$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: V4GystH/pAX+kNR3kYmA2n9BoHQupvCA7gn3sEUGiKM= Subject key identifier: FF:61:1D:38:F6:A9:0C:3E:30:84:CC:CA:61:07:B7:28:9E:4F:4D:06 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 01FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 01EB Signing time: Wed 05 Aug 2026 04:38:08 +0000 Manifest this update: Wed 05 Aug 2026 04:38:07 +0000 Manifest next update: Wed 12 Aug 2026 04:38:07 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: /ByJ/6c+sLguLJAsp8zSlBBMgJFCG18VpKXcYulnHQk=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: mmPmljEgq/UT3GHcfHd5W8JqbEjou9e+RRjhVJG9hpU=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: PppVk2NI0XPWKna+ZtR6ofXLD7gkTcUleObVM6K34rE=) 4: BF8E316480F311F1948786A865A30FBC.roa (hash: PeNghzeUXrf6ti+HRsaZOotNYnd+fY4xMOkVpf/Gtss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 04:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 510 (0x1fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Aug 5 04:38:07 2026 GMT Not After : Aug 12 04:38:07 2026 GMT Subject: CN=6a72be30-31e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:c2:96:e4:b4:ef:6c:22:7d:cb:61:19:c2: 39:e4:d2:66:1c:09:ea:44:c1:f8:80:d5:f5:1b:98: 37:21:b9:9c:e0:97:02:58:e4:5c:d6:ad:d4:32:e6: df:f3:23:b0:7b:59:87:28:53:12:ae:59:a2:f0:33: 5b:a5:09:fa:f2:cd:e9:f1:4e:78:23:52:48:31:a7: 83:00:3c:6a:99:d8:1f:b4:1a:55:57:36:56:04:89: 23:fa:cb:4e:30:3d:65:82:5b:50:03:13:d5:f6:6c: 5e:06:60:f5:b6:f5:0a:1c:b9:75:71:d3:5a:4b:d9: 55:4c:45:60:cc:45:2c:c8:fe:28:e6:4c:2e:92:cb: 51:77:fb:b2:8f:1c:82:3a:9e:85:2e:11:7a:b7:20: 99:18:fd:47:74:6b:f9:9e:e0:c1:43:e7:a5:3c:47: 05:2d:de:42:37:78:53:f2:54:c9:22:b3:10:fb:34: ca:20:3a:ea:02:2f:92:98:b2:8e:2c:fa:19:65:82: 44:a4:8a:f5:79:10:ab:20:45:3c:bf:77:2b:41:34: b2:54:ac:4f:6f:3c:49:40:44:fd:d2:d9:a1:90:db: f7:b4:01:ba:4c:95:22:6d:7e:f0:75:63:f6:a3:79: 92:b1:5f:07:65:05:97:f8:10:88:3d:47:c5:ea:73: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:61:1D:38:F6:A9:0C:3E:30:84:CC:CA:61:07:B7:28:9E:4F:4D:06 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a6:5c:50:eb:40:97:81:00:3d:20:d0:9a:39:64:7f:f0:0d: 72:93:ad:59:04:ef:d7:33:bb:f6:e2:57:2b:cc:43:d3:eb:68: a3:b3:fb:47:5a:ec:cf:63:87:4c:f0:28:28:e6:f3:36:4c:19: 18:9b:af:4e:61:69:24:48:27:e9:a1:4c:97:c9:4e:92:b8:4d: 40:c5:d3:02:0f:60:ee:60:72:e8:00:4c:f2:5d:ec:6f:52:ac: d3:9f:48:5d:a9:c6:ed:cb:71:22:4f:16:cf:a9:c9:df:30:78: 4e:20:b1:69:1a:68:ae:d8:1d:2f:d3:36:b4:b9:63:f6:35:fc: 48:65:dc:54:65:dd:9f:a4:33:ef:70:ba:74:38:57:b0:c6:3c: 39:49:6d:14:47:ab:9b:0c:dc:0f:96:39:a2:2b:28:b7:8f:71: 92:a0:94:2d:eb:63:fc:90:87:94:c1:c5:ec:e6:e7:d2:e1:d5: d7:8f:f7:e2:f1:18:79:1b:1b:ef:85:75:45:19:88:ae:4f:58: e0:a8:0a:7e:44:f1:de:a2:18:9d:b8:c2:00:6a:7b:19:3f:4c: 50:7a:f0:1c:52:2d:28:45:c1:d6:15:a4:e2:e5:f2:dc:4a:f2: 10:ee:5b:9f:3e:cb:50:6f:6b:a7:06:f7:bc:f8:d6:9a:c6:3c: d9:d3:da:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjYwODA1MDQzODA3WhcNMjYwODEyMDQzODA3WjAYMRYwFAYD VQQDEw02YTcyYmUzMC0zMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutXCluS072wifcthGcI55NJmHAnqRMH4gNX1G5g3Ibmc4JcCWORc1q3UMubf 8yOwe1mHKFMSrlmi8DNbpQn68s3p8U54I1JIMaeDADxqmdgftBpVVzZWBIkj+stO MD1lgltQAxPV9mxeBmD1tvUKHLl1cdNaS9lVTEVgzEUsyP4o5kwukstRd/uyjxyC Op6FLhF6tyCZGP1HdGv5nuDBQ+elPEcFLd5CN3hT8lTJIrMQ+zTKIDrqAi+SmLKO LPoZZYJEpIr1eRCrIEU8v3crQTSyVKxPbzxJQET90tmhkNv3tAG6TJUibX7wdWP2 o3mSsV8HZQWX+BCIPUfF6nOSywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP9hHTj2 qQw+MITMymEHtyieT00GMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOqZcUOtAl4EAPSDQmjlkf/ANcpOtWQTv1zO79uJXK8xD0+too7P7R1rsz2OH TPAoKObzNkwZGJuvTmFpJEgn6aFMl8lOkrhNQMXTAg9g7mBy6ABM8l3sb1Ks059I XanG7ctxIk8Wz6nJ3zB4TiCxaRportgdL9M2tLlj9jX8SGXcVGXdn6Qz73C6dDhX sMY8OUltFEermwzcD5Y5oisot49xkqCULetj/JCHlMHF7Obn0uHV14/34vEYeRsb 74V1RRmIrk9Y4KgKfkTx3qIYnbjCAGp7GT9MUHrwHFItKEXB1hWk4uXy3EryEO5b nz7LUG9rpwb3vPjWmsY82dPaNg== -----END CERTIFICATE-----Generated at Wed Aug 5 18:59:29 2026 by rpki-client