$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: Rdb0YjdVmi8zHsTI0B3L9IVPEdg2f6SA5W5RrQzwg2w= Subject key identifier: E1:77:02:67:F6:91:5B:62:28:E2:DA:B8:72:67:E9:7A:21:15:DF:B9 Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 01EA Signing time: Wed 05 Aug 2026 04:38:00 +0000 Manifest this update: Wed 05 Aug 2026 04:37:59 +0000 Manifest next update: Wed 12 Aug 2026 04:37:59 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: Lb8YrxaZFPBtWaiXQ8wzaP/+AKH9pofmDVk2LcCYYrc=) 2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: RCE7v/cxnBGfMPk3MtJPuEIln4OQNI5lz0I7q4Ez8SY=) 3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: uQETdOBNe+Ai7qHHdjas7+cwdq4hlfeAOCRsaHC0QMs=) 4: B6B34C7E80F211F1958CCFA465A30FBC.roa (hash: Ym/+JBhkEZ5Bpl7vO2rxrswxWBhGXCPumfmGo7E+pVU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 04:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Aug 5 04:37:59 2026 GMT Not After : Aug 12 04:37:59 2026 GMT Subject: CN=6a72be28-5881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:e4:2b:19:2e:f0:30:f8:df:fa:1f:d9:58: 73:b9:e9:a4:ac:a2:aa:7c:9e:3a:bf:49:bc:0a:60: 7c:b9:e3:af:cb:bf:53:19:94:67:f4:64:a0:c8:66: dc:a6:b5:e2:90:87:90:b9:d5:4f:1d:f0:4b:ef:2b: 75:00:7b:9d:0d:46:55:bd:1e:f5:be:2b:dd:4b:18: f3:43:f9:3a:34:4f:90:2f:ec:e3:6b:4d:b8:d8:b0: f4:ff:ab:c3:9f:47:d4:01:88:f4:ef:56:7b:f8:5e: aa:d5:cf:d0:ba:37:ee:5a:2a:7d:43:0e:e7:a8:0f: 64:6f:01:97:45:4e:1e:69:8d:28:51:bf:e0:39:5a: 2f:6e:37:c9:e1:c7:6b:3a:25:56:27:dd:00:14:99: cf:ab:a1:d5:71:35:c8:b6:b6:45:ca:0f:88:bc:d2: 29:8d:f0:8c:6e:c9:c6:b7:d3:c6:de:1b:f6:9b:c4: 85:05:a4:e8:aa:55:9f:52:e5:f1:88:77:50:99:fb: bf:4f:f0:dc:46:65:96:10:21:3e:66:7f:1f:c3:c4: 2d:13:6e:26:69:7c:5a:c3:59:d7:e0:8d:3f:67:4f: 3b:bf:2c:37:67:de:f8:57:f0:39:f5:35:73:ae:49: 21:e4:3b:f5:3c:98:4f:68:a0:90:c1:61:3f:09:09: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:77:02:67:F6:91:5B:62:28:E2:DA:B8:72:67:E9:7A:21:15:DF:B9 X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:c8:3c:1d:aa:78:7d:51:fb:a2:9a:6b:06:41:53:3e:95:f4: 1c:3b:92:3f:89:44:5f:a2:7b:03:0c:d6:77:d9:a0:dd:db:ce: 18:89:03:60:ba:ec:c6:6e:b6:fc:7c:3f:df:9d:aa:6b:84:20: c5:5b:31:69:30:2d:ab:7e:ea:23:b6:d8:bf:75:85:ce:09:11: e3:86:ec:05:4b:56:4c:5e:25:de:17:05:52:1e:8f:21:4a:50: 78:5f:a9:43:45:6b:86:79:cb:df:a9:c4:7e:8d:85:c8:db:ee: 1c:32:cb:e2:30:6f:ce:54:5b:72:49:2a:98:55:bc:62:7c:f8: 4d:d7:1c:d5:ef:c5:d8:20:31:03:5d:07:15:53:ce:48:53:49: a6:66:6d:18:f3:bc:de:bf:11:92:a1:69:6e:e9:a2:37:72:45: c7:9f:e1:ef:67:58:8c:cb:2a:8d:d2:63:68:57:a9:ed:fe:c8: 6c:f7:70:7c:f4:c1:c7:01:52:23:dc:30:51:c0:10:53:e2:b3: 84:10:64:a5:87:50:49:b8:5f:10:b6:0a:ef:82:0d:0c:ef:67: b7:17:08:fe:a5:f8:ac:0b:18:9d:92:39:b6:41:c1:80:ec:a7: d6:c6:b5:bc:63:b1:e0:49:ed:07:ce:a8:50:39:c5:c5:46:83: 88:a6:6a:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjYwODA1MDQzNzU5WhcNMjYwODEyMDQzNzU5WjAYMRYwFAYD VQQDEw02YTcyYmUyOC01ODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwybkKxku8DD43/of2VhzuemkrKKqfJ46v0m8CmB8ueOvy79TGZRn9GSgyGbc prXikIeQudVPHfBL7yt1AHudDUZVvR71vivdSxjzQ/k6NE+QL+zja0242LD0/6vD n0fUAYj071Z7+F6q1c/QujfuWip9Qw7nqA9kbwGXRU4eaY0oUb/gOVovbjfJ4cdr OiVWJ90AFJnPq6HVcTXItrZFyg+IvNIpjfCMbsnGt9PG3hv2m8SFBaToqlWfUuXx iHdQmfu/T/DcRmWWECE+Zn8fw8QtE24maXxaw1nX4I0/Z087vyw3Z974V/A59TVz rkkh5Dv1PJhPaKCQwWE/CQm3KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOF3Amf2 kVtiKOLauHJn6XohFd+5MB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYMg8Hap4fVH7opprBkFTPpX0HDuSP4lEX6J7AwzWd9mg3dvOGIkDYLrsxm62 /Hw/352qa4QgxVsxaTAtq37qI7bYv3WFzgkR44bsBUtWTF4l3hcFUh6PIUpQeF+p Q0VrhnnL36nEfo2FyNvuHDLL4jBvzlRbckkqmFW8Ynz4Tdcc1e/F2CAxA10HFVPO SFNJpmZtGPO83r8RkqFpbumiN3JFx5/h72dYjMsqjdJjaFep7f7IbPdwfPTBxwFS I9wwUcAQU+KzhBBkpYdQSbhfELYK74INDO9ntxcI/qX4rAsYnZI5tkHBgOyn1sa1 vGOx4EntB86oUDnFxUaDiKZqLA== -----END CERTIFICATE-----Generated at Wed Aug 5 19:07:36 2026 by rpki-client