$ rpki-client -vvf rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft File: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft (raw, json) Hash identifier: rjFO2wiMpVhMrSrw8AwQy+X9xW9PxM9L0SAhGW1SXKE= Subject key identifier: D3:16:B1:22:C8:17:BE:37:95:9C:84:47:C0:E3:89:79:E9:4D:9F:9D Authority key identifier: 68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 Certificate issuer: /CN=A91872ED/serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Certificate serial: 35FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft Manifest number: 35A2 Signing time: Sun 26 Jul 2026 14:17:46 +0000 Manifest this update: Sun 26 Jul 2026 14:17:46 +0000 Manifest next update: Sun 02 Aug 2026 14:17:46 +0000 Files and hashes: 1: aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl (hash: wttCJXbpgXzIowhIYw9TI2wrLKNFOW90qaW+JIePsls=) 2: 35415D50FA7711EFB598EF54C4F9AE02.roa (hash: VG82nm7UqU5w2sJlNK4SDxqINYJwoA6/oxLrBlm8JIE=) 3: 19ACBFF66CDF11EAB92A3A24C4F9AE02.roa (hash: yReVTcL58773Jpuyzjun19aGFuK7z9XDGu28zTvah3k=) 4: EDCDDF00FA7811EFAF0CDF57C4F9AE02.roa (hash: S5MQHQKHGoySn52561lN0xrvmjrDRJUvv1CviMHuNKM=) 5: 749BE0C8F94711EF9B713B3AC4F9AE02.roa (hash: tHVxf9Q3vQhMutTNU0Up1wvh8aZLr2ux0lvTei/d9kc=) 6: 797B4DEC293B11E8B187196DC4F9AE02.roa (hash: GnJt59bMAjeqlYPa4lin7QYgA2KcGbUA51eIDiT69YA=) 7: 73E75DA6F94711EF9B713B3AC4F9AE02.roa (hash: BUp0zcWa4HIudpk64mEylcMBmmGpd1vuqwNaBAsC6O8=) 8: 6A18A5B0F88811EF9CB20317C4F9AE02.roa (hash: 8krrPxGdC1AJXLst0L0sKBcp7J4vtNMSaCyCJqfKloU=) 9: 1921C8926CDF11EAB92A3A24C4F9AE02.roa (hash: aqVmmYIJQaHpLvDdH8MbBjTUJnEk1fL6///wI+ixCg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 14:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13820 (0x35fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91872ED, serialNumber=68FAF9DACE19768CAC3D4ED7BB24372BFFA6D018 Validity Not Before: Jul 26 14:17:46 2026 GMT Not After : Aug 2 14:17:46 2026 GMT Subject: CN=6a66170a-28c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:98:f6:b2:5f:24:51:5b:63:f7:d1:62:69:2c: 5e:0a:d3:88:69:87:4f:33:e9:6f:8b:11:1b:0e:0e: 3d:70:03:d6:78:44:5a:b1:fa:df:2d:3a:fa:49:ef: f1:ab:d5:90:e1:39:e5:63:ea:46:49:47:92:8b:5f: 61:71:4e:e5:50:20:4b:76:20:a8:7f:bb:0e:b8:4b: dd:f5:31:4d:16:1e:4a:34:dd:cf:a6:ff:f3:b4:32: f1:f9:f8:35:c1:72:b3:61:8b:3c:eb:6d:01:f8:9a: 0a:7c:4c:5b:55:02:13:29:27:11:52:1f:8e:d8:5b: 0b:69:95:8a:41:d5:1f:d0:58:b5:84:a0:0e:c2:2e: 4d:84:76:67:53:0c:b2:b3:0e:e7:2a:8e:11:61:8f: 04:e5:c1:c3:33:5a:eb:ca:d2:f2:b0:cf:4e:87:3d: 6d:50:96:5f:d7:54:70:a1:96:6a:88:ee:78:0f:28: 5f:7c:e1:c7:29:45:1e:a3:3c:0b:5a:fb:5c:a0:f6: 08:c5:d2:1c:02:52:e0:ea:dc:dd:fa:e9:d9:ff:fd: 3e:c1:1f:3a:00:21:0e:fe:ae:77:fd:8e:30:8f:98: a3:c8:c8:7d:31:91:c1:a5:8a:fb:8c:2f:f6:5c:f7: 86:90:b6:2c:b2:d6:7d:9e:2e:20:8d:fd:1d:f6:9e: