$ rpki-client -vvf rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft File: gp8PQIhN2ZESEAWwfQmiy_-03sY.mft (raw, json) Hash identifier: alu2xWKzSBUgcGV0yGF/zOe5Dn+3ORzi7aLAGquwu0Q= Subject key identifier: 25:96:76:BA:2C:89:35:8C:FB:5A:15:C1:20:49:AF:5E:05:42:46:48 Authority key identifier: 82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 Certificate issuer: /CN=A91A16CF/serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft Manifest number: 0CC5 Signing time: Tue 28 Jul 2026 18:41:42 +0000 Manifest this update: Tue 28 Jul 2026 18:41:42 +0000 Manifest next update: Tue 04 Aug 2026 18:41:42 +0000 Files and hashes: 1: gp8PQIhN2ZESEAWwfQmiy_-03sY.crl (hash: dMMoaQKkxu9gpFlfcb/ukj4d938wffCuUFsrF74qee8=) 2: 2D2322ECF53111F0B165BC265F6F56BC.roa (hash: tZiy66LheF6UARgLL7DjkA4ZOPMuv3MTdVKtCblCRCI=) 3: 46D7B1B468F911EFAB3D9424C4F9AE02.roa (hash: EANYonIlLAQsD77itNqvU5Ar2XS9wRUAE//HQHxkYJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A16CF, serialNumber=829F0F40884DD991121005B07D09A2CBFFB4DEC6 Validity Not Before: Jul 28 18:41:42 2026 GMT Not After : Aug 4 18:41:42 2026 GMT Subject: CN=6a68f7e6-cd1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:3c:af:88:c4:1e:8b:71:e1:f7:3e:20:ec: 80:da:96:c9:82:91:ca:27:5b:8a:a9:2a:e5:f8:29: 0c:5d:73:db:2d:3a:08:5f:fc:f8:02:73:69:a1:d7: 7b:28:1b:1d:8c:32:e2:02:a1:34:f6:b6:4b:ac:50: 78:c0:3d:2e:e6:d0:0d:8e:87:92:57:0f:e4:33:67: aa:35:e7:f5:19:c5:c2:b7:55:ef:fa:f8:c2:9c:04: 75:b8:c5:10:37:b2:c9:38:82:57:a3:9d:07:1b:ff: 2d:be:c9:fa:db:26:9e:a3:39:67:52:2b:bc:b8:a1: 85:ee:3c:c7:69:ed:fd:fc:ab:c2:34:d4:84:b5:df: 5a:c7:b0:52:9d:8f:dd:e8:00:85:e2:20:45:c1:2f: 97:e1:08:87:43:42:88:61:7c:4e:90:7b:d8:e0:2b: 37:7b:16:9a:62:e5:02:e9:b6:9b:38:66:d6:33:60: 31:41:33:8d:03:69:be:cb:95:ed:4b:a2:93:f4:c5: 71:ea:7e:a8:2c:2f:65:79:7a:bb:fb:b7:8e:af:b5: ce:39:c4:4e:b1:eb:5a:3e:59:ca:2d:41:55:ab:9e: 86:cf:44:4b:a8:10:1d:0c:a4:a6:bf:b9:51:92:69: 2d:ac:b2:86:5d:af:91:74:b6:37:70:75:03:81:c7: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:96:76:BA:2C:89:35:8C:FB:5A:15:C1:20:49:AF:5E:05:42:46:48 X509v3 Authority Key Identifier: keyid:82:9F:0F:40:88:4D:D9:91:12:10:05:B0:7D:09:A2:CB:FF:B4:DE:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gp8PQIhN2ZESEAWwfQmiy_-03sY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A16CF/2CAD508819A211EAAE811C71C4F9AE02/gp8PQIhN2ZESEAWwfQmiy_-03sY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:72:8a:4e:5c:ee:7a:2a:0d:2d:b6:eb:73:d9:2a:29:dc:73: 