$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft File: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft (raw, json) Hash identifier: tFnge+tJwGeRQ7M7Y07U9uYCyrtsQevyosANsIO9DT0= Subject key identifier: EA:2B:4D:6F:EB:BC:D0:93:B2:B7:E6:0F:B7:A5:6F:7E:38:32:A3:EA Authority key identifier: E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 Certificate issuer: /CN=A912DA1D/serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Certificate serial: 0443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft Manifest number: 042D Signing time: Mon 27 Jul 2026 01:22:32 +0000 Manifest this update: Mon 27 Jul 2026 01:22:31 +0000 Manifest next update: Mon 03 Aug 2026 01:22:31 +0000 Files and hashes: 1: 5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl (hash: uJEnkkbIc3gEJEb8ZAVC9j0zyrLKOh3UGQ+aeCs1UfY=) 2: 44B90434DFA011ED8C895F7CC4F9AE02.roa (hash: fOCLl/2VKdNa0vhoLYzfZhLV3T1IotJ/iZtFzsPrmrk=) 3: 0589A4B8DF9511EDAAA7E22AC4F9AE02.roa (hash: 8QW6SQzpdf8WqjCw4pnkX0HYCGVvI59bpneK0fchnuE=) 4: 36B1CD340A6D11ED89FD3F13C4F9AE02.roa (hash: YL8hbnsNwgCnn/NcUCv0iY/57aut2UGD2Ataw87mmvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1091 (0x443) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1D, serialNumber=E42142E3E5845762D0E8D68B02FB10E875BC6BF2 Validity Not Before: Jul 27 01:22:31 2026 GMT Not After : Aug 3 01:22:31 2026 GMT Subject: CN=6a66b2d8-5cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:3c:16:0f:cd:9f:a7:05:93:c8:5c:e9:6e: f2:b1:56:76:d6:74:cd:93:22:96:5e:04:80:0a:3a: 67:d0:67:71:f0:70:bb:6e:81:bf:d4:42:ec:d5:28: 22:14:c0:b0:df:81:5c:a0:7c:99:17:1d:5d:15:12: 5e:4f:71:c2:d6:57:cb:e2:f8:ba:73:7a:cd:be:03: ff:4e:fc:89:ba:35:d8:6b:a8:ce:1f:f3:8a:39:e5: 28:97:5f:56:eb:b6:d6:77:c9:69:ff:49:83:be:01: 98:21:12:02:7f:ed:81:e3:20:8a:9d:bc:35:70:2a: 3d:81:68:4b:fd:8a:1c:3f:5a:07:be:28:2b:fb:6c: 7c:d7:37:8e:05:94:2a:0a:cc:e2:c1:10:5c:bf:8f: 51:fa:63:40:e0:a8:47:63:f2:69:c5:78:7f:2e:1c: 3a:a8:29:95:18:a1:41:78:21:4d:c9:f0:da:ea:79: c4:00:b9:f1:75:03:44:dd:0c:68:c2:c7:2e:77:64: 23:5f:24:0f:49:96:97:02:1a:7f:7c:80:4e:2d:a1: f0:20:9e:c5:f1:58:2b:7d:50:f4:c4:04:95:2d:25: 2f:0e:27:70:9c:51:36:36:3f:79:78:b2:33:71:a6: a0:90:5d:e8:7b:0d:2f:f9:30:c2:99:53:52:48:a1: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2B:4D:6F:EB:BC:D0:93:B2:B7:E6:0F:B7:A5:6F:7E:38:32:A3:EA X509v3 Authority Key Identifier: