$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft File: a-Q-axOWQ8tMGebfcyO1A8STEds.mft (raw, json) Hash identifier: CHCjVdrp25aWC0ia1CS4PmTo15vcIihg/uZjMTiPNYk= Subject key identifier: 40:2B:0B:81:0D:53:8F:82:3A:E4:26:66:02:E9:40:93:A0:A4:1E:A9 Authority key identifier: 6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB Certificate issuer: /CN=A91E8D27/serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB Certificate serial: 34F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft Manifest number: 34CB Signing time: Sun 26 Jul 2026 15:23:27 +0000 Manifest this update: Sun 26 Jul 2026 15:23:26 +0000 Manifest next update: Sun 02 Aug 2026 15:23:26 +0000 Files and hashes: 1: a-Q-axOWQ8tMGebfcyO1A8STEds.crl (hash: jUawq5fxU6xgB2qYV+7zhTzCVIIzfGE5NhhzlFd76U4=) 2: A634576635D511F1A68BE981A0833773.roa (hash: 4ZRG+jBKDkZrZQYJ33ftXyXhm7MnH5udmfkKK13Boew=) 3: E63D6AB086EC11F19E006003A7EE528E.roa (hash: HA6O4500TdNqLPszScg0UgHEWNLVJDVH5xC0mHNZQLw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 15:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13552 (0x34f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8D27, serialNumber=6BE43E6B139643CB4C19E6DF7323B503C49311DB Validity Not Before: Jul 26 15:23:26 2026 GMT Not After : Aug 2 15:23:26 2026 GMT Subject: CN=6a66266f-184e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:5a:6d:8c:b1:e0:37:2c:41:30:92:cc:d5: d7:e9:25:b2:a5:38:df:a9:4b:c6:80:36:ae:2f:c6: ff:3d:a2:a4:1b:64:21:cb:db:09:0d:25:d3:ac:94: e3:4c:cb:68:43:a2:89:4b:f5:02:da:10:3b:2c:bf: 37:46:f4:73:9f:71:f1:54:9e:7a:ac:8d:f7:41:b3: cd:61:19:f2:0e:fc:4f:49:b3:a0:52:a4:a8:f5:1d: b4:b2:e3:d9:19:7f:05:1a:82:5f:3a:8a:11:3c:49: 52:fa:83:8d:d7:14:50:7c:1f:4e:63:86:92:1d:cc: 9a:77:fc:77:6f:4b:fc:2d:7f:73:b7:3e:24:53:71: 91:fd:5e:e1:80:6b:e0:32:bb:79:a9:11:23:17:be: 9e:40:85:50:c5:b4:47:2d:55:f9:bc:99:5f:8b:84: 35:34:2f:c0:9b:d5:f5:a3:af:50:94:55:32:c6:fc: 22:b5:5b:e7:74:c6:1a:b0:8a:22:dc:56:14:24:1b: 3f:68:b9:81:77:95:d5:3a:86:45:d8:d4:7d:3b:c5: d5:f8:b0:ab:6b:80:c6:be:d4:52:6e:06:71:bf:ba: f2:56:38:6f:d9:1d:03:95:8b:c0:7f:cd:60:f3:4c: 6b:25:28:d6:c3:10:e5:1d:77:9c:f1:09:f6:a2:fd: 5b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2B:0B:81:0D:53:8F:82:3A:E4:26:66:02:E9:40:93:A0:A4:1E:A9 X509v3 Authority Key Identifier: keyid:6B:E4:3E:6B:13:96:43:CB:4C:19:E6:DF:73:23:B5:03:C4:93:11:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-Q-axOWQ8tMGebfcyO1A8STEds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8D27/C0C5807042E911E29750A32E2979BB20/a-Q-axOWQ8tMGebfcyO1A8STEds.