$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft File: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json) Hash identifier: nTJxq6RMvxPDNrrMWOj7UTPKZXgfMH9gKLIDnnJIvV8= Subject key identifier: EA:F9:BC:63:84:20:1F:9F:26:82:D3:A5:C2:2F:76:38:87:87:26:17 Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft Manifest number: D8 Signing time: Fri 17 Jul 2026 07:53:03 +0000 Manifest this update: Fri 17 Jul 2026 07:53:02 +0000 Manifest next update: Fri 24 Jul 2026 07:53:02 +0000 Files and hashes: 1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: xZi7jYNoTVUw7oLsFMUIjMjICg98qD6/JXwydPthrTs=) 2: F88154843B9D11F091B39D67C4F9AE02.roa (hash: WttgIko4+9s/vHPmH0/bx3r2YOermo25w+xjC3iigHs=) 3: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: aa37TZjw6HNm2WFQiAgnFDeT1PF+5A+xhsToPCU7ZoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 07:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Jul 17 07:53:02 2026 GMT Not After : Jul 24 07:53:02 2026 GMT Subject: CN=6a59df5e-093a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:3c:3e:9e:cb:71:5f:29:42:85:52:97:2c: c7:20:74:02:af:b3:65:14:42:bc:54:b5:36:f3:ec: 21:bd:79:35:3b:88:eb:58:dc:9c:6f:db:ef:96:e0: a6:95:9f:60:35:c4:51:e9:21:fe:b6:54:91:b4:86: db:26:98:65:5b:11:da:e0:c7:34:c3:1f:b5:91:14: 6f:cf:90:88:de:74:ef:03:0a:7a:87:dd:f0:96:de: 9f:00:93:a7:57:75:5d:91:63:9e:5f:a3:6b:c3:19: f5:18:e5:f8:4f:9e:da:27:92:5f:0b:a0:5a:d9:de: f2:5c:35:46:b1:1f:ac:ae:9c:4e:e5:27:42:34:41: 59:fa:07:89:99:4e:df:62:28:76:38:32:5c:3f:4b: 92:f5:5c:0d:b3:89:f0:2b:a6:10:cf:27:1e:8a:a3: 55:af:54:cb:f6:b5:9b:39:32:49:16:b0:92:3e:11: c4:9c:9f:0a:3a:0c:89:b0:a6:85:fd:c6:05:c7:d8: 2e:95:ef:6f:15:3a:fd:b3:a2:67:30:d2:4c:ac:d4: fb:a5:e7:09:7e:ad:ad:34:d7:7f:ec:96:8f:20:d8: b5:c2:9c:09:db:cf:57:52:52:ed:34:ad:1b:6c:20: a6:20:f0:a1:b4:57:66:9a:c8:c3:34:1e:cf:aa:54: 8a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F9:BC:63:84:20:1F:9F:26:82:D3:A5:C2:2F:76:38:87:87:26:17 X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:2e:77:3e:c0:3a:92:56:15:1d:64:46:f1:08:68:fb:ed:07: 9d:fa:6f:0d:c1:3b:38:f8:45:a2:4e:fd:db:a5:f3:47:6d:43: 80:d3:e2:40:21:e4:46:9a:ae:6a:89:0c:18:f2:5a:62:1f:8a: 18:d1:2a:46:ed:8e:e6:68:00:e3:cf:75:dc:0d:9d:73:77:f8: 2c:f5:df:51:56:ce:b8:c2:30:c6:cb:97:9f:9d:3b:e1:01:da: 33:9e:7a:8e:93:8a:43:11:0d:27:2e:60:d6:b5:33:2f:5e:14: a2:d5:86:e3:ec:91:0c:78:99:ef:00:11:26:a7:ea:5f:3f:1c: 72:56:04:32:25:67:63:b9:49:de:c0:a4:94:7c:f8:93:d1:bd: e3:95:8a:81:43:1b:22:1b:52:96:3e:b9:7c:7b:8b:74:ab:87: 51:77:4d:78:69:21:15:7f:69:44:15:a8:c1:2b:0f:0d:17:f8: 62:27:b8:c0:0f:83:ef:51:a1:75:f2:e4:10:65:7b:8b:da:54: 9a:ef:e7:56:b0:0d:83:0c:f4:71:c6:73:80:77:e9:22:41:dc: 23:ea:e2:8f:a2:01:cf:c2:17:d1:f1:50:ba:7a:1a:e6:ce:4e: 15:c9:28:61:6a:24:18:03:aa:3f:3b:97:0f:ad:c7:a9:26:bf: bc:86:ac:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMTAxMTAvBgNVBAUTKEUyQjBERkE2OTBEMkM3RUFDNDM2MzY3NTZFNDM3QjdD MjYyNkY0QkIwHhcNMjYwNzE3MDc1MzAyWhcNMjYwNzI0MDc1MzAyWjAYMRYwFAYD VQQDEw02YTU5ZGY1ZS0wOTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRY8Pp7LcV8pQoVSlyzHIHQCr7NlFEK8VLU28+whvXk1O4jrWNycb9vvluCm lZ9gNcRR6SH+tlSRtIbbJphlWxHa4Mc0wx+1kRRvz5CI3nTvAwp6h93wlt6fAJOn V3VdkWOeX6Nrwxn1GOX4T57aJ5JfC6Ba2d7yXDVGsR+srpxO5SdCNEFZ+geJmU7f Yih2ODJcP0uS9VwNs4nwK6YQzyceiqNVr1TL9rWbOTJJFrCSPhHEnJ8KOgyJsKaF /cYFx9gule9vFTr9s6JnMNJMrNT7pecJfq2tNNd/7JaPINi1wpwJ289XUlLtNK0b bCCmIPChtFdmmsjDNB7PqlSKfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOr5vGOE IB+fJoLTpcIvdjiHhyYXMB8GA1UdIwQYMBaAFOKw36aQ0sfqxDY2dW5De3wmJvS7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMxMC8wRTk0MDVCQTNC OUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gtckVOaloxYmtON2ZDWW05 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMxMC8wRTk0MDVCQTNCOUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gt ckVOaloxYmtON2ZDWW05THMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmC53PsA6klYVHWRG8Qho++0HnfpvDcE7OPhFok7926XzR21DgNPiQCHkRpqu aokMGPJaYh+KGNEqRu2O5mgA48913A2dc3f4LPXfUVbOuMIwxsuXn5074QHaM556 jpOKQxENJy5g1rUzL14UotWG4+yRDHiZ7wARJqfqXz8cclYEMiVnY7lJ3sCklHz4 k9G945WKgUMbIhtSlj65fHuLdKuHUXdNeGkhFX9pRBWowSsPDRf4Yie4wA+D71Gh dfLkEGV7i9pUmu/nVrANgwz0ccZzgHfpIkHcI+rij6IBz8IX0fFQunoa5s5OFcko YWokGAOqPzuXD63HqSa/vIasQg== -----END CERTIFICATE-----Generated at Sat Jul 18 03:28:24 2026 by rpki-client