$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: Qyz80ELKhsQL3C67tYKpD3cbaL4ekJU3VN4o/6HlcQk= Subject key identifier: 11:63:79:E0:BB:86:BB:60:C8:4E:82:78:5D:8C:23:C1:B8:F5:80:46 Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 040D Signing time: Mon 27 Jul 2026 03:14:41 +0000 Manifest this update: Mon 27 Jul 2026 03:14:41 +0000 Manifest next update: Mon 03 Aug 2026 03:14:41 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: Xyh3TaZuh9/U6PfGv4dzRanUKvpK5SpUyESE3ixiwbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Jul 27 03:14:41 2026 GMT Not After : Aug 3 03:14:41 2026 GMT Subject: CN=6a66cd21-0561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6f:0d:fe:ae:42:74:3b:c4:03:2c:e5:90:c2: 52:ca:bd:a0:2b:69:92:68:27:79:70:04:fb:6f:ff: 10:d8:be:55:8c:51:a6:94:c8:88:30:15:97:65:fd: 79:69:8d:b3:33:57:b5:fd:dd:5f:88:7d:49:b9:10: 56:7e:05:89:8d:db:54:87:a4:55:12:d1:82:2b:c3: 5c:bd:df:a5:b4:ad:a5:12:19:ae:ee:36:61:d8:e5: 77:35:80:89:74:40:eb:23:1b:b3:29:d5:bd:c9:97: b9:c2:83:01:42:19:43:a2:22:c2:f5:56:dc:39:8d: 38:69:3e:27:c0:4b:df:ec:c4:7c:b1:a8:64:98:91: d3:7a:29:8b:10:b2:46:2e:30:2f:d4:ac:64:07:88: 30:07:48:f0:e1:04:c5:4d:45:e7:ee:a6:ef:67:3b: 85:1e:c3:f4:b6:e9:0b:13:ea:08:3d:32:63:78:42: 02:37:be:92:f7:4d:ce:89:af:69:e8:a9:1a:06:c5: 86:fc:6b:ba:90:2b:89:d5:f2:a6:48:bf:04:9c:08: d2:18:9b:2a:24:26:ec:ae:e3:a4:33:26:3c:46:5b: 9e:7c:6e:8f:70:ae:37:b2:0e:60:26:79:5d:2a:99: 4d:a6:4b:72:f3:7b:fb:ad:1d:16:a0:8d:01:ed:49: bf:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:63:79:E0:BB:86:BB:60:C8:4E:82:78:5D:8C:23:C1:B8:F5:80:46 X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:54:f1:de:0b:b2:41:46:0d:ee:e1:85:32:e9:0c:ad:fa:f8: f9:8f:01:9f:0c:de:82:b8:17:2a:b5:9f:f4:94:33:b5:12:53: 93:db:1b:73:54:42:64:fd:3d:bb:94:a7:5a:16:59:c8:51:4e: c7:d1:c8:8e:5b:e4:df:aa:62:4e:75:3e:8d:a7:79:9d:6a:45: b2:de:eb:b0:39:f7:24:d4:a2:66:18:fd:c5:49:c4:de:3f:b9: 13:e0:43:55:c6:9b:db:ea:bc:45:1d:b6:df:db:8e:20:6b:a5: 11:54:2e:a0:50:dd:5d:2b:11:38:8e:09:0b:b3:69:d2:e1:a4: 32:4c:f1:db:05:78:30:4c:f4:1f:b9:e5:fb:5e:0a:fa:01:d9: 45:f5:6a:51:9c:41:f1:3c:3d:e5:57:b5:38:2c:60:b1:ed:a8: a2:bd:85:72:1c:f3:30:18:7e:42:88:c5:24:96:7b:c5:f3:a8: 26:c1:a7:4c:ae:4e:19:f5:c9:d8:32:46:e4:28:16:54:cb:a8: 66:08:05:c5:05:b8:6b:c7:c7:cb:82:f4:54:2b:c0:2b:c9:31: 73:0b:45:3b:4d:f3:ec:97:38:da:ac:de:86:e1:6a:74:4d:ef: 51:e3:dd:2f:dd:03:da:22:1d:40:cd:23:9c:af:09:0e:df:59: 4b:ea:fc:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjYwNzI3MDMxNDQxWhcNMjYwODAzMDMxNDQxWjAYMRYwFAYD VQQDEw02YTY2Y2QyMS0wNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlW8N/q5CdDvEAyzlkMJSyr2gK2mSaCd5cAT7b/8Q2L5VjFGmlMiIMBWXZf15 aY2zM1e1/d1fiH1JuRBWfgWJjdtUh6RVEtGCK8Ncvd+ltK2lEhmu7jZh2OV3NYCJ dEDrIxuzKdW9yZe5woMBQhlDoiLC9VbcOY04aT4nwEvf7MR8sahkmJHTeimLELJG LjAv1KxkB4gwB0jw4QTFTUXn7qbvZzuFHsP0tukLE+oIPTJjeEICN76S903Oia9p 6KkaBsWG/Gu6kCuJ1fKmSL8EnAjSGJsqJCbsruOkMyY8RluefG6PcK43sg5gJnld KplNpkty83v7rR0WoI0B7Um/OQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBFjeeC7 hrtgyE6CeF2MI8G49YBGMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKVTx3guyQUYN7uGFMukMrfr4+Y8BnwzegrgXKrWf9JQztRJTk9sbc1RCZP09 u5SnWhZZyFFOx9HIjlvk36piTnU+jad5nWpFst7rsDn3JNSiZhj9xUnE3j+5E+BD Vcab2+q8RR2239uOIGulEVQuoFDdXSsROI4JC7Np0uGkMkzx2wV4MEz0H7nl+14K +gHZRfVqUZxB8Tw95Ve1OCxgse2oor2FchzzMBh+QojFJJZ7xfOoJsGnTK5OGfXJ 2DJG5CgWVMuoZggFxQW4a8fHy4L0VCvAK8kxcwtFO03z7Jc42qzehuFqdE3vUePd L90D2iIdQM0jnK8JDt9ZS+r8Bg== -----END CERTIFICATE-----Generated at Wed Jul 29 00:11:51 2026 by rpki-client