$ rpki-client -vvf rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft File: G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft (raw, json) Hash identifier: kMkiBtevimWTLvJ9GVCgnNHHwJtVe2Zr5WHHVFyFdAg= Subject key identifier: 55:8E:21:CB:42:F6:A3:5A:C5:E0:BA:A3:91:EC:06:0A:A1:F2:3F:C3 Authority key identifier: 1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E Certificate issuer: /CN=A91340D8/serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Certificate serial: 031D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft Manifest number: 030C Signing time: Tue 21 Jul 2026 02:08:43 +0000 Manifest this update: Tue 21 Jul 2026 02:08:42 +0000 Manifest next update: Tue 28 Jul 2026 02:08:42 +0000 Files and hashes: 1: G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl (hash: 5+czIWSP+YVQMJ92dr9NTcekNIIbQHIve7iJcehpIlo=) 2: BDDB04B633DC11EF82BB2E27C4F9AE02.roa (hash: dkeJym/v87RKiKKUryyLDWvUYJU8ndSZ66o3idoC4+8=) 3: BE608B1833DC11EF82BB2E27C4F9AE02.roa (hash: yGjZ2qr+BhGngGtcisuW8nAIXic6S3m8loWau7p/bRY=) 4: F2257AC0289011ED8AEEB43CC4F9AE02.roa (hash: vLKPklVP43k6OROJ42PijdvI9ys2gzzUNgh6DMpb1V4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 797 (0x31d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91340D8, serialNumber=1B8AE7C74301729D85C31595249C3B48F1B9151E Validity Not Before: Jul 21 02:08:42 2026 GMT Not After : Jul 28 02:08:42 2026 GMT Subject: CN=6a5ed4ab-6ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5b:97:0b:36:8c:1f:3b:d9:7e:7e:a7:33:d5: 82:84:a4:9b:ae:dc:f1:27:5a:51:81:74:b6:29:87: 8b:9e:df:37:34:23:0f:43:ec:df:14:63:fe:6c:14: c8:e5:e0:ab:ee:38:0c:54:bc:44:f4:d5:6f:20:3b: 1c:a8:e1:c5:60:6f:c1:d6:b7:b2:8d:1a:db:25:27: 6f:88:e0:4b:cd:d0:bc:18:90:10:d4:ca:21:7d:da: f4:79:ce:5b:56:d3:f7:5a:98:be:62:c2:d7:7e:8f: 56:70:67:b6:6b:4a:f0:80:0c:ad:ad:4d:36:60:67: ef:da:7e:ea:72:4b:67:6c:7c:d1:0d:bd:2f:8d:e5: 4a:14:f6:38:7e:8f:2d:d9:7e:f7:cd:36:7e:49:08: 95:65:3f:78:fa:d8:b4:a6:7d:a6:cb:93:54:f7:1f: ab:b2:89:93:b0:70:9e:f7:89:6e:30:92:ca:be:98: ca:af:12:51:bb:f9:a0:ca:fb:8d:7c:14:31:69:99: 97:dc:9d:b7:47:11:36:b7:19:f6:00:9e:e0:7f:7b: 4e:30:54:49:aa:f5:c1:83:06:82:c3:81:e7:06:67: eb:61:c0:68:66:9d:2d:c2:f3:fd:8f:73:e4:94:f2: 64:42:d2:c1:90:61:d6:b2:2e:92:05:6e:55:55:cd: 5b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:8E:21:CB:42:F6:A3:5A:C5:E0:BA:A3:91:EC:06:0A:A1:F2:3F:C3 X509v3 Authority Key Identifier: