$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft File: 44pe3hloyTdeUVUfrpiIigu1RJA.mft (raw, json) Hash identifier: SO/RbI/et9QDV0M9fbI7IYmjyFrbW57fixQLAqavUG0= Subject key identifier: 05:A3:02:87:55:73:1C:20:2E:F1:25:BD:F3:C5:D7:F3:17:6D:05:88 Authority key identifier: E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 Certificate issuer: /CN=A91AAC4B/serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft Manifest number: 0125 Signing time: Wed 29 Jul 2026 07:04:37 +0000 Manifest this update: Wed 29 Jul 2026 07:04:37 +0000 Manifest next update: Wed 05 Aug 2026 07:04:37 +0000 Files and hashes: 1: 44pe3hloyTdeUVUfrpiIigu1RJA.crl (hash: 5DjSF0NEDF54meGCyS9LvqQJstnSJfiETsiGDf1lUOU=) 2: B6A31094CD7E11EFBBAE2137C4F9AE02.roa (hash: 7luqkxdAYhFDQ1cLdVYDxi4/1gyDCpg9yV33Rku64hI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 07:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAC4B, serialNumber=E38A5EDE1968C9375E51551FAE98888A0BB54490 Validity Not Before: Jul 29 07:04:37 2026 GMT Not After : Aug 5 07:04:37 2026 GMT Subject: CN=6a69a605-ff7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:03:bc:c3:da:df:27:5a:ef:ce:87:54:ee:c8: c2:5a:ae:61:c4:dd:50:e0:15:8c:df:ac:3a:94:12: 11:e0:52:7f:45:7b:e5:17:13:09:be:fb:de:65:aa: 9e:3a:c8:9c:eb:fa:90:d3:77:d3:f7:4c:80:81:c0: 35:79:ea:c0:90:9d:be:41:9d:f9:cd:98:14:1c:a9: dd:44:8b:1b:2e:b4:51:7f:27:43:01:ea:2e:dd:6a: f1:bb:e7:4f:bd:90:31:c8:65:c4:18:46:00:b7:15: a0:13:92:c0:87:f8:80:95:45:09:91:d0:8e:ea:7b: ff:69:6f:30:7e:83:99:5e:20:01:65:b1:1f:d0:20: 8e:ab:e9:b0:9b:63:47:ff:77:ec:1c:e0:02:a2:6c: c2:1a:45:77:a5:2b:53:43:5e:c0:f9:bd:1c:38:18: 0b:c9:fb:7a:91:52:01:e1:4d:7d:58:f3:72:1f:51: 76:93:63:0b:16:f6:7a:2a:a5:2c:44:5f:d1:09:af: 57:46:47:0d:9f:65:3b:6b:fe:88:89:94:f8:0a:37: 21:34:ee:4f:b8:51:0e:1c:5b:19:7b:01:1a:94:44: e2:a9:bf:0c:7e:42:a2:4e:06:9b:e2:54:ee:e3:0c: 4e:7a:8d:ff:b2:23:1b:28:cd:20:69:26:a0:6f:30: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A3:02:87:55:73:1C:20:2E:F1:25:BD:F3:C5:D7:F3:17:6D:05:88 X509v3 Authority Key Identifier: keyid:E3:8A:5E:DE:19:68:C9:37:5E:51:55:1F:AE:98:88:8A:0B:B5:44:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/44pe3hloyTdeUVUfrpiIigu1RJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAC4B/DE3F889ACD7D11EFAA07230AC4F9AE02/44pe3hloyTdeUVUfrpiIigu1RJA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ba:2a:6c:40:a3:a0:97:df:87:77:d2:77:af:fd:17:07:99: