$ rpki-client -vvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft File: 4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json) Hash identifier: qsCgiiUbmUTLgtCOHDyyQcbZylyrBHvvUcvDz4MS+ts= Subject key identifier: B7:40:5F:A4:E7:4A:8C:34:0A:94:08:38:C0:C7:BB:B5:65:A0:1B:ED Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 Certificate issuer: /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft Manifest number: 45 Signing time: Thu 13 Aug 2026 08:05:31 +0000 Manifest this update: Thu 13 Aug 2026 08:05:30 +0000 Manifest next update: Thu 20 Aug 2026 08:05:30 +0000 Files and hashes: 1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: izP9s2gYFaw0E95Q3ZoGbsIzOkK11W98RkvYoqQBOa4=) 2: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=) 3: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 08:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Validity Not Before: Aug 13 08:05:30 2026 GMT Not After : Aug 20 08:05:30 2026 GMT Subject: CN=6a7d7acb-39c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:52:e6:e8:02:f6:ce:67:fe:79:21:37:6e:ae: 95:a1:6e:da:a5:8e:cb:70:6c:36:26:66:5f:46:a2: 24:85:2e:25:66:32:cf:e2:1c:0d:c5:62:6d:15:96: 96:18:f8:00:c8:42:bf:31:fa:36:3f:c6:95:53:a0: 7f:6c:52:b7:0b:42:10:dc:fa:ba:6a:4c:38:35:13: f3:9c:0f:1e:e8:5f:c4:07:b8:b8:08:8c:d6:11:0d: 82:9c:8e:a2:bd:4e:ef:cf:6d:c4:e0:c7:68:85:74: d1:55:a5:c4:1f:0b:d0:0f:b9:9d:db:a3:be:ea:9d: 37:70:aa:5e:eb:99:95:2c:85:02:a8:3f:2e:93:dc: 44:b7:1d:66:fd:2a:88:94:2a:05:30:10:ea:96:e9: 49:ce:ab:41:25:ef:ae:cc:15:b4:38:01:0a:0d:74: 43:26:b4:ef:d2:94:2d:4c:10:f2:05:f5:15:6c:8d: 98:e8:04:2e:d8:b9:f5:30:b8:aa:78:79:99:b2:8a: 58:17:5d:28:d0:c0:f8:d7:36:62:11:d6:6d:4a:ae: 22:67:6c:90:d5:e1:72:67:9e:5a:77:cb:2c:e1:8e: b0:23:0d:c0:62:5d:f3:1f:10:5f:44:c8:c1:76:c6: 6f:2a:50:17:5e:de:68:bd:8e:ef:b0:f6:bf:03:33: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:40:5F:A4:E7:4A:8C:34:0A:94:08:38:C0:C7:BB:B5:65:A0:1B:ED X509v3 Authority Key Identifier: keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:2f:a1:10:74:27:db:80:7a:46:ce:fc:87:b9:9a:a7:b9:a0: 27:a9:b8:f4:e0:13:f2:b5:c1:5f:9c:51:01:22:e0:a5:2e:2c: 3e:8f:18:86:83:9a:f4:dd:bc:6b:d0:cd:b5:e6:89:a6:aa:df: 23:7f:dc:42:47:5e:59:af:49:95:73:4e:e1:71:1d:d3:5a:1e: 4c:04:51:58:7a:70:a9:ff:df:0f:a2:b0:e9:3f:91:20:55:5c: 2b:e3:5a:d1:8e:ba:aa:73:4f:f7:e8:f4:0d:78:d5:20:5a:7f: 69:bc:c8:77:c3:4a:0a:6f:0f:1c:c5:ed:6c:39:d8:a7:07:ec: 7c:1f:49:3f:49:85:1f:2e:34:eb:f9:6d:fa:b1:d4:6b:8d:a0: 50:9d:2c:87:58:3d:94:dd:aa:03:15:fd:9b:5a:0f:23:39:6b: b5:32:8e:dc:82:dd:70:39:72:28:43:ff:9e:63:ba:0f:d2:6f: a9:b1:38:78:88:f4:d3:c4:99:5e:b1:f7:eb:dc:4d:3f:a5:fc: f8:05:cd:e6:e3:c1:60:f3:50:85:f8:46:d2:90:95:4c:7d:03: 99:d7:1a:11:1e:a8:16:4e:6d:b5:98:a3:42:7a:42:39:aa:5f: 4e:66:3d:05:2e:d6:64:50:67:bf:73:ab:af:37:87:13:b0:b2: 2f:4b:73:b6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Mjk2QTExMC8GA1UEBRMoRTI1OTg4Njc0RjNDRDI1QTEzNjBEN0ZFOTUzQTU4NEYx QUFGQUJDNzAeFw0yNjA4MTMwODA1MzBaFw0yNjA4MjAwODA1MzBaMBgxFjAUBgNV BAMTDTZhN2Q3YWNiLTM5YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDLUuboAvbOZ/55ITdurpWhbtqljstwbDYmZl9GoiSFLiVmMs/iHA3FYm0VlpYY +ADIQr8x+jY/xpVToH9sUrcLQhDc+rpqTDg1E/OcDx7oX8QHuLgIjNYRDYKcjqK9 Tu/PbcTgx2iFdNFVpcQfC9APuZ3bo77qnTdwql7rmZUshQKoPy6T3ES3HWb9KoiU KgUwEOqW6UnOq0El767MFbQ4AQoNdEMmtO/SlC1MEPIF9RVsjZjoBC7YufUwuKp4 eZmyilgXXSjQwPjXNmIR1m1KriJnbJDV4XJnnlp3yyzhjrAjDcBiXfMfEF9EyMF2 xm8qUBde3mi9ju+w9r8DM7SfAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUt0BfpOdK jDQKlAg4wMe7tWWgG+0wHwYDVR0jBBgwFoAU4lmIZ0880loTYNf+lTpYTxqvq8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyOTZBL0FBREVCNzMwMzQz NTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxvVFlOZi1sVHBZVHhxdnE4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGxtSVowODgwbG9UWU5mLWxUcFlUeHF2cThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy OTZBL0FBREVCNzMwMzQzNTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxv VFlOZi1sVHBZVHhxdnE4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBhL6EQdCfbgHpGzvyHuZqnuaAnqbj04BPytcFfnFEBIuClLiw+jxiGg5r03bxr 0M215ommqt8jf9xCR15Zr0mVc07hcR3TWh5MBFFYenCp/98PorDpP5EgVVwr41rR jrqqc0/36PQNeNUgWn9pvMh3w0oKbw8cxe1sOdinB+x8H0k/SYUfLjTr+W36sdRr jaBQnSyHWD2U3aoDFf2bWg8jOWu1Mo7cgt1wOXIoQ/+eY7oP0m+psTh4iPTTxJle sffr3E0/pfz4Bc3m48Fg81CF+EbSkJVMfQOZ1xoRHqgWTm21mKNCekI5ql9OZj0F LtZkUGe/c6uvN4cTsLIvS3O2 -----END CERTIFICATE-----Generated at Thu Aug 13 11:59:00 2026 by rpki-client