$ rpki-client -vvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft File: PuJvukvjWd6uUAeS6_940ArLdgw.mft (raw, json) Hash identifier: rUiw4EKxqRPDIQtOO2DjlT1yKR1WD1OB5DJMT1NeC+8= Subject key identifier: 87:8D:FD:62:11:CB:7A:AE:45:47:AC:E4:BB:5B:99:2D:D8:19:C8:69 Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C Certificate issuer: /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Certificate serial: 04E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft Manifest number: 04BC Signing time: Wed 05 Aug 2026 00:31:20 +0000 Manifest this update: Wed 05 Aug 2026 00:31:20 +0000 Manifest next update: Wed 12 Aug 2026 00:31:20 +0000 Files and hashes: 1: PuJvukvjWd6uUAeS6_940ArLdgw.crl (hash: CTKYC3C8KMnVuOgSDI+6MlcHr1y4hJtu/mNSF31n3ao=) 2: 0AE155E6833411ECBB74C786C4F9AE02.roa (hash: DF2zCDZzOfwV2Fb/7F4G0pHecJjvgJOAWTH8TiFGmoc=) 3: 09B62A48833411ECBB74C786C4F9AE02.roa (hash: 5CjAVhZ4H7jUaLeVyY5rhBjjQSwZO+qN9rQG5F9axLY=) 4: 0A4D6250833411ECBB74C786C4F9AE02.roa (hash: LGn5w+iTJlicKdWA6qyGgWwj55jd6LVvyCEcKfnAtIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 00:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1248 (0x4e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C Validity Not Before: Aug 5 00:31:20 2026 GMT Not After : Aug 12 00:31:20 2026 GMT Subject: CN=6a728458-ad2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cd:00:ad:75:96:d0:73:f9:c8:b5:dd:2e:2e: 6e:7a:2c:bb:1b:73:4e:1d:3e:92:8c:e4:c6:dc:6c: 06:2e:74:5e:7a:ce:5e:3c:4c:fd:e3:46:e7:e9:89: f3:68:25:f8:8d:fa:79:57:f0:59:f5:01:1e:ce:b6: f5:eb:98:ad:85:ff:54:ef:98:b3:02:fd:b9:a5:f1: c8:69:28:bc:c4:03:47:27:60:98:59:09:de:2f:56: 32:0c:e3:87:7d:2c:81:60:2e:1c:9c:25:01:cb:c5: f4:6c:2f:01:84:48:32:40:95:44:9c:e8:4d:42:b8: 96:23:79:05:cd:0b:78:68:54:51:9b:d5:c6:19:b5: b0:05:48:0f:6e:e0:65:3a:0f:d1:f5:dd:35:7d:be: 4b:b1:46:f6:2f:67:70:b8:ef:1d:e2:fe:00:68:a2: ad:08:74:5e:9d:23:5e:6d:10:60:b3:2f:b3:9c:0f: 04:5c:5f:b4:88:74:17:22:70:d1:48:0c:74:20:bf: a7:cb:97:3f:34:d8:e0:04:14:ee:2b:df:81:a0:b5: 9f:eb:0b:ae:cb:73:c8:90:e5:8f:42:62:e9:9f:58: 19:b0:c9:e9:7d:2c:27:03:bc:ed:57:19:cf:e2:97: 19:17:c7:32:00:c2:57:9d:31:05:70:ef:3b:16:8a: b1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8D:FD:62:11:CB:7A:AE:45:47:AC:E4:BB:5B:99:2D:D8:19:C8:69 X509v3 Authority Key Identifier: keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b6:ec:50:51:8d:17:c3:73:0e:52:a8:6e:f2:2c:db:0b:57: 