$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: gyncu3EIJKA4jzqRGBcwp3PlFFuFMwMPalKs+fX35d0= Subject key identifier: 21:DC:DE:11:46:86:2F:A8:C3:73:73:C8:7A:B4:6C:8C:3D:53:B0:11 Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0F32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0F28 Signing time: Mon 20 Jul 2026 17:46:33 +0000 Manifest this update: Mon 20 Jul 2026 17:46:32 +0000 Manifest next update: Mon 27 Jul 2026 17:46:32 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: zS23YSXRLNYneFUte4u6YaoOUL7cRFDuj+HcWe2OYCY=) 2: 350711FA881211EE9710F928C4F9AE02.roa (hash: /Sl1+zcuYzALlR5FExQ8VOIo7ICRp9RWUJXD4AKkevs=) 3: C2213CFC2CC311F1A8A01C5D8F833773.roa (hash: tkrVJ/cVpoiHk0cmXy2YYFkJoXN9OgcqITOcYSO8FI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 17:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3890 (0xf32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Jul 20 17:46:32 2026 GMT Not After : Jul 27 17:46:32 2026 GMT Subject: CN=6a5e5ef9-b510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:af:e6:3b:35:3f:0a:40:21:d0:79:12:d8: e0:a8:f9:f7:89:22:27:fd:16:2c:be:1a:fc:e2:db: 7a:45:b1:74:11:e3:c7:2c:03:a0:ed:42:b4:e6:75: 0d:4d:fc:c3:41:e5:1d:76:29:56:50:00:9c:48:80: 47:c1:e4:69:5b:3d:a5:b1:9e:8b:96:2a:74:33:f8: ac:90:5e:2d:de:51:e6:b6:76:8b:1b:58:f6:38:d7: fe:20:6a:e4:6a:ef:71:f8:6c:12:c9:d5:bd:c6:f6: ee:9e:d6:b4:ee:2c:0a:29:a5:28:f3:d2:99:3c:85: 25:d2:64:8f:fd:da:94:29:2c:76:a3:df:47:99:25: 0a:1e:8c:ea:cd:a2:b5:12:ba:26:e6:4e:81:b4:7c: 9f:4f:bc:8f:bb:49:d5:e3:17:23:15:13:dc:72:cd: ad:99:e2:64:16:7e:e2:ad:d9:94:1e:ce:d3:df:c6: 89:8b:0b:80:4b:dd:9e:b8:16:1e:b5:22:31:59:ff: 28:ea:f6:8d:a3:56:10:a8:ef:a2:57:ad:a6:69:aa: 36:f9:44:f2:65:59:0d:65:6a:d8:66:f0:f5:4b:f2: 8e:16:91:3b:55:9f:be:0a:aa:49:7f:21:4a:e9:94: 40:ce:af:6d:07:d5:4a:72:c2:5a:2d:e9:e1:ae:8d: d8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:DC:DE:11:46:86:2F:A8:C3:73:73:C8:7A:B4:6C:8C:3D:53:B0:11 X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:6d:a3:73:ab:79:09:8a:8e:a5:38:73:0e:61:0e:3c:5e:e4: 47:10:b6:00:80:51:d3:ad:af:c1:51:25:52:08:40:4c:fc:cf: ee:ad:90:ac:29:b0:78:b7:2c:0d:44:32:50:8c:7e:4b:f5:db: 2d:f1:5f:3b:1f:f3:70:04:1c:d7:90:22:e9:6b:8d:74:18:1c: 94:08:f5:f0:c6:f1:5d:6d:a6:8c:50:69:19:6c:2e:0c:3d:14: a2:ef:36:61:74:92:ac:85:08:08:b5:c3:5a:d9:73:e1:68:2e: 19:73:8d:e9:05:17:38:db:48:bb:2d:f6:1c:63:9f:6f:e0:86: 84:b7:57:40:a6:60:c3:a9:08:2e:9b:25:16:38:0e:c2:19:65: 45:5e:85:79:f3:f8:32:df:0b:8f:d9:ca:61:44:25:0c:fb:3f: 32:16:3e:a7:82:d4:d7:93:67:d6:77:1d:66:b1:20:fb:da:a3: 9a:2b:d7:e8:d6:a4:ac:db:cb:41:49:cb:91:47:bd:a9:76:f5: 4d:a0:60:71:0f:75:28:91:04:27:45:6f:d7:e2:7f:5e:e5:1b: d0:b0:2e:fe:74:d7:cd:60:b7:f0:97:6e:69:b0:61:d6:ba:3d: c2:30:1f:aa:6c:bd:d2:4c:d0:24:eb:3d:34:c3:6e:88:40:e6: b1:7e:b3:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjYwNzIwMTc0NjMyWhcNMjYwNzI3MTc0NjMyWjAYMRYwFAYD VQQDEw02YTVlNWVmOS1iNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOWv5js1PwpAIdB5EtjgqPn3iSIn/RYsvhr84tt6RbF0EePHLAOg7UK05nUN TfzDQeUddilWUACcSIBHweRpWz2lsZ6Llip0M/iskF4t3lHmtnaLG1j2ONf+IGrk au9x+GwSydW9xvbunta07iwKKaUo89KZPIUl0mSP/dqUKSx2o99HmSUKHozqzaK1 Erom5k6BtHyfT7yPu0nV4xcjFRPccs2tmeJkFn7irdmUHs7T38aJiwuAS92euBYe tSIxWf8o6vaNo1YQqO+iV62maao2+UTyZVkNZWrYZvD1S/KOFpE7VZ++CqpJfyFK 6ZRAzq9tB9VKcsJaLenhro3YcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCHc3hFG hi+ow3NzyHq0bIw9U7ARMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArm2jc6t5CYqOpThzDmEOPF7kRxC2AIBR062vwVElUghATPzP7q2QrCmweLcs DUQyUIx+S/XbLfFfOx/zcAQc15Ai6WuNdBgclAj18MbxXW2mjFBpGWwuDD0Uou82 YXSSrIUICLXDWtlz4WguGXON6QUXONtIuy32HGOfb+CGhLdXQKZgw6kILpslFjgO whllRV6FefP4Mt8Lj9nKYUQlDPs/MhY+p4LU15Nn1ncdZrEg+9qjmivX6NakrNvL QUnLkUe9qXb1TaBgcQ91KJEEJ0Vv1+J/XuUb0LAu/nTXzWC38JduabBh1ro9wjAf qmy90kzQJOs9NMNuiEDmsX6zEQ== -----END CERTIFICATE-----Generated at Wed Jul 22 00:45:06 2026 by rpki-client