$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft File: NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json) Hash identifier: Du4CIUQjzgZdKX88BVRzSoncoGVoL01HIDGuZpPwJt4= Subject key identifier: C1:AD:22:C6:B4:C1:2F:D6:B8:21:A8:CB:C5:09:97:82:5E:FF:73:5E Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 Certificate issuer: /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft Manifest number: C7 Signing time: Fri 03 Jul 2026 07:41:21 +0000 Manifest this update: Fri 03 Jul 2026 07:41:20 +0000 Manifest next update: Fri 10 Jul 2026 07:41:20 +0000 Files and hashes: 1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: EX9VSQMMUpDq0uaSNV9GHkAJIA2rrZBVEbNbnFTSq/c=) 2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: jnh0hd9BJeU6DriRSa5jcG1pBk63GyyVkCh16HHy3wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Jul 2026 07:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385 Validity Not Before: Jul 3 07:41:20 2026 GMT Not After : Jul 10 07:41:20 2026 GMT Subject: CN=6a4767a1-d7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:15:f7:44:77:a8:bf:bf:ec:37:05:2f:ea:bc: 81:83:f8:33:e1:b2:59:a3:8f:c5:e7:42:ee:fe:de: d5:3a:4e:4c:70:8c:56:3a:03:a2:a6:20:83:4f:1c: b6:02:0e:1f:2a:67:10:50:3f:b5:b5:03:30:2d:94: bc:51:7e:09:33:87:42:d2:e2:08:ec:94:b0:8e:69: 19:37:e3:b4:59:d8:8f:73:e0:4f:c3:1c:78:72:57: 09:fe:40:86:18:ab:11:17:19:52:fd:4b:03:87:b5: 35:cb:ca:f1:41:52:ce:93:b1:bf:10:46:f5:97:c4: 4a:a3:29:49:a7:10:82:d6:ef:f0:57:cf:b8:14:45: 75:e9:a3:45:69:9a:dd:27:ae:3b:6c:2f:6e:44:91: 52:3f:7c:a7:69:8c:b1:1c:c6:95:5e:59:64:df:fa: 0d:8b:2b:09:37:b5:c0:96:78:72:77:26:ff:25:86: e5:23:b6:f5:54:5f:cc:15:16:bb:0f:36:ef:73:1c: cd:5b:cd:2a:79:83:1d:b8:99:9a:79:92:48:01:64: 5c:5f:e0:62:70:bd:34:24:83:ec:d6:12:2e:7d:1d: d3:8b:4c:30:e2:20:42:8a:df:11:8f:83:44:1a:81: dc:c0:2a:64:15:36:9a:6a:b1:54:60:07:9e:b2:24: e6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AD:22:C6:B4:C1:2F:D6:B8:21:A8:CB:C5:09:97:82:5E:FF:73:5E X509v3 Authority Key Identifier: keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ab:74:25:81:1f:45:9b:d5:33:e3:0e:c7:7a:81:52:2b:a1: e0:d3:19:f0:6b:75:53:6f:cd:98:29:df:27:ac:aa:4c:71:c4: a7:bc:99:4f:ab:bd:27:b5:1a:97:9d:81:f8:40:91:c0:57:ae: 10:19:0b:8d:db:a0:42:73:54:5e:11:6f:54:7f:45:84:f8:5c: c1:01:78:f4:7d:00:ec:ab:b4:e7:a6:67:d4:69:57:de:78:62: 0c:97:70:5a:f8:c1:65:2d:21:1f:01:56:7c:3d:9e:0b:59:0e: 00:c5:48:ae:ad:9a:be:49:3b:cf:83:1c:c1:8f:3e:2e:94:51: 6d:8c:f5:1b:69:7a:ec:1a:fd:e2:4a:30:34:bc:e9:d4:46:88: 62:d9:52:a5:87:88:e8:69:22:11:ee:ca:fb:f6:29:a5:f0:f6: 8a:f2:91:75:93:93:f9:f1:2a:f4:0e:64:65:7b:14:ff:24:c6: 0b:ba:0e:56:eb:55:25:70:00:f3:80:b9:79:65:24:54:fd:8f: 35:92:71:64:4a:45:bf:b9:fd:9b:ef:32:ac:d5:c1:9b:b9:af: 9c:0b:39:b0:4e:7f:c5:48:a9:46:94:44:fb:6f:a6:39:8c:7c: 40:79:98:d6:09:74:63:ae:9f:40:3f:f5:2b:e8:a9:2d:a9:fd: 2e:04:de:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJFRkYxMTAvBgNVBAUTKDM1NDMzQzlFQzQwODA5OUY3MDE4QkM1MTQ0MUQyMkM0 QzExRkMzODUwHhcNMjYwNzAzMDc0MTIwWhcNMjYwNzEwMDc0MTIwWjAYMRYwFAYD VQQDEw02YTQ3NjdhMS1kN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBX3RHeov7/sNwUv6ryBg/gz4bJZo4/F50Lu/t7VOk5McIxWOgOipiCDTxy2 Ag4fKmcQUD+1tQMwLZS8UX4JM4dC0uII7JSwjmkZN+O0WdiPc+BPwxx4clcJ/kCG GKsRFxlS/UsDh7U1y8rxQVLOk7G/EEb1l8RKoylJpxCC1u/wV8+4FEV16aNFaZrd J647bC9uRJFSP3ynaYyxHMaVXllk3/oNiysJN7XAlnhydyb/JYblI7b1VF/MFRa7 DzbvcxzNW80qeYMduJmaeZJIAWRcX+BicL00JIPs1hIufR3Ti0ww4iBCit8Rj4NE GoHcwCpkFTaaarFUYAeesiTmuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMGtIsa0 wS/WuCGoy8UJl4Je/3NeMB8GA1UdIwQYMBaAFDVDPJ7ECAmfcBi8UUQdIsTBH8OF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkVGRi9BQjk3NUJDRTQ4 NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNaOXdHTHhSUkIwaXhNRWZ3 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05VTThuc1FJQ1o5d0dMeFJSQjBpeE1FZnc0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkVGRi9BQjk3NUJDRTQ4NDkxMUYwQkYwNzAzNzBDNEY5QUUwMi9OVU04bnNRSUNa OXdHTHhSUkIwaXhNRWZ3NFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMqt0JYEfRZvVM+MOx3qBUiuh4NMZ8Gt1U2/NmCnfJ6yqTHHEp7yZT6u9J7Ua l52B+ECRwFeuEBkLjdugQnNUXhFvVH9FhPhcwQF49H0A7Ku056Zn1GlX3nhiDJdw WvjBZS0hHwFWfD2eC1kOAMVIrq2avkk7z4McwY8+LpRRbYz1G2l67Br94kowNLzp 1EaIYtlSpYeI6GkiEe7K+/YppfD2ivKRdZOT+fEq9A5kZXsU/yTGC7oOVutVJXAA 84C5eWUkVP2PNZJxZEpFv7n9m+8yrNXBm7mvnAs5sE5/xUipRpRE+2+mOYx8QHmY 1gl0Y66fQD/1K+ipLan9LgTepQ== -----END CERTIFICATE-----Generated at Sun Jul 5 08:39:15 2026 by rpki-client