$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft File: 5OTCQkd4XDQv81kH9-EcSrs5i4M.mft (raw, json) Hash identifier: DTpcnq7ARce71SQci9i0diQQR55aXK4hFnci2rPFG6Y= Subject key identifier: 9A:E5:42:C9:AC:13:4A:25:8A:6F:93:30:B7:6C:3A:CE:8D:4D:8F:07 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft Manifest number: FA Signing time: Thu 23 Jul 2026 08:02:50 +0000 Manifest this update: Thu 23 Jul 2026 08:02:50 +0000 Manifest next update: Thu 30 Jul 2026 08:02:50 +0000 Files and hashes: 1: 5OTCQkd4XDQv81kH9-EcSrs5i4M.crl (hash: eLYeIzwCOWeZXIwHnSvM2mS8n9DBWmcAzLg1VX1c1U0=) 2: 212E0B520DFE11F0B266963AC4F9AE02.roa (hash: 0Pd2RnR3Fb00tGS21BR3ZHRM+0PBa1aIDio+p3wBXao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Jul 23 08:02:50 2026 GMT Not After : Jul 30 08:02:50 2026 GMT Subject: CN=6a61caaa-38a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:e5:88:c7:7d:5b:43:56:80:8d:94:9d:ca: 52:9d:35:4d:cc:bc:06:8f:6d:97:32:a6:78:79:63: 75:2e:10:bf:2b:d3:52:31:5d:f6:9e:65:3e:4e:8d: 5c:7d:fe:74:af:b6:be:90:3c:15:c4:07:91:96:e5: 44:2a:a0:46:7e:d6:82:b9:c2:ec:13:75:06:b1:ae: 22:35:32:c8:3a:37:41:d8:83:37:83:0b:29:4b:8d: fb:f5:3f:63:be:6f:fd:84:23:9d:90:b9:24:40:de: 6c:49:d4:d3:d4:22:04:fa:46:97:74:fe:04:98:b0: c7:ff:62:10:99:1c:70:f9:27:3e:f4:80:5a:6f:77: 82:ae:03:d7:bc:85:59:2c:e1:4a:47:c4:44:23:72: 97:a0:6a:ba:2b:0b:b8:c9:6d:e7:15:20:77:76:e6: 96:cf:39:08:bd:6d:de:73:41:9f:6f:a9:57:fb:c3: fe:80:66:ae:6a:ad:78:40:83:eb:78:4b:79:f1:49: da:1c:cf:94:94:74:a8:76:6d:c5:cc:57:3b:44:f7: f6:6b:fa:3f:f8:55:16:33:c2:98:5c:5b:59:e8:ab: 47:7d:b7:28:be:10:7b:9e:13:21:40:9f:7d:37:9c: 61:6d:64:34:64:77:12:df:ac:14:a8:ca:a9:c7:90: 21:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E5:42:C9:AC:13:4A:25:8A:6F:93:30:B7:6C:3A:CE:8D:4D:8F:07 X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:04:4c:c3:48:19:b2:2a:a5:74:09:ad:db:94:9f:26:8b:02: 8d:29:83:ae:de:9d:31:9b:92:1e:83:b8:00:d6:c4:46:bf:54: e3:bb:ff:8d:05:fb:28:09:68:b8:7e:63:dd:8d:b2:9d:92:a9: d7:5a:20:1d:fe:d8:69:4d:c8:97:34:97:f9:70:f8:b1:d3:9e: 4b:d7:60:25:e2:f7:58:a4:ef:bb:dc:b7:df:b4:8b:c8:aa:9c: c5:65:9a:c3:d4:2e:01:dd:94:85:93:ab:14:64:42:14:95:77: a0:7c:85:06:75:54:0d:e0:9b:a7:df:db:32:8b:96:b9:cf:ad: d0:4d:ad:ac:e1:6a:31:1b:f9:10:a5:51:80:bf:74:22:50:f3: 02:3e:b3:de:18:59:81:3e:7a:21:20:54:e4:64:a2:9b:76:8e: 14:8c:85:86:d0:fd:e5:6c:62:f8:9d:b5:b6:73:7d:80:7c:f1: 58:cd:22:fe:36:6f:f4:d7:d5:8e:df:5d:d5:88:6d:fc:f7:23: 22:b6:67:b5:9b:22:8a:6b:1a:87:d3:32:4a:4d:be:22:2a:9f: 58:7b:da:02:a1:1d:3e:43:02:85:89:57:2d:50:e1:e0:62:9a: dd:2f:fe:43:1a:d2:bc:58:d7:18:50:9a:44:67:71:81:9b:b7: c8:fe:1d:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1RjExMTAvBgNVBAUTKEU0RTRDMjQyNDc3ODVDMzQyRkYzNTkwN0Y3RTExQzRB QkIzOThCODMwHhcNMjYwNzIzMDgwMjUwWhcNMjYwNzMwMDgwMjUwWjAYMRYwFAYD VQQDEw02YTYxY2FhYS0zOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxInliMd9W0NWgI2UncpSnTVNzLwGj22XMqZ4eWN1LhC/K9NSMV32nmU+To1c ff50r7a+kDwVxAeRluVEKqBGftaCucLsE3UGsa4iNTLIOjdB2IM3gwspS4379T9j vm/9hCOdkLkkQN5sSdTT1CIE+kaXdP4EmLDH/2IQmRxw+Sc+9IBab3eCrgPXvIVZ LOFKR8REI3KXoGq6Kwu4yW3nFSB3duaWzzkIvW3ec0Gfb6lX+8P+gGauaq14QIPr eEt58UnaHM+UlHSodm3FzFc7RPf2a/o/+FUWM8KYXFtZ6KtHfbcovhB7nhMhQJ99 N5xhbWQ0ZHcS36wUqMqpx5Ah3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJrlQsms E0olim+TMLdsOs6NTY8HMB8GA1UdIwQYMBaAFOTkwkJHeFw0L/NZB/fhHEq7OYuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82MjIwNjMzQzBE RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhEUXY4MWtIOS1FY1NyczVp NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVGMS82MjIwNjMzQzBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhE UXY4MWtIOS1FY1NyczVpNE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACQRMw0gZsiqldAmt25SfJosCjSmDrt6dMZuSHoO4ANbERr9U47v/jQX7KAlo uH5j3Y2ynZKp11ogHf7YaU3IlzSX+XD4sdOeS9dgJeL3WKTvu9y337SLyKqcxWWa w9QuAd2UhZOrFGRCFJV3oHyFBnVUDeCbp9/bMouWuc+t0E2trOFqMRv5EKVRgL90 IlDzAj6z3hhZgT56ISBU5GSim3aOFIyFhtD95Wxi+J21tnN9gHzxWM0i/jZv9NfV jt9d1Yht/PcjIrZntZsiimsah9MySk2+IiqfWHvaAqEdPkMChYlXLVDh4GKa3S/+ QxrSvFjXGFCaRGdxgZu3yP4ddQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:53:27 2026 by rpki-client