$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft File: CFDUhlPa5QGZunr6XjP5gKNfk-U.mft (raw, json) Hash identifier: w6m+Arz/nFFmw79EiWXXlgh/jvHLoI/P3XUFLDQsr84= Subject key identifier: 77:91:63:A4:7A:EF:0F:34:85:96:BE:36:7D:1A:19:68:13:F9:76:C3 Authority key identifier: 08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5 Certificate issuer: /CN=A91390D1/serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft Manifest number: 31 Signing time: Mon 27 Jul 2026 10:58:49 +0000 Manifest this update: Mon 27 Jul 2026 10:58:48 +0000 Manifest next update: Mon 03 Aug 2026 10:58:48 +0000 Files and hashes: 1: CFDUhlPa5QGZunr6XjP5gKNfk-U.crl (hash: BuqWh5PHol1QPg8mdX4+qKAeGwujuIWDDWauqYUaNSk=) 2: 2FF9F3D63E1211F1A9349102AE833773.roa (hash: VWpcu8O6MRinpVbPmabr8oFyo8vRo6lsrBwyQBIngak=) 3: 309048B83E1211F1A9349102AE833773.roa (hash: sqKxThroamkDhc6JSRBhISx43pCPlzadkHUPyjm96LY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D1, serialNumber=0850D48653DAE50199BA7AFA5E33F980A35F93E5 Validity Not Before: Jul 27 10:58:48 2026 GMT Not After : Aug 3 10:58:48 2026 GMT Subject: CN=6a6739e9-b195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d5:59:6a:86:5e:5a:b7:8b:34:2e:f6:4e:90: 96:b8:68:48:30:a0:9b:b3:a1:45:aa:74:af:89:3b: c6:2b:7a:cc:74:50:d9:21:f1:7f:34:e3:a0:6d:e6: a2:23:95:ec:aa:5a:92:87:0b:6e:fc:a3:c3:4d:e3: 6b:62:65:22:19:cb:e1:d0:5f:2c:7c:ce:57:23:31: 12:eb:36:56:b2:a1:4c:2d:81:fb:14:8f:79:01:fd: 77:5f:98:5e:e6:c0:67:1d:c4:01:38:26:2c:e6:ba: 34:a5:bc:a4:c2:a6:40:28:3c:ae:15:1b:1d:c8:b2: 3a:79:48:70:4a:40:68:e5:58:4e:09:ac:a7:d9:0f: 7d:da:24:df:11:13:f3:7c:e1:4a:ba:d7:c5:24:ef: e8:7d:29:49:6a:47:25:2f:c3:a0:66:b6:d1:df:f6: fa:14:7e:e9:7c:1d:68:3f:a2:71:b5:b3:a0:6f:03: 6b:22:02:75:ff:91:ea:7f:fe:84:78:34:1b:0c:7a: 66:62:e1:26:5d:f6:6e:fb:12:b4:8d:8e:81:69:db: f1:58:1e:89:a4:65:0f:77:4b:e1:df:80:04:92:b4: d4:e1:c4:76:07:3e:39:54:f0:fd:c2:da:18:6b:0d: 0d:32:4a:5b:5a:2b:dd:cf:aa:0d:c3:2f:10:ec:18: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:91:63:A4:7A:EF:0F:34:85:96:BE:36:7D:1A:19:68:13:F9:76:C3 X509v3 Authority Key Identifier: keyid:08:50:D4:86:53:DA:E5:01:99:BA:7A:FA:5E:33:F9:80:A3:5F:93:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CFDUhlPa5QGZunr6XjP5gKNfk-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D1/FFA43F143E0411F1AD63DF8CA6833773/CFDUhlPa5QGZunr6XjP5gKNfk-U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:63:93:7e:4f:08:67:02:51:f2:e2:a7:48:9d:5d:94:db:23: 