$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft File: jM5ORhldFXBPtWKTLgq2Kg65iiY.mft (raw, json) Hash identifier: 9rdJP2NHQeT/nR5R6WfTirehRxjHa+OYmIrgQZf7VS0= Subject key identifier: 40:D5:48:4D:47:43:0F:4C:93:2E:89:6A:2D:AB:07:91:63:C6:5C:41 Authority key identifier: 8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 Certificate issuer: /CN=A91F7334/serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft Manifest number: 04E3 Signing time: Wed 05 Aug 2026 00:23:59 +0000 Manifest this update: Wed 05 Aug 2026 00:23:59 +0000 Manifest next update: Wed 12 Aug 2026 00:23:59 +0000 Files and hashes: 1: jM5ORhldFXBPtWKTLgq2Kg65iiY.crl (hash: pGzr1Bre/qDHQ2QDz0gmRf+0qV/GoozVT3FgMuqgnqo=) 2: 8B8B954E6C9011ED9AAF427AC4F9AE02.roa (hash: jt8czHkqDAiIWpmhFez0BMJFRbxnxmNlnLH67Wuq05Y=) 3: 0B7C7B7C751311ECA43F7D3BC4F9AE02.roa (hash: BviysmdqRD5SHQtytVhZ+gVShXWPkwicoPT5mAKuO60=) 4: 96F24818744F11ECBFE4A57DC4F9AE02.roa (hash: niq2x+TSIaVr2M9Yq4uJinm2FfqqQeskl0ZKo8P7pbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 00:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7334, serialNumber=8CCE4E46195D15704FB562932E0AB62A0EB98A26 Validity Not Before: Aug 5 00:23:59 2026 GMT Not After : Aug 12 00:23:59 2026 GMT Subject: CN=6a72829f-e5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:0a:39:c0:e7:39:0b:33:18:40:a8:e7:34: a8:e0:95:b6:bc:34:2d:c1:86:dd:b9:a9:55:0b:5d: fc:da:b2:f1:3d:6d:ac:e2:6d:ea:d1:f3:75:a5:e7: 01:f0:ef:81:b2:ab:62:15:90:4a:3e:c3:d8:64:8c: 1d:6f:a4:31:78:68:e2:cc:bf:dd:7c:ba:f2:fc:14: 36:7a:71:e6:6b:e2:74:bc:ee:86:65:a1:9f:04:e1: b4:4d:0d:60:02:31:e2:71:d8:33:a5:b9:82:04:7f: 45:95:f9:a0:96:a2:cb:30:76:6f:99:9d:6f:f8:42: ac:25:56:f0:98:90:c5:77:f9:95:cf:6a:30:26:4f: a1:56:a4:27:d3:49:d0:d0:6b:c4:2a:94:87:7d:b8: c5:d2:f9:20:98:a4:99:cb:45:d9:86:1f:4f:5c:d5: 3e:5e:4e:63:42:eb:12:77:d9:60:41:30:74:5b:49: 7c:5c:d2:8c:bc:e0:1b:61:36:a9:81:39:88:13:5e: 76:ad:a8:89:0c:a6:6c:3c:02:3d:7f:87:4e:ed:39: 46:c2:92:ad:08:8d:1e:00:3c:a1:dc:86:70:62:54: 26:b9:9f:32:a5:41:03:d0:ef:e1:e6:ce:7e:ac:4d: da:a2:f5:80:35:be:11:eb:c0:52:76:1b:3b:1d:cd: 2a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D5:48:4D:47:43:0F:4C:93:2E:89:6A:2D:AB:07:91:63:C6:5C:41 X509v3 Authority Key Identifier: keyid:8C:CE:4E:46:19:5D:15:70:4F:B5:62:93:2E:0A:B6:2A:0E:B9:8A:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jM5ORhldFXBPtWKTLgq2Kg65iiY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7334/7A4049DA744B11ECB9AA8D74C4F9AE02/jM5ORhldFXBPtWKTLgq2Kg65iiY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:fb:0b:6e:24:3b:e8:e7:88:34:f9:c5:5c:99:2a:c4:10:a4: 