$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json) Hash identifier: Mv6Hjbi+v2Nde7BmCX6tbmzu+yTlJjmnoWkWfkUSDXw= Subject key identifier: 6F:05:C5:58:2E:4C:1E:18:00:76:F2:2E:E4:47:CE:D4:E4:B5:0A:86 Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Certificate serial: 109D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft Manifest number: 1059 Signing time: Mon 20 Jul 2026 17:34:13 +0000 Manifest this update: Mon 20 Jul 2026 17:34:12 +0000 Manifest next update: Mon 27 Jul 2026 17:34:12 +0000 Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: DQ7sq0vgWELndOuvJTgBHVO9EkwzmDgoeCztWKHB1HE=) 2: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: 8pSbOUGcxd9kIRUOKnyb177dIko/tnYgGhNgiXbljP4=) 3: B490CD0621C911EB991D562EC4F9AE02.roa (hash: HAKJGo3+54uKtPG7Z+H+eKIrSnUl+M/R2bQu2unHATw=) 4: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: MMtbNQJMN6S4OIeEKXKOY3PxiKyZUm2osdIwKT/I6/8=) 5: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: uBTNO8LacSzwG2NHzzxDXw4qYGxUCRj8Y9JqVZrsvk4=) 6: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: Sm/OBak1L/GxeMDIT65Qr8dDGwL4HkNDx/zYxoxP+Z8=) 7: B3876B1821C911EB991D562EC4F9AE02.roa (hash: MalwjoN5cuoqPXC8qDmvp2vBk51alqMZE2wuotImz1Q=) 8: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: Ep5ULjpLJ97bV5VifiZFQEn0w2yErIZH+uUxSWGKvrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 17:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4253 (0x109d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Validity Not Before: Jul 20 17:34:12 2026 GMT Not After : Jul 27 17:34:12 2026 GMT Subject: CN=6a5e5c15-8826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2f:64:41:e9:9c:ef:b6:65:1a:3b:e0:be:a2: 15:16:39:1e:be:72:7d:c2:a5:ef:b2:f1:ed:3a:4e: 5e:a1:79:cb:f2:48:55:1a:7e:3d:bc:51:46:f4:6f: 0e:b1:0e:dc:82:5b:4f:a7:8f:20:f9:f9:df:94:7d: d7:c4:5e:1e:ea:ae:8f:e0:d0:3e:a7:27:dc:f2:cc: 49:07:aa:3a:a9:78:82:c5:fb:52:db:ab:af:33:34: 2c:6b:a9:26:bc:ea:d0:0e:c0:6f:69:d6:5b:00:4c: 36:49:b8:8f:67:87:1f:b8:10:bf:fa:2b:3e:12:82: 67:21:e0:97:30:71:26:99:af:0c:32:fb:ce:be:09: c2:23:2e:7c:ee:f6:3f:e6:ba:af:7b:1d:7b:87:9d: 7f:7a:38:6b:a4:c3:d8:68:44:f9:07:b3:d3:77:00: b6:1c:2c:94:96:b4:11:7f:e6:0c:4c:e2:bd:f5:23: 31:d3:96:c1:d9:3b:ba:cc:99:d9:b8:95:8d:43:95: 04:57:65:3a:ab:56:96:43:7b:50:e3:fd:2c:e7:0a: d1:97:ac:4d:28:7e:cc:c4:2f:3d:fd:73:e6:3c:41: 74:07:e4:3b:be:cb:6c:08:6c:45:83:54:d4:6c:f1: 72:73:01:ae:49:1b:93:cc:4b:1a:38:1b:ef:a2:b8: d1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:05:C5:58:2E:4C:1E:18:00:76:F2:2E:E4:47:CE:D4:E4:B5:0A:86 X509v3 Authority Key Identifier: keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:9f:5a:53:98:62:d9:d4:67:17:66:51:a3:ec:a0:ae:5e:fb: a4:73:c4:e4:a9:78:b6:ed:e5:ad:f6:3d:3e:3a:eb:63:12:08: 00:cb:d1:5a:1c:1e:95:a8:04:db:bd:a3:a3:ea:d6:d5:26:d4: 36:d1:c1:d2:f7:d3:8f:91:a4:20:86:b0:40:70:2e:3a:73:39: 87:97:d5:f0:59:21:a5:59:40:d6:74:bc:0a:bd:92:ea:ad:f8: bb:24:ca:7e:da:12:32:f4:30:c9:e8:76:e9:d3:ac:a4:96:e3: 25:6b:cf:82:26:90:59:bc:a2:41:78:8b:1d:05:5a:2c:88:56: 70:b2:f2:8d:6d:43:07:ef:c6:58:83:a8:ab:86:6e:6e:09:48: ae:14:28:12:29:4c:92:78:b7:8f:2d:e3:0c:44:0e:30:1b:21: 6d:2f:4e:5e:98:bc:cb:3c:a3:ae:99:b0:38:07:f8:dd:11:63: a2:ec:03:5c:0c:07:40:81:a5:51:65:4e:a0:ed:bf:1e:46:c2: b1:51:16:25:5d:b7:39:d7:4b:70:e0:4b:ed:0f:93:e9:fc:d4: fd:b0:5c:d3:f6:cc:8a:37:13:9c:01:33:24:23:96:8d:ca:5f: 82:2f:db:d4:a3:86:13:c4:4b:42:6e:59:b1:62:68:fb:08:63: 25:e7:ce:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2 RkZBQzQ2NjEwHhcNMjYwNzIwMTczNDEyWhcNMjYwNzI3MTczNDEyWjAYMRYwFAYD VQQDEw02YTVlNWMxNS04ODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAly9kQemc77ZlGjvgvqIVFjkevnJ9wqXvsvHtOk5eoXnL8khVGn49vFFG9G8O sQ7cgltPp48g+fnflH3XxF4e6q6P4NA+pyfc8sxJB6o6qXiCxftS26uvMzQsa6km vOrQDsBvadZbAEw2SbiPZ4cfuBC/+is+EoJnIeCXMHEmma8MMvvOvgnCIy587vY/ 5rqvex17h51/ejhrpMPYaET5B7PTdwC2HCyUlrQRf+YMTOK99SMx05bB2Tu6zJnZ uJWNQ5UEV2U6q1aWQ3tQ4/0s5wrRl6xNKH7MxC89/XPmPEF0B+Q7vstsCGxFg1TU bPFycwGuSRuTzEsaOBvvorjRLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8FxVgu TB4YAHbyLuRHztTktQqGMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0YwMi9DQ0FCNTc1MDYzRjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JB WHBsMVJiQ05ONU52LXNSbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKJ9aU5hi2dRnF2ZRo+ygrl77pHPE5Kl4tu3lrfY9PjrrYxIIAMvRWhwelagE 272jo+rW1SbUNtHB0vfTj5GkIIawQHAuOnM5h5fV8FkhpVlA1nS8Cr2S6q34uyTK ftoSMvQwyeh26dOspJbjJWvPgiaQWbyiQXiLHQVaLIhWcLLyjW1DB+/GWIOoq4Zu bglIrhQoEilMkni3jy3jDEQOMBshbS9OXpi8yzyjrpmwOAf43RFjouwDXAwHQIGl UWVOoO2/HkbCsVEWJV23OddLcOBL7Q+T6fzU/bBc0/bMijcTnAEzJCOWjcpfgi/b 1KOGE8RLQm5ZsWJo+whjJefOSA== -----END CERTIFICATE-----Generated at Tue Jul 21 10:15:39 2026 by rpki-client