$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft File: eFfRGlHcrpwuCIahDOBvVfW4QwA.mft (raw, json) Hash identifier: ha5TLPczUdJUY1QuS5vJmKt3FD8RnlvJHQVTm5gVgFo= Subject key identifier: BA:91:03:78:9C:E3:51:4B:49:9D:CB:2B:6D:86:91:3F:87:40:9A:5F Authority key identifier: 78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 Certificate issuer: /CN=A91A5D8A/serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Certificate serial: 069A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft Manifest number: 0689 Signing time: Sun 26 Jul 2026 23:21:47 +0000 Manifest this update: Sun 26 Jul 2026 23:21:47 +0000 Manifest next update: Sun 02 Aug 2026 23:21:47 +0000 Files and hashes: 1: eFfRGlHcrpwuCIahDOBvVfW4QwA.crl (hash: gAuD6seCTKhGd6MOmYPeBvKboasZyMLSkFlvtMeXZbI=) 2: 324C60ACDD2211F0BB0B52AC636F56BC.roa (hash: DeEQGurqm7eSpSsYzXwNaAtssPLf2RiuTFIL21AIcCE=) 3: 18981398329B11EDB9F09862C4F9AE02.roa (hash: BIoQ+elASRB2TiBp78lt2ETWeyKSdC3Iplvz/Xmhi9o=) 4: 8183B0FACAF111EBA40AF15BC4F9AE02.roa (hash: Zg+eHPdVNDM4QI8KEgw81Og4McuXzxsHfkNcln3oKOk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1690 (0x69a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5D8A, serialNumber=7857D11A51DCAE9C2E0886A10CE06F55F5B84300 Validity Not Before: Jul 26 23:21:47 2026 GMT Not After : Aug 2 23:21:47 2026 GMT Subject: CN=6a66968b-17a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:00:c6:e7:c8:ce:78:35:58:13:57:b9:52: 7d:70:31:f3:d6:ed:f4:f8:83:8d:38:e9:95:fd:ba: ce:fc:11:6d:ed:93:af:fa:ec:e7:d9:69:43:24:d6: 89:33:38:21:d9:6b:13:46:78:eb:fd:57:67:99:cd: 68:2b:b4:3a:24:a3:47:58:41:4a:d5:c9:de:c1:61: be:db:7b:2b:da:48:6d:02:ed:9a:51:32:b4:11:b8: 14:dd:a0:4c:d3:b0:f6:a1:07:ef:b1:ad:9c:ec:7f: a1:1f:60:36:db:28:97:db:50:34:c1:ba:30:70:19: 43:2e:33:7e:1a:a5:4e:d1:b2:14:63:6d:75:51:38: 2b:47:09:ef:b8:23:ce:3f:16:a1:73:01:04:48:e5: 1e:26:1f:ff:a3:c5:89:45:62:92:85:01:a7:1d:71: 84:cf:0c:d6:f7:93:45:52:47:30:36:2d:1e:5d:26: 8e:db:d3:5a:61:49:7b:9b:5d:75:b0:47:a4:1d:1c: a4:6a:9b:29:64:1a:26:91:c1:25:e8:23:39:ef:2f: 8f:da:4a:f8:7c:f1:ea:2a:43:b2:b5:b1:ce:be:c1: d4:97:65:aa:cf:a3:2b:a6:3d:86:e1:f4:57:a7:18: 65:49:eb:e1:c7:f4:24:8c:81:e6:28:5b:83:6d:5e: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:91:03:78:9C:E3:51:4B:49:9D:CB:2B:6D:86:91:3F:87:40:9A:5F X509v3 Authority Key Identifier: keyid:78:57:D1:1A:51:DC:AE:9C:2E:08:86:A1:0C:E0:6F:55:F5:B8:43:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eFfRGlHcrpwuCIahDOBvVfW4QwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5D8A/BA2F1B9ACAEE11EBA2FBD056C4F9AE02/eFfRGlHcrpwuCIahDOBvVfW4QwA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:c2:16:3f:46:3f:e2:23:de:1e:f5:ad:a6:ec:e2:f3:9b:15: 81:06:53:1f:df:21:66:f7:1b:40:1b:af:e7:fb:b9:fb:c5:ed: 2e:ba:e7:6e:19:7f:ba:4d:75:9d:bf:a1:c3:4e:d3:f9:34:5c: 10:de:3b:5f:66:5b:1c:d4:f3:ff:c0:9e:37:31:cc:fe:ff:bb: 7d:0a:e0:bb:36:39:87:03:fb:21:e1:df:df:64:09:80:86:26: 2d:df:d9:f4:9f:bb:a1:78:bf:7c:91:34:cd:57:1c:ae:80:cc: d7:4f:ac:3d:35:b9:dc:4b:e6:b6:4d:f3:cb:e4:23:90:fd:43: 9d:97:b6:ca:f2:3c:8e:7c:4e:6b:08:06:98:ff:04:67:45:15: ce:79:4b:3a:ad:9e:3e:dd:05:56:91:0c:4b:99:77:fa:a7:64: 2f:0c:9b:77:10:f8:ff:e8:9e:f7:ec:71:0f:83:b3:a8:59:14: 50:b2:41:00:a1:5b:b4:f9:92:c6:23:b8:b6:0b:9d:66:91:32: 8e:ad:a2:85:fe:30:99:eb:a8:9d:d0:03:9e:76:b7:63:5f:67: 03:29:8b:82:67:24:70:4d:98:6d:d7:e3:d7:c5:81:dd:90:a4: fa:6a:b5:75:f5:7a:d3:51:6d:7f:e2:32:55:c5:83:92:58:19: 36:c1:a1:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVEOEExMTAvBgNVBAUTKDc4NTdEMTFBNTFEQ0FFOUMyRTA4ODZBMTBDRTA2RjU1 RjVCODQzMDAwHhcNMjYwNzI2MjMyMTQ3WhcNMjYwODAyMjMyMTQ3WjAYMRYwFAYD VQQDEw02YTY2OTY4Yi0xN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCoAxufIzng1WBNXuVJ9cDHz1u30+IONOOmV/brO/BFt7ZOv+uzn2WlDJNaJ Mzgh2WsTRnjr/Vdnmc1oK7Q6JKNHWEFK1cnewWG+23sr2khtAu2aUTK0EbgU3aBM 07D2oQfvsa2c7H+hH2A22yiX21A0wbowcBlDLjN+GqVO0bIUY211UTgrRwnvuCPO PxahcwEESOUeJh//o8WJRWKShQGnHXGEzwzW95NFUkcwNi0eXSaO29NaYUl7m111 sEekHRykapspZBomkcEl6CM57y+P2kr4fPHqKkOytbHOvsHUl2Wqz6Mrpj2G4fRX pxhlSevhx/QkjIHmKFuDbV4V2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLqRA3ic 41FLSZ3LK22GkT+HQJpfMB8GA1UdIwQYMBaAFHhX0RpR3K6cLgiGoQzgb1X1uEMA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUQ4QS9CQTJGMUI5QUNB RUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jwd3VDSWFoRE9CdlZmVzRR d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VGZlJHbEhjcnB3dUNJYWhET0J2VmZXNFF3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUQ4QS9CQTJGMUI5QUNBRUUxMUVCQTJGQkQwNTZDNEY5QUUwMi9lRmZSR2xIY3Jw d3VDSWFoRE9CdlZmVzRRd0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATcIWP0Y/4iPeHvWtpuzi85sVgQZTH98hZvcbQBuv5/u5+8XtLrrnbhl/uk11 nb+hw07T+TRcEN47X2ZbHNTz/8CeNzHM/v+7fQrguzY5hwP7IeHf32QJgIYmLd/Z 9J+7oXi/fJE0zVccroDM10+sPTW53Evmtk3zy+QjkP1DnZe2yvI8jnxOawgGmP8E Z0UVznlLOq2ePt0FVpEMS5l3+qdkLwybdxD4/+ie9+xxD4OzqFkUULJBAKFbtPmS xiO4tgudZpEyjq2ihf4wmeuondADnna3Y19nAymLgmckcE2Ybdfj18WB3ZCk+mq1 dfV601Ftf+IyVcWDklgZNsGhVg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:17:22 2026 by rpki-client