$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft File: 3af4p0oKdM_262MEKLbJ1w1XvXY.mft (raw, json) Hash identifier: swB0O3Ba6+FK31gogX3BPsC9mAs3N2uat8n9phmFQZ0= Subject key identifier: 26:CC:A6:82:9E:BF:24:E0:79:2A:95:33:49:BE:F5:FE:F9:3D:B8:20 Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0E9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft Manifest number: 0E56 Signing time: Mon 20 Jul 2026 18:02:34 +0000 Manifest this update: Mon 20 Jul 2026 18:02:34 +0000 Manifest next update: Mon 27 Jul 2026 18:02:34 +0000 Files and hashes: 1: 3af4p0oKdM_262MEKLbJ1w1XvXY.crl (hash: 36q/0b7vN3z3rkBSEDTm5uZy9HixNHPzJ5h7hl3AR4E=) 2: CE83F0E6F0E411EAA47C3968C4F9AE02.roa (hash: GS10eEt1MCcAl1eDM0DD66Q/CuCpMh/GfO+nM5nY1Wc=) 3: E69AF38AB11C11EAACC28D2EC4F9AE02.roa (hash: V7vJC1rGtCuOdSFWDJjdd3JhuVIPp/Zsx063dJpSpzo=) 4: CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa (hash: R/iJ4c5PH31y7CSM0LznhAJ3uqMaJ3657UNaVBCq6Pk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 18:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3743 (0xe9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: Jul 20 18:02:34 2026 GMT Not After : Jul 27 18:02:34 2026 GMT Subject: CN=6a5e62ba-9b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:6a:f3:22:68:b4:ae:fe:09:de:f0:1d:10: 0f:25:f9:f2:0a:65:93:24:e8:90:4e:2b:32:56:b2: 07:67:5a:2b:5f:02:25:b4:e3:9f:8e:5c:31:d9:04: cf:f7:1d:96:83:0b:3f:7d:a5:01:9b:51:eb:36:63: 0e:4f:b7:32:80:f2:05:2b:57:a0:b1:48:52:d4:39: 60:ea:d4:81:3a:a3:0a:46:9f:44:58:0f:68:24:d2: 45:88:33:ec:09:61:24:e0:1a:19:29:69:27:fd:66: 20:f1:56:97:a8:d2:d5:97:54:20:e1:99:dd:f9:76: 88:b5:41:a1:49:f2:8d:68:56:d8:b8:56:af:ae:d9: 06:5a:f4:d2:9a:fe:f3:3d:c8:98:06:80:cf:65:9f: 00:2b:93:c5:de:22:ba:dc:9f:bc:e4:13:7f:6c:d1: f4:01:45:61:5b:70:f7:d4:1b:88:a9:2c:8e:3d:e1: 2e:25:4f:e6:f6:48:45:8b:10:76:04:b5:a9:20:5a: 86:0a:22:3b:d1:f0:83:8e:3e:b1:4d:73:ff:58:9a: 6a:d1:c1:c1:75:46:dd:f1:26:89:4b:dd:51:84:1d: 0c:5b:64:e1:f2:b1:c9:de:27:16:31:50:43:e8:4f: 67:4f:e7:0a:8a:5a:85:39:b2:39:27:8f:7f:dc:22: 7a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CC:A6:82:9E:BF:24:E0:79:2A:95:33:49:BE:F5:FE:F9:3D:B8:20 X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:9a:34:83:b2:ed:00:8f:28:86:4f:08:1c:8f:20:c2:e8:56: 0e:a9:f6:87:62:6a:56:9e:80:38:12:b0:f5:26:56:19:ab:72: b1:ec:a0:a6:17:e1:c4:cb:28:57:7a:95:f6:21:80:01:e5:af: 84:fe:42:cf:cc:e3:38:e8:12:da:60:bf:59:94:d2:2a:97:8e: 8e:3d:81:67:e3:ff:5a:30:f9:e9:1d:84:85:bc:37:c1:23:a4: a6:1e:c5:41:5f:c8:1f:f7:1c:aa:55:0d:6d:7b:13:1c:96:17: 2e:52:97:03:b4:79:36:6b:39:b4:04:e7:e6:0b:37:03:e5:aa: 87:44:f7:94:38:fb:0f:00:17:75:62:f9:27:7a:7b:82:f1:41: 16:79:36:3a:96:3d:af:bc:46:df:09:06:b0:ea:d7:d9:44:22: 32:3c:6c:c5:43:b2:d5:55:6c:15:86:b2:0d:b9:55:23:ab:68: 2c:c3:00:dc:42:cf:c9:17:ae:18:72:76:78:89:30:4f:bd:7a: 17:95:88:50:d2:d1:a2:79:4d:7d:c4:a9:34:0e:7c:d0:ad:75: 5a:de:0b:fa:75:bd:b7:d3:ab:9d:e0:e7:10:0d:19:6e:f3:70: 1b:7c:97:83:8f:41:7b:d1:24:f8:bd:64:57:4e:d2:84:7f:37: 93:0d:eb:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDp8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjYwNzIwMTgwMjM0WhcNMjYwNzI3MTgwMjM0WjAYMRYwFAYD VQQDEw02YTVlNjJiYS05YjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX9q8yJotK7+Cd7wHRAPJfnyCmWTJOiQTisyVrIHZ1orXwIltOOfjlwx2QTP 9x2Wgws/faUBm1HrNmMOT7cygPIFK1egsUhS1Dlg6tSBOqMKRp9EWA9oJNJFiDPs CWEk4BoZKWkn/WYg8VaXqNLVl1Qg4Znd+XaItUGhSfKNaFbYuFavrtkGWvTSmv7z PciYBoDPZZ8AK5PF3iK63J+85BN/bNH0AUVhW3D31BuIqSyOPeEuJU/m9khFixB2 BLWpIFqGCiI70fCDjj6xTXP/WJpq0cHBdUbd8SaJS91RhB0MW2Th8rHJ3icWMVBD 6E9nT+cKilqFObI5J49/3CJ6lwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCbMpoKe vyTgeSqVM0m+9f75PbggMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0JDNC8yRDFBNTk1QUQ1MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RN XzI2Mk1FS0xiSjF3MVh2WFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIZo0g7LtAI8ohk8IHI8gwuhWDqn2h2JqVp6AOBKw9SZWGatyseygphfhxMso V3qV9iGAAeWvhP5Cz8zjOOgS2mC/WZTSKpeOjj2BZ+P/WjD56R2Ehbw3wSOkph7F QV/IH/ccqlUNbXsTHJYXLlKXA7R5Nms5tATn5gs3A+Wqh0T3lDj7DwAXdWL5J3p7 gvFBFnk2OpY9r7xG3wkGsOrX2UQiMjxsxUOy1VVsFYayDblVI6toLMMA3ELPyReu GHJ2eIkwT716F5WIUNLRonlNfcSpNA580K11Wt4L+nW9t9OrneDnEA0ZbvNwG3yX g49Be9Ek+L1kV07ShH83kw3rCQ== -----END CERTIFICATE-----Generated at Tue Jul 21 07:00:37 2026 by rpki-client