$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft File: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json) Hash identifier: ev8jNe013SATYq/GTh8i9FZYlWYuE8cXbk3PqhOvTxs= Subject key identifier: 31:B2:38:97:CA:19:3C:53:3B:18:EF:F7:9D:A9:BE:99:D2:AF:F9:D6 Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB Certificate issuer: /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB Certificate serial: 0419 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft Manifest number: 0407 Signing time: Mon 27 Jul 2026 01:29:51 +0000 Manifest this update: Mon 27 Jul 2026 01:29:51 +0000 Manifest next update: Mon 03 Aug 2026 01:29:51 +0000 Files and hashes: 1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: KQyJ95O5FfpdPNCI8uP15qgr/TJj7THxhhqBkswSAm0=) 2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: 5qVS8yAP9geafMCui47y2bneVvGFNSs25MQvHFvL3Q0=) 3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: gLOFNsHejik+yQKsEBrjAw7cANoRp3jJQV4pA0a+JR4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:29:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1049 (0x419) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB Validity Not Before: Jul 27 01:29:51 2026 GMT Not After : Aug 3 01:29:51 2026 GMT Subject: CN=6a66b48f-7d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a9:11:1f:dd:53:a0:0a:a9:b4:08:de:f7:08: 19:51:ee:89:c4:df:5d:4e:e0:a9:9b:b1:f7:31:a9: 9b:27:7e:b1:c0:c7:c4:2c:2b:8f:f2:63:05:0a:87: 19:94:1c:48:69:7d:d4:ce:8f:2f:25:2c:ef:cf:2b: 0b:5b:63:98:1c:82:11:26:a5:63:a8:46:d9:09:0e: 66:1c:e3:92:bb:8f:47:36:6c:09:7b:01:8d:af:05: 5a:f6:56:ab:b1:25:3e:76:76:11:59:7c:14:ee:1d: b1:08:db:75:00:c4:40:9b:a0:e7:05:48:ca:01:d0: b5:7d:36:99:89:16:af:88:d1:a4:fe:2a:d7:00:8a: 4f:53:10:dd:4f:6f:c9:31:25:c6:56:0b:21:06:1f: 01:1a:81:5d:5e:b9:b4:4d:3d:d3:b4:69:e6:80:cb: 0b:07:60:2f:4f:1b:28:81:c0:60:4c:78:0f:a8:1b: fa:b9:a5:34:43:3d:db:f1:68:fd:03:13:33:9d:5a: c4:66:33:bf:01:f7:dd:07:4f:82:5c:5e:18:b4:f4: 44:2b:2c:f0:c0:41:95:78:57:7a:30:8e:fa:7e:07: 29:49:0d:da:65:9d:14:fc:73:b5:69:6e:73:07:d3: 22:1a:32:3c:e6:ed:19:bf:c6:5b:70:f5:40:e7:f3: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B2:38:97:CA:19:3C:53:3B:18:EF:F7:9D:A9:BE:99:D2:AF:F9:D6 X509v3 Authority Key Identifier: keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f4:59:85:4e:24:e3:2d:fd:e8:7c:b2:c5:d3:4b:b5:6a:8b: 2c:7a:5d:59:13:a4:f8:15:89:04:c1:26:4a:97:9c:19:38:39: b4:59:4a:9a:68:b5:a7:c9:ff:85:e9:6e:46:b3:fd:31:a9:67: 5f:35:fb:eb:84:c0:62:c2:60:fb:be:b5:54:31:12:b6:8b:88: ea:75:44:76:39:c3:cc:f3:25:d8:27:9b:37:14:c5:b7:86:f7: 90:b1:08:96:8c:5b:b0:3f:4f:5d:70:71:f2:3a:90:0f:e7:33: 45:a8:d2:6a:5c:e8:77:6d:01:46:d1:82:e6:53:cf:c3:14:a3: 24:d3:84:97:16:60:0f:a1:7f:a7:36:80:f8:71:42:70:0e:ad: 6f:8c:38:98:37:d0:46:c7:9c:5f:64:bb:c3:d7:1d:26:52:43: 62:ac:ae:f4:6c:dd:de:65:fd:e0:4f:48:46:ab:ed:f0:8d:23: d7:a6:f2:22:3f:d3:e1:1c:c3:08:0f:ec:db:c4:23:74:2e:bf: cb:9a:cb:98:4b:ce:c6:55:ac:7d:aa:e3:90:81:01:c2:72:05: 4c:88:95:d9:60:5f:13:06:0f:7a:ad:ae:f7:24:32:56:77:fa: 33:01:75:ac:9f:87:4b:db:9c:db:d6:9c:67:2d:f9:b2:18:a9: 5d:6d:21:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgwQjUxMTAvBgNVBAUTKDdFNjVDNThGQTM0M0ExMEM1MzQzNTBBQjQ5N0ZEMDkw Q0VFRkJGQkIwHhcNMjYwNzI3MDEyOTUxWhcNMjYwODAzMDEyOTUxWjAYMRYwFAYD VQQDEw02YTY2YjQ4Zi03ZDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2qkRH91ToAqptAje9wgZUe6JxN9dTuCpm7H3MambJ36xwMfELCuP8mMFCocZ lBxIaX3Uzo8vJSzvzysLW2OYHIIRJqVjqEbZCQ5mHOOSu49HNmwJewGNrwVa9lar sSU+dnYRWXwU7h2xCNt1AMRAm6DnBUjKAdC1fTaZiRaviNGk/irXAIpPUxDdT2/J MSXGVgshBh8BGoFdXrm0TT3TtGnmgMsLB2AvTxsogcBgTHgPqBv6uaU0Qz3b8Wj9 AxMznVrEZjO/AffdB0+CXF4YtPREKyzwwEGVeFd6MI76fgcpSQ3aZZ0U/HO1aW5z B9MiGjI85u0Zv8ZbcPVA5/Mi7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGyOJfK GTxTOxjv952pvpnSr/nWMB8GA1UdIwQYMBaAFH5lxY+jQ6EMU0NQq0l/0JDO77+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBCNS82OTQ2M0QwNENB M0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9ReFRRMUNyU1hfUWtNN3Z2 N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZtWEZqNk5Eb1F4VFExQ3JTWF9Ra003dnY3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODBCNS82OTQ2M0QwNENBM0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9R eFRRMUNyU1hfUWtNN3Z2N3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcvRZhU4k4y396HyyxdNLtWqLLHpdWROk+BWJBMEmSpecGTg5tFlKmmi1p8n/ heluRrP9MalnXzX764TAYsJg+761VDEStouI6nVEdjnDzPMl2CebNxTFt4b3kLEI loxbsD9PXXBx8jqQD+czRajSalzod20BRtGC5lPPwxSjJNOElxZgD6F/pzaA+HFC cA6tb4w4mDfQRsecX2S7w9cdJlJDYqyu9Gzd3mX94E9IRqvt8I0j16byIj/T4RzD CA/s28QjdC6/y5rLmEvOxlWsfarjkIEBwnIFTIiV2WBfEwYPeq2u9yQyVnf6MwF1 rJ+HS9uc29acZy35shipXW0hBw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:22:38 2026 by rpki-client