$ rpki-client -vvf rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft File: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft (raw, json) Hash identifier: mho82ydXFmqVNZk9fX4KPF4n4+QhtomFBhafvor/BwY= Subject key identifier: DB:8F:A9:6C:6D:5F:7E:C6:9F:DD:02:D8:B7:AD:54:00:2A:99:04:6E Authority key identifier: 46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 Certificate issuer: /CN=A91964B3/serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Certificate serial: 1114 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft Manifest number: 10FA Signing time: Tue 28 Jul 2026 14:25:30 +0000 Manifest this update: Tue 28 Jul 2026 14:25:29 +0000 Manifest next update: Tue 04 Aug 2026 14:25:29 +0000 Files and hashes: 1: RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl (hash: guTZvv10TpQnC+Saae2rfGPFjXcRRiFMeSq0PKSFdis=) 2: 5D563164AF3411EFB5B51A57C4F9AE02.roa (hash: QAfeG31AUJ9ysS7/jFhyhx6FaI+gxOiP1E4c7gwnNZ4=) 3: 1396434EC90A11EF8577744AC4F9AE02.roa (hash: dZjVpX0OHFb95lVF9Cf+7jCMCOq6ryMRIoLMcRSlevM=) 4: 23B68638C5DD11EABC58FD24C4F9AE02.roa (hash: FcrkIqa4XDgVdyeOamaFQqlLus8d1JT70DNswdpetnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4372 (0x1114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91964B3, serialNumber=464854FB50A9903C5253418C583D0F31B841D597 Validity Not Before: Jul 28 14:25:29 2026 GMT Not After : Aug 4 14:25:29 2026 GMT Subject: CN=6a68bbd9-89b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:39:db:a3:4e:79:c9:0f:7b:0e:25:a6:d8: c5:75:dc:ae:e7:94:ab:94:fe:7c:81:1e:09:3a:69: 36:86:98:ea:ac:6b:39:2d:8a:58:38:31:59:39:ef: 8a:14:90:6f:eb:62:c3:6a:cf:c1:bf:2f:0d:a1:97: b7:28:c4:71:f0:bb:0a:3e:e9:45:77:06:09:0a:5f: 4c:73:f7:4e:ab:77:d9:18:7c:f7:76:19:bf:b9:ae: b0:d4:c2:73:b5:e8:0f:af:75:30:66:38:ee:c2:bc: 73:3a:65:4f:57:b4:8d:69:a4:84:30:52:d7:ab:90: 71:78:43:1a:fe:90:90:42:80:e8:ff:ec:2f:94:e0: a1:e6:36:d0:fb:5c:a7:9e:85:71:93:f7:9c:62:c5: d2:2b:bb:cc:3e:f2:a4:45:28:9f:a5:d6:81:7b:30: ca:fe:2d:97:59:8d:b0:9e:53:9b:14:02:02:6b:df: e1:f3:08:f5:15:fd:8a:c7:09:b4:ee:7d:0c:35:58: 9b:77:47:ac:df:5a:c9:68:04:cd:c4:1f:15:67:f7: 1b:d1:7a:44:e9:e7:5c:66:55:44:8f:ab:51:04:f7: 64:9b:a9:9a:e1:90:74:61:b6:2c:fd:98:3d:1f:57: c1:97:23:68:b2:c9:86:e0:ab:30:4f:9b:8c:83:5a: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8F:A9:6C:6D:5F:7E:C6:9F:DD:02:D8:B7:AD:54:00:2A:99:04:6E X509v3 Authority Key Identifier: keyid:46:48:54:FB:50:A9:90:3C:52:53:41:8C:58:3D:0F:31:B8:41:D5:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91964B3/2A5940F24BB311E9AB151C17C4F9AE02/RkhU-1CpkDxSU0GMWD0PMbhB1Zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:55:c0:50:b9:6e:fe:19:89:cd:77:ae:bc:b9:e7:5f:21:51: d3:e9:75:df:57:a8:18:dd:b3:f4:c4:f6:a2:30:24:96:84:40: 01:22:e1:d6:de:c3:39:8e:36:b9:5e:33:f4:a7:81:c5:73:9a: 46:47:72:f2:19:93:40:e6:4b:4e:bb:07:ee:f2:9c:f4:bf:a8: e4:76:cf:97:0b:dc:5c:ad:7e:d3:a3:85:d4:01:77:05:e4:92: c0:2a:4f:fa:36:94:1b:ef:9a:6d:e2:14:da:75:ac:65:f4:e0: 55:58:1e:4a:c7:71:6e:99:1a:ab:74:01:e9:e8:6a:26:76:77: a1:35:c0:32:15:fb:4b:e6:db:f7:20:74:ab:9a:5d:f2:cb:a5: 95:85:9e:34:12:6f:9b:2f:1a:ed:1f:e3:d6:d0:e1:5f:02:80: 63:11:32:b5:fe:85:f0:05:c6:ad:11:e6:78:4a:07:f2:4d:07: cd:20:45:76:02:4c:8b:83:25:ea:5c:b2:9c:cd:80:f0:ae:3e: 94:be:97:d7:bb:3d:ed:f7:be:7f:65:87:5e:bf:32:b5:9c:5d: 18:7d:47:0f:c2:d8:67:73:22:57:48:e8:f5:12:fa:f4:83:38: 29:54:b8:c4:d4:24:ed:67:7f:33:3e:9b:7a:a6:6c:70:f2:4f: cc:cf:f0:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICERQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0QjMxMTAvBgNVBAUTKDQ2NDg1NEZCNTBBOTkwM0M1MjUzNDE4QzU4M0QwRjMx Qjg0MUQ1OTcwHhcNMjYwNzI4MTQyNTI5WhcNMjYwODA0MTQyNTI5WjAYMRYwFAYD VQQDEw02YTY4YmJkOS04OWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAou4526NOeckPew4lptjFddyu55SrlP58gR4JOmk2hpjqrGs5LYpYODFZOe+K FJBv62LDas/Bvy8NoZe3KMRx8LsKPulFdwYJCl9Mc/dOq3fZGHz3dhm/ua6w1MJz tegPr3UwZjjuwrxzOmVPV7SNaaSEMFLXq5BxeEMa/pCQQoDo/+wvlOCh5jbQ+1yn noVxk/ecYsXSK7vMPvKkRSifpdaBezDK/i2XWY2wnlObFAICa9/h8wj1Ff2Kxwm0 7n0MNVibd0es31rJaATNxB8VZ/cb0XpE6edcZlVEj6tRBPdkm6ma4ZB0YbYs/Zg9 H1fBlyNossmG4KswT5uMg1rHyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNuPqWxt X37Gn90C2LetVAAqmQRuMB8GA1UdIwQYMBaAFEZIVPtQqZA8UlNBjFg9DzG4QdWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjRCMy8yQTU5NDBGMjRC QjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtEeFNVMEdNV0QwUE1iaEIx WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JraFUtMUNwa0R4U1UwR01XRDBQTWJoQjFaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjRCMy8yQTU5NDBGMjRCQjMxMUU5QUIxNTFDMTdDNEY5QUUwMi9Sa2hVLTFDcGtE eFNVMEdNV0QwUE1iaEIxWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYlXAULlu/hmJzXeuvLnnXyFR0+l131eoGN2z9MT2ojAkloRAASLh1t7DOY42 uV4z9KeBxXOaRkdy8hmTQOZLTrsH7vKc9L+o5HbPlwvcXK1+06OF1AF3BeSSwCpP +jaUG++abeIU2nWsZfTgVVgeSsdxbpkaq3QB6ehqJnZ3oTXAMhX7S+bb9yB0q5pd 8sullYWeNBJvmy8a7R/j1tDhXwKAYxEytf6F8AXGrRHmeEoH8k0HzSBFdgJMi4Ml 6lyynM2A8K4+lL6X17s97fe+f2WHXr8ytZxdGH1HD8LYZ3MiV0jo9RL69IM4KVS4 xNQk7Wd/Mz6beqZscPJPzM/wsA== -----END CERTIFICATE-----Generated at Wed Jul 29 01:12:40 2026 by rpki-client