$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft File: MU9VrlJExM2xD3hN_xXQItOJaEg.mft (raw, json) Hash identifier: mw/PbRpU7qbt0zHRumZosgDJ6+VgiPtffIP4JpiLZQk= Subject key identifier: B9:BC:A0:A7:34:CD:20:47:C1:8E:86:CD:76:AA:7E:E3:07:AF:7E:8B Authority key identifier: 31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 Certificate issuer: /CN=A91F4288/serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Certificate serial: 1EA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft Manifest number: 1E77 Signing time: Sun 26 Jul 2026 16:09:47 +0000 Manifest this update: Sun 26 Jul 2026 16:09:47 +0000 Manifest next update: Sun 02 Aug 2026 16:09:47 +0000 Files and hashes: 1: MU9VrlJExM2xD3hN_xXQItOJaEg.crl (hash: fvelKGILFhmhobWc5oYh7BbYycPgD4BKMVX/2XqmGyc=) 2: 30C10672A27411E68C8EC670C4F9AE02.roa (hash: b5jJ0XYRIPMCiG6TS1QuIIn72XeOYM6z8qgDLi8Q27c=) 3: FC3B9966A80F11F083B2493AC4F9AE02.roa (hash: dCYCraCe4BAH3K0YJs5ny72N+4yB3GJ0WgL75Ya+JGE=) 4: 2445BC6A6FCE11E9AA5D2439C4F9AE02.roa (hash: 1/N+x4tq6/c9xUAJy159IIU+1McF9uoQiXksMGt8yqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 16:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7845 (0x1ea5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4288, serialNumber=314F55AE5244C4CDB10F784DFF15D022D3896848 Validity Not Before: Jul 26 16:09:47 2026 GMT Not After : Aug 2 16:09:47 2026 GMT Subject: CN=6a66314b-3272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:29:ae:bc:b8:76:aa:f6:e1:c9:69:d4:2c: 43:a9:75:69:67:d5:dd:cb:19:67:2c:cf:4e:d4:cf: df:c7:8b:2e:7a:6a:1a:7c:f9:43:e8:01:03:7e:8a: c3:61:e6:c0:74:70:47:12:ce:f4:32:c0:a9:ac:c3: 00:e2:63:72:7d:64:e3:c1:57:3f:68:c2:37:a4:b3: bd:55:14:53:68:6a:25:86:86:ff:e9:66:38:47:cc: db:2c:75:39:78:1e:59:ac:86:be:f6:f8:6a:2f:bf: 0d:d1:64:55:ad:68:10:19:d6:d9:82:6a:c8:04:bb: eb:26:06:ca:03:00:0b:2e:99:f6:9b:9f:24:69:d1: f6:e0:af:90:49:aa:a7:f5:96:8e:56:23:fd:6a:5e: 51:83:6c:ac:58:a9:e4:8b:6a:d9:e7:38:a2:1a:0b: 18:00:07:93:e8:c3:94:48:b2:a5:56:56:91:df:38: 67:4e:b0:08:03:6d:41:90:e5:4f:49:55:d5:f5:d0: 21:df:a4:20:8a:a7:c0:89:fe:93:ff:d9:1d:b0:bb: 5c:3f:df:be:8c:f4:34:70:e6:a7:c4:f6:59:76:a2: 39:00:d6:ae:53:8e:cf:26:c9:08:5a:2e:24:96:e2: b0:ef:eb:6c:e8:7e:7d:0c:89:0b:1f:24:48:8a:de: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:BC:A0:A7:34:CD:20:47:C1:8E:86:CD:76:AA:7E:E3:07:AF:7E:8B X509v3 Authority Key Identifier: