$ rpki-client -vvf rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft File: FX3bMj02U1BOMIJOaeDbA3U6aM4.mft (raw, json) Hash identifier: 0kwvNEZMw6GY+vkrzPP4A4uiZKX/kpbQ090oeCz9szA= Subject key identifier: FA:83:6B:FD:4A:B9:8E:9B:2A:B4:70:49:D0:AB:1E:7E:F9:C0:6F:57 Authority key identifier: 15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE Certificate issuer: /CN=A91480B2/serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft Manifest number: 020E Signing time: Mon 27 Jul 2026 04:36:00 +0000 Manifest this update: Mon 27 Jul 2026 04:35:59 +0000 Manifest next update: Mon 03 Aug 2026 04:35:59 +0000 Files and hashes: 1: FX3bMj02U1BOMIJOaeDbA3U6aM4.crl (hash: 2ukzr8xKrvtC2rBlGoE4jGNKB/4EhElf/9RazZrxxEE=) 2: 93151D5668F911EE9916D146C4F9AE02.roa (hash: ClVPuLcuGILWLEy5bL0EVXdV3J/UJlUtzA64dR9iTrc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91480B2, serialNumber=157DDB323D3653504E30824E69E0DB03753A68CE Validity Not Before: Jul 27 04:35:59 2026 GMT Not After : Aug 3 04:35:59 2026 GMT Subject: CN=6a66e030-68dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:da:df:e5:30:73:e3:3e:58:4e:c9:a8:25: 9d:3d:6c:75:8c:a0:cc:21:d0:93:1d:2b:30:a6:49: de:74:58:ec:d5:91:a4:6b:0a:90:8c:3f:86:8d:40: a8:5e:87:b5:82:22:99:db:87:bc:13:c4:98:8b:99: f3:35:0b:fc:65:5b:db:c7:0e:cd:2b:1e:f0:1f:54: 76:3d:1d:29:67:4f:af:57:a1:63:75:5b:dc:69:b5: 5a:18:e5:61:1a:f1:c6:16:a5:f1:5d:9a:4b:f4:fa: 73:90:93:bc:11:ee:68:d0:76:e8:ec:7d:4b:94:8e: 58:28:b1:34:f7:7b:2d:ff:a6:3b:e9:6e:d5:e2:cb: 52:27:55:9c:8b:73:78:bd:9b:3f:39:57:e1:95:11: f3:ea:4b:72:81:ac:42:ae:bc:8e:6c:b6:ae:66:b5: bd:3b:e3:2b:d5:33:f3:3e:1c:6f:a5:6b:ed:98:7a: 02:31:ce:eb:5a:ed:5d:be:94:8f:90:11:4a:cf:e5: 48:0c:dd:48:ec:07:0d:90:37:71:81:0b:bd:3c:58: 71:80:7c:35:2d:56:e3:f8:e6:d9:65:dd:00:39:e8: b8:c9:48:ae:d0:96:a9:75:6f:bf:d4:d9:ac:87:a4: 79:3d:69:50:3e:29:84:ab:05:70:43:08:5e:98:fd: 2c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:83:6B:FD:4A:B9:8E:9B:2A:B4:70:49:D0:AB:1E:7E:F9:C0:6F:57 X509v3 Authority Key Identifier: keyid:15:7D:DB:32:3D:36:53:50:4E:30:82:4E:69:E0:DB:03:75:3A:68:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FX3bMj02U1BOMIJOaeDbA3U6aM4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91480B2/41CBB64E68F911EEAD6CF62EC4F9AE02/FX3bMj02U1BOMIJOaeDbA3U6aM4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a9:83:f4:f5:d3:d2:63:1a:52:43:dc:bb:94:2b:9d:3f:38: 