$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft File: sE3Hq0gjM4kMKKdlddit5kKcP8s.mft (raw, json) Hash identifier: RPppGQLONQO04+lWuyqG+O/vb8RpEZUJ7+oOT+ZR2/8= Subject key identifier: CE:02:1D:88:AB:63:47:39:29:7A:CC:40:F2:3F:13:4C:8F:51:FF:DD Authority key identifier: B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB Certificate issuer: /CN=A91FFBAF/serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft Manifest number: 82 Signing time: Thu 23 Jul 2026 09:31:39 +0000 Manifest this update: Thu 23 Jul 2026 09:31:39 +0000 Manifest next update: Thu 30 Jul 2026 09:31:39 +0000 Files and hashes: 1: sE3Hq0gjM4kMKKdlddit5kKcP8s.crl (hash: mSvmd2Le9Z9SFTaFLa5XKskzPbbC28iXe62COG5IJGQ=) 2: F29881C82D2811F19656BE60B9833773.roa (hash: j49xZ/pNE+6bd9Li6teEM+llvM2db9Ji2DZmBv8OAyg=) 3: 961A909E2D2811F181F3AA41B9833773.roa (hash: dYzmlzKtC22HQCzv3r68DO5+DJnISkpljTZWCe4Wn+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFBAF, serialNumber=B04DC7AB482333890C28A76575D8ADE6429C3FCB Validity Not Before: Jul 23 09:31:39 2026 GMT Not After : Jul 30 09:31:39 2026 GMT Subject: CN=6a61df7b-5db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:0d:aa:ee:aa:ab:da:6c:8f:a4:d1:60:b8: c0:3a:0e:49:ec:24:d9:2c:de:8a:d1:be:4a:cb:1a: 2e:c0:8d:1b:2c:95:c4:f5:57:90:dd:51:e3:a5:06: a6:f7:8b:50:d9:d0:fb:7c:e1:2a:95:08:74:33:15: f9:fc:a0:dc:95:43:6b:80:da:4e:98:be:62:2e:47: 3f:0d:78:d1:fa:c7:a0:ec:73:3e:8e:9a:57:27:92: 31:a6:5b:12:51:f0:9c:d5:33:ea:4e:31:0f:b2:85: 1c:af:2c:5b:74:d9:7f:97:b1:5f:7e:88:e8:1f:72: 91:ad:33:f9:e2:8c:d5:e8:81:05:89:b8:57:fa:b5: 57:09:2b:0c:74:be:56:07:7b:28:f7:4d:38:c1:cb: d8:b3:6a:e9:52:a9:39:6f:ad:54:b4:60:80:68:8a: 4c:e6:d0:43:9c:b2:b0:64:0b:56:8f:fa:c2:7d:99: da:26:57:5e:9a:36:4d:a3:cf:82:30:a2:c1:6d:65: 6d:f9:55:1d:86:c5:45:cf:69:f8:a5:99:b0:5f:b6: 1d:4a:fb:e2:c3:1e:d6:8e:13:e6:84:2f:c9:1c:fa: 6b:a6:f9:8c:0e:ee:9f:19:bb:59:b3:f8:bb:3b:1a: f1:97:d7:79:f0:dd:a4:22:68:17:2a:72:ba:83:e8: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:02:1D:88:AB:63:47:39:29:7A:CC:40:F2:3F:13:4C:8F:51:FF:DD X509v3 Authority Key Identifier: keyid:B0:4D:C7:AB:48:23:33:89:0C:28:A7:65:75:D8:AD:E6:42:9C:3F:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sE3Hq0gjM4kMKKdlddit5kKcP8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFBAF/682B39A6C37C11F09DC5A532C4F9AE02/sE3Hq0gjM4kMKKdlddit5kKcP8s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e8:ac:a6:bc:99:e5:ab:68:84:fa:d4:69:aa:20:14:92:af: 