$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft File: s4Q_FBVTnelR6maApOmQCK-DeHQ.mft (raw, json) Hash identifier: g4rznoOuuwh15wAeG8cP0IdcUlKbi5yGpm25SJXmPuI= Subject key identifier: 9D:E0:DB:A5:53:1B:38:4E:2B:16:A1:9D:21:5C:1B:92:31:FF:7E:86 Authority key identifier: B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74 Certificate issuer: /CN=A914E6AA/serialNumber=B3843F1415539DE951EA6680A4E99008AF837874 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft Manifest number: 0C7D Signing time: Sun 26 Jul 2026 23:05:46 +0000 Manifest this update: Sun 26 Jul 2026 23:05:46 +0000 Manifest next update: Sun 02 Aug 2026 23:05:46 +0000 Files and hashes: 1: s4Q_FBVTnelR6maApOmQCK-DeHQ.crl (hash: nzZcoBcPvGLAuS8KkJ0k9an3Fkl1AVqqDK11UY1/tso=) 2: 6017E5BE54FB11F1B81DC57BA3833773.roa (hash: P+pna3FadF29aa6apDihcWdlag9aJJPNQ/+Y5gHcH4s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=B3843F1415539DE951EA6680A4E99008AF837874 Validity Not Before: Jul 26 23:05:46 2026 GMT Not After : Aug 2 23:05:46 2026 GMT Subject: CN=6a6692ca-7d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e7:e3:13:fd:2d:0a:21:cf:c8:23:39:95:ac: 32:d0:d9:d4:fa:46:8c:b7:bc:f5:e0:8a:ab:bb:7f: dd:b1:24:81:1f:eb:9d:a2:b6:66:68:8e:68:f0:5a: 16:f9:15:5f:d7:3e:b8:05:39:7a:6d:11:31:2e:b2: a9:ad:2c:b1:b4:4e:43:fe:28:43:64:84:d6:a6:e9: a8:fd:c0:5e:04:87:1e:95:c3:79:77:0f:bc:63:94: 37:b8:4e:54:d3:a8:99:8b:da:2c:44:45:20:cb:a4: 17:23:87:a6:b4:53:ab:b1:24:44:97:fa:5c:e7:97: d6:69:7d:50:c5:73:7d:b6:51:83:cf:12:09:74:47: 36:74:5f:59:84:ba:a6:57:69:21:ba:3d:51:2d:49: 82:93:71:67:80:1e:da:35:42:0f:96:95:72:28:ae: 4c:2e:cc:00:fb:5d:2e:97:29:4a:ea:69:a4:dd:0e: 0c:21:42:fd:4e:72:64:9e:d4:75:84:bc:16:cf:ea: ee:a7:a6:7a:f6:af:f9:fd:03:1e:5e:bc:a8:41:0e: 63:73:4a:9e:7d:71:79:be:54:c0:e8:61:3d:30:6d: f2:5a:7b:b6:fb:7b:7c:c5:8c:e2:13:86:c8:68:87: f6:cf:94:6e:16:38:92:8e:2c:3e:c9:5b:2f:33:be: 9d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E0:DB:A5:53:1B:38:4E:2B:16:A1:9D:21:5C:1B:92:31:FF:7E:86 X509v3 Authority Key Identifier: keyid:B3:84:3F:14:15:53:9D:E9:51:EA:66:80:A4:E9:90:08:AF:83:78:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s4Q_FBVTnelR6maApOmQCK-DeHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/s4Q_FBVTnelR6maApOmQCK-DeHQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:35:8b:d7:2a:6f:11:03:dd:1e:71:fb:1f:b8:92:4e:03:89: