$ rpki-client -vvf rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft File: SRNmdefiNOfS-IRZmOLGLbSIgso.mft (raw, json) Hash identifier: da7r1Jkve+fogtMgmohrcdu2AWK5k9cGhlAQASbqJTA= Subject key identifier: 02:C9:65:8E:75:FA:2C:FC:59:C5:37:3E:9C:22:15:0D:F2:73:E2:DE Authority key identifier: 49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA Certificate issuer: /CN=A91A31F5/serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Certificate serial: 011D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft Manifest number: 0119 Signing time: Fri 17 Jul 2026 07:03:32 +0000 Manifest this update: Fri 17 Jul 2026 07:03:31 +0000 Manifest next update: Fri 24 Jul 2026 07:03:31 +0000 Files and hashes: 1: SRNmdefiNOfS-IRZmOLGLbSIgso.crl (hash: g1IY3oCbuc+gyt43avoozMt01BjGW+smFIsqsS4cpN0=) 2: A8A5C28ED6ED11EFB4D7876BC4F9AE02.roa (hash: VY1rUPr6EXTZh6NWaqpR1v2JRKFtMHVjZuzu+EK7FeY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 07:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 285 (0x11d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A31F5, serialNumber=49136675E7E234E7D2F8845998E2C62DB48882CA Validity Not Before: Jul 17 07:03:31 2026 GMT Not After : Jul 24 07:03:31 2026 GMT Subject: CN=6a59d3c4-5dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:d8:64:b5:3d:8c:11:d2:45:f2:b2:b2:0a: fc:40:ac:c5:b0:78:46:b4:eb:ec:0f:c2:52:37:cf: ff:e5:58:cd:d3:95:2b:ea:17:a1:75:35:9e:82:1a: 5c:d8:86:2b:c7:05:a2:ef:d1:31:f6:10:d0:c7:49: 72:56:38:bb:ef:d2:ca:53:2d:3a:8d:82:85:62:f1: 40:02:64:0a:5d:e7:df:b2:a2:0a:0d:54:1b:7d:42: 88:f9:4d:4a:26:c9:50:02:b2:21:58:4b:16:1f:e9: 65:a8:a2:65:06:06:06:40:a9:e8:8f:d1:2f:a5:7d: 1e:c6:7c:6c:72:e9:ab:17:55:15:bb:bb:15:12:36: ac:9f:02:e8:fe:d0:08:d3:ce:98:ad:d2:62:1e:d7: 13:b9:e9:4a:c9:44:21:30:14:a6:7b:cf:12:a4:33: 30:1c:cc:16:37:40:8f:e3:21:02:8b:06:5c:a9:ed: 06:2f:3f:9c:9f:de:56:ab:cf:a7:04:13:bc:d8:68: 5f:12:46:6e:87:56:a3:75:29:73:bd:d1:77:6a:df: 19:36:3e:55:7f:2a:39:7f:90:b6:8c:db:46:5c:93: 10:33:aa:fa:4e:23:70:fa:2a:6f:3d:71:1d:61:27: 6b:6c:1d:97:e7:1f:1d:b2:00:13:4d:94:fe:d2:4c: e9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C9:65:8E:75:FA:2C:FC:59:C5:37:3E:9C:22:15:0D:F2:73:E2:DE X509v3 Authority Key Identifier: keyid:49:13:66:75:E7:E2:34:E7:D2:F8:84:59:98:E2:C6:2D:B4:88:82:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SRNmdefiNOfS-IRZmOLGLbSIgso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A31F5/A754D380D6EC11EFA2799C69C4F9AE02/SRNmdefiNOfS-IRZmOLGLbSIgso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9a:78:6c:fa:b4:b0:f5:db:fe:47:76:7f:c6:7e:80:99:bf: 