$ rpki-client -vvf rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft File: l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft (raw, json) Hash identifier: P7GU9oLkzMAV+RY/KvxGfN64l7uH48UufvcZsn1va/I= Subject key identifier: 73:9C:62:DC:45:3E:EA:B8:DD:E8:A7:DD:4B:81:76:76:C4:E8:82:E2 Authority key identifier: 97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 Certificate issuer: /CN=A91E39B4/serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft Manifest number: 0C05 Signing time: Mon 20 Jul 2026 19:11:34 +0000 Manifest this update: Mon 20 Jul 2026 19:11:34 +0000 Manifest next update: Mon 27 Jul 2026 19:11:34 +0000 Files and hashes: 1: l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl (hash: ho894T1cqlouhohIlWwEzS7Y8StHUhxwaJ69ZxJAjPQ=) 2: D968823E3DA111EA9A3FD550C4F9AE02.roa (hash: 1gkuDEjoW9bKvN1y3NeSWvvd5mzGWAKNaZO4Fh0ZKKE=) 3: 46F57CF8137B11EBA3B47E37C4F9AE02.roa (hash: BQCqQWX54EbT8FYoBvjLqnc/rF1pO4lGjEy8BVDZOX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 19:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E39B4, serialNumber=97B3DD2AB3C89BC8A2BBC1DB803BCE68EAA5AA12 Validity Not Before: Jul 20 19:11:34 2026 GMT Not After : Jul 27 19:11:34 2026 GMT Subject: CN=6a5e72e6-64c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a3:ea:b8:80:f0:ba:a2:15:ae:ec:fd:1c:08: cf:7f:8f:12:69:21:6f:16:8a:46:13:39:b7:4a:15: 8a:8f:da:93:82:05:94:34:8e:f6:4b:94:ec:e4:5b: 17:43:0f:07:44:e8:29:3a:27:03:da:88:b2:83:82: bd:17:41:61:21:5f:1f:dd:9e:56:87:24:a0:83:db: 06:7a:07:df:78:14:ae:a8:4c:8c:62:b7:34:a0:1c: 21:4e:c0:81:a1:56:18:cd:b4:61:78:40:13:ef:ab: 67:a4:5e:83:61:2c:4d:ce:0a:e2:35:c0:c3:45:4d: c5:93:eb:45:7b:e8:c0:ef:f5:11:55:50:cf:56:bd: 58:c0:a6:be:36:83:c8:bf:d8:3d:c2:87:0b:61:dc: d7:b6:dc:bd:23:8e:f7:8d:c1:d5:f1:0b:84:eb:76: b5:d8:73:f7:5e:7d:0e:fa:2f:bf:a4:61:62:fd:ef: 11:12:58:28:fe:dd:97:6a:36:77:f8:c9:44:d8:ae: de:a7:b4:53:68:b4:1f:9f:65:5e:7b:f9:5c:3d:07: 66:85:cc:b5:79:85:5b:6e:3e:b4:97:bf:b4:c0:c3: a3:5c:95:e0:e1:56:1b:bd:e3:6f:ef:78:51:c4:f7: 4f:30:e9:27:80:cb:32:9c:6a:5f:b8:3d:8b:e7:d5: 44:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9C:62:DC:45:3E:EA:B8:DD:E8:A7:DD:4B:81:76:76:C4:E8:82:E2 X509v3 Authority Key Identifier: keyid:97:B3:DD:2A:B3:C8:9B:C8:A2:BB:C1:DB:80:3B:CE:68:EA:A5:AA:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l7PdKrPIm8iiu8HbgDvOaOqlqhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E39B4/1EE1829E3DA111EA8B67E94FC4F9AE02/l7PdKrPIm8iiu8HbgDvOaOqlqhI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:9c:5a:42:9f:f5:e2:46:aa:e7:77:19:8e:c1:d3:6e:fd:49: 