$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: cA33LTUco/yl8ojt6XvutMt/ZojglF9X74K5R7p7eGM= Subject key identifier: 62:02:D3:81:73:4A:0A:35:ED:E0:82:1A:E3:D9:EB:5E:D2:ED:10:24 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 0886 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 086F Signing time: Wed 22 Jul 2026 21:22:35 +0000 Manifest this update: Wed 22 Jul 2026 21:22:34 +0000 Manifest next update: Wed 29 Jul 2026 21:22:34 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: Zw9cJfxXCVgp27z/DaVrOLKp4UJ7x8up/tqUfmuUkec=) 2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: 7Hski1LihuXP4DCejah8rpbbpApVv3sXUWUNBiqFJoY=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: PI9xVbuN9iLwRFvPVikPHj6xkwP6ohiLgSsNDUNun9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:22:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2182 (0x886) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Jul 22 21:22:34 2026 GMT Not After : Jul 29 21:22:34 2026 GMT Subject: CN=6a61349a-e67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:98:d7:bd:61:bf:99:c6:9b:04:da:fd:34:0d: 0d:da:57:a0:46:eb:1c:0b:10:97:76:36:36:6a:43: a6:1d:30:3a:b9:50:3a:db:53:2d:bd:0d:4d:fd:07: fb:59:46:6a:0d:bd:09:5d:da:87:91:f6:49:25:ff: 85:88:c7:41:81:11:5b:c4:9a:7a:69:f0:10:d1:b9: 24:d8:db:52:ac:1c:45:1a:5c:1a:f8:71:67:2c:59: bc:8f:f9:80:53:18:b1:00:08:21:df:0f:0f:89:3d: 27:d5:40:b7:0b:7b:cb:56:17:d5:b4:90:7b:24:de: 17:1a:f5:69:a8:59:01:2c:77:9a:a3:0d:4d:99:79: 95:4c:1e:88:08:29:b2:f2:21:4f:34:9a:d0:a8:06: 64:9d:d3:39:d2:b4:b1:29:60:8a:fd:1b:1b:cb:78: 9c:1b:d8:51:54:b3:b4:51:2c:06:99:4f:c1:89:ee: cc:20:dd:07:94:24:f7:45:e1:1b:8e:3e:88:50:8f: bb:e4:26:17:ea:c2:09:e1:3a:b0:91:90:99:9f:7c: dc:c9:c0:b2:9c:78:38:61:90:5c:16:ce:33:c3:37: 1f:bb:56:c1:4e:4d:ed:35:19:37:22:08:27:6b:ca: 71:10:42:ce:31:5f:6f:6f:90:ac:77:ec:0a:ff:30: 29:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:02:D3:81:73:4A:0A:35:ED:E0:82:1A:E3:D9:EB:5E:D2:ED:10:24 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:98:fa:45:c8:50:64:82:38:f6:9d:c5:d9:3b:0e:ca:5e:fb: 83:f1:e0:d1:ad:94:9b:ef:63:b9:08:6c:3d:89:c6:7d:d1:ab: 61:54:4f:94:f8:28:ed:b5:a8:06:dc:e6:ae:52:03:3c:68:79: ee:28:28:61:b2:5c:9c:1b:94:9a:c5:db:84:6d:2f:04:b4:f5: 3f:e8:34:e7:0d:9a:4b:61:bd:6e:1c:43:ac:9b:36:57:97:fb: e0:41:d0:c0:ed:15:8f:2a:1a:47:33:d8:d0:a9:3e:67:b0:4e: 60:fc:3e:e4:19:97:78:2d:46:e2:6b:5c:67:32:4f:52:b1:12: 6e:89:81:09:03:71:4f:c1:4f:fe:9c:e9:c5:0a:fa:f9:47:5f: 13:df:3a:42:c3:4b:09:f2:94:ce:79:c1:d0:2b:3b:93:52:dd: 86:cc:1c:62:68:cd:83:24:f5:3d:26:d8:b8:b2:fa:e2:c1:ff: 84:00:8c:51:f6:b2:0b:d9:52:9e:d2:50:7c:43:e6:35:aa:34: 5e:a7:f5:48:0f:2d:b3:1e:fe:09:36:af:8b:7f:ff:6a:48:3a: c1:ad:70:9e:a9:8d:22:18:c2:76:ee:6b:8a:1e:dc:dc:2d:44: 0f:a6:2d:e5:4b:c2:d5:be:3e:c5:e3:32:5a:bb:44:cb:aa:d5: 7d:2c:fa:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjYwNzIyMjEyMjM0WhcNMjYwNzI5MjEyMjM0WjAYMRYwFAYD VQQDEw02YTYxMzQ5YS1lNjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJjXvWG/mcabBNr9NA0N2legRuscCxCXdjY2akOmHTA6uVA621MtvQ1N/Qf7 WUZqDb0JXdqHkfZJJf+FiMdBgRFbxJp6afAQ0bkk2NtSrBxFGlwa+HFnLFm8j/mA UxixAAgh3w8PiT0n1UC3C3vLVhfVtJB7JN4XGvVpqFkBLHeaow1NmXmVTB6ICCmy 8iFPNJrQqAZkndM50rSxKWCK/Rsby3icG9hRVLO0USwGmU/Bie7MIN0HlCT3ReEb jj6IUI+75CYX6sIJ4TqwkZCZn3zcycCynHg4YZBcFs4zwzcfu1bBTk3tNRk3Iggn a8pxEELOMV9vb5Csd+wK/zApWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGIC04Fz Sgo17eCCGuPZ617S7RAkMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYZj6RchQZII49p3F2TsOyl77g/Hg0a2Um+9juQhsPYnGfdGrYVRPlPgo7bWo BtzmrlIDPGh57igoYbJcnBuUmsXbhG0vBLT1P+g05w2aS2G9bhxDrJs2V5f74EHQ wO0VjyoaRzPY0Kk+Z7BOYPw+5BmXeC1G4mtcZzJPUrESbomBCQNxT8FP/pzpxQr6 +UdfE986QsNLCfKUznnB0Cs7k1LdhswcYmjNgyT1PSbYuLL64sH/hACMUfayC9lS ntJQfEPmNao0Xqf1SA8tsx7+CTavi3//akg6wa1wnqmNIhjCdu5rih7c3C1ED6Yt 5UvC1b4+xeMyWrtEy6rVfSz6Bw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:01:37 2026 by rpki-client