$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft File: cS61otcGnxjunGXzsBMnGtvx9UA.mft (raw, json) Hash identifier: 7x35aWVfS4h2llk0aG3yxFJMIPX1L8/RjmcWR3xwhZ8= Subject key identifier: 3F:FE:25:43:BD:91:AE:9A:0F:F0:67:67:E0:D1:39:7B:86:77:F7:73 Authority key identifier: 71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 Certificate issuer: /CN=A91A8A52/serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Certificate serial: 02CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft Manifest number: 02B7 Signing time: Mon 27 Jul 2026 02:48:46 +0000 Manifest this update: Mon 27 Jul 2026 02:48:45 +0000 Manifest next update: Mon 03 Aug 2026 02:48:45 +0000 Files and hashes: 1: cS61otcGnxjunGXzsBMnGtvx9UA.crl (hash: atvoAJdmf6OWZaCck4VTCbkLKRm9cvPiy8Te69JeB8o=) 2: 655B85F0225B11EFADDE6F63C4F9AE02.roa (hash: P6xx3LV0yIZz7Bt3wASwzM1QkFL56uH39jrYrM1xsJw=) 3: 680147B486F311F1B8F66003A7EE528E.roa (hash: vd6Z39KPLKcomn09hEZQiUw+JqJNW7KhM+nNsWSg93s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 714 (0x2ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8A52, serialNumber=712EB5A2D7069F18EE9C65F3B013271ADBF1F540 Validity Not Before: Jul 27 02:48:45 2026 GMT Not After : Aug 3 02:48:45 2026 GMT Subject: CN=6a66c70e-d751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:19:38:e7:a1:73:f7:78:c4:83:70:af:2b: 7b:81:32:2d:f2:d1:e0:47:83:91:8d:f0:62:29:12: 09:69:ce:e8:54:05:46:90:fa:a2:80:a3:55:8c:75: de:a9:6b:f4:f5:fd:47:0b:fd:85:f8:50:a2:f6:37: e4:b7:b8:7c:10:47:74:7f:f4:39:9e:c0:d5:68:87: b8:2c:aa:c4:1c:e3:c0:46:e4:63:ec:eb:f7:21:95: d7:b0:3b:fc:d5:e4:e2:71:35:65:c7:45:ed:5a:cf: 07:59:84:81:92:17:8b:e4:3c:a8:9a:4b:f0:e2:a0: 08:a4:61:54:90:74:c1:c5:d2:72:e8:42:0c:c4:b5: 6f:05:df:44:ef:fe:bd:8b:5f:df:29:df:b7:74:c0: 99:65:44:fc:91:38:8a:da:a5:3a:5e:8d:16:89:ad: 5f:a9:04:0f:36:99:eb:e4:95:3e:02:2c:3a:b4:72: 44:1e:0c:8f:9d:3d:e9:22:9f:2d:22:27:8d:32:79: 4b:e8:58:65:04:43:87:fe:7b:8b:31:9c:83:e0:0f: ae:cf:73:68:e0:6f:a2:ed:b2:c4:51:50:1e:58:20: 40:29:d3:e0:26:37:26:4e:41:48:b8:df:06:9e:f9: a6:ad:e3:0f:22:f5:0d:2e:7f:dc:da:da:c5:3d:5d: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:FE:25:43:BD:91:AE:9A:0F:F0:67:67:E0:D1:39:7B:86:77:F7:73 X509v3 Authority Key Identifier: keyid:71:2E:B5:A2:D7:06:9F:18:EE:9C:65:F3:B0:13:27:1A:DB:F1:F5:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cS61otcGnxjunGXzsBMnGtvx9UA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8A52/FB7E4BDE70B511ED93F0DD16C4F9AE02/cS61otcGnxjunGXzsBMnGtvx9UA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b9:d4:df:bd:1d:f1:75:4f:63:42:d9:33:16:94:68:36:04: 