56:de:3f:13:8c:84:1c:72:0b:e3:1c:07:42:91:ba:4e:77:d0: 3a:aa:4c:5c:f8:b0:87:6a:6a:6c:45:3f:e9:b1:d0:d4:f4:dc: 4c:8f:5b:48:f8:66:b0:e9:19:b1:64:f9:a5:7d:fd:4d:b8:2a: 79:3a:4d:3c:05:bf:73:ee:9a:16:44:84:71:93:e2:63:25:c5: 72:77:b9:94:5e:23:2c:17:d2:14:0c:66:43:59:87:9f:81:4d: e9:f2:c5:ca:e3:2f:cd:2a:d1:58:fc:1a:6b:4a:3c:19:06:3a: 78:be:ef:b7:1c:9c:ec:5b:ba:4d:d4:c2:7b:37:55:de:ee:ed: 9d:b8:90:8c:5e:8d:52:45:ae:b9:14:aa:d9:78:49:7f:31:5d: 54:98:c3:4e:96:31:fa:d9:29:f3:96:e3:db:97:29:32:06:94: 13:7b:ee:0a:96:df:ba:c2:1f:a4:28:99:81:04:5c:43:02:6e: 96:ca:c6:ec:39:1a:16:c3:19:12:25:0b:18:38:0f:42:4a:c6: fc:8a:e8:51:09:f5:7c:39:fb:08:cf:99:a0:be:4b:2f:63:8b: c3:d2:51:cc:3b:bb:77:c1:87:99:10:6d:75:d9:fa:93:05:c0: 4b:bc:52:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZCQUYxMTAvBgNVBAUTKEIwNERDN0FCNDgyMzMzODkwQzI4QTc2NTc1RDhBREU2 NDI5QzNGQ0IwHhcNMjYwNzIzMDkzMTM5WhcNMjYwNzMwMDkzMTM5WjAYMRYwFAYD VQQDEw02YTYxZGY3Yi01ZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTENqu6qq9psj6TRYLjAOg5J7CTZLN6K0b5KyxouwI0bLJXE9VeQ3VHjpQam 94tQ2dD7fOEqlQh0MxX5/KDclUNrgNpOmL5iLkc/DXjR+seg7HM+jppXJ5IxplsS UfCc1TPqTjEPsoUcryxbdNl/l7FffojoH3KRrTP54ozV6IEFibhX+rVXCSsMdL5W B3so9004wcvYs2rpUqk5b61UtGCAaIpM5tBDnLKwZAtWj/rCfZnaJldemjZNo8+C MKLBbWVt+VUdhsVFz2n4pZmwX7YdSvviwx7WjhPmhC/JHPprpvmMDu6fGbtZs/i7 Oxrxl9d58N2kImgXKnK6g+g4uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4CHYir Y0c5KXrMQPI/E0yPUf/dMB8GA1UdIwQYMBaAFLBNx6tIIzOJDCinZXXYreZCnD/L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkJBRi82ODJCMzlBNkMz N0MxMUYwOURDNUE1MzJDNEY5QUUwMi9zRTNIcTBnak00a01LS2RsZGRpdDVrS2NQ OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NFM0hxMGdqTTRrTUtLZGxkZGl0NWtLY1A4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkJBRi82ODJCMzlBNkMzN0MxMUYwOURDNUE1MzJDNEY5QUUwMi9zRTNIcTBnak00 a01LS2RsZGRpdDVrS2NQOHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjOispryZ5atohPrUaaogFJKvVt4/E4yEHHIL4xwHQpG6TnfQOqpMXPiwh2pq bEU/6bHQ1PTcTI9bSPhmsOkZsWT5pX39TbgqeTpNPAW/c+6aFkSEcZPiYyXFcne5 lF4jLBfSFAxmQ1mHn4FN6fLFyuMvzSrRWPwaa0o8GQY6eL7vtxyc7Fu6TdTCezdV 3u7tnbiQjF6NUkWuuRSq2XhJfzFdVJjDTpYx+tkp85bj25cpMgaUE3vuCpbfusIf pCiZgQRcQwJulsrG7DkaFsMZEiULGDgPQkrG/IroUQn1fDn7CM+ZoL5LL2OLw9JR zDu7d8GHmRBtddn6kwXAS7xSDg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:09:49 2026 by rpki-client