db:42:47:a6:ae:77:82:4d:11:29:fc:3f:79:fe:4d:7a:7d:ce: 19:87:37:50:fe:29:fd:25:d9:ba:f1:2d:93:a9:e0:f1:46:00: d1:7f:65:56:83:67:38:13:2a:7e:44:bc:65:51:d1:84:d8:30: cd:36:1c:b6:36:9b:5c:7c:c7:d9:d0:53:2e:8f:c6:41:9d:f6: cb:ee:be:2b:76:7d:85:54:32:5d:cd:6c:67:e2:90:c1:c0:12: fe:2a:7e:d5:6d:a6:8e:58:67:7a:57:c8:e9:3d:8c:88:57:50: dc:0f:9d:c6:db:c5:d5:ec:4d:a9:33:67:2f:0c:4b:5c:75:bf: e8:38:1f:c9:b1:c8:a4:ed:37:aa:5a:47:ec:23:17:51:cd:c4: 99:08:31:9d:a0:77:f4:29:97:d0:41:df:34:51:4b:df:22:8f: ef:4a:f6:1d:6a:2f:1d:96:fb:99:12:08:83:81:2d:0a:73:19: 46:65:70:15:16:a3:d9:63:fc:bb:b1:23:d0:f9:bb:f4:9c:1c: 05:ae:f1:8b:c0:65:fb:05:52:19:50:e1:d5:fb:61:d6:f7:9d: dc:d8:fa:26:ee:37:f8:7a:71:2c:38:c9:f8:86:21:1c:96:f2: 15:69:b8:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFDNEIxMTAvBgNVBAUTKEUzOEE1RURFMTk2OEM5Mzc1RTUxNTUxRkFFOTg4ODhB MEJCNTQ0OTAwHhcNMjYwNzI5MDcwNDM3WhcNMjYwODA1MDcwNDM3WjAYMRYwFAYD VQQDEw02YTY5YTYwNS1mZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgO8w9rfJ1rvzodU7sjCWq5hxN1Q4BWM36w6lBIR4FJ/RXvlFxMJvvveZaqe Osic6/qQ03fT90yAgcA1eerAkJ2+QZ35zZgUHKndRIsbLrRRfydDAeou3Wrxu+dP vZAxyGXEGEYAtxWgE5LAh/iAlUUJkdCO6nv/aW8wfoOZXiABZbEf0CCOq+mwm2NH /3fsHOAComzCGkV3pStTQ17A+b0cOBgLyft6kVIB4U19WPNyH1F2k2MLFvZ6KqUs RF/RCa9XRkcNn2U7a/6IiZT4CjchNO5PuFEOHFsZewEalETiqb8MfkKiTgab4lTu 4wxOeo3/siMbKM0gaSagbzCoNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWjAodV cxwgLvElvfPF1/MXbQWIMB8GA1UdIwQYMBaAFOOKXt4ZaMk3XlFVH66YiIoLtUSQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUM0Qi9ERTNGODg5QUNE N0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lUZGVVVlVmcnBpSWlndTFS SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQ0cGUzaGxveVRkZVVWVWZycGlJaWd1MVJKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUM0Qi9ERTNGODg5QUNEN0QxMUVGQUEwNzIzMEFDNEY5QUUwMi80NHBlM2hsb3lU ZGVVVlVmcnBpSWlndTFSSkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGLoqbECjoJffh3fSd6/9FweZ20JHpq53gk0RKfw/ef5Nen3OGYc3UP4p/SXZ uvEtk6ng8UYA0X9lVoNnOBMqfkS8ZVHRhNgwzTYctjabXHzH2dBTLo/GQZ32y+6+ K3Z9hVQyXc1sZ+KQwcAS/ip+1W2mjlhnelfI6T2MiFdQ3A+dxtvF1exNqTNnLwxL XHW/6DgfybHIpO03qlpH7CMXUc3EmQgxnaB39CmX0EHfNFFL3yKP70r2HWovHZb7 mRIIg4EtCnMZRmVwFRaj2WP8u7Ej0Pm79JwcBa7xi8Bl+wVSGVDh1fth1ved3Nj6 Ju43+HpxLDjJ+IYhHJbyFWm4kA== -----END CERTIFICATE-----Generated at Wed Jul 29 14:16:58 2026 by rpki-client