$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft File: pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft (raw, json) Hash identifier: RXJtU+unGiIuutNmCmZNSYMz+OL9+A67FG3M9nEy4Ao= Subject key identifier: 98:E2:EF:49:9D:5E:10:D9:71:C3:79:A3:3D:CE:94:47:2D:93:F4:4A Authority key identifier: A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 Certificate issuer: /CN=A91D7D87/serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft Manifest number: 01AF Signing time: Wed 05 Aug 2026 05:24:04 +0000 Manifest this update: Wed 05 Aug 2026 05:24:04 +0000 Manifest next update: Wed 12 Aug 2026 05:24:04 +0000 Files and hashes: 1: pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl (hash: ldPuuZ3kDtzTmCyOIt/k8Je74yLMd4TXRBA0jkYd28k=) 2: E0ACE6D24FB411EF84A05568C4F9AE02.roa (hash: eRm7KXvfE6uXkdA8ouEpiF5+oiI82omF3KoBKYM22hQ=) 3: 745A41CC2FA311EFBCD3546DC4F9AE02.roa (hash: WjeXpUriKps2e/a008YxeEs8/sYb3OiMoaYxhKdea6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 05:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7D87, serialNumber=A43183ECC650B8570D68F7D412A4F0014DA8B9C4 Validity Not Before: Aug 5 05:24:04 2026 GMT Not After : Aug 12 05:24:04 2026 GMT Subject: CN=6a72c8f4-673b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:18:b2:d3:9a:df:e7:3d:f0:61:a3:73:96:42: c5:04:5c:af:c8:3b:c9:d0:55:b8:95:5b:34:a1:8a: b6:e8:47:57:40:25:6e:4c:13:20:01:20:93:86:7e: 22:48:d7:1f:fd:bb:fa:64:22:19:5c:1c:91:7b:c3: 18:99:03:f0:be:cf:75:50:4d:ee:6a:12:44:99:36: c7:bd:f3:9c:b3:aa:ad:c1:9b:36:b3:df:46:b4:b8: f8:ab:13:d0:56:f2:27:03:0c:fb:d8:70:0e:ab:6a: f4:74:39:93:7d:6e:53:9f:24:c9:f3:58:05:3c:f4: 57:f8:e6:a9:b4:ea:c7:89:e9:6f:55:a1:9e:4f:99: 51:cb:65:81:e9:54:86:1e:5e:e5:05:0b:32:d3:bb: fd:1d:6b:ca:91:7f:bd:c4:22:6c:99:78:56:95:4c: 1a:a2:51:4a:a1:be:a4:4c:75:3b:a2:3c:2b:b2:6c: 5c:75:30:8f:32:c2:db:d3:e4:18:67:f7:e1:9d:77: 8f:5d:16:96:c9:ba:17:7e:5f:ea:d1:56:30:5e:73: 9a:09:ba:32:d4:ff:07:8e:8f:99:74:f7:20:2e:e3: 7e:02:fd:f2:2d:69:43:81:d7:51:bb:db:32:73:43: fd:a7:d4:e2:ed:4a:d3:cf:43:0d:38:71:82:54:01: 30:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E2:EF:49:9D:5E:10:D9:71:C3:79:A3:3D:CE:94:47:2D:93:F4:4A X509v3 Authority Key Identifier: keyid:A4:31:83:EC:C6:50:B8:57:0D:68:F7:D4:12:A4:F0:01:4D:A8:B9:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pDGD7MZQuFcNaPfUEqTwAU2oucQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7D87/18F6373012D611EF84E3641EC4F9AE02/pDGD7MZQuFcNaPfUEqTwAU2oucQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b8:06:f6:60:37:43:77:94:95:1e:fb:63:a8:c5:5c:f0:21: 