95:93:71:23:60:3f:38:67:fe:6b:b3:c5:1c:e4:06:e3:dd:a1: ff:13:9f:c9:ca:db:e7:32:3b:b4:05:9a:99:4b:7c:b3:ff:37: d1:7f:00:c3:e8:f0:87:fd:bb:73:e9:55:6e:c4:ac:22:d5:02: 13:aa:ae:c7:81:6f:30:6e:bd:c6:91:6e:4b:11:98:81:85:87: 55:b4:27:b7:00:f6:17:49:f8:fd:a4:76:78:0b:43:2e:2d:ba: 54:f9:77:b5:ba:47:a9:fe:c3:8f:d4:40:9e:41:c0:f5:32:92: 43:6b:31:17:6b:e9:f7:e9:d9:79:fa:eb:8f:ae:c0:89:3e:c2: fe:ea:a6:4f:a0:e8:68:92:a6:cb:6a:82:c4:38:93:f1:cc:39: 0c:b6:60:a2:56:89:40:32:61:4a:3d:7d:91:77:1e:54:42:14: e0:0e:09:42:a6:46:08:ec:d1:4f:de:b4:b7:66:4e:07:f3:a2: 6f:96:10:eb:5b:44:2d:be:a3:58:6e:5d:fd:91:4f:22:5a:59: 92:d5:53:06:ff:28:e9:1d:d3:02:7c:38:1a:a1:a6:30:7a:42: a1:d0:03:b1:53:02:33:5c:d7:6b:dd:5a:91:96:bd:55:71:27: 6e:dc:fb:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDgwQjIxMTAvBgNVBAUTKDE1N0REQjMyM0QzNjUzNTA0RTMwODI0RTY5RTBEQjAz NzUzQTY4Q0UwHhcNMjYwNzI3MDQzNTU5WhcNMjYwODAzMDQzNTU5WjAYMRYwFAYD VQQDEw02YTY2ZTAzMC02OGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoPa3+Uwc+M+WE7JqCWdPWx1jKDMIdCTHSswpknedFjs1ZGkawqQjD+GjUCo Xoe1giKZ24e8E8SYi5nzNQv8ZVvbxw7NKx7wH1R2PR0pZ0+vV6FjdVvcabVaGOVh GvHGFqXxXZpL9PpzkJO8Ee5o0Hbo7H1LlI5YKLE093st/6Y76W7V4stSJ1Wci3N4 vZs/OVfhlRHz6ktygaxCrryObLauZrW9O+Mr1TPzPhxvpWvtmHoCMc7rWu1dvpSP kBFKz+VIDN1I7AcNkDdxgQu9PFhxgHw1LVbj+ObZZd0AOei4yUiu0JapdW+/1Nms h6R5PWlQPimEqwVwQwhemP0sQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPqDa/1K uY6bKrRwSdCrHn75wG9XMB8GA1UdIwQYMBaAFBV92zI9NlNQTjCCTmng2wN1OmjO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODBCMi80MUNCQjY0RTY4 RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUxQk9NSUpPYWVEYkEzVTZh TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZYM2JNajAyVTFCT01JSk9hZURiQTNVNmFNNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODBCMi80MUNCQjY0RTY4RjkxMUVFQUQ2Q0Y2MkVDNEY5QUUwMi9GWDNiTWowMlUx Qk9NSUpPYWVEYkEzVTZhTTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFamD9PXT0mMaUkPcu5QrnT84lZNxI2A/OGf+a7PFHOQG492h/xOfycrb5zI7 tAWamUt8s/830X8Aw+jwh/27c+lVbsSsItUCE6qux4FvMG69xpFuSxGYgYWHVbQn twD2F0n4/aR2eAtDLi26VPl3tbpHqf7Dj9RAnkHA9TKSQ2sxF2vp9+nZefrrj67A iT7C/uqmT6DoaJKmy2qCxDiT8cw5DLZgolaJQDJhSj19kXceVEIU4A4JQqZGCOzR T960t2ZOB/Oib5YQ61tELb6jWG5d/ZFPIlpZktVTBv8o6R3TAnw4GqGmMHpCodAD sVMCM1zXa91akZa9VXEnbtz7qQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:31:15 2026 by rpki-client