$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: SOmbfMajsL81TAe/LsGS4x1GJrVPl6p3acuDEJZGICo= Subject key identifier: BC:6C:1A:F2:66:E4:67:E5:4A:B9:15:09:B1:18:D4:A0:BC:C7:92:AD Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 021C Signing time: Tue 21 Jul 2026 04:06:15 +0000 Manifest this update: Tue 21 Jul 2026 04:06:14 +0000 Manifest next update: Tue 28 Jul 2026 04:06:14 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: irKL3r5z+rNkybz85URiQGQP2ZV4vIO5Atf4tcyGraU=) 2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw=) 3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 58pWdHGWJ/ggfr/u1qdz2+yvUUIbs/1dEuDaPVOcwn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Jul 21 04:06:14 2026 GMT Not After : Jul 28 04:06:14 2026 GMT Subject: CN=6a5ef036-4088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:60:50:dc:a5:1c:b0:c0:24:6c:71:30:1e:4c: d1:ee:f2:38:b6:e5:94:8a:12:39:78:4b:85:da:18: e6:e3:d8:6c:a1:ce:81:ff:0e:99:26:00:c1:ed:1b: ee:5f:cd:c8:6f:6d:02:c4:98:2a:fd:b2:00:c3:b8: df:7c:b4:e4:f0:bb:c4:f1:91:ff:6f:d0:5a:a3:87: 9c:4b:48:f6:05:f8:5d:e0:47:32:5c:8b:84:91:6a: 13:e4:07:a9:f7:80:1c:49:bc:91:b0:11:79:a7:99: 65:85:94:d0:80:c7:11:45:f3:26:92:ec:70:f6:d2: 5d:06:f7:db:1a:10:6c:e5:9c:db:d1:4d:a8:f9:a8: 0c:41:7e:91:e3:fe:30:ea:81:a6:34:37:ae:89:38: 33:f0:25:89:08:fa:7c:29:16:cc:67:92:d3:1c:40: 70:db:70:18:29:da:4d:b8:56:fd:07:dd:0a:ab:07: 8d:ef:a9:ab:b4:be:63:85:b4:85:23:ec:b0:ac:ef: 64:db:ed:ca:92:76:1c:b4:b2:1a:db:02:44:3e:8c: af:83:4c:a1:d1:ce:27:66:38:ba:5d:61:2c:fd:81: 62:e9:0c:74:69:93:b5:a0:42:63:95:ee:00:61:84: d6:b2:57:fc:a6:e9:0d:b0:c3:0f:09:aa:f2:59:b8: 9f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:6C:1A:F2:66:E4:67:E5:4A:B9:15:09:B1:18:D4:A0:BC:C7:92:AD X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:74:b8:c3:58:5d:cc:6d:b4:88:a0:a3:e4:b6:d8:ed:0c:78: 09:39:3f:a7:70:6e:27:23:89:54:f0:b0:31:d8:ef:f3:f3:49: f6:89:52:fa:e4:6e:c4:a3:90:36:f3:ca:46:f1:91:c1:a5:cb: 22:9e:28:77:4e:59:11:2e:a1:a9:d3:9d:94:1d:b0:cc:81:89: 83:f2:33:b7:1f:aa:81:d8:a9:7c:6a:c4:31:69:3d:5a:da:25: fb:10:b5:3f:2c:dc:55:46:eb:73:53:5b:da:52:f9:61:29:7d: e4:a8:eb:6c:1e:36:2a:25:b3:f1:4d:b5:61:a5:63:20:62:7e: 74:7a:ac:fc:81:22:d2:85:1e:51:05:f3:e2:de:5a:25:7e:dc: 1e:9a:f0:8b:dc:13:56:a8:af:2d:34:ee:6a:14:ca:1a:f1:40: 22:e4:49:29:88:1a:23:0b:6d:f8:6b:44:3e:50:bb:3c:ee:e8: 74:7b:07:41:58:ed:60:14:52:1e:63:98:a9:cf:2b:e7:dd:f8: 7f:73:2d:67:1a:07:03:91:7b:a0:11:65:19:f3:ea:38:62:a3: 71:6c:35:34:39:f1:fc:28:f9:7a:b0:40:f5:df:8f:34:b3:4a: df:ad:09:18:02:d5:30:2d:10:d0:10:e3:7b:39:ea:1e:d9:f5: b7:87:14:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjYwNzIxMDQwNjE0WhcNMjYwNzI4MDQwNjE0WjAYMRYwFAYD VQQDEw02YTVlZjAzNi00MDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGBQ3KUcsMAkbHEwHkzR7vI4tuWUihI5eEuF2hjm49hsoc6B/w6ZJgDB7Rvu X83Ib20CxJgq/bIAw7jffLTk8LvE8ZH/b9Bao4ecS0j2Bfhd4EcyXIuEkWoT5Aep 94AcSbyRsBF5p5llhZTQgMcRRfMmkuxw9tJdBvfbGhBs5Zzb0U2o+agMQX6R4/4w 6oGmNDeuiTgz8CWJCPp8KRbMZ5LTHEBw23AYKdpNuFb9B90KqweN76mrtL5jhbSF I+ywrO9k2+3KknYctLIa2wJEPoyvg0yh0c4nZji6XWEs/YFi6Qx0aZO1oEJjle4A YYTWslf8pukNsMMPCaryWbifoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxsGvJm 5GflSrkVCbEY1KC8x5KtMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVXS4w1hdzG20iKCj5LbY7Qx4CTk/p3BuJyOJVPCwMdjv8/NJ9olS+uRuxKOQ NvPKRvGRwaXLIp4od05ZES6hqdOdlB2wzIGJg/Iztx+qgdipfGrEMWk9Wtol+xC1 PyzcVUbrc1Nb2lL5YSl95KjrbB42KiWz8U21YaVjIGJ+dHqs/IEi0oUeUQXz4t5a JX7cHprwi9wTVqivLTTuahTKGvFAIuRJKYgaIwtt+GtEPlC7PO7odHsHQVjtYBRS HmOYqc8r5934f3MtZxoHA5F7oBFlGfPqOGKjcWw1NDnx/Cj5erBA9d+PNLNK360J GALVMC0Q0BDjeznqHtn1t4cUoA== -----END CERTIFICATE-----Generated at Tue Jul 21 09:55:13 2026 by rpki-client