45:9d:c5:21:b8:3a:7c:bb:21:4d:96:76:ca:d2:86:c9:eb:bf: 8e:bb:e6:cc:f5:4f:ab:61:f7:7b:d7:08:f6:a7:8a:e7:74:09: 44:53:7b:fb:2e:c4:6a:54:ce:aa:2e:e6:0d:03:04:c7:37:73: 45:05:9f:ad:8b:a0:eb:2d:07:73:96:de:0b:1b:32:f3:e7:2b: 07:d1:65:23:00:ad:f5:cf:13:9f:5a:7e:98:bf:85:31:f3:85: c8:5d:e9:20:40:1a:a6:14:a1:e7:67:8f:03:8a:8c:d3:d2:9f: 65:68:02:7c:34:be:f5:7b:60:98:1b:e2:2b:8f:7f:7d:cb:0e: 6e:b4:b7:9e:6d:97:df:59:f4:a7:07:33:4a:4a:1f:de:61:57: 38:03:76:96:47:f5:17:b7:53:f0:de:9f:33:84:44:e8:0b:98: 08:7a:35:dd:14:87:ad:8a:b3:33:32:81:4e:36:54:68:df:95: 8d:9e:4b:23:ad:b7:e8:41:14:e5:28:47:4a:b1:b8:74:fe:6f: 42:e7:b4:c9:d2:1c:f6:ec:aa:5b:2e:2a:a8:d2:ef:45:b4:fc: 0b:b4:18:c4:f5:d5:26:be:f5:eb:6f:6d:2b:0f:9d:7b:e6:24: 27:2d:3d:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMxRjUxMTAvBgNVBAUTKDQ5MTM2Njc1RTdFMjM0RTdEMkY4ODQ1OTk4RTJDNjJE QjQ4ODgyQ0EwHhcNMjYwNzE3MDcwMzMxWhcNMjYwNzI0MDcwMzMxWjAYMRYwFAYD VQQDEw02YTU5ZDNjNC01ZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGvYZLU9jBHSRfKysgr8QKzFsHhGtOvsD8JSN8//5VjN05Ur6hehdTWeghpc 2IYrxwWi79Ex9hDQx0lyVji779LKUy06jYKFYvFAAmQKXeffsqIKDVQbfUKI+U1K JslQArIhWEsWH+llqKJlBgYGQKnoj9EvpX0exnxscumrF1UVu7sVEjasnwLo/tAI 086YrdJiHtcTuelKyUQhMBSme88SpDMwHMwWN0CP4yECiwZcqe0GLz+cn95Wq8+n BBO82GhfEkZuh1ajdSlzvdF3at8ZNj5Vfyo5f5C2jNtGXJMQM6r6TiNw+ipvPXEd YSdrbB2X5x8dsgATTZT+0kzp1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALJZY51 +iz8WcU3PpwiFQ3yc+LeMB8GA1UdIwQYMBaAFEkTZnXn4jTn0viEWZjixi20iILK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzFGNS9BNzU0RDM4MEQ2 RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5PZlMtSVJabU9MR0xiU0ln c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1NSTm1kZWZpTk9mUy1JUlptT0xHTGJTSWdzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzFGNS9BNzU0RDM4MEQ2RUMxMUVGQTI3OTlDNjlDNEY5QUUwMi9TUk5tZGVmaU5P ZlMtSVJabU9MR0xiU0lnc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb5p4bPq0sPXb/kd2f8Z+gJm/RZ3FIbg6fLshTZZ2ytKGyeu/jrvmzPVPq2H3 e9cI9qeK53QJRFN7+y7EalTOqi7mDQMExzdzRQWfrYug6y0Hc5beCxsy8+crB9Fl IwCt9c8Tn1p+mL+FMfOFyF3pIEAaphSh52ePA4qM09KfZWgCfDS+9XtgmBviK49/ fcsObrS3nm2X31n0pwczSkof3mFXOAN2lkf1F7dT8N6fM4RE6AuYCHo13RSHrYqz MzKBTjZUaN+VjZ5LI6236EEU5ShHSrG4dP5vQue0ydIc9uyqWy4qqNLvRbT8C7QY xPXVJr71629tKw+de+YkJy093g== -----END CERTIFICATE-----Generated at Sat Jul 18 03:28:28 2026 by rpki-client