$ rpki-client -vvf rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft File: x40eWVkb4MdSTTa9-FyKxuoZD44.mft (raw, json) Hash identifier: ijMNB0GZdRcl6a5YmXjzP9E3Zct526s65E837BMI3tw= Subject key identifier: 08:9F:FC:3F:FE:AD:85:37:BD:94:76:61:8C:13:AA:AB:AF:6F:C1:DA Authority key identifier: C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E Certificate issuer: /CN=A91554E6/serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft Manifest number: 05B7 Signing time: Mon 27 Jul 2026 01:46:11 +0000 Manifest this update: Mon 27 Jul 2026 01:46:11 +0000 Manifest next update: Mon 03 Aug 2026 01:46:11 +0000 Files and hashes: 1: x40eWVkb4MdSTTa9-FyKxuoZD44.crl (hash: me3eHqKcbyoeJncaGGkOAeoKVgAvUG502BSNbfyNUH0=) 2: 0FC70E667CE011F1849F5C3096A30FBC.roa (hash: rGMKLFytr4SDeBq+IhmgmESo7y8w3gNeeV7+LKI/jC8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91554E6, serialNumber=C78D1E59591BE0C7524D36BDF85C8AC6EA190F8E Validity Not Before: Jul 27 01:46:11 2026 GMT Not After : Aug 3 01:46:11 2026 GMT Subject: CN=6a66b863-d969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:39:d1:00:6b:22:7e:19:4b:6b:9c:bb:8d: e7:8a:06:4a:8f:73:bb:72:6c:8d:bd:26:0e:48:6d: 86:76:a2:0b:e2:1c:96:62:a9:61:bf:e4:a0:17:ce: 93:f9:a7:26:a9:f2:05:51:0d:bb:96:ab:d0:f2:c0: 59:ed:c2:11:c0:2a:92:c0:a5:a0:c8:db:e1:a5:1a: 8f:b8:93:7f:2f:43:08:8f:ce:c9:ba:a9:64:c6:40: 71:50:86:6e:e7:75:ad:b2:86:5b:85:11:40:e7:a9: 76:b1:c6:13:a5:38:b5:65:40:1b:e9:6c:0d:13:27: 86:5b:a3:12:be:cd:ad:19:6f:a0:52:80:b4:f2:8d: 75:45:ce:27:e4:d7:b1:61:32:f6:97:c9:dc:00:79: 41:82:23:a7:7b:fd:a6:a2:48:de:c9:ad:6f:2e:cd: 2b:f9:de:af:98:d5:4f:1e:7a:02:40:92:1d:33:0b: d6:bc:02:26:b1:e9:df:ac:20:f3:6e:69:ca:f0:66: b0:53:d8:ae:9f:db:8d:d1:7e:9e:f5:72:c3:74:16: 05:f5:e6:4b:77:13:5f:67:69:4c:79:60:6c:6e:89: 3e:d9:9f:58:34:6b:77:39:68:40:98:9f:a8:13:6d: db:5b:f9:75:f5:06:0b:35:82:f7:89:26:14:c1:c4: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9F:FC:3F:FE:AD:85:37:BD:94:76:61:8C:13:AA:AB:AF:6F:C1:DA X509v3 Authority Key Identifier: keyid:C7:8D:1E:59:59:1B:E0:C7:52:4D:36:BD:F8:5C:8A:C6:EA:19:0F:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x40eWVkb4MdSTTa9-FyKxuoZD44.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91554E6/9F067748ED4B11ECAB8FAA77C4F9AE02/x40eWVkb4MdSTTa9-FyKxuoZD44.