$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: ZlnbDf2CuUKxw3SuEGokXmSsAA+yBjToWhidSefYAWM= Subject key identifier: 4E:C2:2B:07:6F:5B:21:27:8B:38:5B:D6:41:5F:D8:A8:E0:C8:17:4E Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0B05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0B02 Signing time: Wed 22 Jul 2026 19:42:51 +0000 Manifest this update: Wed 22 Jul 2026 19:42:50 +0000 Manifest next update: Wed 29 Jul 2026 19:42:50 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: YHGFniI6r6powAx7gxpQj/veWmYJ/1dWGZDrPjK24uo=) 2: 2F05099CEC5611F094F5171C4A6F56BC.roa (hash: h3ulFk49Rm6PN3v20dTyyirREDU7f9uOVa0xWMwIDh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2821 (0xb05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Jul 22 19:42:50 2026 GMT Not After : Jul 29 19:42:50 2026 GMT Subject: CN=6a611d3b-1648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:ab:b9:e1:44:90:f7:7f:b1:88:91:22:52: ac:bb:5f:0c:85:80:c9:39:a3:27:4f:8b:7c:5d:e2: 3c:14:53:0b:86:11:43:3e:89:61:d1:b5:d6:b7:37: 11:f6:3c:92:29:cd:e8:4e:16:fe:4a:8d:2d:54:40: c6:a6:45:1c:75:fe:0b:37:11:11:8b:a7:c0:fb:21: 3b:fc:aa:c3:84:4f:8f:97:fc:22:b2:cc:f8:ac:cd: 34:f3:30:d8:89:c3:99:ee:bd:3e:10:bf:67:78:78: 70:96:08:b5:b6:b3:92:d3:4c:2e:d6:30:7c:29:94: 10:fc:39:31:0b:25:ce:36:72:ce:9d:8e:59:50:9a: 71:07:bf:2e:13:e6:15:95:0e:88:65:86:b4:ed:11: b4:cc:c0:c1:b0:91:7c:aa:92:5b:97:3c:48:f0:64: ca:8e:f6:4b:d6:4c:16:4f:5e:54:42:4d:f6:16:97: 7c:4b:ba:91:ba:fb:b0:9b:44:a7:a6:9c:b7:df:b5: b7:56:67:03:db:ec:fa:1a:14:4f:04:ea:60:0b:54: e5:b1:32:94:fb:fb:08:33:1b:c1:4f:4b:b7:45:d4: 5d:ed:b3:d4:d6:81:07:fa:a3:d5:51:f5:41:b0:9f: a5:46:7a:f6:38:5c:de:d0:96:28:4c:ab:c7:e0:7c: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C2:2B:07:6F:5B:21:27:8B:38:5B:D6:41:5F:D8:A8:E0:C8:17:4E X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a3:b6:0a:ef:3b:6b:23:55:8e:39:da:3f:76:26:c3:be:2c: 6c:47:2b:fe:ed:0e:f4:59:d0:69:fe:25:d5:8a:18:de:2c:2c: 79:de:f8:0a:8b:89:c8:98:73:23:d4:1e:a4:b6:67:44:a2:9f: 4f:5f:0f:15:6c:79:76:9e:39:11:d0:b8:3e:97:cf:af:a5:ca: 6c:28:0e:72:47:e6:49:e9:e6:2f:27:63:fa:a0:f3:9b:c7:1f: 2a:83:28:3b:0e:1e:fc:ac:9e:7c:03:3e:57:1f:8b:5e:65:1c: 4a:0e:bc:0b:3a:09:cb:b5:05:c0:96:50:48:4d:9c:03:89:d5: d6:9b:b3:dd:22:af:c9:ba:35:84:a1:7c:a0:a7:7c:29:72:bc: da:20:e3:e8:3b:a2:cf:b4:40:f5:5b:81:dc:8f:66:f3:66:79: 3a:68:a1:aa:9e:e5:01:e3:d3:9d:0c:e4:fb:b3:79:6b:24:8f: eb:97:64:9c:57:e9:f9:dd:6c:24:86:29:e6:56:44:22:f0:89: d6:d7:6f:47:e4:7f:f3:04:fb:1f:b8:2f:13:db:25:ab:e6:06: 8e:8b:7f:3a:de:35:c0:0b:9e:98:68:52:bc:2a:ec:15:a7:83: 6d:56:87:f4:e5:87:ca:e9:f2:09:6e:15:e4:f7:08:60:94:94: 60:f2:4c:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjYwNzIyMTk0MjUwWhcNMjYwNzI5MTk0MjUwWjAYMRYwFAYD VQQDEw02YTYxMWQzYi0xNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7WrueFEkPd/sYiRIlKsu18MhYDJOaMnT4t8XeI8FFMLhhFDPolh0bXWtzcR 9jySKc3oThb+So0tVEDGpkUcdf4LNxERi6fA+yE7/KrDhE+Pl/wissz4rM008zDY icOZ7r0+EL9neHhwlgi1trOS00wu1jB8KZQQ/DkxCyXONnLOnY5ZUJpxB78uE+YV lQ6IZYa07RG0zMDBsJF8qpJblzxI8GTKjvZL1kwWT15UQk32Fpd8S7qRuvuwm0Sn ppy337W3VmcD2+z6GhRPBOpgC1TlsTKU+/sIMxvBT0u3RdRd7bPU1oEH+qPVUfVB sJ+lRnr2OFze0JYoTKvH4HzuUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7CKwdv WyEnizhb1kFf2KjgyBdOMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASKO2Cu87ayNVjjnaP3Ymw74sbEcr/u0O9FnQaf4l1YoY3iwsed74CouJyJhz I9QepLZnRKKfT18PFWx5dp45EdC4PpfPr6XKbCgOckfmSenmLydj+qDzm8cfKoMo Ow4e/KyefAM+Vx+LXmUcSg68CzoJy7UFwJZQSE2cA4nV1puz3SKvybo1hKF8oKd8 KXK82iDj6Duiz7RA9VuB3I9m82Z5Omihqp7lAePTnQzk+7N5aySP65dknFfp+d1s JIYp5lZEIvCJ1tdvR+R/8wT7H7gvE9slq+YGjot/Ot41wAuemGhSvCrsFaeDbVaH 9OWHyunyCW4V5PcIYJSUYPJMNA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:30:57 2026 by rpki-client