$ rpki-client -vvf rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft File: 40OUNNCvshlJ60kGLwBsphEvOoQ.mft (raw, json) Hash identifier: Dr2KemlKCBw1f02KDn1l53Eytr0FguDOrDne7VMDyFo= Subject key identifier: BC:39:F1:18:5D:FA:70:EB:58:36:0B:69:49:19:08:9F:4F:35:E9:23 Authority key identifier: E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84 Certificate issuer: /CN=A91784CD/serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft Manifest number: 08 Signing time: Fri 03 Jul 2026 10:06:31 +0000 Manifest this update: Fri 03 Jul 2026 10:06:31 +0000 Manifest next update: Fri 10 Jul 2026 10:06:31 +0000 Files and hashes: 1: 40OUNNCvshlJ60kGLwBsphEvOoQ.crl (hash: avd6VNss90rT4NjOG1Y86uC2F5PO9FIfv5q8vZeV4ps=) 2: 7CE8E4446F9111F1A8C39A2C6CA30FBC.roa (hash: wEYk8+b/zlouMRDVVaad91i65oh9NEMZk+zI9rvUNyY=) 3: 38504AE86F9111F19A5C332C6CA30FBC.roa (hash: ctFJMNlLmb24KK/hUvuG9PeuIx9ZmlcOLpD5Hrci6io=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Jul 2026 10:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91784CD, serialNumber=E3439434D0AFB21949EB49062F006CA6112F3A84 Validity Not Before: Jul 3 10:06:31 2026 GMT Not After : Jul 10 10:06:31 2026 GMT Subject: CN=6a4789a7-d61d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cc:a9:68:f2:bd:d3:21:64:ab:ab:bc:15:e5: 07:65:c3:32:41:69:de:9d:c4:c6:b8:f5:e6:5d:01: 5d:eb:e3:3d:e0:cf:50:7b:4c:9e:c0:0c:8e:07:20: 55:1d:85:d7:63:fc:3f:ed:a2:7d:9c:6f:41:99:7a: d2:61:b5:69:a8:5c:04:fd:08:66:fa:31:d3:99:76: 77:09:a0:ba:c0:42:04:8f:1c:a9:de:25:90:97:48: 21:dd:cc:1a:a0:2e:5c:f8:fb:d6:b8:63:12:0d:03: 38:26:78:6b:24:fe:4e:28:00:20:53:a3:93:4a:80: 14:3c:0b:16:d6:03:3c:87:57:37:e2:19:80:56:90: 37:2c:3a:2c:a2:a0:7d:2c:06:eb:62:fd:5f:82:63: 06:fc:1e:49:f9:9b:e0:1f:7b:79:09:71:97:b3:7d: 00:50:95:2b:90:3b:58:65:73:53:7e:87:4d:5b:f8: 10:93:78:d1:61:20:28:88:c1:11:f2:16:1b:7c:c4: d7:c1:23:5f:2c:d0:dd:6f:bd:da:e5:9f:1f:e2:d5: 45:1a:27:64:60:86:37:d3:ac:64:f8:bb:cd:57:39: 16:0e:49:4a:a5:1d:56:a7:8e:cc:39:27:de:b8:6c: 0e:0d:ec:2b:c6:25:74:62:c1:9c:e8:0d:40:83:d6: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:39:F1:18:5D:FA:70:EB:58:36:0B:69:49:19:08:9F:4F:35:E9:23 X509v3 Authority Key Identifier: keyid:E3:43:94:34:D0:AF:B2:19:49:EB:49:06:2F:00:6C:A6:11:2F:3A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40OUNNCvshlJ60kGLwBsphEvOoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91784CD/CCDDA9866F9011F1A8C9032B6CA30FBC/40OUNNCvshlJ60kGLwBsphEvOoQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:5b:f8:0d:87:93:f5:fe:4f:ac:87:0b:dc:f8:0f:27:8a:9a: 