$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft File: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft (raw, json) Hash identifier: hAyLQL1dm9F7LNOe/uGcW/UqamRmyQdYY+FnBsPhD9k= Subject key identifier: E8:72:A3:EA:5B:B1:78:45:80:C9:8F:3D:09:40:8C:45:3B:73:66:1C Authority key identifier: 37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB Certificate issuer: /CN=A91E3E33/serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Certificate serial: 12FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft Manifest number: 12D2 Signing time: Sun 02 Aug 2026 17:06:14 +0000 Manifest this update: Sun 02 Aug 2026 17:06:13 +0000 Manifest next update: Sun 09 Aug 2026 17:06:13 +0000 Files and hashes: 1: N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl (hash: rXu97hY0ASjYK0yWq+X0rmxnTsPDDiVSSggxpdvzQ1c=) 2: D0B8C09E1BBF11EAA64ECF70C4F9AE02.roa (hash: QNLelKdMSlDKmsbvqvRzrLkhu/2hfJJqmOa+I6J1bAk=) 3: 29ED0D46839011EE946C5E63C4F9AE02.roa (hash: QiP/Tw9hklight716IQFhsBaTNPHXt42nLTbqUKFQ1w=) 4: 4551BE2CD19D11EAA120EE14C4F9AE02.roa (hash: yX0Uzg9eTPoxhzg9lrLk/1K20OmA34T+jetmGie5oOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Aug 2026 17:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4859 (0x12fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E33, serialNumber=379743714CE012230AA978BB1AA8C790E70667AB Validity Not Before: Aug 2 17:06:13 2026 GMT Not After : Aug 9 17:06:13 2026 GMT Subject: CN=6a6f7906-fa21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:9c:e3:57:ea:b3:00:1c:a0:13:83:f4:70: 99:08:ab:8d:3b:8b:13:67:d8:f8:d2:f6:12:aa:c3: b4:ec:8e:e5:05:46:0e:97:bf:5f:6c:9e:8f:25:bf: 59:9e:34:b0:4b:18:57:09:58:18:2e:8b:bc:d4:59: d1:ae:db:4c:02:56:b7:e8:10:08:9b:73:7b:08:aa: 53:5f:b9:f7:d1:13:30:ad:fa:5a:50:f4:1f:ec:94: ca:5a:a2:19:98:1d:72:80:64:df:32:d1:63:77:b5: 65:46:22:d6:cd:a8:7a:d9:c5:8d:a9:9a:4f:7b:73: 50:7e:bb:85:4f:7c:78:e7:c0:16:30:1b:c7:d9:e0: 0f:5d:db:c4:7b:59:43:f7:49:b7:46:8c:de:12:dd: 04:f7:4d:b8:12:26:48:26:92:d7:42:77:f1:c1:15: 45:cc:cd:e0:f2:87:4b:1e:bd:8b:ca:9c:50:87:02: 98:96:81:f1:23:13:fd:e5:5a:70:d7:54:b8:30:5f: 6d:82:b8:a0:be:37:9a:8c:86:9d:ff:74:c5:fb:0c: 73:ff:e2:52:aa:ad:36:a5:42:57:21:1f:27:8f:d6: 21:4e:14:40:e9:ef:ed:09:59:9e:5e:1c:28:83:e8: d1:d1:24:05:71:dc:b6:3c:83:fa:98:09:4f:b7:5e: 33:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:72:A3:EA:5B:B1:78:45:80:C9:8F:3D:09:40:8C:45:3B:73:66:1C X509v3 Authority Key Identifier: