$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft File: tii4qSXEXjrDpxvkEUZimYv0s-A.mft (raw, json) Hash identifier: qrxrk5jA5vbGRqYNNDc/82TLMcnz/ljY8833+t1dI3g= Subject key identifier: 9F:C8:B1:27:39:69:D0:48:7A:90:9F:88:DD:6C:48:3F:C1:B3:40:AE Authority key identifier: B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 Certificate issuer: /CN=A91CA8EA/serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Certificate serial: 0576 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft Manifest number: 0564 Signing time: Tue 21 Jul 2026 00:10:41 +0000 Manifest this update: Tue 21 Jul 2026 00:10:40 +0000 Manifest next update: Tue 28 Jul 2026 00:10:40 +0000 Files and hashes: 1: tii4qSXEXjrDpxvkEUZimYv0s-A.crl (hash: I2ZOfPfir6et+ODQvp182zvsxPgveCPCjbAzCuv9Nqk=) 2: 14A07422D45E11EEB37CB639C4F9AE02.roa (hash: PITcK7XRyy+LMYXHuylhY3+Q/YKqPcRjVZDoGb15cIU=) 3: 207388F2D45E11EE8D29793EC4F9AE02.roa (hash: GZLAqFDcKyRRvVvDeTXr2Kcx2FQWYyo5VaaW0SZn3+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1398 (0x576) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA8EA, serialNumber=B628B8A925C45E3AC3A71BE4114662998BF4B3E0 Validity Not Before: Jul 21 00:10:40 2026 GMT Not After : Jul 28 00:10:40 2026 GMT Subject: CN=6a5eb901-4270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e7:91:85:2e:94:0a:a3:99:c0:a8:95:7d:12: c2:ff:98:03:8a:e8:a0:2a:04:21:30:e9:99:ad:7a: e8:f8:30:ea:86:73:36:34:2d:e6:f5:ac:40:5c:21: ba:a5:b6:fc:61:64:9a:56:de:c8:85:db:aa:ca:42: 2d:a6:f8:19:9a:b6:5d:fc:a6:73:8e:33:09:36:7d: 3e:ea:ea:ad:e4:c4:4e:d7:aa:5e:19:24:bf:7b:aa: db:fe:ca:42:be:88:0f:66:2e:77:3d:4f:a9:a1:ee: 03:e7:3d:2b:28:70:e0:91:b7:76:f2:54:dd:92:aa: fa:4e:30:a1:2c:37:31:4a:4a:1d:54:3a:5a:7b:1e: 9d:a0:dd:0e:46:d6:4d:63:2c:e1:a6:1c:c8:ba:7b: fd:f1:ba:9b:20:a3:70:ac:7a:d1:2e:28:4e:b9:50: 04:37:d5:3d:2b:63:d8:16:67:d3:58:84:f1:5e:90: 02:69:df:0e:e3:72:f8:02:e0:5c:ac:3d:df:42:45: f8:44:51:84:bb:97:d7:7d:12:40:2c:55:11:7f:2a: e7:2a:39:4c:49:6e:fd:2b:a3:bb:ad:03:f8:2e:47: 65:14:79:ec:95:5d:f5:1f:6f:62:8a:24:2a:45:c4: f9:4c:ba:c1:4e:3d:3d:0d:95:75:8e:21:85:a4:a1: 8b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C8:B1:27:39:69:D0:48:7A:90:9F:88:DD:6C:48:3F:C1:B3:40:AE X509v3 Authority Key Identifier: keyid:B6:28:B8:A9:25:C4:5E:3A:C3:A7:1B:E4:11:46:62:99:8B:F4:B3:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tii4qSXEXjrDpxvkEUZimYv0s-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA8EA/D8CA13C2404911EC9B6EFE7BC4F9AE02/tii4qSXEXjrDpxvkEUZimYv0s-A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:52:e6:95:bd:dc:2c:62:bd:ce:1c:b6:0c:cf:fb:60:fd:66: