61ba86-d0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:77:e1:88:06:d8:81:6a:07:58:43:9d:f4:6b: d0:13:f4:43:1d:f9:3b:6c:12:9c:4e:52:30:59:0d: 92:ee:70:17:93:7a:17:e9:5b:01:1d:2d:4a:5e:7e: 04:62:e5:9c:2f:c5:e9:b0:ab:77:83:e4:90:06:f9: 4c:5e:23:35:90:91:3c:97:66:0a:8c:85:a0:f0:33: 9e:32:37:f3:f5:95:48:83:bb:54:3f:b1:5e:4b:0a: 9f:bd:59:12:8e:82:ae:18:bf:c9:7b:58:a9:02:f4: 2a:94:29:f3:7d:39:e7:c0:1a:8e:4d:92:df:bd:0c: 1a:db:00:26:ed:cf:cd:c4:c1:16:d9:cd:1d:dc:28: 4f:5a:09:c9:4e:f0:0a:48:1e:84:28:ef:80:db:d6: 26:6b:c7:4f:4e:82:31:12:6e:1c:5d:77:56:91:6d: 2c:a6:c1:99:93:97:4e:8b:70:1d:40:7a:30:4d:01: 76:7b:14:20:46:7e:e5:c7:14:fc:2e:59:83:1a:d6: 50:ca:4a:50:7e:95:15:2b:fc:26:ad:f4:e1:22:15: a8:7f:5e:82:74:83:97:ce:61:ac:f0:27:fa:60:e7: 04:2f:f1:c1:ee:0c:c9:ef:7f:8a:82:21:2f:1e:fc: d3:2f:42:2e:eb:08:a5:2c:da:ce:f7:58:55:44:dd: 49:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4A:69:E8:CF:C9:C8:1C:6D:5B:39:52:0D:DC:CF:C7:24:9A:22:60 X509v3 Authority Key Identifier: keyid:12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:14:04:73:ad:38:80:9f:44:4e:c2:a5:d6:90:ea:79:b2:ac: d9:cc:b5:15:23:4b:58:d0:fd:f3:41:05:1b:78:fc:b8:47:49: 9d:b4:6c:80:6b:1c:9c:8a:99:23:f6:a5:5d:f1:43:b4:11:55: 79:69:99:d6:ed:b9:b3:78:71:d1:93:3a:52:e5:a6:e7:02:89: f6:bf:e9:05:fa:47:02:c3:6b:4e:0d:d1:fe:1b:ef:bc:80:1e: c3:ca:43:6d:c4:b3:a9:2f:ce:6b:3c:1f:89:48:9d:af:85:61: b6:de:e4:7a:30:94:16:f0:cf:22:5d:55:d5:6c:cd:a5:ed:04: 1c:e0:00:bf:81:64:09:1b:ba:a8:31:72:55:32:5d:34:37:b6: bc:e5:13:f9:5c:81:8d:f0:e1:17:e5:58:19:bd:fa:51:45:5d: 7d:37:a1:b4:50:57:b8:f9:d0:3b:40:56:21:f8:a5:78:70:25: c1:66:95:be:71:1c:54:39:df:3b:74:7f:19:6a:70:a5:4f:f8: c2:01:72:f9:ed:c0:19:47:54:14:47:c4:5a:13:0e:0b:ac:fb: 9b:e0:48:28:5f:8a:a2:1c:56:2e:51:5a:89:91:82:32:f8:81: 7c:f7:95:b2:e2:12:ce:48:60:57:d8:fd:15:33:46:57:37:93: 87:4d:c3:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU1NEExMTAvBgNVBAUTKDEyMUFGMTQ0RDkwM0UzRjg4OTdERjBGRUQyMDcxQTE2 NDc3NUVENEYwHhcNMjYwNzIzMDY1MzU4WhcNMjYwNzMwMDY1MzU4WjAYMRYwFAYD VQQDEw02YTYxYmE4Ni1kMGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyXfhiAbYgWoHWEOd9GvQE/RDHfk7bBKcTlIwWQ2S7nAXk3oX6VsBHS1KXn4E YuWcL8XpsKt3g+SQBvlMXiM1kJE8l2YKjIWg8DOeMjfz9ZVIg7tUP7FeSwqfvVkS joKuGL/Je1ipAvQqlCnzfTnnwBqOTZLfvQwa2wAm7c/NxMEW2c0d3ChPWgnJTvAK SB6EKO+A29Yma8dPToIxEm4cXXdWkW0spsGZk5dOi3AdQHowTQF2exQgRn7lxxT8 LlmDGtZQykpQfpUVK/wmrfThIhWof16CdIOXzmGs8Cf6YOcEL/HB7gzJ73+KgiEv HvzTL0Iu6wilLNrO91hVRN1J/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDFKaejP ycgcbVs5Ug3cz8ckmiJgMB8GA1UdIwQYMBaAFBIa8UTZA+P4iX3w/tIHGhZHde1P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS83OTVFNzNEMDkx RjcxMUVGQURFMTEyNjZDNEY5QUUwMi9FaHJ4Uk5rRDRfaUpmZkQtMGdjYUZrZDE3 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VocnhSTmtENF9pSmZmRC0wZ2NhRmtkMTdVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTU0QS83OTVFNzNEMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi9FaHJ4Uk5rRDRf aUpmZkQtMGdjYUZrZDE3VTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsBQEc604gJ9ETsKl1pDqebKs2cy1FSNLWND980EFG3j8uEdJnbRsgGscnIqZ I/alXfFDtBFVeWmZ1u25s3hx0ZM6UuWm5wKJ9r/pBfpHAsNrTg3R/hvvvIAew8pD bcSzqS/OazwfiUidr4Vhtt7kejCUFvDPIl1V1WzNpe0EHOAAv4FkCRu6qDFyVTJd NDe2vOUT+VyBjfDhF+VYGb36UUVdfTehtFBXuPnQO0BWIfileHAlwWaVvnEcVDnf O3R/GWpwpU/4wgFy+e3AGUdUFEfEWhMOC6z7m+BIKF+KohxWLlFaiZGCMviBfPeV suISzkhgV9j9FTNGVzeTh03DaA== -----END CERTIFICATE-----Generated at Fri Jul 24 08:52:30 2026 by rpki-client