$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: p20OBlRzX6rDvJIo/gDwY5pb3Cr9rres4AawDgxWwL8= Subject key identifier: 5E:E0:93:B2:55:EC:B0:A6:EF:0B:14:CD:37:BD:78:20:9B:09:49:14 Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: A4 Signing time: Fri 17 Jul 2026 08:26:53 +0000 Manifest this update: Fri 17 Jul 2026 08:26:53 +0000 Manifest next update: Fri 24 Jul 2026 08:26:53 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: wGS4gGL4WFULoCRKRUv84Fq7KGGAIAXPjHfGMNn/GN8=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Jul 17 08:26:53 2026 GMT Not After : Jul 24 08:26:53 2026 GMT Subject: CN=6a59e74d-dea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c9:81:df:ac:32:c9:20:05:06:71:02:77:63: 8a:47:76:f4:38:3e:25:fd:5e:c1:c8:e1:0b:41:17: 3b:f2:60:00:81:05:d6:6e:9f:b5:4c:4e:56:ad:1b: f8:0e:d3:c0:e9:d6:62:c4:5f:c2:91:03:5e:6e:1b: 54:ba:d7:89:36:ff:9f:4c:cc:a2:71:19:fc:63:80: ca:40:2d:fa:fc:00:53:17:19:99:f8:d3:3a:fb:37: 29:07:38:82:b6:bc:a8:54:13:42:a1:46:c3:53:18: 6d:c9:34:17:ba:f6:a5:bd:5d:74:d2:d4:6c:8b:d3: 6b:68:b2:fb:30:47:5d:d5:89:b2:8b:3a:57:79:f8: 4d:7d:de:17:0a:8f:26:93:b8:c2:52:f0:af:b6:e9: 36:2d:0a:1f:39:2a:64:cb:e3:a0:1a:38:e7:c3:30: da:9c:1f:1c:05:bb:6a:ae:f4:be:fb:bd:45:2a:5c: 3f:3e:10:c5:71:fc:15:d3:e1:f8:36:e8:5d:bd:17: 07:90:01:a2:df:64:f0:d5:d1:61:1e:60:87:11:9d: ca:bf:fd:f1:9e:ea:05:a3:52:bd:e0:74:5c:c5:c5: 4d:47:c3:a1:9b:54:7f:a9:6c:67:e2:43:c0:58:d3: 6c:82:d1:1d:ac:37:cb:16:b8:ba:ef:86:c3:29:02: da:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E0:93:B2:55:EC:B0:A6:EF:0B:14:CD:37:BD:78:20:9B:09:49:14 X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:a7:89:35:1d:49:39:ad:7a:3e:e0:11:f7:0e:a4:f8:98:88: 3c:b8:ad:d3:97:03:58:b2:7a:b8:8b:b7:c6:d8:59:95:ca:14: 31:97:79:6e:63:ff:ba:ae:02:cf:e1:6e:bd:d3:17:04:58:a9: 34:16:86:37:14:db:3e:33:80:e6:f3:ea:71:6b:b0:6a:4c:d0: 23:73:33:7d:84:b3:cc:eb:23:89:b4:7d:bc:e7:36:e6:cd:ae: 0a:13:3b:b1:14:06:8b:97:72:11:02:3b:af:6f:80:b4:2e:50: 59:e5:68:84:e8:9c:66:d6:ee:fd:58:fa:88:c2:b4:94:d7:d8: cf:2b:99:3e:71:73:41:2c:c1:05:06:08:27:9c:6d:7c:47:e9: 80:dd:0d:f1:11:a1:6c:5a:37:62:09:e8:76:b6:25:9a:09:b7: 94:d9:28:93:95:b6:54:21:cc:98:e7:c5:c5:84:df:54:c2:da: f3:db:8f:17:a3:af:a1:7c:35:68:88:67:30:5c:b4:30:c1:f2: 0d:2e:37:9a:9d:b1:f0:f7:71:3a:b6:28:27:71:ba:d7:aa:3c: 38:4f:b9:3e:b8:b0:73:5b:ed:cc:01:d4:2d:9d:53:2e:9a:05: 24:30:24:80:d7:a4:ef:d2:57:d3:8b:1c:68:96:79:64:20:5a: 30:98:62:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQ3RUMxMTAvBgNVBAUTKDA4MTJBMDk2NjJGMEIzRTM0RjJCNUE1MUMzM0U4RTky NzAzRTQzNjkwHhcNMjYwNzE3MDgyNjUzWhcNMjYwNzI0MDgyNjUzWjAYMRYwFAYD VQQDEw02YTU5ZTc0ZC1kZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8mB36wyySAFBnECd2OKR3b0OD4l/V7ByOELQRc78mAAgQXWbp+1TE5WrRv4 DtPA6dZixF/CkQNebhtUuteJNv+fTMyicRn8Y4DKQC36/ABTFxmZ+NM6+zcpBziC tryoVBNCoUbDUxhtyTQXuvalvV100tRsi9NraLL7MEdd1YmyizpXefhNfd4XCo8m k7jCUvCvtuk2LQofOSpky+OgGjjnwzDanB8cBbtqrvS++71FKlw/PhDFcfwV0+H4 NuhdvRcHkAGi32Tw1dFhHmCHEZ3Kv/3xnuoFo1K94HRcxcVNR8Ohm1R/qWxn4kPA WNNsgtEdrDfLFri674bDKQLaewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF7gk7JV 7LCm7wsUzTe9eCCbCUkUMB8GA1UdIwQYMBaAFAgSoJZi8LPjTytaUcM+jpJwPkNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDdFQy8yNTYzNTdDODg3 REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3MtTlBLMXBSd3o2T2tuQS1R MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDdFQy8yNTYzNTdDODg3REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi9DQktnbG1Md3Mt TlBLMXBSd3o2T2tuQS1RMmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdqeJNR1JOa16PuAR9w6k+JiIPLit05cDWLJ6uIu3xthZlcoUMZd5bmP/uq4C z+FuvdMXBFipNBaGNxTbPjOA5vPqcWuwakzQI3MzfYSzzOsjibR9vOc25s2uChM7 sRQGi5dyEQI7r2+AtC5QWeVohOicZtbu/Vj6iMK0lNfYzyuZPnFzQSzBBQYIJ5xt fEfpgN0N8RGhbFo3YgnodrYlmgm3lNkok5W2VCHMmOfFxYTfVMLa89uPF6OvoXw1 aIhnMFy0MMHyDS43mp2x8PdxOrYoJ3G616o8OE+5Priwc1vtzAHULZ1TLpoFJDAk gNek79JX04scaJZ5ZCBaMJhieA== -----END CERTIFICATE-----Generated at Sat Jul 18 03:28:13 2026 by rpki-client