$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft File: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft (raw, json) Hash identifier: inuolPlassX2Utr62Y7uu2U4+hLHPpdJ06Vs6lGeAM0= Subject key identifier: F8:64:5A:01:C4:C2:E9:3D:85:ED:86:91:36:1D:3B:9A:35:B7:02:A4 Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 Certificate issuer: /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft Manifest number: 0101 Signing time: Tue 21 Jul 2026 08:02:00 +0000 Manifest this update: Tue 21 Jul 2026 08:02:00 +0000 Manifest next update: Tue 28 Jul 2026 08:02:00 +0000 Files and hashes: 1: 38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl (hash: SmuFFez9sgTLtCiMV3zuC8UUfpNg0U4PwElyYdJ/zT4=) 2: 692243D640AA11F096F2746AC4F9AE02.roa (hash: hrId0XK3QT59rfCxOyEsibtNRieUfn4KutYpjg3t3lE=) 3: 572A655C6E8E11F0BC00AD68C4F9AE02.roa (hash: FmJuf298hS3Cq5FkDNYaTuFTUFK1cdgTe8R72xFRVHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99 Validity Not Before: Jul 21 08:02:00 2026 GMT Not After : Jul 28 08:02:00 2026 GMT Subject: CN=6a5f2778-99c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:61:03:e2:5d:92:52:2a:97:67:05:19:48:09: 57:e8:b1:db:78:2b:48:e5:3c:fb:02:e5:e1:10:65: 33:2a:19:5a:b5:dd:2a:a1:b5:8a:93:95:07:26:34: c7:e5:6c:0d:7b:6f:d8:64:85:79:09:59:09:5d:56: a4:71:12:26:ca:71:a8:b7:2a:0e:a5:3c:6d:e3:37: d5:92:12:24:5b:c3:46:44:92:50:88:2a:11:d3:74: 8b:b5:23:a6:c4:d0:b2:40:3c:c6:4b:b5:cd:1a:72: 6f:ef:7b:9c:66:d8:9e:b6:cc:ed:45:f0:de:ec:2c: ad:d3:b4:13:34:cc:af:a2:12:60:21:a8:17:ca:44: 0b:c7:88:85:ca:d1:11:15:2a:ac:57:45:c8:c5:26: 1f:fa:77:c3:b0:6a:c0:1e:17:0c:a2:d7:d4:a3:20: 65:4c:ca:3c:2a:c7:ff:27:3e:2a:7d:02:3b:4a:3a: cf:8a:7a:18:ce:41:88:b7:46:7e:fe:0e:5d:89:d1: 45:c2:04:44:06:04:79:f6:6c:7c:e7:c1:73:55:e2: 67:31:d4:4b:70:d1:9a:db:e6:e7:29:fe:e1:aa:4f: ac:03:85:5a:0e:ca:1a:c4:83:db:48:4d:93:71:d0: 3d:7c:22:56:d3:2b:4a:54:79:77:75:4a:51:06:50: fd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:64:5A:01:C4:C2:E9:3D:85:ED:86:91:36:1D:3B:9A:35:B7:02:A4 X509v3 Authority Key Identifier: keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fe:da:02:e1:b2:96:da:2a:a0:f5:bf:3e:4d:29:4d:87:3e: 89:ca:4d:23:12:f3:00:1f:44:c3:98:41:48:c7:9e:56:68:a1: e1:1e:e5:a5:06:ab:5a:7a:90:f5:38:92:68:d7:a4:ae:98:15: 4e:d0:7b:bb:1c:e1:e6:9e:67:0c:e6:8a:2c:6c:c4:3c:18:8f: ce:10:70:1f:b1:12:74:67:69:d6:21:ea:54:08:23:b2:8f:f2: fd:ef:0d:f4:fc:70:57:8b:ff:c8:94:ce:22:14:20:b8:23:f6: 31:45:5b:9c:58:21:d3:5f:36:17:9d:f3:2d:2c:5d:53:21:20: 0b:8b:bc:62:41:4b:99:f3:b0:89:65:24:8b:fb:a8:06:4e:5f: 1f:f6:8d:d6:6f:c8:7e:38:70:24:b7:0b:4e:8d:a2:8c:d9:cc: 61:f1:70:20:81:a2:d9:7c:eb:f5:57:a7:73:2d:92:ac:35:b1: 52:43:ab:69:90:6d:1f:4d:86:80:31:81:eb:86:67:44:dc:3e: 9c:d8:3f:01:68:fd:62:e1:3c:43:d9:a6:7d:06:83:5f:56:0c: 6c:de:27:b8:53:75:26:9c:b1:c9:96:e5:ed:f7:f8:ed:a1:6f: a7:5e:9e:39:92:b3:34:26:00:e8:51:9a:b5:f8:c6:37:52:74: 97:6f:93:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE2RkYxMTAvBgNVBAUTKERGQ0E4RkRBQTVGRUY5NDhFMEVDRjZGOUM3MDM2MzlC NTY1MzlEOTkwHhcNMjYwNzIxMDgwMjAwWhcNMjYwNzI4MDgwMjAwWjAYMRYwFAYD VQQDEw02YTVmMjc3OC05OWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApGED4l2SUiqXZwUZSAlX6LHbeCtI5Tz7AuXhEGUzKhlatd0qobWKk5UHJjTH 5WwNe2/YZIV5CVkJXVakcRImynGotyoOpTxt4zfVkhIkW8NGRJJQiCoR03SLtSOm xNCyQDzGS7XNGnJv73ucZtietsztRfDe7Cyt07QTNMyvohJgIagXykQLx4iFytER FSqsV0XIxSYf+nfDsGrAHhcMotfUoyBlTMo8Ksf/Jz4qfQI7SjrPinoYzkGIt0Z+ /g5didFFwgREBgR59mx858FzVeJnMdRLcNGa2+bnKf7hqk+sA4VaDsoaxIPbSE2T cdA9fCJW0ytKVHl3dUpRBlD94wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPhkWgHE wuk9he2GkTYdO5o1twKkMB8GA1UdIwQYMBaAFN/Kj9ql/vlI4Oz2+ccDY5tWU52Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTZGRi8yREE1NTkxMjE0 MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1Vamc3UGI1eHdOam0xWlRu WmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM4cVAycVgtLVVqZzdQYjV4d05qbTFaVG5aay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTZGRi8yREE1NTkxMjE0MTYxMUYwQTg1MjMyMTlDNEY5QUUwMi8zOHFQMnFYLS1V amc3UGI1eHdOam0xWlRuWmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADf7aAuGyltoqoPW/Pk0pTYc+icpNIxLzAB9Ew5hBSMeeVmih4R7lpQarWnqQ 9TiSaNekrpgVTtB7uxzh5p5nDOaKLGzEPBiPzhBwH7ESdGdp1iHqVAgjso/y/e8N 9PxwV4v/yJTOIhQguCP2MUVbnFgh0182F53zLSxdUyEgC4u8YkFLmfOwiWUki/uo Bk5fH/aN1m/IfjhwJLcLTo2ijNnMYfFwIIGi2Xzr9Vency2SrDWxUkOraZBtH02G gDGB64ZnRNw+nNg/AWj9YuE8Q9mmfQaDX1YMbN4nuFN1JpyxyZbl7ff47aFvp16e OZKzNCYA6FGatfjGN1J0l2+TOQ== -----END CERTIFICATE-----Generated at Tue Jul 21 23:13:46 2026 by rpki-client