$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft (raw, json) Hash identifier: 5iPSL5MWwr0zj0pFZ48ynO6U0gNf2cXtWu8NV7P2pJ8= Subject key identifier: 1D:34:A6:12:2B:FE:AD:8C:CD:16:5B:CB:E7:62:D6:86:9E:D5:77:1E Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft Manifest number: 02C5 Signing time: Mon 27 Jul 2026 04:56:41 +0000 Manifest this update: Mon 27 Jul 2026 04:56:41 +0000 Manifest next update: Mon 03 Aug 2026 04:56:41 +0000 Files and hashes: 1: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl (hash: FBP5IyBcp7BDWDvR0BdkFhg3ocdDHsxPYv5cfurz8yk=) 2: 218937DC5E5011F0B9404662C4F9AE02.roa (hash: TfhxYXEuzGwCmeMd3nNc0DOls3QWgWihrLMEBQlhbYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Jul 27 04:56:41 2026 GMT Not After : Aug 3 04:56:41 2026 GMT Subject: CN=6a66e509-2302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e1:7b:da:ae:4c:f3:4e:e0:07:d4:9c:6b:3c: ec:64:98:22:17:d4:bb:2e:35:d1:ae:d4:a9:81:6c: 3f:ca:c2:47:0d:04:8c:35:ec:2f:da:9a:ed:60:0e: 0b:cc:6b:0d:80:c7:21:55:09:69:3d:aa:aa:0d:67: 40:8d:b9:f3:69:26:80:be:86:7d:df:4b:47:f9:11: fc:93:89:db:98:ae:26:86:08:27:5b:3a:88:97:e0: 5c:36:ac:04:92:c5:56:4c:42:84:0f:47:94:31:7a: 00:fe:d5:ee:74:85:64:57:20:d1:e8:27:eb:4b:9d: 3a:b2:29:8e:a0:a5:ed:74:8e:04:65:0f:5c:5e:49: 22:37:98:ba:04:68:6d:80:75:94:ba:f9:50:3d:8e: 21:cf:04:c0:a9:a1:46:4f:8c:f8:d3:9e:21:54:8f: 36:cf:8e:72:f7:4f:3f:f3:1b:f3:a6:92:04:cf:d4: 27:fd:7b:67:50:60:e9:bf:f9:0f:0d:37:db:6b:9c: 5a:0a:a7:55:aa:da:6d:9b:80:9f:c5:9c:49:64:bc: cc:06:46:58:29:ae:e3:cd:36:51:4d:84:88:53:5a: f0:f5:4a:f5:3d:2f:a9:4d:16:f3:95:b1:61:ef:91: a2:74:61:b2:e2:a4:5a:88:08:ff:2e:30:2f:62:bb: 18:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:34:A6:12:2B:FE:AD:8C:CD:16:5B:CB:E7:62:D6:86:9E:D5:77:1E X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:a4:31:b0:b3:52:06:80:92:39:3e:f8:78:b1:7a:b2:c4:55: d8:61:b6:92:73:06:ef:e5:7a:f1:0e:94:89:a1:e0:a2:d5:d7: ea:1e:e1:06:37:d9:4e:e8:ce:ae:2c:76:e3:ad:f8:14:4e:08: 0c:92:38:91:70:4a:25:a1:49:9a:43:16:2c:cc:f8:28:1d:d4: 57:07:6b:26:2d:6c:b0:5a:96:56:1f:cc:f2:2a:72:64:3e:0e: 8b:7f:8c:e6:c3:99:0b:dd:cf:4d:0f:89:df:a7:7b:b2:61:61: 7e:d8:67:66:3f:d8:e1:92:6b:c7:80:ef:97:02:1d:f2:c9:05: 48:3b:3b:97:15:6f:e7:e4:bc:df:b8:e8:b7:fc:da:f6:dc:21: e0:ef:71:33:a2:1e:7d:61:cd:28:dc:7f:76:ce:7f:e9:b2:ce: ed:bb:6a:5f:27:26:c1:44:73:d2:cf:5e:30:28:c0:fb:9a:04: 5f:b1:ce:1e:8b:2e:bf:b0:8c:18:6f:a5:ed:12:bb:41:29:95: 2b:52:8e:da:d1:b5:95:57:74:42:0f:e2:f7:ac:28:fa:4a:e3: 6a:0d:92:95:f7:4c:5c:3e:59:72:4d:62:62:4f:6a:0d:82:d7: 95:cf:67:10:94:c6:67:f8:5f:f5:7a:ef:e6:83:04:99:5e:e4: 5a:a0:37:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDA4Nzc3RkEzODFCRjI1OEUwQ0FDMzdENTA5RUYwQkFD NzA2NjQ4NDQwHhcNMjYwNzI3MDQ1NjQxWhcNMjYwODAzMDQ1NjQxWjAYMRYwFAYD VQQDEw02YTY2ZTUwOS0yMzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uF72q5M807gB9ScazzsZJgiF9S7LjXRrtSpgWw/ysJHDQSMNewv2prtYA4L zGsNgMchVQlpPaqqDWdAjbnzaSaAvoZ930tH+RH8k4nbmK4mhggnWzqIl+BcNqwE ksVWTEKED0eUMXoA/tXudIVkVyDR6CfrS506simOoKXtdI4EZQ9cXkkiN5i6BGht gHWUuvlQPY4hzwTAqaFGT4z4054hVI82z45y908/8xvzppIEz9Qn/XtnUGDpv/kP DTfba5xaCqdVqtptm4CfxZxJZLzMBkZYKa7jzTZRTYSIU1rw9Ur1PS+pTRbzlbFh 75GidGGy4qRaiAj/LjAvYrsYRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB00phIr /q2MzRZby+di1oae1XceMB8GA1UdIwQYMBaAFAh3f6OBvyWODKw31QnvC6xwZkhE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZNE1yRGZWQ2U4THJIQm1T RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZ NE1yRGZWQ2U4THJIQm1TRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOKQxsLNSBoCSOT74eLF6ssRV2GG2knMG7+V68Q6UiaHgotXX6h7hBjfZTujO rix24634FE4IDJI4kXBKJaFJmkMWLMz4KB3UVwdrJi1ssFqWVh/M8ipyZD4Oi3+M 5sOZC93PTQ+J36d7smFhfthnZj/Y4ZJrx4DvlwId8skFSDs7lxVv5+S837jot/za 9twh4O9xM6IefWHNKNx/ds5/6bLO7btqXycmwURz0s9eMCjA+5oEX7HOHosuv7CM GG+l7RK7QSmVK1KO2tG1lVd0Qg/i96wo+krjag2SlfdMXD5Zck1iYk9qDYLXlc9n EJTGZ/hf9Xrv5oMEmV7kWqA3iQ== -----END CERTIFICATE-----Generated at Wed Jul 29 02:03:59 2026 by rpki-client