$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: 2/74dJ8rp8LOWhlLogPOJxS/sQZ+2V9MWIWCqFmpHi4= Subject key identifier: 31:37:D4:3A:EC:11:63:D0:85:A0:D2:3D:98:B9:99:D1:44:DE:06:8B Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 0966 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 093A Signing time: Wed 22 Jul 2026 18:07:33 +0000 Manifest this update: Wed 22 Jul 2026 18:07:32 +0000 Manifest next update: Wed 29 Jul 2026 18:07:32 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: QZQoQyZ2L3S+CuuTkyC7w+B+1wPlVVCzUTInkIXS1MU=) 2: D385E420314711EBA579873DC4F9AE02.roa (hash: OXpsFXQnHysc6JgYoLG/ywf9w/jV3FpEntMMj1+ecpM=) 3: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: BoTL56JNkoT8zZTebPvc7QbRsS4FGOp32MGJ/vJjCqw=) 4: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: x1jD2hg6E8urDPutIfNWsExPrrmq8yEETqPUKu1cNM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2406 (0x966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Jul 22 18:07:32 2026 GMT Not After : Jul 29 18:07:32 2026 GMT Subject: CN=6a6106e5-04c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:eb:d0:64:e0:11:ef:d6:c7:4b:e5:6e:b1: a7:f6:4b:50:98:75:b0:ca:b2:20:b8:f9:a2:71:56: 87:17:68:04:71:65:7c:c2:65:08:51:23:ae:4b:9e: 10:75:b7:b7:e8:2d:57:be:2b:7b:8a:aa:06:0a:c7: d8:c4:21:2f:ea:07:1d:34:ad:08:92:3f:d0:df:99: 48:be:73:fb:b1:f0:e5:e9:15:de:b1:e0:ea:71:6a: de:4b:ca:70:98:3e:47:88:03:58:a7:c5:03:67:2f: 0c:97:56:d9:a6:3b:6c:cf:51:24:0a:9d:87:aa:10: 9e:c8:c5:3a:48:bb:5f:b0:99:92:77:3a:e6:73:66: a6:30:b9:b0:81:2e:3d:e7:10:62:10:db:22:c5:94: d5:a1:64:82:30:5d:a5:16:a4:5d:22:97:4b:7f:e5: f2:da:57:92:0d:ae:76:d0:cd:63:d7:7a:78:8b:a1: b4:75:d1:02:4f:bf:e1:7a:1f:44:f1:b0:38:09:ed: 2d:fa:21:6f:b2:d2:ac:ef:77:07:63:35:4f:95:d4: 84:31:3c:4c:1a:9c:b0:e1:25:22:fa:6f:d6:37:94: a4:3e:62:3a:e1:45:50:74:c7:e6:c4:b6:57:65:61: 99:83:c4:6c:3b:1d:11:1d:30:b9:13:a6:5d:e8:df: fa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:37:D4:3A:EC:11:63:D0:85:A0:D2:3D:98:B9:99:D1:44:DE:06:8B X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:dc:00:8d:7f:ff:0b:95:58:53:da:50:65:e3:65:d4:77:0c: 46:00:a5:69:5a:81:13:74:ba:51:66:24:35:a1:6d:00:24:87: aa:8f:98:a7:3b:da:49:17:ff:2a:f1:df:a1:35:8d:d7:71:58: 35:65:13:69:d4:d8:d1:52:bd:81:d7:46:14:20:53:dc:55:85: 07:30:c9:02:28:dd:da:59:22:95:a3:7a:d4:11:e6:82:fa:65: 98:d3:56:2e:b9:5c:a7:c4:40:40:44:b9:6d:b2:fe:fb:03:10: 72:c1:6b:db:a0:07:61:af:83:b4:84:d3:67:8e:25:18:65:c1: 86:31:a7:83:b1:00:72:15:2d:df:e9:b7:0d:84:77:5d:39:af: 4f:6a:e7:82:a9:fd:25:86:8d:73:9c:b4:2a:38:3a:93:78:64: 78:21:2c:bc:c8:c2:b3:4b:4e:2e:c5:38:8e:4e:84:c0:33:cb: 17:58:75:21:8d:f7:7d:c7:1b:39:23:4c:08:29:d5:68:44:f4: 44:02:07:b6:d6:19:01:09:1a:2f:df:af:20:ae:98:07:49:a2: 21:ff:12:9a:7b:7c:28:0e:76:60:b8:2a:83:38:69:1c:7b:00: 1f:b0:4a:8e:65:31:ab:6d:9c:2c:3d:af:a0:ea:f2:28:0b:24: 60:ff:5b:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjYwNzIyMTgwNzMyWhcNMjYwNzI5MTgwNzMyWjAYMRYwFAYD VQQDEw02YTYxMDZlNS0wNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbHr0GTgEe/Wx0vlbrGn9ktQmHWwyrIguPmicVaHF2gEcWV8wmUIUSOuS54Q dbe36C1Xvit7iqoGCsfYxCEv6gcdNK0Ikj/Q35lIvnP7sfDl6RXeseDqcWreS8pw mD5HiANYp8UDZy8Ml1bZpjtsz1EkCp2HqhCeyMU6SLtfsJmSdzrmc2amMLmwgS49 5xBiENsixZTVoWSCMF2lFqRdIpdLf+Xy2leSDa520M1j13p4i6G0ddECT7/heh9E 8bA4Ce0t+iFvstKs73cHYzVPldSEMTxMGpyw4SUi+m/WN5SkPmI64UVQdMfmxLZX ZWGZg8RsOx0RHTC5E6Zd6N/64wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDE31Drs EWPQhaDSPZi5mdFE3gaLMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbNwAjX//C5VYU9pQZeNl1HcMRgClaVqBE3S6UWYkNaFtACSHqo+YpzvaSRf/ KvHfoTWN13FYNWUTadTY0VK9gddGFCBT3FWFBzDJAijd2lkilaN61BHmgvplmNNW Lrlcp8RAQES5bbL++wMQcsFr26AHYa+DtITTZ44lGGXBhjGng7EAchUt3+m3DYR3 XTmvT2rngqn9JYaNc5y0Kjg6k3hkeCEsvMjCs0tOLsU4jk6EwDPLF1h1IY33fccb OSNMCCnVaET0RAIHttYZAQkaL9+vIK6YB0miIf8Smnt8KA52YLgqgzhpHHsAH7BK jmUxq22cLD2voOryKAskYP9byw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:11:43 2026 by rpki-client