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e8:7e:b7:59:26:74:10:ea:bb:aa:f0:3f:f3:b4:54:ce:b6: f8:cc:f6:1f:3d:d8:d4:9f:bf:5a:f4:34:78:d8:fd:07:34:b0: 2c:2e:a5:ac:18:7e:5f:d7:37:a4:91:da:f2:0e:15:37:8c:30: 7e:13:5a:4e:db:81:69:29:d4:da:03:f9:72:a1:db:db:de:03: 13:bd:dc:41:72:bd:95:e0:ca:06:f9:c6:56:f8:b4:0e:76:c8: bb:46:a2:e8:fc:39:96:b1:e0:6e:fc:34:6b:c0:87:2e:89:72: e6:d4:7f:76:8f:50:a9:71:1a:cc:3d:bf:b7:c8:92:36:d3:f5: d8:e0:39:4e:1b:75:3f:3f:bd:50:4c:ab:7b:e8:ae:e0:f1:6d: a7:ba:3a:44:89:a3:10:cd:78:b9:3e:a2:69:95:0b:8f:01:05: 2f:f0:fb:76:32:97:3a:e3:b8:88:ff:f5:b0:7f:4d:fc:7d:89: e9:51:09:bf:67:15:b6:cc:26:a4:45:17:6d:9a:54:21:7b:dd: ed:6d:3f:ff:a9:b1:06:5d:c4:4b:86:68:7c:b2:bc:fa:be:1b: 8b:ac:e1:2f:cf:5a:27:88:28:0b:77:19:bb:4d:ce:68:1e:60: 55:94:de:36:ac:bb:c8:b1:15:b1:65:97:81:04:b3:9d:f2:52: b6:b8:65:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU0RTYxMTAvBgNVBAUTKEM3OEQxRTU5NTkxQkUwQzc1MjREMzZCREY4NUM4QUM2 RUExOTBGOEUwHhcNMjYwNzI3MDE0NjExWhcNMjYwODAzMDE0NjExWjAYMRYwFAYD VQQDEw02YTY2Yjg2My1kOTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlyc50QBrIn4ZS2ucu43nigZKj3O7cmyNvSYOSG2GdqIL4hyWYqlhv+SgF86T +acmqfIFUQ27lqvQ8sBZ7cIRwCqSwKWgyNvhpRqPuJN/L0MIj87JuqlkxkBxUIZu 53WtsoZbhRFA56l2scYTpTi1ZUAb6WwNEyeGW6MSvs2tGW+gUoC08o11Rc4n5Nex YTL2l8ncAHlBgiOne/2mokjeya1vLs0r+d6vmNVPHnoCQJIdMwvWvAImsenfrCDz bmnK8GawU9iun9uN0X6e9XLDdBYF9eZLdxNfZ2lMeWBsbok+2Z9YNGt3OWhAmJ+o E23bW/l19QYLNYL3iSYUwcQXJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAif/D/+ rYU3vZR2YYwTqquvb8HaMB8GA1UdIwQYMBaAFMeNHllZG+DHUk02vfhcisbqGQ+O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTRFNi85RjA2Nzc0OEVE NEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRNZFNUVGE5LUZ5S3h1b1pE NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g0MGVXVmtiNE1kU1RUYTktRnlLeHVvWkQ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTRFNi85RjA2Nzc0OEVENEIxMUVDQUI4RkFBNzdDNEY5QUUwMi94NDBlV1ZrYjRN ZFNUVGE5LUZ5S3h1b1pENDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATOh+t1kmdBDqu6rwP/O0VM62+Mz2Hz3Y1J+/WvQ0eNj9BzSwLC6lrBh+X9c3 pJHa8g4VN4wwfhNaTtuBaSnU2gP5cqHb294DE73cQXK9leDKBvnGVvi0DnbIu0ai 6Pw5lrHgbvw0a8CHLoly5tR/do9QqXEazD2/t8iSNtP12OA5Tht1Pz+9UEyre+iu 4PFtp7o6RImjEM14uT6iaZULjwEFL/D7djKXOuO4iP/1sH9N/H2J6VEJv2cVtswm pEUXbZpUIXvd7W0//6mxBl3ES4ZofLK8+r4bi6zhL89aJ4goC3cZu03OaB5gVZTe Nqy7yLEVsWWXgQSznfJStrhlpQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:33:34 2026 by rpki-client