$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft File: rHzRY2nXDaZnWZ2jaOICQknLAvw.mft (raw, json) Hash identifier: 0QDfv3Ww46MGx40koRRzgucs4ZZyZllmAy4kQfMUpnY= Subject key identifier: 5C:85:BE:53:6A:7B:08:11:84:75:E2:67:99:E3:4C:FA:5E:97:BC:AC Authority key identifier: AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC Certificate issuer: /CN=A91FB4F7/serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft Manifest number: A2 Signing time: Thu 23 Jul 2026 09:04:56 +0000 Manifest this update: Thu 23 Jul 2026 09:04:56 +0000 Manifest next update: Thu 30 Jul 2026 09:04:56 +0000 Files and hashes: 1: rHzRY2nXDaZnWZ2jaOICQknLAvw.crl (hash: VBvsJpzfVUR2jHmvd9YRLNVZwHqoXHDFGHakE4QQSqU=) 2: 53AEC77E8C7511F0BEEC137FC4F9AE02.roa (hash: TEkM5L9gYDSbXl7l7QCjyJ+tRJyP8a0ZBB6nUCwEyKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB4F7, serialNumber=AC7CD16369D70DA667599DA368E2024249CB02FC Validity Not Before: Jul 23 09:04:56 2026 GMT Not After : Jul 30 09:04:56 2026 GMT Subject: CN=6a61d938-081f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:93:ed:60:ab:e0:04:36:ee:52:38:dd:f6: 20:d9:68:d6:a6:df:a8:b9:50:25:1f:b1:bd:7c:d7: a7:bb:f2:d0:d1:c7:5f:13:e7:54:71:7c:40:fe:06: ca:b8:e0:8f:9f:60:bb:ea:82:cf:4e:e3:02:e2:3c: 7f:77:ee:8d:22:eb:26:99:93:76:73:7c:89:f4:c7: 74:9d:c6:d0:ce:02:d5:f5:1b:56:62:ac:a7:bd:93: 24:35:e3:ca:11:de:d1:eb:3e:6b:67:2e:4f:ce:41: 01:ea:36:09:2c:1f:f9:eb:5b:89:fb:17:32:ce:e9: aa:12:e8:2d:70:6f:96:a8:04:09:dd:bd:26:73:3d: da:74:cd:ad:d4:01:61:f0:cd:24:11:17:19:bf:86: 92:cb:53:65:43:90:e1:a8:23:b0:5e:b9:6e:bc:f6: 77:95:2a:0b:63:6f:87:c1:1f:81:04:c9:25:63:bd: db:f5:30:61:04:50:cf:7e:b9:eb:80:ea:d5:61:d0: 2b:c1:0e:42:70:07:73:27:c7:aa:32:77:9b:60:1e: ee:2f:46:65:ba:ce:1a:b5:60:25:fc:13:04:2c:e8: 49:3b:03:81:36:23:76:f7:44:49:f9:9c:59:54:80: 96:cf:75:43:4f:e0:d2:89:c7:a2:db:9c:62:8b:07: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:85:BE:53:6A:7B:08:11:84:75:E2:67:99:E3:4C:FA:5E:97:BC:AC X509v3 Authority Key Identifier: keyid:AC:7C:D1:63:69:D7:0D:A6:67:59:9D:A3:68:E2:02:42:49:CB:02:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rHzRY2nXDaZnWZ2jaOICQknLAvw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB4F7/12BAB8968C6F11F0BC03A828C4F9AE02/rHzRY2nXDaZnWZ2jaOICQknLAvw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:2e:01:f4:09:5d:5d:ce:14:8d:cd:ba:ea:d1:bd:cc:18:56: 