78:a4:ab:ba:3f:5d:3c:84:3a:7c:8a:e9:4f:fc:4f:f1:22:7e: 59:35:ff:0b:b1:83:9d:21:70:1c:87:14:18:f5:ed:67:9a:90: ea:c4:a2:5f:f0:04:a9:40:11:f7:17:1c:9b:11:27:cb:01:1e: 42:d5:e4:39:96:5b:c2:b2:fb:6a:ef:39:0d:87:c7:69:6e:a4: d0:9e:d4:bf:6f:66:84:b5:58:fd:d9:a8:7d:df:59:d8:6a:b2: 5b:f6:0f:34:8b:e6:48:08:69:2a:20:a6:ec:38:84:f2:0b:39: 76:e5:6f:c5:20:de:d9:eb:cf:5a:51:87:7e:1c:0e:33:4c:4c: e1:c5:bc:6a:6b:4a:1b:a5:71:40:d3:dd:85:0b:0d:ec:8d:7d: fe:1b:15:f5:b6:8d:22:4d:3c:2f:e2:f3:a7:71:bd:48:3d:aa: 8e:9a:82:a7:1b:d1:0b:ec:3a:dd:52:2a:82:5b:71:d9:fd:d3: cc:13:95:36:a8:0c:d3:b9:ff:45:cd:3b:d3:62:8f:ff:fa:95: 7c:40:ae:b5:7b:55:81:b7:56:da:2c:8b:cf:90:89:d9:8b:c7: cc:00:48:60:ee:e7:d6:82:85:a8:f6:8a:e1:28:cb:6c:03:13: 25:6b:7e:b8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdEODcxMTAvBgNVBAUTKEE0MzE4M0VDQzY1MEI4NTcwRDY4RjdENDEyQTRGMDAx NERBOEI5QzQwHhcNMjYwODA1MDUyNDA0WhcNMjYwODEyMDUyNDA0WjAYMRYwFAYD VQQDEw02YTcyYzhmNC02NzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Riy05rf5z3wYaNzlkLFBFyvyDvJ0FW4lVs0oYq26EdXQCVuTBMgASCThn4i SNcf/bv6ZCIZXByRe8MYmQPwvs91UE3uahJEmTbHvfOcs6qtwZs2s99GtLj4qxPQ VvInAwz72HAOq2r0dDmTfW5TnyTJ81gFPPRX+OaptOrHielvVaGeT5lRy2WB6VSG Hl7lBQsy07v9HWvKkX+9xCJsmXhWlUwaolFKob6kTHU7ojwrsmxcdTCPMsLb0+QY Z/fhnXePXRaWyboXfl/q0VYwXnOaCboy1P8Hjo+ZdPcgLuN+Av3yLWlDgddRu9sy c0P9p9Ti7UrTz0MNOHGCVAEwYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJji70md XhDZccN5oz3OlEctk/RKMB8GA1UdIwQYMBaAFKQxg+zGULhXDWj31BKk8AFNqLnE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0Q4Ny8xOEY2MzczMDEy RDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVGY05hUGZVRXFUd0FVMm91 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BER0Q3TVpRdUZjTmFQZlVFcVR3QVUyb3VjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0Q4Ny8xOEY2MzczMDEyRDYxMUVGODRFMzY0MUVDNEY5QUUwMi9wREdEN01aUXVG Y05hUGZVRXFUd0FVMm91Y1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAArgG9mA3Q3eUlR77Y6jFXPAheKSruj9dPIQ6fIrpT/xP8SJ+WTX/C7GDnSFw HIcUGPXtZ5qQ6sSiX/AEqUAR9xccmxEnywEeQtXkOZZbwrL7au85DYfHaW6k0J7U v29mhLVY/dmofd9Z2GqyW/YPNIvmSAhpKiCm7DiE8gs5duVvxSDe2evPWlGHfhwO M0xM4cW8amtKG6VxQNPdhQsN7I19/hsV9baNIk08L+Lzp3G9SD2qjpqCpxvRC+w6 3VIqgltx2f3TzBOVNqgM07n/Rc0702KP//qVfECutXtVgbdW2iyLz5CJ2YvHzABI YO7n1oKFqPaK4SjLbAMTJWt+uA== -----END CERTIFICATE-----Generated at Wed Aug 5 18:57:39 2026 by rpki-client