$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft File: C-AoY1W14laYjORU35P8D8p_YEA.mft (raw, json) Hash identifier: ktqN27VDuQHqhqAAUvUxcxUHL2O0OqzClJ5Tsw7lUOs= Subject key identifier: 0E:71:BA:3D:45:64:F5:91:CF:9C:69:DC:0C:4A:71:42:0B:09:C4:7D Authority key identifier: 0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 Certificate issuer: /CN=A91A1D43/serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Certificate serial: 026D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft Manifest number: 0260 Signing time: Mon 27 Jul 2026 03:38:17 +0000 Manifest this update: Mon 27 Jul 2026 03:38:16 +0000 Manifest next update: Mon 03 Aug 2026 03:38:16 +0000 Files and hashes: 1: C-AoY1W14laYjORU35P8D8p_YEA.crl (hash: UQ+wg7zzSoXTyvTzCeq4XtqjcKTmGsLIbIlYJFZRE1I=) 2: 7BD32D1678F211F1985843FB5DA30FBC.roa (hash: y5JcZuVUbyUkHrroNxYLyYNDHkcGqagm4UKRx6C9gY0=) 3: 8B1BDC14EA3911EDB91E190BC4F9AE02.roa (hash: IRQ+OR5t+v1uxAMW20q5TYiXjn6EFNEgE2VqHO9rI/w=) 4: 8BCB2CFAEA3911EDB91E190BC4F9AE02.roa (hash: QhSp+pceORKO5TeSj6aanaSrz92dgNngwmylNT95Bc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1D43, serialNumber=0BE0286355B5E256988CE454DF93FC0FCA7F6040 Validity Not Before: Jul 27 03:38:16 2026 GMT Not After : Aug 3 03:38:16 2026 GMT Subject: CN=6a66d2a9-91a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:4d:f5:f3:0a:9e:08:0c:67:72:77:b0:27: ee:f6:8a:53:d5:3d:9f:2c:17:94:47:b1:ff:49:34: 52:34:c5:37:c7:45:92:5f:eb:1b:bd:32:ea:09:45: b2:ee:63:2e:43:88:0c:b3:92:53:e8:94:6c:fc:90: 28:d3:05:73:35:3a:66:c5:aa:24:7f:19:b0:f0:33: 67:c5:63:02:11:e1:a3:b8:c8:49:98:d7:54:e0:14: ed:bd:90:e6:3b:a5:63:17:88:e9:e3:c0:5e:8a:e1: d5:c9:da:0f:e2:04:c5:8e:f1:45:9b:6e:f4:26:ff: eb:31:ef:7f:7c:45:ee:8e:46:00:ca:c9:6b:36:46: e8:10:2c:5e:da:71:6a:a8:6f:e4:7a:1a:3c:58:e6: ef:85:5c:b9:84:c9:63:85:95:63:8d:53:a2:d6:3a: 3a:95:b7:33:98:55:41:f9:04:fa:25:3e:d9:46:69: 01:d6:d7:0a:24:e2:16:e7:77:e4:7c:ff:1c:fd:3d: 69:04:78:18:c8:c7:32:82:da:be:29:c5:c4:fa:e8: 91:a9:f6:2d:2e:32:e1:0a:f6:a3:b7:28:36:f3:88: b4:23:f6:26:5a:29:41:cc:2e:f7:f9:40:e7:bb:f1: ce:ee:77:90:1b:5c:ea:99:38:d5:67:5b:d6:6b:a1: 87:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:71:BA:3D:45:64:F5:91:CF:9C:69:DC:0C:4A:71:42:0B:09:C4:7D X509v3 Authority Key Identifier: keyid:0B:E0:28:63:55:B5:E2:56:98:8C:E4:54:DF:93:FC:0F:CA:7F:60:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-AoY1W14laYjORU35P8D8p_YEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1D43/8929DFDEEA2811EDB7DD0118C4F9AE02/C-AoY1W14laYjORU35P8D8p_YEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:8f:cc:23:68:ef:a9:cd:c7:87:cc:b0:af:7e:5c:5a:b8:e9: ce:f3:68:f9:6f:dd:8d:eb:73:70:42:6d:08:2c:ec:a3:6d:45: 06:68:03:60:ea:d5:67:c6:45:98:b3:80:fa:45:2f:8c:bb:78: 86:6c:56:00:9e:9a:72:0d:77:e5:6e:84:3b:a4:72:44:3f:b6: 88:34:ed:b6:03:b8:fe:6d:b5:3d:ca:6d:ee:0f:f0:6d:4a:70: cd:2d:b2:0f:b2:91:98:99:e5:6c:64:8a:8c:0a:1b:4d:6e:52: 6d:ff:5e:a8:fe:55:9a:57:dd:c4:0e:e5:7a:bd:08:ca:39:94: da:58:9e:51:95:78:f4:4c:0b:07:14:33:46:91:b9:ed:51:9e: fd:06:e2:05:b5:b3:eb:d0:92:7f:83:19:c2:76:e2:02:1f:c5: eb:68:80:12:24:c9:e7:b9:d1:0c:8e:8a:96:84:fd:cc:80:43: a6:16:6d:a1:c1:13:59:30:1c:ff:88:1f:d5:ff:91:dd:63:3d: 6a:b9:c9:2a:0d:6d:3b:1c:8a:2f:8b:92:e3:68:b9:fe:40:58: 8c:bb:58:eb:2d:8b:84:70:02:81:c4:90:df:70:13:a5:c4:79: b5:94:de:a7:fe:e5:e9:3a:f0:29:1f:c5:96:e4:31:59:2b:8a: bd:a0:92:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFENDMxMTAvBgNVBAUTKDBCRTAyODYzNTVCNUUyNTY5ODhDRTQ1NERGOTNGQzBG Q0E3RjYwNDAwHhcNMjYwNzI3MDMzODE2WhcNMjYwODAzMDMzODE2WjAYMRYwFAYD VQQDEw02YTY2ZDJhOS05MWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxpN9fMKnggMZ3J3sCfu9opT1T2fLBeUR7H/STRSNMU3x0WSX+sbvTLqCUWy 7mMuQ4gMs5JT6JRs/JAo0wVzNTpmxaokfxmw8DNnxWMCEeGjuMhJmNdU4BTtvZDm O6VjF4jp48BeiuHVydoP4gTFjvFFm270Jv/rMe9/fEXujkYAyslrNkboECxe2nFq qG/keho8WObvhVy5hMljhZVjjVOi1jo6lbczmFVB+QT6JT7ZRmkB1tcKJOIW53fk fP8c/T1pBHgYyMcygtq+KcXE+uiRqfYtLjLhCvajtyg284i0I/YmWilBzC73+UDn u/HO7neQG1zqmTjVZ1vWa6GHcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA5xuj1F ZPWRz5xp3AxKcUILCcR9MB8GA1UdIwQYMBaAFAvgKGNVteJWmIzkVN+T/A/Kf2BA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUQ0My84OTI5REZERUVB MjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRsYVlqT1JVMzVQOEQ4cF9Z RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MtQW9ZMVcxNGxhWWpPUlUzNVA4RDhwX1lFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MUQ0My84OTI5REZERUVBMjgxMUVEQjdERDAxMThDNEY5QUUwMi9DLUFvWTFXMTRs YVlqT1JVMzVQOEQ4cF9ZRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArI/MI2jvqc3Hh8ywr35cWrjpzvNo+W/djetzcEJtCCzso21FBmgDYOrVZ8ZF mLOA+kUvjLt4hmxWAJ6acg135W6EO6RyRD+2iDTttgO4/m21Pcpt7g/wbUpwzS2y D7KRmJnlbGSKjAobTW5Sbf9eqP5VmlfdxA7ler0IyjmU2lieUZV49EwLBxQzRpG5 7VGe/QbiBbWz69CSf4MZwnbiAh/F62iAEiTJ57nRDI6KloT9zIBDphZtocETWTAc /4gf1f+R3WM9arnJKg1tOxyKL4uS42i5/kBYjLtY6y2LhHACgcSQ33ATpcR5tZTe p/7l6TrwKR/FluQxWSuKvaCS8A== -----END CERTIFICATE-----Generated at Tue Jul 28 22:11:19 2026 by rpki-client