$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: Q1dWc0oj6HSQY2HeQ0Xi9a5rzmFrJI+Ev+zBxXvivSU= Subject key identifier: 02:00:62:F3:4C:C7:B7:59:6E:34:7B:04:44:4C:F0:E3:57:F3:9E:09 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0C26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0C0F Signing time: Tue 28 Jul 2026 19:04:03 +0000 Manifest this update: Tue 28 Jul 2026 19:04:02 +0000 Manifest next update: Tue 04 Aug 2026 19:04:02 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: B1Q/hmGAUZFy4Xn9337+6S8VHcbKvJjnUhcl5oocos0=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: 9OFSK2ChXxMiDwCW+T5F/rViLCQZW9lND/if0koTJTw=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: hU7OMHsTj6hL7vgEEXYSl72Q/STHSktutJc1O2+u9S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3110 (0xc26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Jul 28 19:04:02 2026 GMT Not After : Aug 4 19:04:02 2026 GMT Subject: CN=6a68fd23-464f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:98:e4:06:b9:58:b0:b8:bd:90:30:71:d4:d4: fd:e4:76:92:a3:52:2f:1b:f3:57:bb:c5:ee:b8:b5: fe:5d:92:04:5c:b9:0b:6b:a8:3a:43:97:b7:69:06: e7:66:fa:be:4f:d3:6b:c3:12:0c:c6:11:dc:96:33: a1:59:30:2c:26:bf:4b:e3:f1:21:bb:91:1c:2d:05: ea:66:96:b0:d6:7f:89:f7:3d:53:ea:9a:8e:63:fe: 83:8a:d3:0a:8f:68:2f:2f:18:3f:e0:63:e8:ff:03: 7c:bb:22:3c:6b:4d:21:cd:1b:c7:28:db:64:20:19: 2b:71:d7:b6:f1:78:55:ca:d8:ab:9e:35:85:15:cf: 67:7d:6f:9c:69:68:6c:a7:83:67:e9:47:84:fb:11: 7b:d4:2d:66:47:69:3d:57:39:a6:60:e7:e4:88:25: ad:81:48:49:26:c8:85:36:71:f0:a4:11:1e:cc:e9: e5:64:0a:58:87:3c:53:78:e3:1b:cf:31:e4:b2:c2: b4:40:65:de:06:07:d3:e4:ef:79:ff:2c:c0:c7:78: 3d:2f:75:24:70:bf:3f:68:51:a0:35:44:af:83:24: 91:31:71:21:e3:b5:7f:54:a9:81:1e:c2:ae:e0:84: 13:80:a1:ba:7b:55:c1:85:55:16:a3:db:19:7e:25: a5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:00:62:F3:4C:C7:B7:59:6E:34:7B:04:44:4C:F0:E3:57:F3:9E:09 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:77:3f:31:97:9f:d7:03:a2:c6:eb:f7:ea:74:f1:e6:94:ee: 80:07:4a:f3:b8:04:16:40:7d:38:45:9c:d8:2a:19:9a:9e:d6: bf:03:d1:d1:cd:0f:1b:89:6c:05:4a:79:1f:b1:3b:47:44:23: 92:30:50:b1:8f:25:be:22:7e:38:e1:2c:79:6b:66:79:76:c9: a4:67:30:1a:06:3b:6f:83:2c:c7:d5:ff:d8:74:8d:81:85:19: 5d:29:76:54:72:97:6b:a0:64:2c:b3:04:63:40:09:9a:f4:52: 08:88:a0:68:40:d4:b8:75:b5:2b:16:db:f7:39:c3:44:26:79: 0a:8a:84:f8:59:05:ff:1c:85:64:82:08:59:fd:71:95:d1:e6: 71:05:be:fd:92:49:20:9e:01:4f:58:c9:97:f0:a3:20:9e:32: 68:c9:e0:38:bb:56:bb:c1:e8:2e:de:8c:8a:83:0e:9b:98:4b: 1c:ca:71:c6:9b:78:a8:cd:8c:bd:50:6f:27:46:d2:4c:bb:fc: bd:b5:60:33:ab:4c:67:9f:a0:19:66:d5:c6:5d:b8:44:ed:ce: c3:50:e7:0b:f5:4f:e5:ba:b2:bf:35:75:bc:84:ab:d0:41:6b: 6f:c8:20:74:50:da:3a:b9:f0:1f:12:57:4e:c9:6a:e1:69:01: 63:ef:77:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjYwNzI4MTkwNDAyWhcNMjYwODA0MTkwNDAyWjAYMRYwFAYD VQQDEw02YTY4ZmQyMy00NjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiJjkBrlYsLi9kDBx1NT95HaSo1IvG/NXu8XuuLX+XZIEXLkLa6g6Q5e3aQbn Zvq+T9NrwxIMxhHcljOhWTAsJr9L4/Ehu5EcLQXqZpaw1n+J9z1T6pqOY/6DitMK j2gvLxg/4GPo/wN8uyI8a00hzRvHKNtkIBkrcde28XhVytirnjWFFc9nfW+caWhs p4Nn6UeE+xF71C1mR2k9VzmmYOfkiCWtgUhJJsiFNnHwpBEezOnlZApYhzxTeOMb zzHkssK0QGXeBgfT5O95/yzAx3g9L3UkcL8/aFGgNUSvgySRMXEh47V/VKmBHsKu 4IQTgKG6e1XBhVUWo9sZfiWlNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIAYvNM x7dZbjR7BERM8ONX854JMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASnc/MZef1wOixuv36nTx5pTugAdK87gEFkB9OEWc2CoZmp7WvwPR0c0PG4ls BUp5H7E7R0QjkjBQsY8lviJ+OOEseWtmeXbJpGcwGgY7b4Msx9X/2HSNgYUZXSl2 VHKXa6BkLLMEY0AJmvRSCIigaEDUuHW1Kxbb9znDRCZ5CoqE+FkF/xyFZIIIWf1x ldHmcQW+/ZJJIJ4BT1jJl/CjIJ4yaMngOLtWu8HoLt6MioMOm5hLHMpxxpt4qM2M vVBvJ0bSTLv8vbVgM6tMZ5+gGWbVxl24RO3Ow1DnC/VP5bqyvzV1vISr0EFrb8gg dFDaOrnwHxJXTslq4WkBY+93aQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:41:18 2026 by rpki-client