$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft File: 4cWfpaa8h2985KRsqq5gYE8FGGY.mft (raw, json) Hash identifier: ZrYZui0btgbhLKZWVn1Uvtc1O2GgDYS+LxCJq3TJNos= Subject key identifier: 3C:1F:F5:27:78:B8:17:36:87:96:D8:9F:8A:89:14:B2:C6:39:91:A9 Authority key identifier: E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 Certificate issuer: /CN=A91FEDE7/serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft Manifest number: 76 Signing time: Thu 23 Jul 2026 09:47:21 +0000 Manifest this update: Thu 23 Jul 2026 09:47:21 +0000 Manifest next update: Thu 30 Jul 2026 09:47:21 +0000 Files and hashes: 1: 4cWfpaa8h2985KRsqq5gYE8FGGY.crl (hash: fccB5MBKZejvfv9KBfK8HSgXdWyZlsRjNkzMC8pK4VA=) 2: 63C2AF74D99E11F0A31734B566D3641D.roa (hash: 63YdLXndxb2ZNy3UKl9Em7+7aoRcbOsCAOFA6tKDt14=) 3: C48E03F21D1A11F1AE90847F103D8C67.roa (hash: vhaf/68N75siwelbtPS2Tu3DEgGqynrrUITnReXj5p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:47:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEDE7, serialNumber=E1C59FA5A6BC876F7CE4A46CAAAE60604F051866 Validity Not Before: Jul 23 09:47:21 2026 GMT Not After : Jul 30 09:47:21 2026 GMT Subject: CN=6a61e329-2dba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:93:44:22:46:a7:df:13:8d:00:7d:18:34: 64:14:92:ca:ed:bb:1e:ff:02:b0:16:29:f7:2a:0f: 7b:4d:51:98:fd:0d:39:b6:97:0c:ba:64:9e:96:c2: 2c:bd:ea:60:69:21:65:59:2c:d0:21:78:38:91:3e: 1d:33:c5:64:d2:7e:12:53:61:6e:91:88:fd:02:52: 0d:8f:a9:17:95:66:15:78:2d:65:6b:07:80:b6:3b: bb:62:f2:c9:18:74:47:c2:c9:1a:28:38:7f:39:6b: 32:14:0d:d9:16:25:5a:6e:09:56:97:98:76:d2:f1: 5a:39:ce:86:45:7e:59:3f:08:4c:94:75:8a:fd:04: ed:ed:58:da:bf:e9:e8:3f:88:c7:42:e2:8b:80:04: d0:6a:0f:4c:79:38:f4:a9:97:57:51:34:32:bb:98: 96:69:20:fc:a6:77:77:da:15:a4:78:ce:3f:67:67: 21:0d:79:7f:05:15:c5:cc:48:d3:7b:db:f6:ac:37: b6:bd:36:8d:5a:25:a5:21:74:cb:39:16:4a:e3:48: b7:4e:4c:5b:37:b5:97:d7:34:f7:49:61:69:3a:a7: 6c:db:77:cf:8f:9d:10:91:73:c6:24:28:c1:a9:28: 08:29:ce:d5:75:70:d9:a5:97:a4:b3:0f:3e:0f:4e: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1F:F5:27:78:B8:17:36:87:96:D8:9F:8A:89:14:B2:C6:39:91:A9 X509v3 Authority Key Identifier: keyid:E1:C5:9F:A5:A6:BC:87:6F:7C:E4:A4:6C:AA:AE:60:60:4F:05:18:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4cWfpaa8h2985KRsqq5gYE8FGGY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEDE7/E7FD3058D99D11F0BBE7839966D3641D/4cWfpaa8h2985KRsqq5gYE8FGGY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:0a:60:cf:b9:d2:84:b4:3b:c5:24:fb:b7:98:b1:9f:c6:9d: 