$ rpki-client -vvf rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft File: r4P0CG-0oWWIvizFUNW42dRCOYU.mft (raw, json) Hash identifier: iOJPtJwF48YiJOfoF9/190frDn6CYrgWFYma/B2easU= Subject key identifier: 90:35:4F:0C:F5:E3:0F:1C:82:50:E5:DE:53:02:14:A5:F2:BC:84:4D Authority key identifier: AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 Certificate issuer: /CN=A913BEA2/serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Certificate serial: 0891 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft Manifest number: 0883 Signing time: Tue 28 Jul 2026 21:06:57 +0000 Manifest this update: Tue 28 Jul 2026 21:06:57 +0000 Manifest next update: Tue 04 Aug 2026 21:06:57 +0000 Files and hashes: 1: r4P0CG-0oWWIvizFUNW42dRCOYU.crl (hash: IMaTFjX6lyLsLSW5M7Uoz6M9lCivv1pdnJCyU2KFZTg=) 2: BF529990959F11EC844CAD64C4F9AE02.roa (hash: 8slOQpxcJ7i4Fqpb2U0NO9KtNpjmpZLi6X29SuRjdfI=) 3: 6AB65D92AD1811EB84E05F5BC4F9AE02.roa (hash: mcE/kCUcZ9XtkapXLq0nvxx/GVcFi46zNxigdP3tLvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2193 (0x891) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BEA2, serialNumber=AF83F4086FB4A16588BE2CC550D5B8D9D4423985 Validity Not Before: Jul 28 21:06:57 2026 GMT Not After : Aug 4 21:06:57 2026 GMT Subject: CN=6a6919f1-d305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c4:6e:4c:7d:10:d2:b7:c7:d3:89:b9:af:b2: a6:fb:13:e2:e8:35:ce:42:be:96:ae:a3:30:28:2e: 7c:87:86:d7:58:5e:6c:33:40:ca:63:be:ab:a0:7a: bb:71:9e:7b:70:54:f6:c0:67:43:73:ed:99:68:01: 53:72:29:ff:05:2a:36:0c:e6:6d:99:59:57:b5:bf: 9a:0e:11:8e:5d:3d:fa:fe:7b:57:3d:c7:29:3a:0d: 13:88:5c:85:9f:55:b6:c2:fd:31:c0:07:a9:f8:c6: 0f:47:dd:ca:8f:7f:fe:e2:f5:d0:36:1a:d5:6f:61: 29:c5:34:9f:19:56:94:03:ce:4b:a7:fe:9e:29:ef: 0b:13:46:21:7b:8f:20:55:9f:55:6e:ef:39:fd:ff: fb:29:c3:8d:53:37:9e:a5:3d:7b:fc:17:71:45:eb: d9:f0:f3:66:40:53:dc:8d:b5:60:f1:08:48:50:b2: 6e:6e:b8:86:9b:e7:ba:17:99:3a:d8:b7:e2:32:81: 75:ad:fe:b5:56:67:0f:8a:fa:76:4d:86:f5:9e:9c: 13:8d:da:77:e2:d6:66:de:5d:b3:7c:b7:ec:f5:6e: fa:74:df:92:72:b9:4e:3c:6d:60:09:00:b2:82:6f: 14:c2:56:76:b2:f1:60:ff:4c:a4:0e:86:ba:ca:d2: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:35:4F:0C:F5:E3:0F:1C:82:50:E5:DE:53:02:14:A5:F2:BC:84:4D X509v3 Authority Key Identifier: keyid:AF:83:F4:08:6F:B4:A1:65:88:BE:2C:C5:50:D5:B8:D9:D4:42:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4P0CG-0oWWIvizFUNW42dRCOYU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BEA2/19FEA458033211EBB05D5814C4F9AE02/r4P0CG-0oWWIvizFUNW42dRCOYU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:ae:d8:f9:54:c1:d0:c0:52:d0:2b:98:2c:c5:38:96:73:aa: cf:4c:38:3f:54:42:2b:1c:c5:f4:12:b4:1d:9f:53:2d:31:98: 9d:1d:10:01:c2:b4:80:e5:7f:95:d1:8c:ac:af:ec:38:f7:97: 7d:b5:97:f1:74:92:05:08:4b:b9:66:62:74:66:3e:78:3e:44: 17:f6:1a:0d:c0:71:31:c0:32:9d:19:15:10:11:33:0c:58:55: 2e:ac:06:28:36:e2:48:9d:a6:2b:cf:2c:f4:96:6b:f1:e0:42: 73:8c:82:e4:70:c9:ba:d9:6d:8e:30:78:98:92:f8:c8:e5:70: 46:a5:d5:07:1e:a4:94:98:99:18:16:96:11:a1:50:45:db:15: 86:1f:7f:10:ae:b4:58:36:70:b3:79:07:ae:1b:23:2c:40:7a: 60:b4:f9:c1:82:06:3c:c4:90:80:4b:a2:70:3c:ba:0d:24:ac: e5:b6:59:95:e7:44:91:57:81:00:cc:0f:a2:67:57:a6:2a:a3: d4:a7:6a:06:93:68:df:a3:d6:40:f0:fe:84:27:cc:d5:2c:a5: 1b:1c:42:3b:fa:7f:59:24:f2:3b:48:72:ae:0c:b4:be:59:9e: c3:01:56:e3:e6:88:79:e0:ad:b0:78:66:6b:95:79:67:f8:a8: 2b:c2:da:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JFQTIxMTAvBgNVBAUTKEFGODNGNDA4NkZCNEExNjU4OEJFMkNDNTUwRDVCOEQ5 RDQ0MjM5ODUwHhcNMjYwNzI4MjEwNjU3WhcNMjYwODA0MjEwNjU3WjAYMRYwFAYD VQQDEw02YTY5MTlmMS1kMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2cRuTH0Q0rfH04m5r7Km+xPi6DXOQr6WrqMwKC58h4bXWF5sM0DKY76roHq7 cZ57cFT2wGdDc+2ZaAFTcin/BSo2DOZtmVlXtb+aDhGOXT36/ntXPccpOg0TiFyF n1W2wv0xwAep+MYPR93Kj3/+4vXQNhrVb2EpxTSfGVaUA85Lp/6eKe8LE0Yhe48g VZ9Vbu85/f/7KcONUzeepT17/BdxRevZ8PNmQFPcjbVg8QhIULJubriGm+e6F5k6 2LfiMoF1rf61VmcPivp2TYb1npwTjdp34tZm3l2zfLfs9W76dN+ScrlOPG1gCQCy gm8UwlZ2svFg/0ykDoa6ytJMaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJA1Twz1 4w8cglDl3lMCFKXyvIRNMB8GA1UdIwQYMBaAFK+D9AhvtKFliL4sxVDVuNnUQjmF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkVBMi8xOUZFQTQ1ODAz MzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9XV0l2aXpGVU5XNDJkUkNP WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I0UDBDRy0wb1dXSXZpekZVTlc0MmRSQ09ZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkVBMi8xOUZFQTQ1ODAzMzIxMUVCQjA1RDU4MTRDNEY5QUUwMi9yNFAwQ0ctMG9X V0l2aXpGVU5XNDJkUkNPWVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGa7Y+VTB0MBS0CuYLMU4lnOqz0w4P1RCKxzF9BK0HZ9TLTGYnR0QAcK0gOV/ ldGMrK/sOPeXfbWX8XSSBQhLuWZidGY+eD5EF/YaDcBxMcAynRkVEBEzDFhVLqwG KDbiSJ2mK88s9JZr8eBCc4yC5HDJutltjjB4mJL4yOVwRqXVBx6klJiZGBaWEaFQ RdsVhh9/EK60WDZws3kHrhsjLEB6YLT5wYIGPMSQgEuicDy6DSSs5bZZledEkVeB AMwPomdXpiqj1KdqBpNo36PWQPD+hCfM1SylGxxCO/p/WSTyO0hyrgy0vlmewwFW 4+aIeeCtsHhma5V5Z/ioK8Ladw== -----END CERTIFICATE-----Generated at Wed Jul 29 00:46:55 2026 by rpki-client