keyid:37:97:43:71:4C:E0:12:23:0A:A9:78:BB:1A:A8:C7:90:E7:06:67:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E33/877A79B6E9D111E8AC892770C4F9AE02/N5dDcUzgEiMKqXi7GqjHkOcGZ6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:63:12:f4:a5:22:95:81:e0:8e:eb:a9:9b:f6:fc:5d:c8:f9: 9c:03:b0:04:45:60:dc:20:19:f1:f3:9b:0a:64:54:63:c1:6f: 6a:0d:e9:19:c3:35:ce:d8:1f:5d:4c:30:8e:36:2f:37:eb:84: 7d:fc:c9:6e:a6:a1:4c:2c:b4:7d:3c:34:07:5f:39:2c:27:da: fd:ed:48:22:6e:28:36:d9:9b:02:0e:ec:4a:29:2d:24:c7:75: 7e:14:c3:25:8b:b4:3e:a1:63:7c:25:99:c0:70:52:43:93:04: e0:88:bf:19:47:fd:fc:fc:b4:34:15:76:f7:d0:fc:bb:d1:1f: 9f:c1:3d:96:cc:c6:27:10:b3:b5:db:9c:3b:cd:a1:29:6c:a6: 35:47:d5:63:bb:79:2d:58:3f:0f:5a:60:9a:98:0e:e3:7c:19: 81:0b:97:85:0f:1f:fc:c6:83:e4:d9:9c:0a:a2:ef:0c:22:78: 17:e4:a0:99:e9:ef:4e:34:c7:af:d5:ee:7a:04:dc:a0:93:ba: 93:37:11:91:ca:4a:cf:00:92:04:c1:06:5b:95:19:af:75:86: b1:61:12:9f:c3:c9:81:bc:3e:3f:34:09:ef:39:d6:30:60:28: a9:eb:06:88:6c:55:32:3b:3e:2e:03:58:96:96:b7:1f:48:4f: 4a:bd:78:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFMzMxMTAvBgNVBAUTKDM3OTc0MzcxNENFMDEyMjMwQUE5NzhCQjFBQThDNzkw RTcwNjY3QUIwHhcNMjYwODAyMTcwNjEzWhcNMjYwODA5MTcwNjEzWjAYMRYwFAYD VQQDEw02YTZmNzkwNi1mYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWmc41fqswAcoBOD9HCZCKuNO4sTZ9j40vYSqsO07I7lBUYOl79fbJ6PJb9Z njSwSxhXCVgYLou81FnRrttMAla36BAIm3N7CKpTX7n30RMwrfpaUPQf7JTKWqIZ mB1ygGTfMtFjd7VlRiLWzah62cWNqZpPe3NQfruFT3x458AWMBvH2eAPXdvEe1lD 90m3RozeEt0E9024EiZIJpLXQnfxwRVFzM3g8odLHr2LypxQhwKYloHxIxP95Vpw 11S4MF9tgrigvjeajIad/3TF+wxz/+JSqq02pUJXIR8nj9YhThRA6e/tCVmeXhwo g+jR0SQFcdy2PIP6mAlPt14z0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOhyo+pb sXhFgMmPPQlAjEU7c2YcMB8GA1UdIwQYMBaAFDeXQ3FM4BIjCql4uxqox5DnBmer MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0UzMy84NzdBNzlCNkU5 RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0VpTUtxWGk3R3FqSGtPY0da NnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL041ZERjVXpnRWlNS3FYaTdHcWpIa09jR1o2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0UzMy84NzdBNzlCNkU5RDExMUU4QUM4OTI3NzBDNEY5QUUwMi9ONWREY1V6Z0Vp TUtxWGk3R3FqSGtPY0daNnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe2MS9KUilYHgjuupm/b8Xcj5nAOwBEVg3CAZ8fObCmRUY8Fvag3pGcM1ztgf XUwwjjYvN+uEffzJbqahTCy0fTw0B185LCfa/e1IIm4oNtmbAg7sSiktJMd1fhTD JYu0PqFjfCWZwHBSQ5ME4Ii/GUf9/Py0NBV299D8u9Efn8E9lszGJxCztducO82h KWymNUfVY7t5LVg/D1pgmpgO43wZgQuXhQ8f/MaD5NmcCqLvDCJ4F+SgmenvTjTH r9XuegTcoJO6kzcRkcpKzwCSBMEGW5UZr3WGsWESn8PJgbw+PzQJ7znWMGAoqesG iGxVMjs+LgNYlpa3H0hPSr14LA== -----END CERTIFICATE-----Generated at Tue Aug 4 17:30:36 2026 by rpki-client