$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft File: httX5pD30wkpOii6fFX7ivN9Xb0.mft (raw, json) Hash identifier: Yp5M08P8xOwGa1MODJbctgzl1icRHgQJid85QtyFqOs= Subject key identifier: F6:C1:B3:51:0F:23:6F:28:D6:AC:A8:64:0A:40:CF:51:69:A2:A0:70 Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Certificate serial: 3869 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft Manifest number: 3763 Signing time: Mon 20 Jul 2026 14:34:38 +0000 Manifest this update: Mon 20 Jul 2026 14:34:38 +0000 Manifest next update: Mon 27 Jul 2026 14:34:38 +0000 Files and hashes: 1: httX5pD30wkpOii6fFX7ivN9Xb0.crl (hash: 7y4py07QUchgDOYcwotRrPv9NZMQRz1DttT/C5j0jks=) 2: 3B8DEC18F67C11EFA12FD55AC4F9AE02.roa (hash: Zntrf+XRFU/LUFPqt460t/df6T24vxpmkd5azGcAX5E=) 3: 803E1FB4844611F18199E4686DA30FBC.roa (hash: fb/gMuY4GCBBcmZDDJjLxvs0FTK9CO7zdEHnqESTxOE=) 4: 0F0E88A6192F11F183D9B1FC303D8C67.roa (hash: 5aKDuZwd3Wn+m9JFqN35rRMwxZf4PwI1YL49pBMgje4=) 5: F24EEED208C011F19DFF611F213D8C67.roa (hash: j8mZP70/+lxFmxKK+gaXtA4vlgcSiykk11UZrhv9x1I=) 6: 15B06ACE01B211F1A8498BCA6C6F56BC.roa (hash: 5xNdDoLkpm/cKB7fxSHaoDjqTsi17ChXNYz70KIoKrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14441 (0x3869) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Validity Not Before: Jul 20 14:34:38 2026 GMT Not After : Jul 27 14:34:38 2026 GMT Subject: CN=6a5e31fe-c024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:ea:ff:3c:98:6e:f0:b2:a3:10:2e:1a:2e: bd:47:cd:6a:b0:fe:76:8e:8c:05:47:14:23:95:1a: 09:8c:6e:ac:df:fb:f9:ca:28:e2:e7:4d:04:c5:1f: ad:dc:1d:25:a3:60:f3:ee:fc:b6:6f:b8:ab:8a:b7: 6a:88:e5:53:59:51:79:a1:ee:74:e0:ae:6e:c2:af: dd:36:e2:95:b0:14:ff:07:d1:e5:92:ed:e6:e7:7e: da:a5:d7:47:d5:f6:38:be:47:57:dc:a0:fc:75:be: dd:e5:b2:b9:e2:99:33:6e:58:a8:91:42:f3:4c:f7: 21:46:44:a1:8c:5c:36:d8:76:cb:2e:2e:5d:b9:37: e7:0b:46:05:22:1c:f6:cc:d1:36:11:17:d8:cd:2c: ff:df:0c:09:df:ea:30:c0:8a:a4:18:35:d7:39:15: fa:63:6f:02:be:ad:53:8e:a3:c6:24:67:98:f5:92: b8:1d:26:51:e8:9c:0a:4d:72:fe:70:0c:37:95:fd: fe:59:9c:f7:26:7b:be:38:85:20:40:8f:21:c3:b6: ea:ba:84:07:4a:9e:fe:7e:36:b4:98:0c:5f:8e:13: da:47:98:a4:53:1a:3e:0d:fb:2b:6b:cc:9d:3a:2c: c2:cc:a4:4e:94:dd:d7:b8:a6:ea:14:3d:76:c7:eb: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C1:B3:51:0F:23:6F:28:D6:AC:A8:64:0A:40:CF:51:69:A2:A0:70 X509v3 Authority Key Identifier: keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:24:04:96:03:65:ab:da:7f:35:12:39:c6:1c:ff:e8:47:36: 65:af:50:9d:53:0e:bb:29:53:a3:16:39:51:bb:d0:02:cf:d9: 20:0c:26:7c:45:ff:d2:c4:f1:e9:e6:cf:4d:75:c0:98:df:a9: f5:e6:31:41:e4:fd:83:ab:d4:e9:72:8e:7c:12:95:ed:f2:f7: 25:1d:ab:60:da:e8:73:96:13:32:af:4f:54:df:65:db:ae:9a: d8:78:09:d3:7a:74:75:ab:38:78:4b:70:f5:04:32:6b:de:64: 62:15:e9:33:e3:c0:8e:da:ed:7e:31:aa:31:b6:83:2f:6b:11: c9:7c:07:51:38:b6:58:d5:95:02:91:14:bc:10:5c:5d:36:f8: c9:d0:e6:38:38:aa:31:6d:94:ed:5c:60:31:91:4b:ee:81:73: db:a3:c3:26:09:2c:c5:d6:34:b9:cb:38:56:e8:d5:e2:db:55: 0d:3c:96:cb:ea:12:64:98:09:1e:e7:9a:e8:7e:b4:20:b2:04: 07:c1:9b:ad:60:f9:f9:38:bc:f8:6a:f6:22:39:55:b9:0e:15: 69:75:bb:e9:0e:72:8a:27:e1:da:86:de:4d:9a:9e:7b:81:61: 33:c5:e8:35:d2:dd:51:b6:cf:06:c9:a7:33:93:bc:43:e6:bb: b4:ec:53:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB RjM3RDVEQkQwHhcNMjYwNzIwMTQzNDM4WhcNMjYwNzI3MTQzNDM4WjAYMRYwFAYD VQQDEw02YTVlMzFmZS1jMDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw47q/zyYbvCyoxAuGi69R81qsP52jowFRxQjlRoJjG6s3/v5yiji500ExR+t 3B0lo2Dz7vy2b7irirdqiOVTWVF5oe504K5uwq/dNuKVsBT/B9Hlku3m537apddH 1fY4vkdX3KD8db7d5bK54pkzbliokULzTPchRkShjFw22HbLLi5duTfnC0YFIhz2 zNE2ERfYzSz/3wwJ3+owwIqkGDXXORX6Y28Cvq1TjqPGJGeY9ZK4HSZR6JwKTXL+ cAw3lf3+WZz3Jnu+OIUgQI8hw7bquoQHSp7+fja0mAxfjhPaR5ikUxo+Dfsra8yd OizCzKROlN3XuKbqFD12x+t7kQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbBs1EP I28o1qyoZApAz1FpoqBwMB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTYwQS9COTk1M0RCQTFEOEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3 a3BPaWk2ZkZYN2l2TjlYYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEiQElgNlq9p/NRI5xhz/6Ec2Za9QnVMOuylToxY5UbvQAs/ZIAwmfEX/0sTx 6ebPTXXAmN+p9eYxQeT9g6vU6XKOfBKV7fL3JR2rYNroc5YTMq9PVN9l266a2HgJ 03p0das4eEtw9QQya95kYhXpM+PAjtrtfjGqMbaDL2sRyXwHUTi2WNWVApEUvBBc XTb4ydDmODiqMW2U7VxgMZFL7oFz26PDJgksxdY0ucs4VujV4ttVDTyWy+oSZJgJ Huea6H60ILIEB8GbrWD5+Ti8+Gr2IjlVuQ4VaXW76Q5yiifh2obeTZqee4FhM8Xo NdLdUbbPBsmnM5O8Q+a7tOxT6w== -----END CERTIFICATE-----Generated at Tue Jul 21 17:58:45 2026 by rpki-client