$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json) Hash identifier: 3WRfzIuqvA0BWpSWuoNw6pxmxpzSrnnvpP/HkKIaIqs= Subject key identifier: FE:BB:98:4F:D6:2F:8A:FF:18:18:AA:E0:B2:83:4E:DC:AB:BD:1A:DB Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Certificate serial: 109E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft Manifest number: 105A Signing time: Wed 22 Jul 2026 17:33:20 +0000 Manifest this update: Wed 22 Jul 2026 17:33:20 +0000 Manifest next update: Wed 29 Jul 2026 17:33:20 +0000 Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: /9BSkaLlnQzsM1qkwSfd7AfvwXnnJ7k4XPJ4wR/YRdQ=) 2: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: Ep5ULjpLJ97bV5VifiZFQEn0w2yErIZH+uUxSWGKvrg=) 3: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: 8pSbOUGcxd9kIRUOKnyb177dIko/tnYgGhNgiXbljP4=) 4: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: Sm/OBak1L/GxeMDIT65Qr8dDGwL4HkNDx/zYxoxP+Z8=) 5: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: MMtbNQJMN6S4OIeEKXKOY3PxiKyZUm2osdIwKT/I6/8=) 6: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: uBTNO8LacSzwG2NHzzxDXw4qYGxUCRj8Y9JqVZrsvk4=) 7: B3876B1821C911EB991D562EC4F9AE02.roa (hash: MalwjoN5cuoqPXC8qDmvp2vBk51alqMZE2wuotImz1Q=) 8: B490CD0621C911EB991D562EC4F9AE02.roa (hash: HAKJGo3+54uKtPG7Z+H+eKIrSnUl+M/R2bQu2unHATw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4254 (0x109e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Validity Not Before: Jul 22 17:33:20 2026 GMT Not After : Jul 29 17:33:20 2026 GMT Subject: CN=6a60fee0-fad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:0d:e4:24:78:8d:10:38:2d:ef:a3:a2:be: b7:bd:cd:1f:e0:8f:9f:52:03:99:e9:84:b5:19:ce: bd:41:47:f2:f3:82:a2:b2:a6:98:02:5d:db:c3:71: dc:58:78:38:bd:52:51:a9:1e:d2:24:f7:3e:d5:73: 1e:28:62:65:bc:54:5c:77:b3:09:37:35:bb:02:f9: 7b:74:51:98:56:33:dd:45:ed:22:03:84:7b:68:f5: 63:de:81:6a:05:c5:9e:f1:c9:5d:2e:fb:b6:cb:66: 68:66:1c:9b:85:c1:5d:58:d5:bd:99:d2:95:93:75: ec:a8:7f:bb:ae:f1:4d:8b:49:1e:6c:d6:08:13:e8: fc:c6:03:bf:fc:b2:b1:7a:9c:cd:3b:2c:6e:65:62: c6:66:92:ce:0a:b1:a1:46:50:1c:3b:ea:65:6d:3e: b2:9c:b1:69:06:6b:4e:ec:06:8e:da:6f:85:88:54: 7e:3b:2f:84:fd:9d:93:4b:8f:3a:d5:46:3b:6d:19: 71:d0:79:65:d9:48:8a:a7:c3:ed:78:d1:f8:de:51: d9:22:21:0d:48:d8:d9:ac:bc:cc:1f:21:f7:de:68: a8:67:90:33:3d:6e:0d:44:e2:3f:05:c4:da:90:a1: be:b3:20:a8:b4:b8:17:6e:e8:b8:37:0c:8b:f0:63: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:BB:98:4F:D6:2F:8A:FF:18:18:AA:E0:B2:83:4E:DC:AB:BD:1A:DB X509v3 Authority Key Identifier: keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:1a:ad:88:3e:94:f1:67:4b:bc:bd:9b:a8:f4:4f:20:6f:a2: 92:92:37:63:3b:de:3f:8a:a4:0d:35:3b:bb:35:93:9f:2c:79: 9e:f6:55:6d:d1:f3:d4:3c:82:59:4a:cf:77:06:e0:c9:0a:b4: 56:d5:38:9f:bd:d7:de:ce:88:b6:56:01:5b:16:f7:96:45:32: a7:ab:74:c8:79:20:3e:9a:2c:f3:bc:df:44:c7:4a:3c:1c:f7: e6:c2:e0:f2:e6:a1:d6:e7:2b:d3:5b:31:69:87:1a:8e:80:79: 7d:5a:5b:46:00:42:d0:55:74:fd:f2:db:14:5a:67:02:20:8c: 62:8d:a0:8a:26:ba:03:0a:58:be:94:ee:04:c0:2a:fe:21:00: 17:26:e7:57:a8:3f:b6:8f:ba:ac:ef:59:86:9b:d1:81:88:cf: 0c:d8:1e:56:b1:e6:9a:59:d8:f5:e3:1a:92:46:bd:18:33:46: 83:fb:e8:4e:14:f9:29:19:b8:8e:80:e5:41:92:55:d5:32:15: bb:e9:c7:17:22:38:23:9f:76:48:da:ff:91:d8:a0:72:92:ad: 6b:8c:d0:a8:f4:a9:9a:71:e6:8a:e2:29:62:e1:c0:28:13:f0: 35:d8:13:36:9c:a1:04:84:cd:73:dd:5c:1c:98:7c:1b:40:d4: de:6e:1d:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2 RkZBQzQ2NjEwHhcNMjYwNzIyMTczMzIwWhcNMjYwNzI5MTczMzIwWjAYMRYwFAYD VQQDEw02YTYwZmVlMC1mYWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwagN5CR4jRA4Le+jor63vc0f4I+fUgOZ6YS1Gc69QUfy84KisqaYAl3bw3Hc WHg4vVJRqR7SJPc+1XMeKGJlvFRcd7MJNzW7Avl7dFGYVjPdRe0iA4R7aPVj3oFq BcWe8cldLvu2y2ZoZhybhcFdWNW9mdKVk3XsqH+7rvFNi0kebNYIE+j8xgO//LKx epzNOyxuZWLGZpLOCrGhRlAcO+plbT6ynLFpBmtO7AaO2m+FiFR+Oy+E/Z2TS486 1UY7bRlx0Hll2UiKp8PteNH43lHZIiENSNjZrLzMHyH33mioZ5AzPW4NROI/BcTa kKG+syCotLgXbui4NwyL8GPFfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP67mE/W L4r/GBiq4LKDTtyrvRrbMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0YwMi9DQ0FCNTc1MDYzRjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JB WHBsMVJiQ05ONU52LXNSbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMxqtiD6U8WdLvL2bqPRPIG+ikpI3YzveP4qkDTU7uzWTnyx5nvZVbdHz1DyC WUrPdwbgyQq0VtU4n73X3s6ItlYBWxb3lkUyp6t0yHkgPpos87zfRMdKPBz35sLg 8uah1ucr01sxaYcajoB5fVpbRgBC0FV0/fLbFFpnAiCMYo2giia6AwpYvpTuBMAq /iEAFybnV6g/to+6rO9ZhpvRgYjPDNgeVrHmmlnY9eMakka9GDNGg/voThT5KRm4 joDlQZJV1TIVu+nHFyI4I592SNr/kdigcpKta4zQqPSpmnHmiuIpYuHAKBPwNdgT NpyhBITNc91cHJh8G0DU3m4deg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:30 2026 by rpki-client