$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: A53f53t8hjEx8oNeSsBeS6QOAYrIPkjqy88ehcFtq1o= Subject key identifier: 6D:1A:D6:4E:CE:2B:8B:93:EE:9B:CA:CB:4D:6B:4D:DC:59:25:CE:61 Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 12BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 129B Signing time: Wed 22 Jul 2026 17:11:26 +0000 Manifest this update: Wed 22 Jul 2026 17:11:26 +0000 Manifest next update: Wed 29 Jul 2026 17:11:26 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: ULTwRkDHN2F1dEo1bIvAHRJ8UC3aA42deHFZHZ0sPaM=) 2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: Q8GHoeHbmqW7M4R7JqdbouyG47lAXEk2l5ZINQlZhUw=) 3: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: B4PjSBYjorfWxo1YSpPxhGaOBSD9dJ0o8/kl1/H4JCI=) 4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: zTMcMU85Vfrv28bnOAwruUSVF1/v5V80nulZ37SkFAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4796 (0x12bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Jul 22 17:11:26 2026 GMT Not After : Jul 29 17:11:26 2026 GMT Subject: CN=6a60f9be-3f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:3d:3e:8b:d6:ba:ac:21:6a:ca:d4:47:4b: d3:f3:b7:90:b6:53:5a:a9:30:fe:ed:32:60:fd:88: 0e:d9:10:1a:9e:38:f0:2a:27:f5:aa:15:20:e9:de: 32:41:aa:97:91:cb:d7:b7:4b:0a:8d:91:67:3a:48: 7a:a0:66:a2:4a:2c:4c:a9:2f:96:59:57:c2:b2:c5: c4:44:5c:0c:08:7c:82:b4:18:0a:e7:6b:da:53:d6: d4:5f:83:d7:c6:77:0d:76:45:36:04:3a:3f:04:e8: 32:28:d0:e0:63:48:1e:02:cc:a6:68:46:4a:88:54: 7a:19:22:fc:be:22:c1:3f:07:4d:ad:eb:7a:da:af: 09:0b:06:11:b8:5d:ee:97:2d:cb:f7:5f:f5:81:73: 5d:e9:c6:73:8f:4b:27:b8:ef:0b:d8:a8:14:95:2f: 2c:a6:da:f8:4f:90:22:41:19:37:f0:34:78:8d:fe: 2b:75:5f:0e:d9:30:24:09:27:20:27:40:f4:0f:08: 76:b0:c2:6f:96:93:48:aa:a5:5d:06:cf:9d:4c:61: ae:88:3f:81:e4:e1:e8:7a:68:8d:3b:47:d7:9b:65: 61:b0:9c:a0:05:ce:5e:66:60:b5:9b:de:b3:c6:8e: 1e:f9:3e:7f:34:df:aa:1f:ad:ed:6e:05:a9:54:71: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1A:D6:4E:CE:2B:8B:93:EE:9B:CA:CB:4D:6B:4D:DC:59:25:CE:61 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ea:cd:c4:e5:04:9b:74:39:b5:70:aa:6a:b4:a5:28:bc:7e: c5:55:4c:2e:c8:2f:02:52:f4:a0:42:94:50:88:8c:52:40:f6: 71:7f:7f:d0:b3:09:5a:0c:dd:7a:43:49:ea:f5:d4:f1:9c:61: cb:c2:34:68:53:27:25:8f:c7:0f:a1:99:86:57:91:f1:69:d5: 16:27:4f:6a:8f:f4:1a:cf:92:09:6b:95:65:fe:29:21:b6:d6: de:0d:d5:1a:39:45:6a:f4:a2:2d:9b:70:9c:70:2c:02:bc:56: 7f:77:4d:85:cc:51:dd:f4:86:b6:d4:16:0f:8b:82:00:6c:71: 6e:71:7f:5f:f0:a1:7d:1b:7f:0e:3b:57:29:d1:09:96:3a:06: a8:38:4d:95:f2:e1:08:95:d2:49:bc:a0:0d:43:49:22:33:f6: 6d:6c:c7:ee:eb:c8:59:ee:c7:52:ad:23:6d:2f:98:43:60:f1: 40:04:aa:9a:21:59:6b:3f:54:2c:75:2a:ea:e0:04:5d:7a:d0: 5d:a7:12:e4:ec:a7:66:76:58:51:59:96:5c:00:cc:33:82:f6: 64:f7:13:69:29:8c:61:05:15:e5:4d:2e:23:d2:22:c1:88:d7: 28:e3:7a:52:d0:fc:34:66:48:73:9c:6f:e0:75:97:d8:34:b9: 7a:01:d4:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICErwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYwNzIyMTcxMTI2WhcNMjYwNzI5MTcxMTI2WjAYMRYwFAYD VQQDEw02YTYwZjliZS0zZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOg9PovWuqwhasrUR0vT87eQtlNaqTD+7TJg/YgO2RAanjjwKif1qhUg6d4y QaqXkcvXt0sKjZFnOkh6oGaiSixMqS+WWVfCssXERFwMCHyCtBgK52vaU9bUX4PX xncNdkU2BDo/BOgyKNDgY0geAsymaEZKiFR6GSL8viLBPwdNret62q8JCwYRuF3u ly3L91/1gXNd6cZzj0snuO8L2KgUlS8sptr4T5AiQRk38DR4jf4rdV8O2TAkCScg J0D0Dwh2sMJvlpNIqqVdBs+dTGGuiD+B5OHoemiNO0fXm2VhsJygBc5eZmC1m96z xo4e+T5/NN+qH63tbgWpVHF1XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG0a1k7O K4uT7pvKy01rTdxZJc5hMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeurNxOUEm3Q5tXCqarSlKLx+xVVMLsgvAlL0oEKUUIiMUkD2cX9/0LMJWgzd ekNJ6vXU8Zxhy8I0aFMnJY/HD6GZhleR8WnVFidPao/0Gs+SCWuVZf4pIbbW3g3V GjlFavSiLZtwnHAsArxWf3dNhcxR3fSGttQWD4uCAGxxbnF/X/ChfRt/DjtXKdEJ ljoGqDhNlfLhCJXSSbygDUNJIjP2bWzH7uvIWe7HUq0jbS+YQ2DxQASqmiFZaz9U LHUq6uAEXXrQXacS5OynZnZYUVmWXADMM4L2ZPcTaSmMYQUV5U0uI9IiwYjXKON6 UtD8NGZIc5xv4HWX2DS5egHUQg== -----END CERTIFICATE-----Generated at Thu Jul 23 22:52:48 2026 by rpki-client