$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft File: 30fOzFfqiK65ajhlVgufImC6mQ4.mft (raw, json) Hash identifier: yGeSGz0JS0k8zl2/NCq2H+ZU+9YyMowkTYcadWoqLrw= Subject key identifier: EC:56:77:85:6A:EE:9A:10:C3:50:D9:50:17:5B:8E:33:46:CB:2A:BB Authority key identifier: DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E Certificate issuer: /CN=A91DBA5B/serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft Manifest number: 015E Signing time: Tue 21 Jul 2026 06:31:41 +0000 Manifest this update: Tue 21 Jul 2026 06:31:41 +0000 Manifest next update: Tue 28 Jul 2026 06:31:41 +0000 Files and hashes: 1: 30fOzFfqiK65ajhlVgufImC6mQ4.crl (hash: 2CLrSW15tGwH2NpdVvnhrB7fu7lhBYYXEgrv9vAyEO4=) 2: 02389B7670E811EFA8DBE571C4F9AE02.roa (hash: cly4cYutElaX5qSNdsfUH5zLjhQKkS1wrfF7eYDZnn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 06:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBA5B, serialNumber=DF47CECC57EA88AEB96A3865560B9F2260BA990E Validity Not Before: Jul 21 06:31:41 2026 GMT Not After : Jul 28 06:31:41 2026 GMT Subject: CN=6a5f124d-1e90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:04:95:c4:bf:9b:51:d3:11:4b:c0:48:8c: 31:29:a3:c2:48:43:2f:ff:e2:64:a9:62:1d:ec:06: 14:57:6b:6b:8e:68:df:63:33:14:a0:db:f5:12:f9: a2:91:b9:b5:99:0c:97:7c:23:75:5f:e6:67:d2:4e: af:3d:3d:ed:c8:9c:83:10:f1:6e:0e:36:cc:a7:c6: 82:b1:47:4c:36:30:e4:f2:0c:cf:cd:62:a8:d0:67: 28:25:6c:93:13:2b:c8:46:14:f3:aa:c4:12:36:a0: b6:26:68:59:49:1d:37:81:97:ff:a7:1c:5d:d6:f7: cf:30:91:37:a4:6a:3d:83:0d:05:76:e1:df:9d:71: 5a:fa:e4:a8:b1:0f:9e:ab:c5:0e:7b:56:6e:8d:21: 0e:64:9f:2e:90:03:26:9a:31:36:10:53:bf:1f:68: 28:a6:51:48:5d:06:74:80:ae:eb:a3:59:95:2c:a3: 53:74:48:5a:c8:af:ce:5d:a4:19:8a:de:56:28:7e: 9b:f2:69:ae:ed:d5:e5:68:66:3d:59:cd:82:bd:b0: aa:b0:d1:d9:d3:ac:92:45:3a:94:b1:8e:d1:11:3d: bd:c3:6f:73:7b:74:9b:0b:f3:93:9a:40:ab:b4:84: 5d:5c:36:4f:55:71:a4:10:8d:d7:43:5e:16:9e:46: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:56:77:85:6A:EE:9A:10:C3:50:D9:50:17:5B:8E:33:46:CB:2A:BB X509v3 Authority Key Identifier: keyid:DF:47:CE:CC:57:EA:88:AE:B9:6A:38:65:56:0B:9F:22:60:BA:99:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30fOzFfqiK65ajhlVgufImC6mQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBA5B/58004AAA70E711EFB444AF70C4F9AE02/30fOzFfqiK65ajhlVgufImC6mQ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:cf:91:9b:da:a1:cc:85:f0:cb:74:ab:3f:6f:4a:46:3a:ba: a9:e4:c1:51:7b:96:ef:49:f2:63:c4:09:72:04:86:ca:fa:2d: fb:98:74:96:fd:28:73:07:e2:80:29:8c:67:82:9f:91:56:d9: 76:ac:dc:49:fc:9a:bd:3e:2d:24:3e:6c:03:11:e1:f7:ab:08: 08:f7:1b:5d:f9:03:18:9d:69:f5:83:4a:d6:ae:22:8e:0c:7f: 83:20:42:d7:d9:b2:be:9f:cc:7b:f9:88:f4:ca:da:44:bf:dc: 6f:63:a3:7c:d0:51:0d:2d:31:63:c9:87:ff:2f:28:3a:56:3c: 36:7f:18:c9:7c:7f:5a:96:71:59:e9:2b:77:dd:9b:fa:b8:4a: f7:70:20:6b:85:24:26:db:5b:87:99:cd:26:1d:99:be:23:8e: e2:20:9f:94:8f:23:5b:fe:1d:ab:f2:53:c3:65:cd:64:fe:63: 22:26:af:98:95:dc:78:0a:10:26:a9:a8:5c:1e:20:d1:cc:9f: fe:e3:03:a5:4b:cb:d1:15:fe:5d:cc:09:35:40:82:e2:ce:64: 9c:eb:42:ba:34:19:83:66:2a:d7:16:01:97:dd:d3:5a:e2:50: 18:85:4e:ab:91:1c:1e:d0:ed:ba:15:45:a6:c3:88:27:34:9a: 25:e3:76:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBNUIxMTAvBgNVBAUTKERGNDdDRUNDNTdFQTg4QUVCOTZBMzg2NTU2MEI5RjIy NjBCQTk5MEUwHhcNMjYwNzIxMDYzMTQxWhcNMjYwNzI4MDYzMTQxWjAYMRYwFAYD VQQDEw02YTVmMTI0ZC0xZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2c0ElcS/m1HTEUvASIwxKaPCSEMv/+JkqWId7AYUV2trjmjfYzMUoNv1Evmi kbm1mQyXfCN1X+Zn0k6vPT3tyJyDEPFuDjbMp8aCsUdMNjDk8gzPzWKo0GcoJWyT EyvIRhTzqsQSNqC2JmhZSR03gZf/pxxd1vfPMJE3pGo9gw0FduHfnXFa+uSosQ+e q8UOe1ZujSEOZJ8ukAMmmjE2EFO/H2goplFIXQZ0gK7ro1mVLKNTdEhayK/OXaQZ it5WKH6b8mmu7dXlaGY9Wc2CvbCqsNHZ06ySRTqUsY7RET29w29ze3SbC/OTmkCr tIRdXDZPVXGkEI3XQ14WnkZ3uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOxWd4Vq 7poQw1DZUBdbjjNGyyq7MB8GA1UdIwQYMBaAFN9HzsxX6oiuuWo4ZVYLnyJgupkO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkE1Qi81ODAwNEFBQTcw RTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlLNjVhamhsVmd1ZkltQzZt UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwZk96RmZxaUs2NWFqaGxWZ3VmSW1DNm1RNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkE1Qi81ODAwNEFBQTcwRTcxMUVGQjQ0NEFGNzBDNEY5QUUwMi8zMGZPekZmcWlL NjVhamhsVmd1ZkltQzZtUTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtM+Rm9qhzIXwy3SrP29KRjq6qeTBUXuW70nyY8QJcgSGyvot+5h0lv0ocwfi gCmMZ4KfkVbZdqzcSfyavT4tJD5sAxHh96sICPcbXfkDGJ1p9YNK1q4ijgx/gyBC 19myvp/Me/mI9MraRL/cb2OjfNBRDS0xY8mH/y8oOlY8Nn8YyXx/WpZxWekrd92b +rhK93Aga4UkJttbh5nNJh2ZviOO4iCflI8jW/4dq/JTw2XNZP5jIiavmJXceAoQ JqmoXB4g0cyf/uMDpUvL0RX+XcwJNUCC4s5knOtCujQZg2Yq1xYBl93TWuJQGIVO q5EcHtDtuhVFpsOIJzSaJeN2Ww== -----END CERTIFICATE-----Generated at Tue Jul 21 23:31:01 2026 by rpki-client