0a:3f:b6:9c:5e:85:fd:74:d9:f2:db:36:79:ff:21:93:7c:41: 10:d1:65:7c:39:a3:98:ed:5d:1e:ce:a4:f0:19:b2:81:1a:79: 2d:1c:cd:0f:b6:e7:18:86:93:93:c3:bb:36:dd:7b:86:a9:17: 54:37:88:63:dc:fb:17:93:7c:43:1d:dd:7e:75:d8:5a:90:8c: 1d:49:05:69:e6:e8:cd:e3:2b:4b:4a:42:10:9e:b0:08:78:a1: a6:65:82:8a:28:fa:64:86:8e:41:6f:5f:0d:2d:46:f8:cc:d1: 53:2d:1a:7d:7a:4a:85:bd:8f:5a:5d:fb:15:7b:38:fc:bd:dc: 37:c6:bd:0d:a7:0e:6f:25:13:7b:d3:13:6e:2f:bb:34:45:49: ed:9f:b0:56:3f:05:bf:76:10:86:43:12:4e:bd:e3:2c:6c:71: 88:5f:f3:7c:8e:dd:7a:b8:5f:ed:78:a1:2b:79:6d:c2:d5:77: fd:2d:66:a3:41:21:7f:90:d4:0e:5d:50:43:3e:52:4b:f2:e3: 5f:7b:e8:4c:8c:3e:d8:a1:3b:af:a0:5e:13:45:9d:82:d0:a1: f6:5d:f2:4f:45:bb:74:33:c2:d4:2e:32:8c:76:7c:29:24:11: 0c:57:ee:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjczMzQxMTAvBgNVBAUTKDhDQ0U0RTQ2MTk1RDE1NzA0RkI1NjI5MzJFMEFCNjJB MEVCOThBMjYwHhcNMjYwODA1MDAyMzU5WhcNMjYwODEyMDAyMzU5WjAYMRYwFAYD VQQDEw02YTcyODI5Zi1lNWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyMKOcDnOQszGECo5zSo4JW2vDQtwYbdualVC1382rLxPW2s4m3q0fN1pecB 8O+BsqtiFZBKPsPYZIwdb6QxeGjizL/dfLry/BQ2enHma+J0vO6GZaGfBOG0TQ1g AjHicdgzpbmCBH9FlfmglqLLMHZvmZ1v+EKsJVbwmJDFd/mVz2owJk+hVqQn00nQ 0GvEKpSHfbjF0vkgmKSZy0XZhh9PXNU+Xk5jQusSd9lgQTB0W0l8XNKMvOAbYTap gTmIE152raiJDKZsPAI9f4dO7TlGwpKtCI0eADyh3IZwYlQmuZ8ypUED0O/h5s5+ rE3aovWANb4R68BSdhs7Hc0qMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEDVSE1H Qw9Mky6Jai2rB5FjxlxBMB8GA1UdIwQYMBaAFIzOTkYZXRVwT7Viky4KtioOuYom MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzMzNC83QTQwNDlEQTc0 NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZYQlB0V0tUTGdxMktnNjVp aVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pNNU9SaGxkRlhCUHRXS1RMZ3EyS2c2NWlpWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzMzNC83QTQwNDlEQTc0NEIxMUVDQjlBQThENzRDNEY5QUUwMi9qTTVPUmhsZEZY QlB0V0tUTGdxMktnNjVpaVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALfsLbiQ76OeINPnFXJkqxBCkCj+2nF6F/XTZ8ts2ef8hk3xBENFlfDmjmO1d Hs6k8BmygRp5LRzND7bnGIaTk8O7Nt17hqkXVDeIY9z7F5N8Qx3dfnXYWpCMHUkF aebozeMrS0pCEJ6wCHihpmWCiij6ZIaOQW9fDS1G+MzRUy0afXpKhb2PWl37FXs4 /L3cN8a9DacObyUTe9MTbi+7NEVJ7Z+wVj8Fv3YQhkMSTr3jLGxxiF/zfI7derhf 7XihK3ltwtV3/S1mo0Ehf5DUDl1QQz5SS/LjX3voTIw+2KE7r6BeE0WdgtCh9l3y T0W7dDPC1C4yjHZ8KSQRDFfupQ== -----END CERTIFICATE-----Generated at Wed Aug 5 22:13:05 2026 by rpki-client