89:3d:8e:be:ac:c8:50:18:68:83:e3:0e:7d:c6:4a:a3:5f:17: bc:fe:2b:9e:f7:6a:c9:5b:f3:58:28:93:bb:2a:75:6d:95:8f: e3:11:e7:7f:9d:cc:77:23:71:5c:53:2f:2e:a8:67:31:f7:85: c8:1d:fb:8d:f8:0c:58:a5:f2:1a:1f:5d:95:55:2a:7f:27:cf: 64:3d:70:25:67:eb:fb:78:a4:5c:bf:92:ba:6e:17:2e:de:1b: aa:67:91:ba:23:57:78:06:19:bd:5f:bf:65:11:76:04:18:08: cf:f2:15:2a:a3:8c:9d:df:84:f8:52:5e:08:e1:cc:dd:79:7e: 76:b6:04:e5:7d:d2:8a:08:1e:c5:53:73:b6:c0:0b:2d:de:49: 39:82:84:69:27:c1:ba:9c:61:c8:5b:14:8d:0b:d7:35:2e:a2: 08:16:42:1a:26:54:08:b9:2d:d4:7b:7a:02:a8:54:6d:2d:09: 7e:b0:8d:e8:99:a2:fd:f4:48:b0:4e:bb:fa:8e:86:56:25:86: 95:98:40:5c:ef:fb:39:56:1c:f0:15:dd:fa:8d:70:d7:77:a6: 62:6b:51:1b:a0:d9:83:6d:b9:f2:90:c2:ab:45:7c:6e:c4:10: 4a:8e:9a:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM5QjQxMTAvBgNVBAUTKDk3QjNERDJBQjNDODlCQzhBMkJCQzFEQjgwM0JDRTY4 RUFBNUFBMTIwHhcNMjYwNzIwMTkxMTM0WhcNMjYwNzI3MTkxMTM0WjAYMRYwFAYD VQQDEw02YTVlNzJlNi02NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0qPquIDwuqIVruz9HAjPf48SaSFvFopGEzm3ShWKj9qTggWUNI72S5Ts5FsX Qw8HROgpOicD2oiyg4K9F0FhIV8f3Z5WhySgg9sGegffeBSuqEyMYrc0oBwhTsCB oVYYzbRheEAT76tnpF6DYSxNzgriNcDDRU3Fk+tFe+jA7/URVVDPVr1YwKa+NoPI v9g9wocLYdzXtty9I473jcHV8QuE63a12HP3Xn0O+i+/pGFi/e8RElgo/t2XajZ3 +MlE2K7ep7RTaLQfn2Vee/lcPQdmhcy1eYVbbj60l7+0wMOjXJXg4VYbveNv73hR xPdPMOkngMsynGpfuD2L59VEyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHOcYtxF Puq43ein3UuBdnbE6ILiMB8GA1UdIwQYMBaAFJez3SqzyJvIorvB24A7zmjqpaoS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzlCNC8xRUUxODI5RTNE QTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04aWl1OEhiZ0R2T2FPcWxx aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w3UGRLclBJbThpaXU4SGJnRHZPYU9xbHFoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzlCNC8xRUUxODI5RTNEQTExMUVBOEI2N0U5NEZDNEY5QUUwMi9sN1BkS3JQSW04 aWl1OEhiZ0R2T2FPcWxxaEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd5xaQp/14kaq53cZjsHTbv1JiT2OvqzIUBhog+MOfcZKo18XvP4rnvdqyVvz WCiTuyp1bZWP4xHnf53MdyNxXFMvLqhnMfeFyB37jfgMWKXyGh9dlVUqfyfPZD1w JWfr+3ikXL+Sum4XLt4bqmeRuiNXeAYZvV+/ZRF2BBgIz/IVKqOMnd+E+FJeCOHM 3Xl+drYE5X3SiggexVNztsALLd5JOYKEaSfBupxhyFsUjQvXNS6iCBZCGiZUCLkt 1Ht6AqhUbS0JfrCN6Jmi/fRIsE67+o6GViWGlZhAXO/7OVYc8BXd+o1w13emYmtR G6DZg2258pDCq0V8bsQQSo6aSQ== -----END CERTIFICATE-----Generated at Tue Jul 21 06:23:42 2026 by rpki-client