$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft File: UdUxrvegh8GOMB4OaixjcbJkw-g.mft (raw, json) Hash identifier: 4JEEgS7Ol6TyRmJZANfFqqh7VHsR6mX02cujl8ZCPA4= Subject key identifier: C9:97:9C:A1:D2:1F:85:E0:92:BD:BB:4F:FB:F3:4C:60:82:32:60:55 Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Certificate serial: 02B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft Manifest number: 0295 Signing time: Thu 23 Jul 2026 03:11:25 +0000 Manifest this update: Thu 23 Jul 2026 03:11:24 +0000 Manifest next update: Thu 30 Jul 2026 03:11:24 +0000 Files and hashes: 1: UdUxrvegh8GOMB4OaixjcbJkw-g.crl (hash: f77xOHV4ySk6PTWma2WCZjBvxkRj83DDsYRzecA8nwA=) 2: 891E633CB7F111EFA500D67CC4F9AE02.roa (hash: 74jq6ZEh6iqV+58fBJr/9zAa1XDAf9e6FWi0Lze9+iQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 692 (0x2b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8 Validity Not Before: Jul 23 03:11:24 2026 GMT Not After : Jul 30 03:11:24 2026 GMT Subject: CN=6a61865d-436b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:77:22:e2:05:a8:6b:44:e5:a6:60:cd:25: 14:2d:3b:6e:e0:96:5c:50:6c:3f:dd:07:7d:93:c3: 65:f9:22:ab:26:d6:a7:c0:d9:72:37:19:c2:e9:3b: 29:ca:02:df:51:26:20:68:1b:9c:8c:db:f7:74:36: 4a:bb:8f:ec:7e:a9:1a:ac:0f:64:4b:66:1b:f1:24: ba:4d:1a:44:2b:ec:90:21:53:b4:de:9c:5c:a4:20: 00:59:99:b6:05:f5:e4:fd:84:c3:72:4f:e9:3e:5c: 8e:6f:51:f3:98:1e:90:0f:55:45:1c:60:9f:be:7d: 9b:f9:9d:2d:e0:d3:56:b8:e2:f1:ae:df:7b:56:ca: b2:af:f9:9f:cb:38:8a:34:63:44:d4:c5:be:27:dc: 8e:cf:e3:96:42:b3:47:d8:42:3b:98:ce:19:8b:59: fc:0c:92:22:5a:e3:c1:2d:0e:be:fa:4a:9b:75:98: c6:58:aa:e5:c8:2f:67:72:c4:9a:fe:9d:5a:42:1b: 8a:eb:2c:2f:88:12:f0:e2:03:2c:85:18:a2:bb:78: 27:40:ea:4f:d6:0e:54:7d:5f:55:ba:3d:c2:4d:22: 6a:5e:49:11:ee:49:a2:ac:10:df:51:62:9b:26:bc: a7:4d:54:9b:55:29:cb:d7:04:28:c7:1d:10:a5:c7: 1f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:97:9C:A1:D2:1F:85:E0:92:BD:BB:4F:FB:F3:4C:60:82:32:60:55 X509v3 Authority Key Identifier: keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:57:f2:ee:61:d5:f8:71:6b:80:ae:0c:91:e4:0e:41:17:f4: a5:b9:7a:3b:9c:57:4e:c2:e1:5d:e9:58:94:1c:2c:be:90:e5: 78:47:97:23:f9:84:aa:3d:28:00:fb:78:7b:57:f9:ab:dd:b0: 9e:06:8e:d3:e3:c4:3a:7f:52:2d:cc:80:f2:c8:91:69:21:ab: 88:bf:df:f1:96:fb:01:b5:16:44:98:6c:35:80:a0:ed:48:5a: 37:b3:c9:d4:97:6f:d8:b5:4b:8d:1d:74:e0:d0:87:4e:f3:17: 2a:49:ee:c9:f0:43:2d:72:91:70:9c:29:5a:43:6e:52:63:67: 2d:7e:9e:9e:ba:06:cd:ee:cd:0d:50:dc:df:3a:d4:f6:7e:56: b3:97:5d:45:be:04:33:36:12:16:1d:90:98:ea:e7:bb:03:18: fc:d7:79:b1:f1:46:b8:a3:5b:ad:4c:84:70:5d:20:af:33:b6: 44:cb:df:e7:20:c1:0e:98:2f:6c:c4:d1:4c:16:4f:ac:ea:c9: 4d:f7:4c:f2:b6:f9:0a:2d:72:2b:04:5a:fe:73:41:5e:67:e3: 3c:c5:1d:93:52:a9:6a:61:1a:b1:e0:60:62:b6:74:63:aa:21: eb:fe:c5:1d:6f:72:dd:cf:2f:de:87:0d:fa:b0:29:f4:77:60: f9:c6:88:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZBRkYxMTAvBgNVBAUTKDUxRDUzMUFFRjdBMDg3QzE4RTMwMUUwRTZBMkM2Mzcx QjI2NEMzRTgwHhcNMjYwNzIzMDMxMTI0WhcNMjYwNzMwMDMxMTI0WjAYMRYwFAYD VQQDEw02YTYxODY1ZC00MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/J3IuIFqGtE5aZgzSUULTtu4JZcUGw/3Qd9k8Nl+SKrJtanwNlyNxnC6Tsp ygLfUSYgaBucjNv3dDZKu4/sfqkarA9kS2Yb8SS6TRpEK+yQIVO03pxcpCAAWZm2 BfXk/YTDck/pPlyOb1HzmB6QD1VFHGCfvn2b+Z0t4NNWuOLxrt97Vsqyr/mfyziK NGNE1MW+J9yOz+OWQrNH2EI7mM4Zi1n8DJIiWuPBLQ6++kqbdZjGWKrlyC9ncsSa /p1aQhuK6ywviBLw4gMshRiiu3gnQOpP1g5UfV9Vuj3CTSJqXkkR7kmirBDfUWKb JrynTVSbVSnL1wQoxx0Qpccf7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMmXnKHS H4Xgkr27T/vzTGCCMmBVMB8GA1UdIwQYMBaAFFHVMa73oIfBjjAeDmosY3GyZMPo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkFGRi9EMDYxMUYwNEND NDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4R09NQjRPYWl4amNiSmt3 LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VkVXhydmVnaDhHT01CNE9haXhqY2JKa3ctZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkFGRi9EMDYxMUYwNENDNDQxMUVEOUE3MUUxMENDNEY5QUUwMi9VZFV4cnZlZ2g4 R09NQjRPYWl4amNiSmt3LWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiFfy7mHV+HFrgK4MkeQOQRf0pbl6O5xXTsLhXelYlBwsvpDleEeXI/mEqj0o APt4e1f5q92wngaO0+PEOn9SLcyA8siRaSGriL/f8Zb7AbUWRJhsNYCg7UhaN7PJ 1Jdv2LVLjR104NCHTvMXKknuyfBDLXKRcJwpWkNuUmNnLX6enroGze7NDVDc3zrU 9n5Ws5ddRb4EMzYSFh2QmOrnuwMY/Nd5sfFGuKNbrUyEcF0grzO2RMvf5yDBDpgv bMTRTBZPrOrJTfdM8rb5Ci1yKwRa/nNBXmfjPMUdk1KpamEaseBgYrZ0Y6oh6/7F HW9y3c8v3ocN+rAp9Hdg+caI7g== -----END CERTIFICATE-----Generated at Fri Jul 24 06:26:56 2026 by rpki-client