keyid:31:4F:55:AE:52:44:C4:CD:B1:0F:78:4D:FF:15:D0:22:D3:89:68:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MU9VrlJExM2xD3hN_xXQItOJaEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4288/A93AA880A27211E6B8BC996AC4F9AE02/MU9VrlJExM2xD3hN_xXQItOJaEg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:89:e1:3a:fb:4c:5f:a6:6c:fe:8f:f6:55:ba:a2:e6:00:b8: ec:a4:c0:39:a2:c3:b2:21:a9:ef:33:84:42:c8:e1:87:fc:e6: 4f:50:df:2d:4a:8f:30:f6:45:17:fb:3c:10:6b:a3:52:01:dd: a6:46:f8:d6:08:a8:5f:b1:c5:5d:1c:7f:74:93:36:a5:d7:67: 91:2e:75:c3:62:aa:4b:19:16:27:36:8a:98:b7:08:16:9b:04: 9e:5a:f5:03:50:37:44:e7:61:4f:54:33:b6:9e:c8:c5:3d:e6: 0d:b3:a5:54:1c:5e:2a:70:71:eb:07:8a:60:23:bf:e6:17:24: fb:85:28:01:44:da:e3:62:76:7f:84:63:ef:85:fb:bf:6d:e3: b1:22:e9:25:95:ef:4b:fe:95:f9:12:ff:50:f3:19:a6:da:59: 28:6d:cd:a1:59:55:a0:dc:78:a6:6a:a2:02:25:ce:25:87:b4: db:dc:9a:9b:54:d1:0d:21:7d:0c:68:08:58:19:73:17:72:58: 8e:e5:a6:f4:76:bf:db:05:06:af:d4:88:96:d1:c7:09:7d:60: e4:08:a9:58:a3:fa:45:5b:76:69:9b:1d:2a:0c:9a:e2:33:64: 00:8e:5a:da:bd:33:fa:f4:71:55:26:08:ff:cb:8c:01:ac:27: 71:33:bb:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQyODgxMTAvBgNVBAUTKDMxNEY1NUFFNTI0NEM0Q0RCMTBGNzg0REZGMTVEMDIy RDM4OTY4NDgwHhcNMjYwNzI2MTYwOTQ3WhcNMjYwODAyMTYwOTQ3WjAYMRYwFAYD VQQDEw02YTY2MzE0Yi0zMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1kprry4dqr24clp1CxDqXVpZ9XdyxlnLM9O1M/fx4suemoafPlD6AEDforD YebAdHBHEs70MsCprMMA4mNyfWTjwVc/aMI3pLO9VRRTaGolhob/6WY4R8zbLHU5 eB5ZrIa+9vhqL78N0WRVrWgQGdbZgmrIBLvrJgbKAwALLpn2m58kadH24K+QSaqn 9ZaOViP9al5Rg2ysWKnki2rZ5ziiGgsYAAeT6MOUSLKlVlaR3zhnTrAIA21BkOVP SVXV9dAh36QgiqfAif6T/9kdsLtcP9++jPQ0cOanxPZZdqI5ANauU47PJskIWi4k luKw7+ts6H59DIkLHyRIit66ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLm8oKc0 zSBHwY6GzXaqfuMHr36LMB8GA1UdIwQYMBaAFDFPVa5SRMTNsQ94Tf8V0CLTiWhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDI4OC9BOTNBQTg4MEEy NzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhNMnhEM2hOX3hYUUl0T0ph RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01VOVZybEpFeE0yeEQzaE5feFhRSXRPSmFFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDI4OC9BOTNBQTg4MEEyNzIxMUU2QjhCQzk5NkFDNEY5QUUwMi9NVTlWcmxKRXhN MnhEM2hOX3hYUUl0T0phRWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAs4nhOvtMX6Zs/o/2Vbqi5gC47KTAOaLDsiGp7zOEQsjhh/zmT1DfLUqPMPZF F/s8EGujUgHdpkb41gioX7HFXRx/dJM2pddnkS51w2KqSxkWJzaKmLcIFpsEnlr1 A1A3ROdhT1Qztp7IxT3mDbOlVBxeKnBx6weKYCO/5hck+4UoAUTa42J2f4Rj74X7 v23jsSLpJZXvS/6V+RL/UPMZptpZKG3NoVlVoNx4pmqiAiXOJYe029yam1TRDSF9 DGgIWBlzF3JYjuWm9Ha/2wUGr9SIltHHCX1g5AipWKP6RVt2aZsdKgya4jNkAI5a 2r0z+vRxVSYI/8uMAawncTO7cg== -----END CERTIFICATE-----Generated at Mon Jul 27 23:30:12 2026 by rpki-client