9a:6e:35:50:f8:49:fa:a3:ec:34:70:7b:aa:d6:74:af:72:67: 37:f4:bd:7e:ba:78:a8:0b:60:f6:79:2d:a2:87:d5:14:a8:1f: c1:f3:d8:ab:39:28:0a:ad:0e:32:1b:a5:f9:fd:9e:96:98:10: 2a:80:cc:f0:0a:f4:c3:6b:f6:65:0b:4f:f1:2c:f9:14:f8:6d: 34:22:e7:98:8b:1d:d5:cb:fd:d1:98:90:93:9b:21:dc:57:14: 59:db:6c:60:2c:23:ae:b5:6c:50:0a:3a:99:96:d2:45:23:83: 8d:ad:32:5b:b3:30:da:d5:1a:4c:64:5e:ed:66:72:5c:10:16: 1a:ea:72:2e:eb:79:62:77:fa:22:29:21:ca:d9:10:e5:32:8e: a9:0a:f1:cc:d6:df:31:09:3a:cb:6e:ca:0d:0d:70:4c:f2:a5: c0:28:b6:ae:44:e7:88:9a:be:c9:0a:08:06:43:b6:27:5a:6a: e4:da:84:f4:19:98:56:00:77:ae:73:5c:38:b0:98:5e:06:04: 03:45:c7:aa:5f:d7:c6:ac:10:49:58:ae:78:a3:b0:c7:6a:78: 36:f3:fd:86:00:59:f0:a7:02:fc:5a:a4:c1:e6:c1:16:56:3b: 54:10:ba:14 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OTBEMTExMC8GA1UEBRMoMDg1MEQ0ODY1M0RBRTUwMTk5QkE3QUZBNUUzM0Y5ODBB MzVGOTNFNTAeFw0yNjA3MjcxMDU4NDhaFw0yNjA4MDMxMDU4NDhaMBgxFjAUBgNV BAMTDTZhNjczOWU5LWIxOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk1Vlqhl5at4s0LvZOkJa4aEgwoJuzoUWqdK+JO8Yresx0UNkh8X8046Bt5qIj leyqWpKHC278o8NN42tiZSIZy+HQXyx8zlcjMRLrNlayoUwtgfsUj3kB/XdfmF7m wGcdxAE4JizmujSlvKTCpkAoPK4VGx3Isjp5SHBKQGjlWE4JrKfZD33aJN8RE/N8 4Uq618Uk7+h9KUlqRyUvw6BmttHf9voUful8HWg/onG1s6BvA2siAnX/kep//oR4 NBsMemZi4SZd9m77ErSNjoFp2/FYHomkZQ93S+HfgASStNThxHYHPjlU8P3C2hhr DQ0ySltaK93Pqg3DLxDsGFFzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUd5FjpHrv DzSFlr42fRoZaBP5dsMwHwYDVR0jBBgwFoAUCFDUhlPa5QGZunr6XjP5gKNfk+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5MEQxL0ZGQTQzRjE0M0Uw NDExRjFBRDYzREY4Q0E2ODMzNzczL0NGRFVobFBhNVFHWnVucjZYalA1Z0tOZmst VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0ZEVWhsUGE1UUdadW5yNlhqUDVnS05may1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5 MEQxL0ZGQTQzRjE0M0UwNDExRjFBRDYzREY4Q0E2ODMzNzczL0NGRFVobFBhNVFH WnVucjZYalA1Z0tOZmstVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCfY5N+TwhnAlHy4qdInV2U2yOabjVQ+En6o+w0cHuq1nSvcmc39L1+unioC2D2 eS2ih9UUqB/B89irOSgKrQ4yG6X5/Z6WmBAqgMzwCvTDa/ZlC0/xLPkU+G00IueY ix3Vy/3RmJCTmyHcVxRZ22xgLCOutWxQCjqZltJFI4ONrTJbszDa1RpMZF7tZnJc EBYa6nIu63lid/oiKSHK2RDlMo6pCvHM1t8xCTrLbsoNDXBM8qXAKLauROeImr7J CggGQ7YnWmrk2oT0GZhWAHeuc1w4sJheBgQDRceqX9fGrBBJWK54o7DHang28/2G AFnwpwL8WqTB5sEWVjtUELoU -----END CERTIFICATE-----Generated at Tue Jul 28 22:28:04 2026 by rpki-client