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e8:c2:ea:59:4a:19:de:82:d1:d1:8d:b9:de:60:89:05:13: 12:57:1a:74:c3:33:91:ef:ce:43:8c:f3:04:42:68:19:cc:16: eb:e3:4c:3c:f2:de:5c:b4:58:4c:d1:e0:22:09:ee:c0:ca:d7: fb:c1:51:e2:c9:f2:18:45:09:7e:0a:4f:89:20:79:e1:52:6c: 8e:5c:7c:38:c2:45:ef:f1:c1:2e:d9:7b:1e:a4:b4:eb:48:81: 73:af:a1:06:10:b1:23:79:e0:2b:4c:03:c7:ca:63:28:01:1e: a9:0d:3a:4f:09:79:2b:bc:bd:de:df:28:b2:20:aa:b5:dc:ec: b2:73:f2:8d:ba:70:3f:a4:f2:7c:1d:15:db:9a:e0:c7:21:7a: 30:18:ea:67:2b:b2:d3:1b:1f:02:d6:f7:6f:bd:98:43:0b:de: 49:aa:b2:11:59:cf:0e:3f:72:ef:93:8e:e5:77:ea:65:58:bc: ce:66:02:57:7f:0f:ad:c1:97:2d:98:29:03:67:b6:c6:31:2b: de:b3:66:e0:45:af:db:27:d2:78:cf:e1:f8:2b:43:22:73:26: 09:f3:bc:d4:86:76:15:05:da:b0:14:33:48:3c:66:de:e9:d0: 3b:e9:20:37:d7:24:55:5e:20:f0:56:0e:78:cc:77:42:73:6c: a0:7b:58:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThEMjcxMTAvBgNVBAUTKDZCRTQzRTZCMTM5NjQzQ0I0QzE5RTZERjczMjNCNTAz QzQ5MzExREIwHhcNMjYwNzI2MTUyMzI2WhcNMjYwODAyMTUyMzI2WjAYMRYwFAYD VQQDEw02YTY2MjY2Zi0xODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoANabYyx4DcsQTCSzNXX6SWypTjfqUvGgDauL8b/PaKkG2Qhy9sJDSXTrJTj TMtoQ6KJS/UC2hA7LL83RvRzn3HxVJ56rI33QbPNYRnyDvxPSbOgUqSo9R20suPZ GX8FGoJfOooRPElS+oON1xRQfB9OY4aSHcyad/x3b0v8LX9ztz4kU3GR/V7hgGvg Mrt5qREjF76eQIVQxbRHLVX5vJlfi4Q1NC/Am9X1o69QlFUyxvwitVvndMYasIoi 3FYUJBs/aLmBd5XVOoZF2NR9O8XV+LCra4DGvtRSbgZxv7ryVjhv2R0DlYvAf81g 80xrJSjWwxDlHXec8Qn2ov1bfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEArC4EN U4+COuQmZgLpQJOgpB6pMB8GA1UdIwQYMBaAFGvkPmsTlkPLTBnm33MjtQPEkxHb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEQyNy9DMEM1ODA3MDQy RTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4dE1HZWJmY3lPMUE4U1RF ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtUS1heE9XUTh0TUdlYmZjeU8xQThTVEVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEQyNy9DMEM1ODA3MDQyRTkxMUUyOTc1MEEzMkUyOTc5QkIyMC9hLVEtYXhPV1E4 dE1HZWJmY3lPMUE4U1RFZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqujC6llKGd6C0dGNud5giQUTElcadMMzke/OQ4zzBEJoGcwW6+NMPPLeXLRY TNHgIgnuwMrX+8FR4snyGEUJfgpPiSB54VJsjlx8OMJF7/HBLtl7HqS060iBc6+h BhCxI3ngK0wDx8pjKAEeqQ06Twl5K7y93t8osiCqtdzssnPyjbpwP6TyfB0V25rg xyF6MBjqZyuy0xsfAtb3b72YQwveSaqyEVnPDj9y75OO5XfqZVi8zmYCV38PrcGX LZgpA2e2xjEr3rNm4EWv2yfSeM/h+CtDInMmCfO81IZ2FQXasBQzSDxm3unQO+kg N9ckVV4g8FYOeMx3QnNsoHtY0A== -----END CERTIFICATE-----Generated at Mon Jul 27 17:14:02 2026 by rpki-client