$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft File: l1u5QYJWgUoFLa9U9woa3FNv35s.mft (raw, json) Hash identifier: oJZP2S8CQypW/EoyHRgQRUkZQEUek0h0O+6uMU4emr4= Subject key identifier: D6:A3:EC:68:7D:6E:04:C5:B0:D9:0F:AC:78:A7:B1:17:89:49:69:B1 Authority key identifier: 97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B Certificate issuer: /CN=A91A7842/serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Certificate serial: 04AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft Manifest number: 049C Signing time: Mon 27 Jul 2026 00:59:41 +0000 Manifest this update: Mon 27 Jul 2026 00:59:40 +0000 Manifest next update: Mon 03 Aug 2026 00:59:40 +0000 Files and hashes: 1: l1u5QYJWgUoFLa9U9woa3FNv35s.crl (hash: 9p1uMbjyh1cS1z3wSOwRTd0hN39zxwYqZRV/SQ6lFKE=) 2: 38DF2BD687FC11F1B0916B103C11F970.roa (hash: ip1X2/FTCxaSzI+j0d1dDsTrjfqFA/qkApNONDzS/MA=) 3: 622B3AEAD91411EF9940471AC4F9AE02.roa (hash: cr8+DaXhHVaKphmcAd7tV537ArwtZQMiy53lf3sRJ+Y=) 4: 615BA1B8D91411EF9940471AC4F9AE02.roa (hash: nbdgFqrvKPwj7OTKa8WeiCsPcy8PIB9YyhQhRJZGshM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1194 (0x4aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7842, serialNumber=975BB9418256814A052DAF54F70A1ADC536FDF9B Validity Not Before: Jul 27 00:59:40 2026 GMT Not After : Aug 3 00:59:40 2026 GMT Subject: CN=6a66ad7d-a22d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c2:16:3a:2a:dd:d5:b4:6e:32:03:ab:45:8a: 69:30:66:ae:0f:76:50:46:17:b2:23:45:99:42:3d: 93:87:8c:b9:e6:42:c9:55:48:75:46:6a:6e:0e:6b: c9:48:fe:b8:13:28:5b:ff:4e:8a:2f:04:dc:cc:53: 42:25:47:ff:71:75:a7:5a:f7:1f:9b:a4:ff:30:72: c4:81:54:cd:fd:a4:83:ca:4c:16:1a:9a:18:20:be: 49:e4:5b:f2:3a:32:fd:d9:39:64:c2:16:13:9e:46: 63:a3:6c:02:6e:38:7e:94:2d:75:95:cf:c1:a8:3f: 53:35:99:29:2c:bc:50:af:f4:f2:a2:a5:5b:f7:b1: a2:52:c0:1b:da:e2:a2:85:e4:66:33:e4:c4:2a:7c: 45:bf:5b:bd:77:b6:db:fc:6f:a1:56:31:20:e0:62: 9e:0a:3f:a6:77:18:59:c9:c8:99:ba:c0:e0:29:73: 2a:d3:f8:94:2e:55:59:ec:49:19:a2:1a:4c:a1:4d: 3a:cc:76:c3:52:7c:a2:81:da:34:1c:ba:e8:b1:8f: 76:6c:d5:d0:13:c6:4f:4c:23:7b:c3:76:07:e3:e6: 89:23:c1:12:02:9f:7d:c1:bb:67:f9:e9:de:aa:de: 58:61:65:82:da:9d:45:03:ec:9b:c7:2b:c0:f0:d8: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A3:EC:68:7D:6E:04:C5:B0:D9:0F:AC:78:A7:B1:17:89:49:69:B1 X509v3 Authority Key Identifier: keyid:97:5B:B9:41:82:56:81:4A:05:2D:AF:54:F7:0A:1A:DC:53:6F:DF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1u5QYJWgUoFLa9U9woa3FNv35s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7842/76A8C6BA8E6511ECA6EEEB70C4F9AE02/l1u5QYJWgUoFLa9U9woa3FNv35s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3d:50:a8:20:d0:2d:82:8b:a6:51:26:ec:10:e6:2c:be:df: cc:78:16:82:88:22:27:45:9d:58:30:ad:c1:ed:19:68:b2:37: 59:31:6e:dd:a3:d2:61:46:40:ce:8c:98:a4:2e:5e:4e:7c:ed: 6c:83:e1:2b:89:34:ad:00:c2:6d:31:82:00:fb:67:60:ae:83: a3:07:42:05:f5:17:4c:ca:b7:5f:ee:e0:bb:84:f1:40:7f:32: 3d:f8:07:d2:92:b0:25:3f:c2:67:d5:86:97:a2:bd:80:f4:7c: 7f:d0:54:29:91:aa:34:03:a0:f0:d9:b7:8d:b7:8f:a5:f6:47: 55:9e:5d:89:de:fc:02:fc:be:28:b6:81:d0:09:5e:c2:3c:02: dd:d9:d5:69:7d:6a:2f:ef:f7:07:a9:7b:80:bf:3c:a9:80:28: 74:22:13:71:ed:06:04:8e:a4:04:bf:c5:73:90:31:40:60:6a: c3:ed:a8:80:dd:01:e6:69:4e:3e:54:e8:86:4e:d0:95:5e:b3: 1d:5d:5b:06:64:c9:09:a0:73:4f:52:40:b8:9e:c1:f2:9d:56: 8e:1f:63:15:e9:39:8b:6b:b7:03:7d:5f:b3:fe:89:2b:49:e0: eb:7a:30:f8:43:ee:3b:d9:10:4c:19:5f:e2:1d:52:13:4c:26: 99:29:c4:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4NDIxMTAvBgNVBAUTKDk3NUJCOTQxODI1NjgxNEEwNTJEQUY1NEY3MEExQURD NTM2RkRGOUIwHhcNMjYwNzI3MDA1OTQwWhcNMjYwODAzMDA1OTQwWjAYMRYwFAYD VQQDEw02YTY2YWQ3ZC1hMjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8IWOird1bRuMgOrRYppMGauD3ZQRheyI0WZQj2Th4y55kLJVUh1RmpuDmvJ SP64Eyhb/06KLwTczFNCJUf/cXWnWvcfm6T/MHLEgVTN/aSDykwWGpoYIL5J5Fvy OjL92TlkwhYTnkZjo2wCbjh+lC11lc/BqD9TNZkpLLxQr/TyoqVb97GiUsAb2uKi heRmM+TEKnxFv1u9d7bb/G+hVjEg4GKeCj+mdxhZyciZusDgKXMq0/iULlVZ7EkZ ohpMoU06zHbDUnyigdo0HLrosY92bNXQE8ZPTCN7w3YH4+aJI8ESAp99wbtn+ene qt5YYWWC2p1FA+ybxyvA8NjqpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNaj7Gh9 bgTFsNkPrHinsReJSWmxMB8GA1UdIwQYMBaAFJdbuUGCVoFKBS2vVPcKGtxTb9+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg0Mi83NkE4QzZCQThF NjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dVb0ZMYTlVOXdvYTNGTnYz NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wxdTVRWUpXZ1VvRkxhOVU5d29hM0ZOdjM1cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Nzg0Mi83NkE4QzZCQThFNjUxMUVDQTZFRUVCNzBDNEY5QUUwMi9sMXU1UVlKV2dV b0ZMYTlVOXdvYTNGTnYzNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHz1QqCDQLYKLplEm7BDmLL7fzHgWgogiJ0WdWDCtwe0ZaLI3WTFu3aPSYUZA zoyYpC5eTnztbIPhK4k0rQDCbTGCAPtnYK6DowdCBfUXTMq3X+7gu4TxQH8yPfgH 0pKwJT/CZ9WGl6K9gPR8f9BUKZGqNAOg8Nm3jbePpfZHVZ5did78Avy+KLaB0Ale wjwC3dnVaX1qL+/3B6l7gL88qYAodCITce0GBI6kBL/Fc5AxQGBqw+2ogN0B5mlO PlTohk7QlV6zHV1bBmTJCaBzT1JAuJ7B8p1Wjh9jFek5i2u3A31fs/6JK0ng63ow +EPuO9kQTBlf4h1SE0wmmSnENw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:20:13 2026 by rpki-client