$ rpki-client -vvf rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft File: _0KzQ2BElUaW_-CLDuGXXGxbjW0.mft (raw, json) Hash identifier: XZVmbb6rZUSyaqyqSSU1GlCANSkHmdD/UHj6HUUPMww= Subject key identifier: A7:03:C3:1F:E5:EB:27:C4:38:45:1C:A7:1D:1A:E2:5C:C7:42:80:4E Authority key identifier: FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D Certificate issuer: /CN=A91864A7/serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Certificate serial: 028F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft Manifest number: 027C Signing time: Tue 21 Jul 2026 03:10:55 +0000 Manifest this update: Tue 21 Jul 2026 03:10:54 +0000 Manifest next update: Tue 28 Jul 2026 03:10:54 +0000 Files and hashes: 1: _0KzQ2BElUaW_-CLDuGXXGxbjW0.crl (hash: GEYWGLfMaOIbOUDUylou+rn/qM/2WmYXy39fpeNv+w4=) 2: B34D1A26F6C811EEBC4BE00BC4F9AE02.roa (hash: VvVjYiDQeO0/Kuu5dNnxQmNtzBeDEDxanFTxX0efrwo=) 3: D62511F6C41D11F08D2E621EC4F9AE02.roa (hash: HAQPkYTVEHvUCCvstD3cbGBNAUP4hbxEWfa91gL9q2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 655 (0x28f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91864A7, serialNumber=FF42B3436044954696FFE08B0EE1975C6C5B8D6D Validity Not Before: Jul 21 03:10:54 2026 GMT Not After : Jul 28 03:10:54 2026 GMT Subject: CN=6a5ee33e-d1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:2f:f8:78:e0:5d:7e:94:22:d6:1b:e5:ef: 38:0c:9a:c6:36:c1:c7:a0:31:26:f9:cf:ae:7c:2b: 0e:34:6d:b5:08:f8:3b:39:da:bc:38:ac:10:a6:87: e6:f9:13:8f:80:3a:8a:43:4a:03:91:65:ed:6c:b3: 53:d0:6d:f6:27:d9:9e:07:e1:ae:63:37:51:d6:22: d0:ae:7a:bb:a1:d7:2c:ca:31:d9:1e:cf:fa:b9:78: e4:56:a1:bf:b6:1b:59:84:88:c7:51:6e:0c:73:e0: e1:88:0d:a5:35:7f:a9:2d:74:56:fb:58:78:cc:39: be:3a:f2:16:eb:79:f5:1b:05:b6:41:7f:89:9d:ac: 18:d6:04:dc:89:be:45:77:ab:0b:3f:2d:15:5c:33: 4a:2a:ae:73:ab:f8:ec:79:37:70:5e:f1:99:e8:91: d3:c7:e2:30:48:7f:cd:67:fb:f0:00:51:14:26:46: 80:40:3f:62:74:0c:5a:62:1e:13:e6:f9:db:61:aa: a7:95:e4:3c:94:ea:6c:09:7e:55:3d:bd:9a:aa:0d: 29:25:0b:53:c3:27:e7:46:64:5a:a6:a2:32:16:59: 67:d6:7e:d9:fd:9c:82:71:a2:b1:4a:bd:86:5d:f5: b3:ec:bd:48:8c:dc:44:c5:b8:84:03:bc:f5:e3:7b: 12:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:03:C3:1F:E5:EB:27:C4:38:45:1C:A7:1D:1A:E2:5C:C7:42:80:4E X509v3 Authority Key Identifier: keyid:FF:42:B3:43:60:44:95:46:96:FF:E0:8B:0E:E1:97:5C:6C:5B:8D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0KzQ2BElUaW_-CLDuGXXGxbjW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91864A7/C8055FD6C92511ED80936149C4F9AE02/_0KzQ2BElUaW_-CLDuGXXGxbjW0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3c:aa:db:55:f9:5d:e6:42:8d:37:96:c5:7c:1e:fe:b0:46: c7:70:3b:37:b7:44:87:9b:02:b5:98:c8:68:f0:d3:74:05:87: 18:2e:a4:82:0f:1b:df:a0:64:e6:af:a6:9c:5a:a3:6a:56:ee: d5:e7:fa:b0:1d:e2:d3:cf:96:c6:d0:ec:55:b2:8c:84:a9:3a: 97:a4:0c:e6:18:e9:5c:3f:78:be:db:2c:75:c9:55:cd:38:da: 6e:5a:3a:86:b7:8c:6b:9d:f7:ec:fd:23:de:0b:bf:d3:39:bc: d7:fa:64:5e:90:ea:73:ac:6a:f1:b2:29:37:5b:8c:45:4c:a8: 52:98:b4:e9:d9:28:47:33:1e:c8:77:28:0b:85:72:ef:68:36: 40:22:4a:a8:06:7d:11:13:5f:f1:2f:e7:12:4e:d2:1c:c1:c1: d6:74:2f:fb:9f:fb:f2:fe:18:a6:71:a2:ba:e7:da:e9:4c:4d: 74:48:49:be:01:87:a8:3f:f7:a0:63:00:29:f8:48:37:ef:ae: 15:2b:ce:e0:41:75:9f:d8:77:9f:b6:60:7b:36:48:f6:b3:1a: 38:1b:0a:87:30:cb:a5:cb:aa:11:70:1b:9b:d0:26:bc:af:03: 39:91:8a:f2:00:5b:76:ef:9c:b3:73:c3:7d:92:8f:f3:79:f0: 7a:a2:e9:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY0QTcxMTAvBgNVBAUTKEZGNDJCMzQzNjA0NDk1NDY5NkZGRTA4QjBFRTE5NzVD NkM1QjhENkQwHhcNMjYwNzIxMDMxMDU0WhcNMjYwNzI4MDMxMDU0WjAYMRYwFAYD VQQDEw02YTVlZTMzZS1kMWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8Qv+HjgXX6UItYb5e84DJrGNsHHoDEm+c+ufCsONG21CPg7Odq8OKwQpofm +ROPgDqKQ0oDkWXtbLNT0G32J9meB+GuYzdR1iLQrnq7odcsyjHZHs/6uXjkVqG/ thtZhIjHUW4Mc+DhiA2lNX+pLXRW+1h4zDm+OvIW63n1GwW2QX+JnawY1gTcib5F d6sLPy0VXDNKKq5zq/jseTdwXvGZ6JHTx+IwSH/NZ/vwAFEUJkaAQD9idAxaYh4T 5vnbYaqnleQ8lOpsCX5VPb2aqg0pJQtTwyfnRmRapqIyFlln1n7Z/ZyCcaKxSr2G XfWz7L1IjNxExbiEA7z143sS3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKcDwx/l 6yfEOEUcpx0a4lzHQoBOMB8GA1UdIwQYMBaAFP9Cs0NgRJVGlv/giw7hl1xsW41t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjRBNy9DODA1NUZENkM5 MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxVYVdfLUNMRHVHWFhHeGJq VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wS3pRMkJFbFVhV18tQ0xEdUdYWEd4YmpXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjRBNy9DODA1NUZENkM5MjUxMUVEODA5MzYxNDlDNEY5QUUwMi9fMEt6UTJCRWxV YVdfLUNMRHVHWFhHeGJqVzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaDyq21X5XeZCjTeWxXwe/rBGx3A7N7dEh5sCtZjIaPDTdAWHGC6kgg8b36Bk 5q+mnFqjalbu1ef6sB3i08+WxtDsVbKMhKk6l6QM5hjpXD94vtssdclVzTjablo6 hreMa5337P0j3gu/0zm81/pkXpDqc6xq8bIpN1uMRUyoUpi06dkoRzMeyHcoC4Vy 72g2QCJKqAZ9ERNf8S/nEk7SHMHB1nQv+5/78v4YpnGiuufa6UxNdEhJvgGHqD/3 oGMAKfhIN++uFSvO4EF1n9h3n7ZgezZI9rMaOBsKhzDLpcuqEXAbm9AmvK8DOZGK 8gBbdu+cs3PDfZKP83nweqLpjA== -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:35 2026 by rpki-client