$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft File: CFDUhlPa5QGZunr6XjP5gKNfk-U.mft (raw, json) Hash identifier: epic8kL/fv/HEF95wDgAt2mMOAl/+rVomsNE0N8tuio= Subject key identifier: B5:68:72:4A:60:96:9E:24:21:2A:73:6E:C4:0B:D0:60:B4:7C:41:1D Authority key identifier: 08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5 Certificate issuer: /CN=A91390D1/serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft Manifest number: 2C Signing time: Fri 17 Jul 2026 10:01:01 +0000 Manifest this update: Fri 17 Jul 2026 10:01:01 +0000 Manifest next update: Fri 24 Jul 2026 10:01:01 +0000 Files and hashes: 1: CFDUhlPa5QGZunr6XjP5gKNfk-U.crl (hash: cNo4wYdBZTVLA+FqPbkIbhHT1M0DrGkrdO1lWc4TuGI=) 2: 309048B83E1211F1A9349102AE833773.roa (hash: sqKxThroamkDhc6JSRBhISx43pCPlzadkHUPyjm96LY=) 3: 2FF9F3D63E1211F1A9349102AE833773.roa (hash: VWpcu8O6MRinpVbPmabr8oFyo8vRo6lsrBwyQBIngak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D1, serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5 Validity Not Before: Jul 17 10:01:01 2026 GMT Not After : Jul 24 10:01:01 2026 GMT Subject: CN=6a59fd5d-bf84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:1b:d2:dc:8e:19:2e:1a:37:50:65:c3:8f: 73:69:45:59:f3:de:bd:9c:8b:42:d3:35:90:fd:46: 0d:25:68:b5:53:b2:d1:09:b2:9b:f5:6a:54:f9:3c: d9:f4:a7:18:0c:00:af:17:5b:8b:b6:0d:df:e2:dd: e1:5e:4e:12:b3:19:a4:d7:e1:c0:40:ba:67:58:ff: 71:02:7c:57:c0:d5:70:88:1c:0e:d5:31:18:3e:c1: 60:4b:b6:e0:ca:4f:a3:6b:dc:41:b4:ea:57:90:75: b9:b9:6d:db:31:01:cc:b3:d3:ce:86:5e:4a:e4:27: 9a:7d:6e:33:48:4c:09:25:f3:c0:d3:b9:75:69:f6: 33:d8:2b:2f:75:9e:a3:84:1b:8f:1a:f2:4c:6a:21: bf:7c:fa:98:ec:33:9e:10:81:1d:92:b1:59:8b:4e: e6:90:e0:6e:eb:d4:e6:2c:1c:01:67:21:e3:8a:48: 06:e5:1e:12:63:1a:d2:76:22:88:31:6e:7c:7d:45: 90:72:15:96:5a:6a:5d:f5:b6:ae:27:e5:61:40:7a: f8:ff:4d:35:3e:6c:ef:8c:73:0f:98:68:34:be:0a: 15:9a:de:20:b0:86:d0:db:1d:51:1f:fb:2d:9c:0e: e2:47:11:60:02:00:ab:dd:e6:d8:f5:9b:d8:8e:12: 7e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:68:72:4A:60:96:9E:24:21:2A:73:6E:C4:0B:D0:60:B4:7C:41:1D X509v3 Authority Key Identifier: keyid:08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:b7:f3:ae:07:41:09:cf:63:03:38:f6:20:b4:d1:93:9b:dc: 0f:02:7a:e1:cb:c1:b2:25:67:1e:83:f9:65:50:dc:0f:ba:86: b8:7a:de:2e:91:11:ad:c7:87:3d:9d:10:3b:ea:ae:ef:df:50: 1b:d1:a2:da:72:71:26:bd:9a:46:c0:7a:ac:15:71:18:3c:3f: a2:98:83:05:1c:82:bc:97:02:69:6f:76:4d:05:ba:c6:82:b9: d6:42:65:09:bb:49:1f:f6:cb:c8:bb:b2:e1:c4:6d:79:ba:e9: f4:d5:e2:d3:48:a4:b3:cd:7d:a5:17:ef:57:25:94:8e:ab:ae: 28:32:9e:df:18:aa:9b:f6:e3:d5:0e:1f:8a:09:c5:52:2e:01: 23:2f:28:3f:42:9d:d4:9a:dd:96:94:15:4a:5f:00:ba:5d:68: e8:39:1a:a3:c8:8f:8e:65:f1:ce:c5:6c:0b:a7:10:52:68:28: be:23:14:99:59:60:94:66:99:a6:21:86:dc:ea:a7:19:96:73: 95:df:ff:3d:56:51:0d:34:e0:b4:40:15:89:7c:b0:db:ef:f8: df:7e:c3:b0:20:b9:fd:df:52:cc:2e:4a:a0:95:63:a8:64:7d: 55:62:c7:f0:e1:ec:6b:ea:4c:97:ed:28:24:44:fa:e2:b7:5e: 1a:6a:6a:e7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTBEMTExMC8GA1UEBRMoMDg1MEQ0ODY1M0RBRTUwMTk5QkE3QUZBNUUzM0Y5ODBB MzVGOTNFNTAeFw0yNjA3MTcxMDAxMDFaFw0yNjA3MjQxMDAxMDFaMBgxFjAUBgNV BAMTDTZhNTlmZDVkLWJmODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1BRvS3I4ZLho3UGXDj3NpRVnz3r2ci0LTNZD9Rg0laLVTstEJspv1alT5PNn0 pxgMAK8XW4u2Dd/i3eFeThKzGaTX4cBAumdY/3ECfFfA1XCIHA7VMRg+wWBLtuDK T6Nr3EG06leQdbm5bdsxAcyz086GXkrkJ5p9bjNITAkl88DTuXVp9jPYKy91nqOE G48a8kxqIb98+pjsM54QgR2SsVmLTuaQ4G7r1OYsHAFnIeOKSAblHhJjGtJ2Iogx bnx9RZByFZZaal31tq4n5WFAevj/TTU+bO+Mcw+YaDS+ChWa3iCwhtDbHVEf+y2c DuJHEWACAKvd5tj1m9iOEn6dAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtWhySmCW niQhKnNuxAvQYLR8QR0wHwYDVR0jBBgwFoAUCFDUhlPa5QGZunr6XjP5gKNfk+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5MEQxL0ZGQTQzRjE0M0Uw NDExRjFBRDYzREY4Q0E2ODMzNzczL0NGRFVobFBhNVFHWnVucjZYalA1Z0tOZmst VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0ZEVWhsUGE1UUdadW5yNlhqUDVnS05may1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 MEQxL0ZGQTQzRjE0M0UwNDExRjFBRDYzREY4Q0E2ODMzNzczL0NGRFVobFBhNVFH WnVucjZYalA1Z0tOZmstVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAyt/OuB0EJz2MDOPYgtNGTm9wPAnrhy8GyJWceg/llUNwPuoa4et4ukRGtx4c9 nRA76q7v31Ab0aLacnEmvZpGwHqsFXEYPD+imIMFHIK8lwJpb3ZNBbrGgrnWQmUJ u0kf9svIu7LhxG15uun01eLTSKSzzX2lF+9XJZSOq64oMp7fGKqb9uPVDh+KCcVS LgEjLyg/Qp3Umt2WlBVKXwC6XWjoORqjyI+OZfHOxWwLpxBSaCi+IxSZWWCUZpmm IYbc6qcZlnOV3/89VlENNOC0QBWJfLDb7/jffsOwILn931LMLkqglWOoZH1VYsfw 4exr6kyX7SgkRPrit14aamrn -----END CERTIFICATE-----Generated at Sat Jul 18 04:05:15 2026 by rpki-client