$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: U6oW/fvLcRTj1DeT9eiBlcRdbVtUmvMFZHFrS+8OCZU= Subject key identifier: 95:6F:11:2D:B7:FC:E7:92:D1:91:4F:4D:0A:D5:58:58:1E:FD:EE:B6 Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 01E4 Signing time: Wed 29 Jul 2026 04:41:10 +0000 Manifest this update: Wed 29 Jul 2026 04:41:10 +0000 Manifest next update: Wed 05 Aug 2026 04:41:10 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: 3aSJP+1UUL4VfA2VQvi7Z9aHkvquqwdZcIKcQfNaZjU=) 2: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=) 3: B6B34C7E80F211F1958CCFA465A30FBC.roa (hash: 2Q58E+BRBfRGVnNM+UkGg3+ulMIPYdxNak63FCPSz3s=) 4: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 04:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Jul 29 04:41:10 2026 GMT Not After : Aug 5 04:41:10 2026 GMT Subject: CN=6a698466-2b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:bd:0e:78:12:dc:50:72:27:97:8e:54:03:ef: 86:1d:af:ae:12:a4:13:9c:d0:25:9d:20:a0:2f:60: fa:5e:7a:a9:8e:d3:ee:f6:10:4a:30:3d:5d:07:3a: 77:bb:da:ba:fa:85:45:05:e5:a1:e4:48:91:ae:5e: e5:15:3c:10:9e:72:b2:2f:f1:9c:c5:a1:cb:76:8d: 2f:a7:8b:82:1b:c2:10:91:06:0e:66:87:8c:26:a6: 1e:f7:13:58:36:e9:b6:79:01:68:ed:1f:f4:0d:46: 64:fc:60:87:56:1e:c9:3b:5f:39:23:50:63:fc:06: e4:09:1b:fb:76:29:26:a5:8e:19:5e:06:bd:ff:80: f5:8f:a2:98:b0:bd:f3:8e:73:5a:5b:50:0d:0b:35: 61:91:9f:5f:63:21:d7:db:86:08:e7:28:ef:f4:11: 0c:b5:03:f0:9a:1c:6e:28:4e:4f:f9:39:6a:da:4a: 8a:cf:ba:6a:50:f9:72:a7:e5:9f:fc:7f:f4:fd:5d: ea:59:f7:7e:07:9c:f3:18:b2:a7:20:fa:ed:00:d6: 9e:5d:bf:e2:38:f4:3e:c0:f8:67:3c:72:bc:a9:a7: e5:b4:0c:34:35:cd:b8:a5:ae:19:fb:99:0e:b8:f6: f9:75:50:bd:98:53:99:24:95:39:a6:12:a8:5f:69: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6F:11:2D:B7:FC:E7:92:D1:91:4F:4D:0A:D5:58:58:1E:FD:EE:B6 X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:17:72:5a:ec:9e:cc:98:72:dd:cc:94:a0:99:a8:9a:8d:af: d5:06:b1:89:91:34:e2:b0:72:5a:29:c5:73:85:33:35:af:ad: ee:0c:c6:c2:cf:85:b1:0c:02:df:e6:cf:dc:23:7c:33:d2:d4: a8:40:88:2b:6f:d6:67:c2:2f:66:5e:6b:29:28:d4:d3:7b:3f: bb:7f:e4:a0:a7:83:82:6e:2e:76:58:e6:a2:18:25:c7:73:4e: 87:e8:12:c2:92:c1:ac:95:f3:cb:ac:1e:9e:93:4b:67:84:3b: 2f:6a:96:4d:17:93:21:be:25:09:3a:18:88:39:a0:1a:36:37: 4f:a8:01:cd:5c:83:0f:85:cb:78:8b:11:49:ef:7f:22:67:51: 37:8c:99:32:28:1e:d8:f5:8d:f0:ef:af:54:20:ed:73:28:e0: ec:f0:8b:c6:b2:03:46:fc:34:cd:f7:12:e7:85:84:61:5f:0c: ab:7f:2f:1d:43:6d:0e:5f:f5:41:09:82:3c:68:09:78:ec:a9: 0e:9f:b3:5c:e8:94:36:88:8c:30:9c:b1:c4:d6:6e:7e:39:4d: a6:7f:96:d8:31:4b:4d:5b:a1:80:c8:d0:51:92:a3:26:02:8c: 94:05:54:0e:9b:9e:1f:9d:d5:7f:d4:5d:df:94:8b:30:3e:ab: 08:c0:cb:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjYwNzI5MDQ0MTEwWhcNMjYwODA1MDQ0MTEwWjAYMRYwFAYD VQQDEw02YTY5ODQ2Ni0yYjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA170OeBLcUHInl45UA++GHa+uEqQTnNAlnSCgL2D6XnqpjtPu9hBKMD1dBzp3 u9q6+oVFBeWh5EiRrl7lFTwQnnKyL/GcxaHLdo0vp4uCG8IQkQYOZoeMJqYe9xNY Num2eQFo7R/0DUZk/GCHVh7JO185I1Bj/AbkCRv7dikmpY4ZXga9/4D1j6KYsL3z jnNaW1ANCzVhkZ9fYyHX24YI5yjv9BEMtQPwmhxuKE5P+Tlq2kqKz7pqUPlyp+Wf /H/0/V3qWfd+B5zzGLKnIPrtANaeXb/iOPQ+wPhnPHK8qafltAw0Nc24pa4Z+5kO uPb5dVC9mFOZJJU5phKoX2mW/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVvES23 /OeS0ZFPTQrVWFge/e62MB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJRdyWuyezJhy3cyUoJmomo2v1QaxiZE04rByWinFc4UzNa+t7gzGws+FsQwC 3+bP3CN8M9LUqECIK2/WZ8IvZl5rKSjU03s/u3/koKeDgm4udljmohglx3NOh+gS wpLBrJXzy6wenpNLZ4Q7L2qWTReTIb4lCToYiDmgGjY3T6gBzVyDD4XLeIsRSe9/ ImdRN4yZMige2PWN8O+vVCDtcyjg7PCLxrIDRvw0zfcS54WEYV8Mq38vHUNtDl/1 QQmCPGgJeOypDp+zXOiUNoiMMJyxxNZufjlNpn+W2DFLTVuhgMjQUZKjJgKMlAVU DpueH53Vf9Rd35SLMD6rCMDLiQ== -----END CERTIFICATE-----Generated at Wed Jul 29 07:59:22 2026 by rpki-client