keyid:E4:21:42:E3:E5:84:57:62:D0:E8:D6:8B:02:FB:10:E8:75:BC:6B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1D/B46E42DABB1B11ECB0AC0F14C4F9AE02/5CFC4-WEV2LQ6NaLAvsQ6HW8a_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:11:42:8b:dc:c4:80:d4:ce:ad:80:c9:0a:9c:ae:48:c8:42: 37:ae:89:ad:af:a0:50:c7:86:4c:5e:f9:40:75:78:ca:80:8b: 9a:7c:4c:24:7a:73:23:3f:07:93:7e:94:8f:c6:9f:68:0d:f2: fb:ba:a8:aa:a6:31:02:0b:e4:04:c6:67:b8:35:2a:b4:2a:25: 13:30:8f:7a:22:fa:2c:84:e8:0f:26:c1:07:65:f2:e4:e3:cf: 99:17:0d:cf:45:d2:6d:88:9e:fc:fc:fb:c5:b3:e3:6c:d6:5d: 03:3a:e8:d9:92:cd:5b:f8:48:65:5b:bc:3a:6a:24:f3:5f:d0: 13:f3:fe:a1:85:ba:dc:19:9f:9f:1a:db:5c:54:5b:98:2e:1c: 53:ac:a9:28:3d:9a:a9:4d:ba:70:f5:1e:9c:ba:ab:0f:d9:82: a4:0b:ce:fd:d2:02:6b:07:39:99:e4:62:ff:20:07:18:1d:f5: c0:e6:86:42:2e:1a:9a:21:ec:8f:06:fb:21:2f:18:26:4d:f3: 4f:54:d0:b3:16:50:00:37:25:df:b2:f3:00:1f:3e:ef:51:47: 0e:77:45:8a:e3:b1:29:bb:23:ec:14:47:2d:7d:e1:bd:15:f5: e1:cb:05:b2:57:8c:05:d3:f5:d1:dd:22:f1:ed:54:2e:79:b0: b6:05:5e:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUQxMTAvBgNVBAUTKEU0MjE0MkUzRTU4NDU3NjJEMEU4RDY4QjAyRkIxMEU4 NzVCQzZCRjIwHhcNMjYwNzI3MDEyMjMxWhcNMjYwODAzMDEyMjMxWjAYMRYwFAYD VQQDEw02YTY2YjJkOC01Y2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgw8Fg/Nn6cFk8hc6W7ysVZ21nTNkyKWXgSACjpn0Gdx8HC7boG/1ELs1Sgi FMCw34FcoHyZFx1dFRJeT3HC1lfL4vi6c3rNvgP/TvyJujXYa6jOH/OKOeUol19W 67bWd8lp/0mDvgGYIRICf+2B4yCKnbw1cCo9gWhL/YocP1oHvigr+2x81zeOBZQq CsziwRBcv49R+mNA4KhHY/JpxXh/Lhw6qCmVGKFBeCFNyfDa6nnEALnxdQNE3Qxo wscud2QjXyQPSZaXAhp/fIBOLaHwIJ7F8VgrfVD0xASVLSUvDidwnFE2Nj95eLIz caagkF3oew0v+TDCmVNSSKGoqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOorTW/r vNCTsrfmD7elb344MqPqMB8GA1UdIwQYMBaAFOQhQuPlhFdi0OjWiwL7EOh1vGvy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRC9CNDZFNDJEQUJC MUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYyTFE2TmFMQXZzUTZIVzhh X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVDRkM0LVdFVjJMUTZOYUxBdnNRNkhXOGFfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRC9CNDZFNDJEQUJCMUIxMUVDQjBBQzBGMTRDNEY5QUUwMi81Q0ZDNC1XRVYy TFE2TmFMQXZzUTZIVzhhX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbxFCi9zEgNTOrYDJCpyuSMhCN66Jra+gUMeGTF75QHV4yoCLmnxMJHpzIz8H k36Uj8afaA3y+7qoqqYxAgvkBMZnuDUqtColEzCPeiL6LIToDybBB2Xy5OPPmRcN z0XSbYie/Pz7xbPjbNZdAzro2ZLNW/hIZVu8Omok81/QE/P+oYW63BmfnxrbXFRb mC4cU6ypKD2aqU26cPUenLqrD9mCpAvO/dICawc5meRi/yAHGB31wOaGQi4amiHs jwb7IS8YJk3zT1TQsxZQADcl37LzAB8+71FHDndFiuOxKbsj7BRHLX3hvRX14csF sleMBdP10d0i8e1ULnmwtgVeKg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:50:39 2026 by rpki-client