$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft File: Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json) Hash identifier: 1cOm57Y2VfwCKbg0mstq2W3jVzsta1ZPkz5YkUhwQuE= Subject key identifier: DC:D9:DC:9E:1E:EE:B4:C5:88:F7:64:D2:AF:D3:75:67:1A:4E:8D:02 Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 Certificate issuer: /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft Manifest number: EE Signing time: Sat 25 Jul 2026 08:10:07 +0000 Manifest this update: Sat 25 Jul 2026 08:10:06 +0000 Manifest next update: Sat 01 Aug 2026 08:10:06 +0000 Files and hashes: 1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: UN3kIjuxK7pM/4CV7uAwkth8bHOfpOJKZZI1M2z2v6o=) 2: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: ZAcnv2B2glJNz/amDzlP0oQS8f8IykGzbvOZt8DAQOY=) 3: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: V0jiGWcisCYeYKJhJdPZNpTEwuLUAeBQE/p7M60AP1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 08:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81 Validity Not Before: Jul 25 08:10:06 2026 GMT Not After : Aug 1 08:10:06 2026 GMT Subject: CN=6a646f5f-4b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:6e:58:1b:71:95:e9:74:9e:06:6d:26:32:90: d2:c8:3e:66:2f:0f:b5:76:8a:c4:2e:82:53:ec:4e: 1b:e7:10:e3:f6:c1:f9:a9:53:1f:ed:79:44:f7:c0: ad:6f:fb:d0:b6:ce:0e:f2:25:36:9e:d2:b4:76:6d: 4a:39:59:71:3e:b6:cb:58:a0:95:be:37:da:0a:0e: 4a:0e:e4:77:47:d2:b1:2e:64:93:0e:7a:82:b5:fb: cb:e0:35:53:de:32:7b:a1:2b:fc:37:1b:d9:80:88: bd:ac:fa:19:2f:a8:47:74:a6:a3:19:b7:e1:99:6b: 8f:af:c8:f5:02:72:a6:d8:31:da:35:b4:fa:77:bd: ff:c1:08:6b:17:13:d2:e8:82:bc:56:d0:1c:ae:26: 3e:a8:69:ef:0c:56:7b:7c:e9:fe:6e:31:e5:22:40: 99:30:85:f4:13:c5:06:e8:90:b9:c0:55:49:fa:7c: c2:d1:54:f8:50:70:6b:87:cc:02:24:ec:93:db:f8: 30:12:f5:13:53:6e:02:c7:a0:fc:e5:a4:21:24:69: 18:9e:ad:96:aa:ca:91:c7:88:d9:b6:ac:51:14:ba: 90:fc:f2:6b:68:11:9a:00:a6:c6:fd:ac:e3:73:af: f2:4e:bd:74:0a:b0:45:66:64:5e:92:4d:9d:1c:39: 3e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D9:DC:9E:1E:EE:B4:C5:88:F7:64:D2:AF:D3:75:67:1A:4E:8D:02 X509v3 Authority Key Identifier: keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:7a:cb:bf:6f:4d:67:7f:2c:26:fb:43:4f:76:7e:a4:08:82: 64:69:11:e2:c0:d6:b4:33:2a:de:83:48:28:27:11:b3:0b:b7: 28:e0:05:01:a3:f5:8e:c9:cb:91:de:19:7c:f7:95:79:e6:88: 47:b8:62:4c:c5:9f:74:af:e7:20:ac:ae:db:64:3a:16:95:1d: db:10:a2:ed:fd:1f:87:a4:44:4e:c2:10:d8:df:35:28:8c:41: 11:c7:8a:c6:51:fc:8d:ad:12:0c:75:50:27:6b:61:15:58:08: a7:ee:00:c2:f6:f1:7c:55:b2:57:4a:fb:1c:f1:2a:4c:fb:f3: ef:aa:8f:ea:d9:59:89:88:b8:cc:1a:35:97:87:f0:ab:7a:90: bf:d7:89:f6:80:98:0e:53:49:97:b9:84:8a:39:fc:f7:c9:b7: ca:15:c2:1e:4e:bc:25:7b:1b:2f:7b:c6:20:31:7f:58:09:ee: 28:54:c1:07:11:df:77:bf:96:f9:57:58:84:e7:4d:d4:12:1d: be:06:b1:09:2c:f3:81:43:36:01:80:39:73:62:b1:f9:d8:2e: cc:fd:e1:7f:29:8c:cc:63:2b:45:2d:83:35:c5:f0:22:08:bb: 70:aa:25:c4:c0:21:50:3b:cb:97:af:61:70:6b:25:23:1b:47: 10:c8:33:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRFMTMxMTAvBgNVBAUTKDQ5RkQzM0Q2RjUxQUQ2QTQ5ODg0NDY5RkEzOUZFRjA0 MzIzMzZGODEwHhcNMjYwNzI1MDgxMDA2WhcNMjYwODAxMDgxMDA2WjAYMRYwFAYD VQQDEw02YTY0NmY1Zi00YjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/m5YG3GV6XSeBm0mMpDSyD5mLw+1dorELoJT7E4b5xDj9sH5qVMf7XlE98Ct b/vQts4O8iU2ntK0dm1KOVlxPrbLWKCVvjfaCg5KDuR3R9KxLmSTDnqCtfvL4DVT 3jJ7oSv8NxvZgIi9rPoZL6hHdKajGbfhmWuPr8j1AnKm2DHaNbT6d73/wQhrFxPS 6IK8VtAcriY+qGnvDFZ7fOn+bjHlIkCZMIX0E8UG6JC5wFVJ+nzC0VT4UHBrh8wC JOyT2/gwEvUTU24Cx6D85aQhJGkYnq2WqsqRx4jZtqxRFLqQ/PJraBGaAKbG/azj c6/yTr10CrBFZmRekk2dHDk+bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzZ3J4e 7rTFiPdk0q/TdWcaTo0CMB8GA1UdIwQYMBaAFEn9M9b1GtakmIRGn6Of7wQyM2+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREUxMy8xNTFGRTQ3RTJB NTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZVYTFxU1loRWFmbzVfdkJESXpi NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NmMHoxdlVhMXFTWWhFYWZvNV92QkRJemI0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REUxMy8xNTFGRTQ3RTJBNTYxMUYwQjg0RjUyMjBDNEY5QUUwMi9TZjB6MXZVYTFx U1loRWFmbzVfdkJESXpiNEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsnrLv29NZ38sJvtDT3Z+pAiCZGkR4sDWtDMq3oNIKCcRswu3KOAFAaP1jsnL kd4ZfPeVeeaIR7hiTMWfdK/nIKyu22Q6FpUd2xCi7f0fh6RETsIQ2N81KIxBEceK xlH8ja0SDHVQJ2thFVgIp+4AwvbxfFWyV0r7HPEqTPvz76qP6tlZiYi4zBo1l4fw q3qQv9eJ9oCYDlNJl7mEijn898m3yhXCHk68JXsbL3vGIDF/WAnuKFTBBxHfd7+W +VdYhOdN1BIdvgaxCSzzgUM2AYA5c2Kx+dguzP3hfymMzGMrRS2DNcXwIgi7cKol xMAhUDvLl69hcGslIxtHEMgzgA== -----END CERTIFICATE-----Generated at Sun Jul 26 19:01:26 2026 by rpki-client