keyid:1B:8A:E7:C7:43:01:72:9D:85:C3:15:95:24:9C:3B:48:F1:B9:15:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4rnx0MBcp2FwxWVJJw7SPG5FR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91340D8/B3DE5CE4288D11EDA9A4EA6FC4F9AE02/G4rnx0MBcp2FwxWVJJw7SPG5FR4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d3:87:2a:d1:99:f6:29:13:c6:d9:0f:c7:1b:40:bf:db:f5: 43:96:2e:3e:9d:04:92:13:9b:fc:99:67:6d:b8:59:ba:65:ad: f9:5e:68:b7:12:99:53:14:64:ac:be:b0:1f:ff:f8:a8:a3:c8: 56:66:2a:63:29:50:30:18:4d:61:ed:84:d6:ca:a5:60:fa:67: e3:14:19:0f:69:a9:ce:7f:94:f2:d5:b1:50:50:61:24:97:ce: 3d:7c:f9:28:74:ea:ca:d6:6f:a5:e0:b2:49:9b:67:ef:c2:33: 67:68:a5:46:6b:00:1c:0f:2d:2b:d6:c1:d5:2d:48:2a:cd:fa: 5a:c2:a6:f6:88:cc:dc:a9:41:18:13:cd:fa:ae:9f:ff:d5:d8: a5:91:7a:1d:70:fe:02:f6:56:66:af:46:6e:79:05:53:32:a6: 2a:5e:72:0a:63:77:e6:11:f2:22:44:5d:d6:ae:3f:81:69:5d: 79:49:35:1f:b0:53:e9:d2:bd:aa:8d:7d:a1:dc:67:91:1d:9b: 95:5c:2d:8d:93:b0:97:29:0b:27:73:39:6f:15:71:1a:3d:2b: 9a:b9:80:e3:9e:2a:3f:25:72:da:1f:bd:d2:01:f2:71:4c:cd: a5:cb:b2:a7:9b:b6:96:0a:78:97:22:60:7a:8b:06:e8:b5:a2: 3c:09:cf:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQwRDgxMTAvBgNVBAUTKDFCOEFFN0M3NDMwMTcyOUQ4NUMzMTU5NTI0OUMzQjQ4 RjFCOTE1MUUwHhcNMjYwNzIxMDIwODQyWhcNMjYwNzI4MDIwODQyWjAYMRYwFAYD VQQDEw02YTVlZDRhYi02YWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VuXCzaMHzvZfn6nM9WChKSbrtzxJ1pRgXS2KYeLnt83NCMPQ+zfFGP+bBTI 5eCr7jgMVLxE9NVvIDscqOHFYG/B1reyjRrbJSdviOBLzdC8GJAQ1Mohfdr0ec5b VtP3Wpi+YsLXfo9WcGe2a0rwgAytrU02YGfv2n7qcktnbHzRDb0vjeVKFPY4fo8t 2X73zTZ+SQiVZT94+ti0pn2my5NU9x+rsomTsHCe94luMJLKvpjKrxJRu/mgyvuN fBQxaZmX3J23RxE2txn2AJ7gf3tOMFRJqvXBgwaCw4HnBmfrYcBoZp0twvP9j3Pk lPJkQtLBkGHWsi6SBW5VVc1blwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFWOIctC 9qNaxeC6o5HsBgqh8j/DMB8GA1UdIwQYMBaAFBuK58dDAXKdhcMVlSScO0jxuRUe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDBEOC9CM0RFNUNFNDI4 OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNwMkZ3eFdWSkp3N1NQRzVG UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0cm54ME1CY3AyRnd4V1ZKSnc3U1BHNUZSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDBEOC9CM0RFNUNFNDI4OEQxMUVEQTlBNEVBNkZDNEY5QUUwMi9HNHJueDBNQmNw MkZ3eFdWSkp3N1NQRzVGUjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADtOHKtGZ9ikTxtkPxxtAv9v1Q5YuPp0EkhOb/JlnbbhZumWt+V5otxKZUxRk rL6wH//4qKPIVmYqYylQMBhNYe2E1sqlYPpn4xQZD2mpzn+U8tWxUFBhJJfOPXz5 KHTqytZvpeCySZtn78IzZ2ilRmsAHA8tK9bB1S1IKs36WsKm9ojM3KlBGBPN+q6f /9XYpZF6HXD+AvZWZq9GbnkFUzKmKl5yCmN35hHyIkRd1q4/gWldeUk1H7BT6dK9 qo19odxnkR2blVwtjZOwlykLJ3M5bxVxGj0rmrmA454qPyVy2h+90gHycUzNpcuy p5u2lgp4lyJgeosG6LWiPAnPPw== -----END CERTIFICATE-----Generated at Wed Jul 22 02:03:27 2026 by rpki-client