$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json) Hash identifier: KhSyAuO4BpUVsSjeMp4Aq9ieeOWSVCesqzdhpDh1w9c= Subject key identifier: DF:6A:0F:E9:31:F9:64:7D:84:E4:CC:90:01:8B:86:25:3A:48:C6:10 Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft Manifest number: 02C5 Signing time: Sun 05 Jul 2026 01:47:09 +0000 Manifest this update: Sun 05 Jul 2026 01:47:09 +0000 Manifest next update: Sun 12 Jul 2026 01:47:09 +0000 Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: HhnGALQF2bkfwE1TXPhmg+z2EOHdqRS30qfV5e08PS0=) 2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: /OmusQFGUMLnSfPvaQeL+Y1Ye83OM/m03GrlGqmFNO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 01:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Validity Not Before: Jul 5 01:47:09 2026 GMT Not After : Jul 12 01:47:09 2026 GMT Subject: CN=6a49b79d-867d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c2:e8:ac:69:27:e6:10:6c:64:64:4d:20:f2: 78:f0:9f:c4:da:fc:62:3b:03:d3:ad:cb:0e:3c:ce: de:2b:9b:34:5a:60:a6:2c:82:46:4a:1e:95:2f:c7: 14:b7:72:f9:23:8b:73:80:81:49:4d:d2:25:72:0f: 9c:2b:6c:2a:0f:95:a8:13:8a:14:f9:e2:d3:ef:ef: f7:e0:4f:9c:85:35:24:04:1c:d2:1f:9e:f1:f0:d9: 5d:01:4b:2d:b1:21:2b:ae:38:10:00:b4:dd:78:e4: d1:70:45:86:84:37:63:b7:8d:bb:86:39:7c:67:22: e0:56:ac:5c:87:11:7b:f2:a5:5a:0b:51:3d:e4:14: 4b:d5:94:04:3d:b4:3e:a8:d8:29:c9:64:35:ed:a4: b5:37:1b:e4:82:a0:16:0b:1d:e5:69:9f:5d:1f:2a: 65:92:e3:50:45:1d:60:de:f8:75:0b:d9:c2:07:b0: ec:01:27:e8:a2:d0:b4:19:4a:6c:51:f1:62:99:68: 40:6f:74:33:ab:ba:c1:d3:ff:c5:1a:2c:8e:a3:7d: a7:b3:2a:7c:50:a6:b3:d5:26:d0:ac:65:e1:78:e7: d4:60:7d:b8:31:93:71:73:5c:ba:23:7a:c7:90:bf: 8e:1c:8c:c9:ff:e8:20:31:91:7e:2a:4c:e7:a7:44: 50:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:6A:0F:E9:31:F9:64:7D:84:E4:CC:90:01:8B:86:25:3A:48:C6:10 X509v3 Authority Key Identifier: keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:19:42:86:5c:bc:5b:29:ff:c8:3a:6b:68:2e:a6:ba:b0:14: 3d:43:18:60:8c:91:f1:0e:d2:69:44:94:dc:7c:52:68:d4:6d: df:94:14:cf:3a:7b:39:b8:2c:35:8c:16:8a:46:28:8f:8b:5f: f8:87:0a:9a:15:3a:f6:fd:6d:1c:d7:5f:5c:a3:26:a4:bc:74: c1:0b:ec:34:9f:b1:57:33:8d:dd:6a:91:d7:39:51:e0:55:ba: 8e:4d:07:0d:9f:19:84:b4:6c:53:8f:6c:c6:0f:3f:a3:65:f9: 48:87:5b:12:b0:74:85:54:65:31:15:32:fb:7f:42:04:97:2a: 3d:32:ff:b9:a2:4d:fc:8c:04:bf:13:50:d5:6a:b5:70:74:1d: 55:57:e0:ea:f6:30:14:6b:f6:d8:55:70:1c:59:a8:da:d5:bb: 46:20:a3:4d:a0:8f:c1:34:1c:85:82:b7:2a:97:1e:c8:e8:b4: f1:a5:46:e4:b4:01:e8:61:55:17:2a:a4:b2:2f:26:89:8a:31: c4:bd:44:44:dd:ba:44:0d:b6:94:08:ac:2e:e3:36:d6:6b:c5: 14:ac:7f:6d:b8:94:e1:25:29:7f:ce:8b:aa:a0:18:4d:79:53: b3:c8:e0:7d:5f:c6:fc:b0:96:d4:ee:35:a5:41:6e:29:cb:31: 03:de:cf:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC OUI1RkRCRjgwHhcNMjYwNzA1MDE0NzA5WhcNMjYwNzEyMDE0NzA5WjAYMRYwFAYD VQQDEw02YTQ5Yjc5ZC04NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkcLorGkn5hBsZGRNIPJ48J/E2vxiOwPTrcsOPM7eK5s0WmCmLIJGSh6VL8cU t3L5I4tzgIFJTdIlcg+cK2wqD5WoE4oU+eLT7+/34E+chTUkBBzSH57x8NldAUst sSErrjgQALTdeOTRcEWGhDdjt427hjl8ZyLgVqxchxF78qVaC1E95BRL1ZQEPbQ+ qNgpyWQ17aS1NxvkgqAWCx3laZ9dHyplkuNQRR1g3vh1C9nCB7DsASfootC0GUps UfFimWhAb3Qzq7rB0//FGiyOo32nsyp8UKaz1SbQrGXheOfUYH24MZNxc1y6I3rH kL+OHIzJ/+ggMZF+Kkznp0RQ4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9qD+kx +WR9hOTMkAGLhiU6SMYQMB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEUzOC81MUYwREIzQzNGRkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3 R2VITm8yMURScTI1dGYyX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkhlChly8Wyn/yDpraC6murAUPUMYYIyR8Q7SaUSU3HxSaNRt35QUzzp7Obgs NYwWikYoj4tf+IcKmhU69v1tHNdfXKMmpLx0wQvsNJ+xVzON3WqR1zlR4FW6jk0H DZ8ZhLRsU49sxg8/o2X5SIdbErB0hVRlMRUy+39CBJcqPTL/uaJN/IwEvxNQ1Wq1 cHQdVVfg6vYwFGv22FVwHFmo2tW7RiCjTaCPwTQchYK3KpceyOi08aVG5LQB6GFV Fyqksi8miYoxxL1ERN26RA22lAisLuM21mvFFKx/bbiU4SUpf86LqqAYTXlTs8jg fV/G/LCW1O41pUFuKcsxA97PMw== -----END CERTIFICATE-----Generated at Mon Jul 6 08:56:28 2026 by rpki-client