$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft File: PUfmaHu030DFGwOkVZwQyiL2dy8.mft (raw, json) Hash identifier: bfOAe2R64XD3YB8gUO6CjIg+lw6OOe32GIna9HGsPGg= Subject key identifier: 96:D0:42:30:6F:44:2F:D3:35:05:C5:50:59:3F:4E:A3:6D:D3:84:63 Authority key identifier: 3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F Certificate issuer: /CN=A91AA5C6/serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Certificate serial: 023C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft Manifest number: 0228 Signing time: Mon 27 Jul 2026 04:21:04 +0000 Manifest this update: Mon 27 Jul 2026 04:21:04 +0000 Manifest next update: Mon 03 Aug 2026 04:21:04 +0000 Files and hashes: 1: PUfmaHu030DFGwOkVZwQyiL2dy8.crl (hash: tt+otUA2nfNhiFys7elip2fMKhZL3rxEQuOP52i0Q5c=) 2: FAA2E3324C3811EEB7116433C4F9AE02.roa (hash: lY4zHcYM+OKzlDFbmIejzsChBG9D4T2+3+SOYmgyPIs=) 3: EA1E8B8A51C711EE9A3CC954C4F9AE02.roa (hash: G97KXaER8oHFpVxJ9Nr+pWkbaSoOX+AJP+0tU8j2jBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5C6, serialNumber=3D47E6687BB4DF40C51B03A4559C10CA22F6772F Validity Not Before: Jul 27 04:21:04 2026 GMT Not After : Aug 3 04:21:04 2026 GMT Subject: CN=6a66dcb0-f91e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:27:8a:90:d5:d5:d3:1f:8d:32:5f:1e:e8: 1e:99:97:34:fb:68:56:3e:0b:68:82:4b:ca:cf:62: 4c:42:d6:98:d1:33:52:06:bd:e8:5c:f2:81:65:16: 1b:7f:99:18:84:35:27:8e:7d:c4:75:f9:2e:76:f6: d5:fa:4b:1c:01:fb:90:9d:32:50:66:85:d8:5f:6b: f6:15:6d:d5:7f:b5:7e:36:e8:96:d0:64:81:c8:ac: 77:e0:88:57:6c:06:df:8d:f6:06:d8:52:ce:ce:6f: 7b:10:ec:b2:b4:ab:7b:67:16:d9:d0:57:18:1c:b2: e2:2a:c4:26:bc:e3:7a:92:58:99:b3:22:cf:35:0d: 86:a1:72:fc:26:35:65:11:31:73:19:6d:60:cc:0f: 39:63:51:43:79:cb:56:69:19:9b:9d:66:72:f8:49: a3:c8:e3:81:47:52:62:71:55:3b:37:f3:e9:92:40: df:1d:3d:82:b1:1a:3a:04:21:8f:64:43:91:8f:22: 4b:9f:ca:a7:13:9b:56:31:b0:4e:06:72:8d:59:9c: 22:4e:39:4b:4d:49:d7:cc:f2:07:85:df:62:5c:7b: 36:8f:85:ee:63:fc:e2:77:8e:e3:b3:b1:11:ce:99: c4:e6:77:38:47:86:a1:d8:ee:4f:75:06:4c:bc:57: 3d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D0:42:30:6F:44:2F:D3:35:05:C5:50:59:3F:4E:A3:6D:D3:84:63 X509v3 Authority Key Identifier: keyid:3D:47:E6:68:7B:B4:DF:40:C5:1B:03:A4:55:9C:10:CA:22:F6:77:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PUfmaHu030DFGwOkVZwQyiL2dy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5C6/D55519B44C3411EEAEEDA22CC4F9AE02/PUfmaHu030DFGwOkVZwQyiL2dy8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:98:e9:b9:17:77:51:ea:d4:56:ea:d7:1e:c4:1c:b5:06:16: ad:f3:23:5e:9c:c4:87:ee:7e:d2:51:74:0a:8f:8c:92:e0:57: 30:16:7f:3f:59:6d:8b:ae:33:27:d0:a5:65:58:fb:b2:c1:6c: ac:e3:65:f5:c2:27:76:2d:c7:0a:72:1c:16:0f:ae:3c:46:78: e1:f4:29:b1:23:06:7d:66:c4:eb:5d:86:d0:e4:43:35:25:3a: ba:f9:bb:54:36:3c:f6:44:de:de:53:ec:ab:40:97:95:d8:1d: 99:0c:12:ac:df:0e:70:5c:7f:cf:4c:62:e1:23:94:8a:66:4c: 23:1c:41:2b:3c:d5:df:5a:df:06:29:a1:80:5a:ec:21:4d:c4: fa:c7:45:fe:99:6b:61:96:bd:fd:a6:4d:1f:cc:a3:31:58:cf: bc:28:fc:d3:3a:38:b6:73:2d:09:1e:b3:b1:75:44:45:06:c2: c9:20:65:9f:85:de:1a:48:ac:07:c4:a5:fa:30:0f:a9:27:2e: 7c:6a:65:97:6c:40:a0:20:1a:c9:f5:51:c8:6b:10:4e:7d:ef: dd:4a:04:20:eb:6e:b0:04:5e:fd:5d:cb:6b:3e:9a:21:e3:a4: a8:45:5d:c6:b5:ba:bc:28:c8:3f:0c:21:bb:16:62:09:a9:f2: ac:26:0f:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE1QzYxMTAvBgNVBAUTKDNENDdFNjY4N0JCNERGNDBDNTFCMDNBNDU1OUMxMENB MjJGNjc3MkYwHhcNMjYwNzI3MDQyMTA0WhcNMjYwODAzMDQyMTA0WjAYMRYwFAYD VQQDEw02YTY2ZGNiMC1mOTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfwnipDV1dMfjTJfHugemZc0+2hWPgtogkvKz2JMQtaY0TNSBr3oXPKBZRYb f5kYhDUnjn3EdfkudvbV+kscAfuQnTJQZoXYX2v2FW3Vf7V+NuiW0GSByKx34IhX bAbfjfYG2FLOzm97EOyytKt7ZxbZ0FcYHLLiKsQmvON6kliZsyLPNQ2GoXL8JjVl ETFzGW1gzA85Y1FDectWaRmbnWZy+EmjyOOBR1JicVU7N/PpkkDfHT2CsRo6BCGP ZEORjyJLn8qnE5tWMbBOBnKNWZwiTjlLTUnXzPIHhd9iXHs2j4XuY/zid47js7ER zpnE5nc4R4ah2O5PdQZMvFc9qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbQQjBv RC/TNQXFUFk/TqNt04RjMB8GA1UdIwQYMBaAFD1H5mh7tN9AxRsDpFWcEMoi9ncv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTVDNi9ENTU1MTlCNDRD MzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMwREZHd09rVlp3UXlpTDJk eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BVZm1hSHUwMzBERkd3T2tWWndReWlMMmR5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTVDNi9ENTU1MTlCNDRDMzQxMUVFQUVFREEyMkNDNEY5QUUwMi9QVWZtYUh1MDMw REZHd09rVlp3UXlpTDJkeTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIZjpuRd3UerUVurXHsQctQYWrfMjXpzEh+5+0lF0Co+MkuBXMBZ/P1lti64z J9ClZVj7ssFsrONl9cIndi3HCnIcFg+uPEZ44fQpsSMGfWbE612G0ORDNSU6uvm7 VDY89kTe3lPsq0CXldgdmQwSrN8OcFx/z0xi4SOUimZMIxxBKzzV31rfBimhgFrs IU3E+sdF/plrYZa9/aZNH8yjMVjPvCj80zo4tnMtCR6zsXVERQbCySBln4XeGkis B8Sl+jAPqScufGpll2xAoCAayfVRyGsQTn3v3UoEIOtusARe/V3Laz6aIeOkqEVd xrW6vCjIPwwhuxZiCanyrCYPYw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:12:18 2026 by rpki-client