ec:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:16:B1:22:C8:17:BE:37:95:9C:84:47:C0:E3:89:79:E9:4D:9F:9D X509v3 Authority Key Identifier: keyid:68:FA:F9:DA:CE:19:76:8C:AC:3D:4E:D7:BB:24:37:2B:FF:A6:D0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91872ED/ED8C96901D6C11E28A38A3AD08B02CD2/aPr52s4ZdoysPU7XuyQ3K_-m0Bg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:46:05:58:c5:21:2b:c8:07:df:f4:a7:0b:21:85:f6:2b:c9: 65:09:58:1c:57:92:d3:1e:cc:9b:b4:51:ad:88:4b:eb:a2:a5: ce:05:86:c3:7a:1b:8b:71:b9:37:90:81:63:ed:24:7b:80:34: 4d:97:63:9b:43:0c:71:25:77:9d:27:ff:b3:bc:bf:05:fd:9f: c5:d5:3d:c9:38:c3:87:7e:d7:21:cb:a1:ae:62:1a:a3:a9:3b: a6:95:5f:2b:08:a9:8f:5c:87:2b:b8:8a:4b:f7:9f:d6:19:c7: 07:4b:6c:b5:d5:ed:14:3a:22:91:21:de:5e:ca:17:2b:a1:c7: 79:f3:1a:a6:8e:21:a0:ab:e0:be:53:83:c7:90:fc:cd:dd:c6: 93:78:83:a3:5d:cc:5b:64:17:6a:66:d0:43:e8:39:49:0a:20: 6c:5a:04:8a:47:f4:ec:d9:d0:7e:18:31:30:d8:79:fe:d3:f9: e2:88:90:60:72:4d:d7:a8:a5:28:30:93:b6:d2:f3:79:b3:b2: 27:f3:57:1c:ed:4c:88:fb:f0:f1:8a:22:0c:af:d9:77:38:78: 8f:c7:e8:9f:43:ba:73:be:28:7a:1d:a5:93:3a:c4:be:64:03: 3c:8d:57:59:99:fd:93:c9:55:0b:86:91:d9:a1:99:7f:2f:f0: da:3a:92:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODcyRUQxMTAvBgNVBAUTKDY4RkFGOURBQ0UxOTc2OENBQzNENEVEN0JCMjQzNzJC RkZBNkQwMTgwHhcNMjYwNzI2MTQxNzQ2WhcNMjYwODAyMTQxNzQ2WjAYMRYwFAYD VQQDEw02YTY2MTcwYS0yOGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhZj2sl8kUVtj99FiaSxeCtOIaYdPM+lvixEbDg49cAPWeERasfrfLTr6Se/x q9WQ4TnlY+pGSUeSi19hcU7lUCBLdiCof7sOuEvd9TFNFh5KNN3Ppv/ztDLx+fg1 wXKzYYs8620B+JoKfExbVQITKScRUh+O2FsLaZWKQdUf0Fi1hKAOwi5NhHZnUwyy sw7nKo4RYY8E5cHDM1rrytLysM9Ohz1tUJZf11RwoZZqiO54DyhffOHHKUUeozwL WvtcoPYIxdIcAlLg6tzd+unZ//0+wR86ACEO/q53/Y4wj5ijyMh9MZHBpYr7jC/2 XPeGkLYsstZ9ni4gjf0d9p7scwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNMWsSLI F743lZyER8DjiXnpTZ+dMB8GA1UdIwQYMBaAFGj6+drOGXaMrD1O17skNyv/ptAY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzJFRC9FRDhDOTY5MDFE NkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRveXNQVTdYdXlRM0tfLW0w QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FQcjUyczRaZG95c1BVN1h1eVEzS18tbTBCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzJFRC9FRDhDOTY5MDFENkMxMUUyOEEzOEEzQUQwOEIwMkNEMi9hUHI1MnM0WmRv eXNQVTdYdXlRM0tfLW0wQmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcUYFWMUhK8gH3/SnCyGF9ivJZQlYHFeS0x7Mm7RRrYhL66KlzgWGw3obi3G5 N5CBY+0ke4A0TZdjm0MMcSV3nSf/s7y/Bf2fxdU9yTjDh37XIcuhrmIao6k7ppVf Kwipj1yHK7iKS/ef1hnHB0tstdXtFDoikSHeXsoXK6HHefMapo4hoKvgvlODx5D8 zd3Gk3iDo13MW2QXambQQ+g5SQogbFoEikf07NnQfhgxMNh5/tP54oiQYHJN16il KDCTttLzebOyJ/NXHO1MiPvw8YoiDK/Zdzh4j8fon0O6c74oeh2lkzrEvmQDPI1X WZn9k8lVC4aR2aGZfy/w2jqSdw== -----END CERTIFICATE-----Generated at Mon Jul 27 15:05:06 2026 by rpki-client