6a:88:12:b7:8c:05:7a:27:eb:bb:c0:79:df:20:3b:62:16:ec: 18:ac:3c:5c:b4:94:23:2f:36:2c:05:8d:bf:67:1c:18:77:a6: fc:68:4d:9a:86:6f:73:c3:d6:76:c3:0a:33:ae:b1:c4:e8:49: 58:f0:f1:0f:14:f2:49:b1:2d:1a:85:b2:58:d6:d2:e5:90:ba: da:a0:08:03:8b:e9:b1:99:39:18:56:35:0f:45:54:62:09:ef: 5a:db:2f:60:b3:83:fc:8a:83:0b:4f:13:8d:2e:9c:e7:5b:5a: b7:b4:76:3e:b1:0d:9e:a7:9c:ec:82:b1:48:26:a4:f7:46:99: e0:ac:f8:8d:5d:06:30:81:4a:07:97:d5:47:8e:d2:a9:55:dc: 46:51:a1:66:e6:c9:21:1d:db:d0:f8:c9:07:08:77:4e:4c:1b: cb:24:c4:ca:0c:78:70:1b:ac:21:22:5a:cc:51:e6:b8:54:e8: eb:96:e0:80:61:e4:ed:ed:64:de:83:0a:d7:f2:e4:ad:b7:44: 39:a3:76:11:26:33:5d:22:9d:37:32:70:b2:ef:ae:c5:1c:7b: bf:ed:b0:8a:cf:dc:cd:2a:fb:25:a1:4d:93:0a:18:44:41:36: f4:84:07:98 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RURFNzExMC8GA1UEBRMoRTFDNTlGQTVBNkJDODc2RjdDRTRBNDZDQUFBRTYwNjA0 RjA1MTg2NjAeFw0yNjA3MjMwOTQ3MjFaFw0yNjA3MzAwOTQ3MjFaMBgxFjAUBgNV BAMTDTZhNjFlMzI5LTJkYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/35NEIkan3xONAH0YNGQUksrtux7/ArAWKfcqD3tNUZj9DTm2lwy6ZJ6Wwiy9 6mBpIWVZLNAheDiRPh0zxWTSfhJTYW6RiP0CUg2PqReVZhV4LWVrB4C2O7ti8skY dEfCyRooOH85azIUDdkWJVpuCVaXmHbS8Vo5zoZFflk/CEyUdYr9BO3tWNq/6eg/ iMdC4ouABNBqD0x5OPSpl1dRNDK7mJZpIPymd3faFaR4zj9nZyENeX8FFcXMSNN7 2/asN7a9No1aJaUhdMs5FkrjSLdOTFs3tZfXNPdJYWk6p2zbd8+PnRCRc8YkKMGp KAgpztV1cNmll6SzDz4PTpwXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPB/1J3i4 FzaHltifiokUssY5kakwHwYDVR0jBBgwFoAU4cWfpaa8h2985KRsqq5gYE8FGGYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFREU3L0U3RkQzMDU4RDk5 RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5ODVLUnNxcTVnWUU4RkdH WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGNXZnBhYThoMjk4NUtSc3FxNWdZRThGR0dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF REU3L0U3RkQzMDU4RDk5RDExRjBCQkU3ODM5OTY2RDM2NDFELzRjV2ZwYWE4aDI5 ODVLUnNxcTVnWUU4RkdHWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBVCmDPudKEtDvFJPu3mLGfxp1qiBK3jAV6J+u7wHnfIDtiFuwYrDxctJQjLzYs BY2/ZxwYd6b8aE2ahm9zw9Z2wwozrrHE6ElY8PEPFPJJsS0ahbJY1tLlkLraoAgD i+mxmTkYVjUPRVRiCe9a2y9gs4P8ioMLTxONLpznW1q3tHY+sQ2ep5zsgrFIJqT3 RpngrPiNXQYwgUoHl9VHjtKpVdxGUaFm5skhHdvQ+MkHCHdOTBvLJMTKDHhwG6wh IlrMUea4VOjrluCAYeTt7WTegwrX8uStt0Q5o3YRJjNdIp03MnCy767FHHu/7bCK z9zNKvsloU2TChhEQTb0hAeY -----END CERTIFICATE-----Generated at Fri Jul 24 08:02:42 2026 by rpki-client