6f:71:da:fd:fc:aa:c4:70:89:17:f1:cf:8c:6c:07:2c:86:2c: 4a:f2:79:43:3d:68:be:cf:bb:d4:e9:30:18:db:fc:db:99:57: 70:f9:bd:c5:04:44:3a:42:f1:86:87:fd:96:67:50:7d:e1:fb: 38:7e:34:76:3e:a1:d8:9a:46:e5:b1:0b:49:09:f0:3c:c1:11: d3:0f:9c:b1:e9:c6:3c:47:97:11:8d:eb:40:1b:5b:7a:3d:f6: 33:84:1a:b2:06:f2:1d:d3:aa:aa:10:ce:2e:95:24:43:68:a5: 42:83:09:97:d4:8d:07:42:6a:cd:3d:7e:6f:28:ca:a4:e2:39: 3b:7b:f0:c5:a6:83:46:70:1e:7e:db:1b:27:9e:6d:8e:82:dc: 14:a8:50:6b:54:bf:0e:95:7d:dd:ba:0b:b6:37:64:ee:59:9c: f8:0b:57:ec:6c:c5:c6:8f:a3:b6:3a:e4:3e:d9:da:40:78:3a: ac:f3:e3:e0:53:bb:8d:b5:66:ec:44:13:15:67:fe:e3:9c:7a: be:29:23:78:af:59:b9:2c:ce:0d:30:8b:1d:7c:4a:c0:20:85: d4:c3:d3:2a:40:89:31:5b:28:6a:a6:a0:ed:d4:23:b7:b4:9d: 0a:a1:d2:52 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 ODRDRDExMC8GA1UEBRMoRTM0Mzk0MzREMEFGQjIxOTQ5RUI0OTA2MkYwMDZDQTYx MTJGM0E4NDAeFw0yNjA3MDMxMDA2MzFaFw0yNjA3MTAxMDA2MzFaMBgxFjAUBgNV BAMTDTZhNDc4OWE3LWQ2MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtzKlo8r3TIWSrq7wV5QdlwzJBad6dxMa49eZdAV3r4z3gz1B7TJ7ADI4HIFUd hddj/D/ton2cb0GZetJhtWmoXAT9CGb6MdOZdncJoLrAQgSPHKneJZCXSCHdzBqg Llz4+9a4YxINAzgmeGsk/k4oACBTo5NKgBQ8CxbWAzyHVzfiGYBWkDcsOiyioH0s Buti/V+CYwb8Hkn5m+Afe3kJcZezfQBQlSuQO1hlc1N+h01b+BCTeNFhICiIwRHy Fht8xNfBI18s0N1vvdrlnx/i1UUaJ2RghjfTrGT4u81XORYOSUqlHVanjsw5J964 bA4N7CvGJXRiwZzoDUCD1vGDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUvDnxGF36 cOtYNgtpSRkIn0816SMwHwYDVR0jBBgwFoAU40OUNNCvshlJ60kGLwBsphEvOoQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4NENEL0NDRERBOTg2NkY5 MDExRjFBOEM5MDMyQjZDQTMwRkJDLzQwT1VOTkN2c2hsSjYwa0dMd0JzcGhFdk9v US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNDBPVU5OQ3ZzaGxKNjBrR0x3QnNwaEV2T29RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 NENEL0NDRERBOTg2NkY5MDExRjFBOEM5MDMyQjZDQTMwRkJDLzQwT1VOTkN2c2hs SjYwa0dMd0JzcGhFdk9vUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjW/gNh5P1/k+shwvc+A8nippvcdr9/KrEcIkX8c+MbAcshixK8nlDPWi+z7vU 6TAY2/zbmVdw+b3FBEQ6QvGGh/2WZ1B94fs4fjR2PqHYmkblsQtJCfA8wRHTD5yx 6cY8R5cRjetAG1t6PfYzhBqyBvId06qqEM4ulSRDaKVCgwmX1I0HQmrNPX5vKMqk 4jk7e/DFpoNGcB5+2xsnnm2OgtwUqFBrVL8OlX3dugu2N2TuWZz4C1fsbMXGj6O2 OuQ+2dpAeDqs8+PgU7uNtWbsRBMVZ/7jnHq+KSN4r1m5LM4NMIsdfErAIIXUw9Mq QIkxWyhqpqDt1CO3tJ0KodJS -----END CERTIFICATE-----Generated at Sun Jul 5 08:36:01 2026 by rpki-client