4f:62:97:e3:1e:9f:6e:3b:e6:30:b6:ad:b6:bf:a2:99:a3:b9: 1e:fc:02:be:f5:fe:62:85:90:c7:89:12:d5:a5:6c:7d:aa:54: 77:5e:ea:4c:8b:b7:7e:e4:44:d7:61:f7:93:c2:e7:12:60:45: 07:76:39:10:e2:39:e9:02:a7:83:65:2d:6e:dd:0f:c8:fd:60: 7a:1e:89:a5:f3:aa:51:1b:a6:b7:c7:db:f7:b5:47:59:8c:02: 1f:0e:8c:7a:b3:cc:e9:62:f1:ac:9d:d4:0f:bc:90:c7:1e:51: 00:81:6f:ca:f6:71:84:d3:58:48:db:9f:ce:fe:d9:32:69:35: 1a:7b:ea:3c:3a:3e:92:b9:1c:26:67:1d:88:f9:6a:64:f4:d4: e9:f3:fb:53:e3:5b:ae:d7:d4:3c:53:ce:86:f7:b0:e5:d4:62: 1d:71:ee:51:1d:8e:25:72:76:a7:3d:e7:5f:4e:a7:8f:88:be: 68:4b:33:a0:d9:bf:15:8e:ba:85:9b:a7:0d:12:e0:f2:68:7d: 07:73:c2:16:ae:93:58:b9:c0:e3:c4:19:29:a3:ef:42:52:cc: f7:3f:b0:54:d8:35:8d:b6:4c:5f:4e:4b:66:9f:fe:7a:cf:1c: 53:0b:1f:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThBNTIxMTAvBgNVBAUTKDcxMkVCNUEyRDcwNjlGMThFRTlDNjVGM0IwMTMyNzFB REJGMUY1NDAwHhcNMjYwNzI3MDI0ODQ1WhcNMjYwODAzMDI0ODQ1WjAYMRYwFAYD VQQDEw02YTY2YzcwZS1kNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsyEZOOehc/d4xINwryt7gTIt8tHgR4ORjfBiKRIJac7oVAVGkPqigKNVjHXe qWv09f1HC/2F+FCi9jfkt7h8EEd0f/Q5nsDVaIe4LKrEHOPARuRj7Ov3IZXXsDv8 1eTicTVlx0XtWs8HWYSBkheL5Dyomkvw4qAIpGFUkHTBxdJy6EIMxLVvBd9E7/69 i1/fKd+3dMCZZUT8kTiK2qU6Xo0Wia1fqQQPNpnr5JU+Aiw6tHJEHgyPnT3pIp8t IieNMnlL6FhlBEOH/nuLMZyD4A+uz3No4G+i7bLEUVAeWCBAKdPgJjcmTkFIuN8G nvmmreMPIvUNLn/c2trFPV1b3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/+JUO9 ka6aD/BnZ+DROXuGd/dzMB8GA1UdIwQYMBaAFHEutaLXBp8Y7pxl87ATJxrb8fVA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEE1Mi9GQjdFNEJERTcw QjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254anVuR1h6c0JNbkd0dng5 VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NTNjFvdGNHbnhqdW5HWHpzQk1uR3R2eDlVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEE1Mi9GQjdFNEJERTcwQjUxMUVEOTNGMEREMTZDNEY5QUUwMi9jUzYxb3RjR254 anVuR1h6c0JNbkd0dng5VUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfbnU370d8XVPY0LZMxaUaDYET2KX4x6fbjvmMLattr+imaO5HvwCvvX+YoWQ x4kS1aVsfapUd17qTIu3fuRE12H3k8LnEmBFB3Y5EOI56QKng2Utbt0PyP1geh6J pfOqURumt8fb97VHWYwCHw6MerPM6WLxrJ3UD7yQxx5RAIFvyvZxhNNYSNufzv7Z Mmk1GnvqPDo+krkcJmcdiPlqZPTU6fP7U+NbrtfUPFPOhvew5dRiHXHuUR2OJXJ2 pz3nX06nj4i+aEszoNm/FY66hZunDRLg8mh9B3PCFq6TWLnA48QZKaPvQlLM9z+w VNg1jbZMX05LZp/+es8cUwsfZw== -----END CERTIFICATE-----Generated at Tue Jul 28 02:49:57 2026 by rpki-client