de:fd:3f:95:2b:17:8a:42:63:cf:51:8d:64:09:d5:2b:17:50: 14:01:fb:0a:68:14:aa:9d:ce:fc:46:04:ff:3b:2f:12:4c:17: 90:0a:33:1b:47:07:7b:e0:35:4b:75:7e:bf:6f:83:4d:db:cb: c5:5c:e0:ce:64:34:5b:52:4c:67:f5:ee:20:b3:28:20:36:06: 1b:2e:f0:08:1e:18:ce:4d:ba:dc:0f:79:74:a7:33:14:18:6a: 99:d5:05:3c:4b:a1:f9:11:b8:65:01:1b:a9:49:52:af:d8:6f: df:9b:7e:3c:79:3d:d7:a4:9f:a2:88:73:43:da:d4:b9:97:d8: 3b:af:64:55:83:ab:07:80:91:5a:58:1d:e6:57:f2:4e:6e:24: 18:3a:2b:6c:10:8f:5c:a7:fe:1f:29:92:64:80:f5:cf:3b:5b: b4:63:ff:99:5a:76:00:b8:5c:9b:6e:ec:f4:90:7b:b9:f9:66: 28:1a:1b:e7:10:b1:73:34:e1:e0:bb:f0:04:f6:3b:fa:bd:76: 05:a4:d5:e2:18:3a:f9:be:0b:07:66:a4:27:d5:1b:46:6e:d7: 99:96:d3:0e:c3:80:1c:6b:94:4a:c0:50:61:30:1d:77:9f:e1: 37:59:82:53 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTZBQTExMC8GA1UEBRMoQjM4NDNGMTQxNTUzOURFOTUxRUE2NjgwQTRFOTkwMDhB RjgzNzg3NDAeFw0yNjA3MjYyMzA1NDZaFw0yNjA4MDIyMzA1NDZaMBgxFjAUBgNV BAMTDTZhNjY5MmNhLTdkMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr5+MT/S0KIc/IIzmVrDLQ2dT6Roy3vPXgiqu7f92xJIEf652itmZojmjwWhb5 FV/XPrgFOXptETEusqmtLLG0TkP+KENkhNam6aj9wF4Ehx6Vw3l3D7xjlDe4TlTT qJmL2ixERSDLpBcjh6a0U6uxJESX+lznl9ZpfVDFc322UYPPEgl0RzZ0X1mEuqZX aSG6PVEtSYKTcWeAHto1Qg+WlXIorkwuzAD7XS6XKUrqaaTdDgwhQv1OcmSe1HWE vBbP6u6npnr2r/n9Ax5evKhBDmNzSp59cXm+VMDoYT0wbfJae7b7e3zFjOIThsho h/bPlG4WOJKOLD7JWy8zvp2bAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUneDbpVMb OE4rFqGdIVwbkjH/foYwHwYDVR0jBBgwFoAUs4Q/FBVTnelR6maApOmQCK+DeHQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNkFBLzhFREIxMDdFQURB ODExRUJBN0M5RjU2N0M0RjlBRTAyL3M0UV9GQlZUbmVsUjZtYUFwT21RQ0stRGVI US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczRRX0ZCVlRuZWxSNm1hQXBPbVFDSy1EZUhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NkFBLzhFREIxMDdFQURBODExRUJBN0M5RjU2N0M0RjlBRTAyL3M0UV9GQlZUbmVs UjZtYUFwT21RQ0stRGVIUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXNYvXKm8RA90ecfsfuJJOA4ne/T+VKxeKQmPPUY1kCdUrF1AUAfsKaBSqnc78 RgT/Oy8STBeQCjMbRwd74DVLdX6/b4NN28vFXODOZDRbUkxn9e4gsyggNgYbLvAI HhjOTbrcD3l0pzMUGGqZ1QU8S6H5EbhlARupSVKv2G/fm348eT3XpJ+iiHND2tS5 l9g7r2RVg6sHgJFaWB3mV/JObiQYOitsEI9cp/4fKZJkgPXPO1u0Y/+ZWnYAuFyb buz0kHu5+WYoGhvnELFzNOHgu/AE9jv6vXYFpNXiGDr5vgsHZqQn1RtGbteZltMO w4Aca5RKwFBhMB13n+E3WYJT -----END CERTIFICATE-----Generated at Tue Jul 28 18:03:16 2026 by rpki-client