$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft File: httX5pD30wkpOii6fFX7ivN9Xb0.mft (raw, json) Hash identifier: Gfz25YtFd6h2u2aN2cnq2/Nh66mbglpOIBpS751Xa08= Subject key identifier: 20:CE:08:44:00:CA:58:4C:BD:64:0D:FB:5A:D9:1D:4A:3F:C4:6A:E7 Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Certificate serial: 386D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft Manifest number: 3767 Signing time: Tue 28 Jul 2026 14:34:15 +0000 Manifest this update: Tue 28 Jul 2026 14:34:15 +0000 Manifest next update: Tue 04 Aug 2026 14:34:15 +0000 Files and hashes: 1: httX5pD30wkpOii6fFX7ivN9Xb0.crl (hash: YWEjaZ1kJhf0oGYyu2ZfwipVAtEFdmDlr1UJ6VHNOFc=) 2: 3B8DEC18F67C11EFA12FD55AC4F9AE02.roa (hash: Zntrf+XRFU/LUFPqt460t/df6T24vxpmkd5azGcAX5E=) 3: F24EEED208C011F19DFF611F213D8C67.roa (hash: j8mZP70/+lxFmxKK+gaXtA4vlgcSiykk11UZrhv9x1I=) 4: 0F0E88A6192F11F183D9B1FC303D8C67.roa (hash: 5aKDuZwd3Wn+m9JFqN35rRMwxZf4PwI1YL49pBMgje4=) 5: 803E1FB4844611F18199E4686DA30FBC.roa (hash: fb/gMuY4GCBBcmZDDJjLxvs0FTK9CO7zdEHnqESTxOE=) 6: 15B06ACE01B211F1A8498BCA6C6F56BC.roa (hash: 5xNdDoLkpm/cKB7fxSHaoDjqTsi17ChXNYz70KIoKrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14445 (0x386d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Validity Not Before: Jul 28 14:34:15 2026 GMT Not After : Aug 4 14:34:15 2026 GMT Subject: CN=6a68bde7-835c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bd:36:a2:ed:a3:e9:c4:35:3b:51:d2:a3:6a: d7:c7:a3:0d:ec:88:f8:9b:62:d6:a7:7b:98:9c:ff: 80:fc:d4:1e:35:d7:82:d0:b9:39:2e:e4:1a:42:46: 23:89:70:df:c2:0a:7e:1e:99:e0:4d:03:8d:05:35: a5:ec:9c:c7:20:9e:6e:97:c1:bf:6c:e9:38:cf:3b: bb:86:dc:d4:70:d0:b8:0a:3a:73:c9:c7:eb:53:57: e9:4d:e3:94:ae:41:1f:1f:4e:a6:87:a8:5f:fa:30: e1:09:9c:c1:9a:58:fe:a9:d6:fe:8a:93:6c:bf:05: e7:2d:26:bd:12:86:37:c3:7c:df:9b:17:73:51:3b: a1:8d:6d:03:7e:c7:3a:9a:1a:40:75:6d:04:ba:e2: 70:60:aa:cb:9b:a3:66:b3:06:98:ce:23:0d:03:fd: 60:b8:68:90:78:4e:77:3b:73:f6:a6:ff:4c:ef:17: d7:e8:57:76:bf:c4:2b:53:63:f5:10:95:1a:81:e8: 79:8b:30:20:a8:a1:85:d3:ce:92:bc:55:1b:fd:47: e6:08:b3:ab:32:f5:7f:23:bd:8b:83:cb:54:75:02: 9b:66:15:83:26:f6:f7:96:66:63:85:a4:1b:b7:bd: a5:68:f5:bb:89:a3:4c:b9:26:74:48:2c:31:db:33: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CE:08:44:00:CA:58:4C:BD:64:0D:FB:5A:D9:1D:4A:3F:C4:6A:E7 