0a:1e:70:99:91:48:15:7e:9a:3a:93:05:55:ac:b4:82:95:df: 83:9e:38:fb:78:eb:46:15:6e:6d:bd:f6:86:fe:ae:f3:72:a0: ae:1e:99:63:34:fa:c3:60:31:a6:7e:9d:f2:db:2d:e8:9b:ba: 26:00:ef:ca:c3:ff:e7:db:30:8c:de:f7:42:28:55:ff:1e:74: 13:ba:d6:00:03:ed:b5:f2:82:df:31:30:5b:64:9b:d6:fe:fc: 84:35:52:9b:35:69:98:68:9b:b5:18:4b:86:d9:f7:16:19:a3: d4:45:31:ea:ad:eb:31:f3:8b:5a:4c:df:ec:5f:5d:de:7b:9c: f3:f6:17:24:9e:0b:f0:83:60:42:aa:13:a8:6e:ee:2a:62:97: db:16:5b:86:81:77:2b:96:79:7d:f5:08:d4:67:22:c8:98:08: de:1f:97:62:7d:97:10:e9:62:b1:7b:ee:49:a1:5a:a1:f1:d5: 6e:4d:5b:52:a9:00:e1:6c:1a:e0:22:ef:f8:df:4f:65:b4:3f: 28:a8:b7:80:80:b0:e7:72:9c:83:c7:e3:91:03:68:e0:48:8b: 7e:44:cf:b5:ca:4c:90:4b:4f:1a:2e:92:a2:48:1f:ee:45:21: e8:c4:0a:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI0RjcxMTAvBgNVBAUTKEFDN0NEMTYzNjlENzBEQTY2NzU5OURBMzY4RTIwMjQy NDlDQjAyRkMwHhcNMjYwNzIzMDkwNDU2WhcNMjYwNzMwMDkwNDU2WjAYMRYwFAYD VQQDEw02YTYxZDkzOC0wODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtd2T7WCr4AQ27lI43fYg2WjWpt+ouVAlH7G9fNenu/LQ0cdfE+dUcXxA/gbK uOCPn2C76oLPTuMC4jx/d+6NIusmmZN2c3yJ9Md0ncbQzgLV9RtWYqynvZMkNePK Ed7R6z5rZy5PzkEB6jYJLB/561uJ+xcyzumqEugtcG+WqAQJ3b0mcz3adM2t1AFh 8M0kERcZv4aSy1NlQ5DhqCOwXrluvPZ3lSoLY2+HwR+BBMklY73b9TBhBFDPfrnr gOrVYdArwQ5CcAdzJ8eqMnebYB7uL0Zlus4atWAl/BMELOhJOwOBNiN290RJ+ZxZ VICWz3VDT+DSicei25xiiwfXXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyFvlNq ewgRhHXiZ5njTPpel7ysMB8GA1UdIwQYMBaAFKx80WNp1w2mZ1mdo2jiAkJJywL8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjRGNy8xMkJBQjg5NjhD NkYxMUYwQkMwM0E4MjhDNEY5QUUwMi9ySHpSWTJuWERhWm5XWjJqYU9JQ1FrbkxB dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JIelJZMm5YRGFabldaMmphT0lDUWtuTEF2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjRGNy8xMkJBQjg5NjhDNkYxMUYwQkMwM0E4MjhDNEY5QUUwMi9ySHpSWTJuWERh Wm5XWjJqYU9JQ1FrbkxBdncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyi4B9AldXc4Ujc266tG9zBhWCh5wmZFIFX6aOpMFVay0gpXfg544+3jrRhVu bb32hv6u83Kgrh6ZYzT6w2Axpn6d8tst6Ju6JgDvysP/59swjN73QihV/x50E7rW AAPttfKC3zEwW2Sb1v78hDVSmzVpmGibtRhLhtn3Fhmj1EUx6q3rMfOLWkzf7F9d 3nuc8/YXJJ4L8INgQqoTqG7uKmKX2xZbhoF3K5Z5ffUI1GciyJgI3h+XYn2XEOli sXvuSaFaofHVbk1bUqkA4Wwa4CLv+N9PZbQ/KKi3gICw53Kcg8fjkQNo4EiLfkTP tcpMkEtPGi6Sokgf7kUh6MQK4Q== -----END CERTIFICATE-----Generated at Fri Jul 24 00:02:23 2026 by rpki-client