65:91:02:7b:e1:41:18:70:92:37:0c:a6:1d:53:cd:b8:a1:ef: 6d:23:cf:55:73:dd:d8:26:94:e1:72:30:e4:7c:83:bf:85:d1: 96:8b:50:00:23:65:f2:bc:6d:dd:cc:96:14:b4:44:23:ce:49: b3:cf:49:f4:13:92:b5:4e:25:2c:e7:7f:30:45:a6:ac:a1:cc: b5:84:d0:8c:00:0c:3c:63:15:ce:6d:54:05:42:08:3f:cb:c8: 2f:95:1a:34:01:75:b9:1e:43:20:8e:42:14:a5:59:8e:dc:d5: 74:34:0a:b9:6d:fd:de:b9:39:49:38:f6:38:d4:fa:9e:24:de: 9c:9d:be:22:e9:5b:f3:59:ec:76:a9:a6:fa:61:89:fd:e1:2a: a0:1c:c9:de:4d:06:d6:0d:f0:64:ce:a1:89:9b:e7:d4:a2:89: 46:d0:ee:e5:e5:ad:df:a1:b0:e4:3c:cb:97:b9:c3:14:52:9f: e5:c8:f2:c7:66:05:da:4d:47:ce:72:03:4d:3a:59:55:05:b6: 3d:1b:39:f9:7b:09:ed:6a:89:b8:c4:e2:fe:b9:01:41:c8:a3: cf:b9:75:37:8b:e8:ad:64:0c:13:2e:60:c1:e8:26:4b:3f:a7: 8f:78:94:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk2QzQxMTAvBgNVBAUTKDNFRTI2RkJBNEJFMzU5REVBRTUwMDc5MkVCRkY3OEQw MEFDQjc2MEMwHhcNMjYwODA1MDAzMTIwWhcNMjYwODEyMDAzMTIwWjAYMRYwFAYD VQQDEw02YTcyODQ1OC1hZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz80ArXWW0HP5yLXdLi5ueiy7G3NOHT6SjOTG3GwGLnRees5ePEz940bn6Ynz aCX4jfp5V/BZ9QEezrb165ithf9U75izAv25pfHIaSi8xANHJ2CYWQneL1YyDOOH fSyBYC4cnCUBy8X0bC8BhEgyQJVEnOhNQriWI3kFzQt4aFRRm9XGGbWwBUgPbuBl Og/R9d01fb5LsUb2L2dwuO8d4v4AaKKtCHRenSNebRBgsy+znA8EXF+0iHQXInDR SAx0IL+ny5c/NNjgBBTuK9+BoLWf6wuuy3PIkOWPQmLpn1gZsMnpfSwnA7ztVxnP 4pcZF8cyAMJXnTEFcO87FoqxdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIeN/WIR y3quRUes5LtbmS3YGchpMB8GA1UdIwQYMBaAFD7ib7pL41nerlAHkuv/eNAKy3YM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTZDNC9GM0RERUVERTgz MzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldkNnVVQWVTNl85NDBBckxk Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1B1SnZ1a3ZqV2Q2dVVBZVM2Xzk0MEFyTGRndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTZDNC9GM0RERUVERTgzMzAxMUVDOEZGMzkzODNDNEY5QUUwMi9QdUp2dWt2aldk NnVVQWVTNl85NDBBckxkZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALrbsUFGNF8NzDlKobvIs2wtXZZECe+FBGHCSNwymHVPNuKHvbSPPVXPd2CaU 4XIw5HyDv4XRlotQACNl8rxt3cyWFLREI85Js89J9BOStU4lLOd/MEWmrKHMtYTQ jAAMPGMVzm1UBUIIP8vIL5UaNAF1uR5DII5CFKVZjtzVdDQKuW393rk5STj2ONT6 niTenJ2+Iulb81nsdqmm+mGJ/eEqoBzJ3k0G1g3wZM6hiZvn1KKJRtDu5eWt36Gw 5DzLl7nDFFKf5cjyx2YF2k1HznIDTTpZVQW2PRs5+XsJ7WqJuMTi/rkBQcijz7l1 N4vorWQMEy5gwegmSz+nj3iUsw== -----END CERTIFICATE-----Generated at Wed Aug 5 22:14:36 2026 by rpki-client