X509v3 Authority Key Identifier: keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:d7:03:79:ec:32:cc:d8:44:ab:1f:17:21:93:9f:cb:c5:61: 0b:ca:e3:c8:d8:18:4c:7b:aa:25:4c:45:72:1d:9e:70:ab:a5: a3:0a:e8:dd:06:c5:7d:02:5d:a1:1f:42:33:72:03:f9:95:ad: e3:bf:56:79:e6:e2:b2:54:d9:2a:a8:e3:75:c0:f9:8e:6f:fd: 8b:da:89:21:a3:3c:0b:7a:02:a0:c1:fe:07:fc:44:f7:20:ae: 3b:27:dd:63:e2:bd:f6:46:46:0b:c2:68:a6:ec:de:a5:5a:6c: cf:02:15:66:3c:7e:8b:f7:85:50:58:f1:74:84:8d:9b:43:6c: 69:7f:6b:11:7f:4e:19:56:21:a0:f7:df:74:0a:7f:d5:fb:00: 90:97:4e:75:22:59:f7:8c:43:05:5a:d8:ce:7d:cb:f2:79:9b: 52:bf:1f:64:f4:d8:eb:53:27:78:82:47:44:df:8b:92:31:e6: e7:c4:e3:dc:6e:9e:2b:61:f7:37:f1:07:cf:13:cb:7a:e2:2d: f8:06:da:71:43:6b:e1:95:00:21:88:b0:7c:18:83:82:e3:25: 4f:59:be:1d:20:3e:3b:57:3f:69:d8:11:49:a0:13:ea:55:4b: 2a:82:83:56:05:50:cc:b3:45:cc:1d:03:d9:0a:37:4c:46:eb: ee:45:f3:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICOG0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB RjM3RDVEQkQwHhcNMjYwNzI4MTQzNDE1WhcNMjYwODA0MTQzNDE1WjAYMRYwFAYD VQQDEw02YTY4YmRlNy04MzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlL02ou2j6cQ1O1HSo2rXx6MN7Ij4m2LWp3uYnP+A/NQeNdeC0Lk5LuQaQkYj iXDfwgp+HpngTQONBTWl7JzHIJ5ul8G/bOk4zzu7htzUcNC4CjpzycfrU1fpTeOU rkEfH06mh6hf+jDhCZzBmlj+qdb+ipNsvwXnLSa9EoY3w3zfmxdzUTuhjW0Dfsc6 mhpAdW0EuuJwYKrLm6NmswaYziMNA/1guGiQeE53O3P2pv9M7xfX6Fd2v8QrU2P1 EJUageh5izAgqKGF086SvFUb/UfmCLOrMvV/I72Lg8tUdQKbZhWDJvb3lmZjhaQb t72laPW7iaNMuSZ0SCwx2zMKsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCDOCEQA ylhMvWQN+1rZHUo/xGrnMB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTYwQS9COTk1M0RCQTFEOEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3 a3BPaWk2ZkZYN2l2TjlYYjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARtcDeewyzNhEqx8XIZOfy8VhC8rjyNgYTHuqJUxFch2ecKulowro3QbFfQJd oR9CM3ID+ZWt479WeebislTZKqjjdcD5jm/9i9qJIaM8C3oCoMH+B/xE9yCuOyfd Y+K99kZGC8JopuzepVpszwIVZjx+i/eFUFjxdISNm0NsaX9rEX9OGVYhoPffdAp/ 1fsAkJdOdSJZ94xDBVrYzn3L8nmbUr8fZPTY61MneIJHRN+LkjHm58Tj3G6eK2H3 N/EHzxPLeuIt+AbacUNr4ZUAIYiwfBiDguMlT1m+HSA+O1c/adgRSaAT6lVLKoKD VgVQzLNFzB0D2Qo3TEbr7kXz8A== -----END CERTIFICATE-----Generated at Wed Jul 29 03:35:19 2026 by rpki-client