8e:b1:a3:d8:95:58:e9:1f:20:6e:28:a4:7f:3d:2b:48:f9:17: 65:92:80:0f:54:f3:ea:90:fe:f5:d2:2c:3e:e3:93:fd:c9:71: e2:cd:d6:ff:58:70:a0:50:5e:61:52:45:42:ae:10:bf:83:28: 0e:e5:b9:df:02:38:c8:91:f3:20:50:da:6d:fc:0c:21:7f:79: d2:8a:ea:98:0f:45:78:86:11:9b:5f:3d:c4:a9:25:a7:a1:65: f1:b6:c6:d2:3e:2c:76:1b:d5:c0:d4:be:6a:80:93:c7:13:82: ae:8a:f7:d3:a1:ee:3a:dc:83:bf:85:2a:8e:11:c1:fd:a5:d6: 88:23:22:62:93:28:8f:86:9f:bb:e5:47:50:44:c0:e9:0e:96: d0:9c:a4:f9:01:46:0e:aa:cb:b0:82:cd:a2:54:f1:b4:07:85: 12:1c:72:03:41:1b:76:b1:2b:46:70:ab:b9:e8:ab:42:c4:ef: f1:87:0a:e7:a3:0e:ca:97:28:8b:38:21:22:cb:88:da:60:cf: 85:99:5f:7d:5d:89:aa:d6:7a:dc:fb:97:a4:d1:b0:d3:13:cc: cc:bd:dd:44:8d:14:ba:f8:b0:28:f8:22:f3:05:a0:6e:24:f3: f8:53:d3:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE2Q0YxMTAvBgNVBAUTKDgyOUYwRjQwODg0REQ5OTExMjEwMDVCMDdEMDlBMkNC RkZCNERFQzYwHhcNMjYwNzI4MTg0MTQyWhcNMjYwODA0MTg0MTQyWjAYMRYwFAYD VQQDEw02YTY4ZjdlNi1jZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorc8r4jEHotx4fc+IOyA2pbJgpHKJ1uKqSrl+CkMXXPbLToIX/z4AnNpodd7 KBsdjDLiAqE09rZLrFB4wD0u5tANjoeSVw/kM2eqNef1GcXCt1Xv+vjCnAR1uMUQ N7LJOIJXo50HG/8tvsn62yaeozlnUiu8uKGF7jzHae39/KvCNNSEtd9ax7BSnY/d 6ACF4iBFwS+X4QiHQ0KIYXxOkHvY4Cs3exaaYuUC6babOGbWM2AxQTONA2m+y5Xt S6KT9MVx6n6oLC9leXq7+7eOr7XOOcROsetaPlnKLUFVq56Gz0RLqBAdDKSmv7lR kmktrLKGXa+RdLY3cHUDgcecKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCWWdros iTWM+1oVwSBJr14FQkZIMB8GA1UdIwQYMBaAFIKfD0CITdmREhAFsH0Josv/tN7G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTZDRi8yQ0FENTA4ODE5 QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJaRVNFQVd3ZlFtaXlfLTAz c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dwOFBRSWhOMlpFU0VBV3dmUW1peV8tMDNzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTZDRi8yQ0FENTA4ODE5QTIxMUVBQUU4MTFDNzFDNEY5QUUwMi9ncDhQUUloTjJa RVNFQVd3ZlFtaXlfLTAzc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIHKKTlzueioNLbbrc9kqKdxzjrGj2JVY6R8gbiikfz0rSPkXZZKAD1Tz6pD+ 9dIsPuOT/clx4s3W/1hwoFBeYVJFQq4Qv4MoDuW53wI4yJHzIFDabfwMIX950orq mA9FeIYRm189xKklp6Fl8bbG0j4sdhvVwNS+aoCTxxOCror306HuOtyDv4UqjhHB /aXWiCMiYpMoj4afu+VHUETA6Q6W0Jyk+QFGDqrLsILNolTxtAeFEhxyA0EbdrEr RnCrueirQsTv8YcK56MOypcoizghIsuI2mDPhZlffV2JqtZ63PuXpNGw0xPMzL3d RI0UuviwKPgi8wWgbiTz+FPTEw== -----END CERTIFICATE-----Generated at Wed Jul 29 07:55:27 2026 by rpki-client