a5:80:e5:c2:66:2d:8e:d8:fe:24:72:de:08:1d:8e:56:c7:0e: f1:25:41:26:0c:19:9f:cd:89:2c:bf:1f:70:30:61:c3:a8:d2: 23:86:bd:b4:aa:67:48:e2:a1:de:a0:5f:63:da:b1:90:32:cb: 0c:38:95:f2:1d:04:b8:29:7c:3d:17:29:5a:1a:a9:1a:39:d5: db:93:b3:0a:11:9b:72:47:22:a5:55:80:98:49:b6:bb:a4:10: 4f:19:92:43:6c:30:25:b9:07:94:c1:78:3b:39:66:7d:7d:f3: 6a:96:b9:40:21:47:1f:5b:79:3c:62:75:85:25:db:4a:02:d3: 87:eb:4f:67:7f:ad:0f:52:b2:b5:5c:d8:75:8d:cc:68:22:44: d9:0d:82:b2:60:14:99:dc:96:5b:bb:3e:57:cb:c7:69:a7:38: 68:ec:c9:b2:31:71:78:92:c0:74:48:f3:d3:e7:a7:73:ab:2d: 9b:bd:b7:d3:fa:b8:8a:82:33:87:af:0d:9c:3b:e1:21:7d:9d: d0:c7:fe:ba:2c:94:3d:a3:ad:a2:48:b2:13:b6:3c:e9:ca:1c: 2b:8b:95:5c:89:45:e0:94:39:7b:bd:88:cf:f4:97:62:bc:6b: 92:11:d0:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0E4RUExMTAvBgNVBAUTKEI2MjhCOEE5MjVDNDVFM0FDM0E3MUJFNDExNDY2Mjk5 OEJGNEIzRTAwHhcNMjYwNzIxMDAxMDQwWhcNMjYwNzI4MDAxMDQwWjAYMRYwFAYD VQQDEw02YTVlYjkwMS00MjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOeRhS6UCqOZwKiVfRLC/5gDiuigKgQhMOmZrXro+DDqhnM2NC3m9axAXCG6 pbb8YWSaVt7IhduqykItpvgZmrZd/KZzjjMJNn0+6uqt5MRO16peGSS/e6rb/spC vogPZi53PU+poe4D5z0rKHDgkbd28lTdkqr6TjChLDcxSkodVDpaex6doN0ORtZN YyzhphzIunv98bqbIKNwrHrRLihOuVAEN9U9K2PYFmfTWITxXpACad8O43L4AuBc rD3fQkX4RFGEu5fXfRJALFURfyrnKjlMSW79K6O7rQP4LkdlFHnslV31H29iiiQq RcT5TLrBTj09DZV1jiGFpKGLwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ/IsSc5 adBIepCfiN1sSD/Bs0CuMB8GA1UdIwQYMBaAFLYouKklxF46w6cb5BFGYpmL9LPg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQThFQS9EOENBMTNDMjQw NDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhqckRweHZrRVVaaW1ZdjBz LUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpaTRxU1hFWGpyRHB4dmtFVVppbVl2MHMtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QThFQS9EOENBMTNDMjQwNDkxMUVDOUI2RUZFN0JDNEY5QUUwMi90aWk0cVNYRVhq ckRweHZrRVVaaW1ZdjBzLUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOFLmlb3cLGK9zhy2DM/7YP1mpYDlwmYtjtj+JHLeCB2OVscO8SVBJgwZn82J LL8fcDBhw6jSI4a9tKpnSOKh3qBfY9qxkDLLDDiV8h0EuCl8PRcpWhqpGjnV25Oz ChGbckcipVWAmEm2u6QQTxmSQ2wwJbkHlMF4OzlmfX3zapa5QCFHH1t5PGJ1hSXb SgLTh+tPZ3+tD1KytVzYdY3MaCJE2Q2CsmAUmdyWW7s+V8vHaac4aOzJsjFxeJLA dEjz0+enc6stm7230/q4ioIzh68NnDvhIX2d0Mf+uiyUPaOtokiyE7Y86cocK4uV XIlF4JQ5e72Iz/SXYrxrkhHQ0Q== -----END CERTIFICATE-----Generated at Tue Jul 21 16:43:37 2026 by rpki-client