$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft File: srRBM3JITuPOwrPP8DCwN6v2-C4.mft (raw, json) Hash identifier: T6K0hnBW158FRlN3/203DdZQKpAkI1Gy/8iYjOkN/lU= Subject key identifier: 5A:10:FE:6A:73:28:C8:19:EB:4D:A3:CB:8A:BD:0C:87:7C:63:D0:28 Authority key identifier: B2:B4:41:33:72:48:4E:E3:CE:C2:B3:CF:F0:30:B0:37:AB:F6:F8:2E Certificate issuer: /CN=A91ABD41/serialNumber=B2B4413372484EE3CEC2B3CFF030B037ABF6F82E Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft Manifest number: 0D Signing time: Mon 27 Jul 2026 11:32:23 +0000 Manifest this update: Mon 27 Jul 2026 11:32:22 +0000 Manifest next update: Mon 03 Aug 2026 11:32:22 +0000 Files and hashes: 1: srRBM3JITuPOwrPP8DCwN6v2-C4.crl (hash: TWN3VcslPVAV7tI59i4WMaB1PmMEPXQKwPxJ1Rit4Xc=) 2: 1B7D039C877A11F1985B111C4C11F970.roa (hash: FAZiZDUG5Zm6j9xufGQcA/X9ynlaFejum5rH7WqDHV4=) 3: 27A8153A877A11F1BF0258354C11F970.roa (hash: 2dvUUDp3HKp6RjeBgGZ/GajEKJeeUV4Gc1PJYH4NGxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.crl rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD41, serialNumber=B2B4413372484EE3CEC2B3CFF030B037ABF6F82E Validity Not Before: Jul 27 11:32:22 2026 GMT Not After : Aug 3 11:32:22 2026 GMT Subject: CN=6a6741c7-04c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:68:f1:85:df:8c:21:af:37:c4:62:a4:95: 72:c7:c9:dc:eb:b9:4a:cf:5c:8f:cc:09:18:ca:11: d8:67:8e:12:dd:d4:cd:35:19:d4:44:62:09:52:f5: 6e:d9:cd:ec:2f:d9:ef:0e:b0:c5:69:d7:e4:3b:3f: d9:86:de:20:6f:93:9c:fa:3d:fe:0a:a5:dc:7c:6b: cd:3a:b2:79:af:63:c3:32:ef:0d:04:af:de:07:bd: 9b:9d:0f:24:76:2f:77:0b:e3:62:05:ff:c2:12:dd: 1b:55:04:c3:c5:10:c2:ad:ea:73:91:2d:e0:aa:55: 1b:51:d8:03:f6:bf:e6:45:73:eb:c9:41:d5:39:5a: 44:f8:bf:36:be:71:0a:15:f5:a4:dd:85:aa:23:9c: 91:e2:76:66:7e:fb:59:4d:3c:b9:92:ed:1c:d5:b5: 79:af:70:6a:bb:00:2f:90:0a:81:3f:36:27:3d:04: fc:63:d3:b4:32:66:7d:45:8d:c2:02:01:35:b4:63: fb:3c:97:f5:46:d5:76:fd:b6:7f:af:d1:df:a3:fc: 04:b0:b0:86:e5:22:0d:3f:7e:74:44:7c:3c:57:c7: 90:52:9a:ad:3d:de:f3:94:8c:72:8c:6c:7c:a8:f0: e1:be:89:5b:cf:29:e8:f6:87:d0:ec:c6:70:5f:74: 0e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:10:FE:6A:73:28:C8:19:EB:4D:A3:CB:8A:BD:0C:87:7C:63:D0:28 X509v3 Authority Key Identifier: keyid:B2:B4:41:33:72:48:4E:E3:CE:C2:B3:CF:F0:30:B0:37:AB:F6:F8:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/srRBM3JITuPOwrPP8DCwN6v2-C4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD41/C36AE49479DC11F1815E4BFE63A30FBC/srRBM3JITuPOwrPP8DCwN6v2-C4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b4:76:4c:ad:13:47:8b:31:b4:c0:95:ea:d9:12:6d:f6:1c: 0e:21:7d:3f:c6:21:ea:d5:5b:9c:74:96:0c:dd:2c:df:21:c8: 95:54:93:b9:26:52:46:e1:e1:92:dc:3c:5a:dd:70:2e:97:e4: 46:5a:21:db:71:55:3f:de:d0:e5:cf:e5:68:78:df:c9:56:02: c5:15:df:cb:e2:b9:d4:b1:64:18:86:c1:1c:85:5f:85:aa:1b: 41:f0:14:3d:f2:3e:c1:ec:65:5d:b1:a5:e4:75:6a:5e:98:c5: fd:21:6c:21:d6:f2:98:f5:31:a9:19:6c:6e:76:5f:1d:9c:f4: 16:7e:be:fe:c7:58:fd:93:e2:d1:8f:f4:78:30:6f:d9:23:16: 19:5f:06:b8:33:3c:09:5f:1b:92:37:71:cd:33:fb:9c:61:31: 4c:53:8e:d9:f9:fd:07:15:b9:ef:03:4d:9d:4a:44:a1:dc:77: 0f:2d:7e:05:ed:f6:b5:b0:58:2f:b9:79:9e:8f:ca:22:8b:b4: b6:d2:07:a2:c8:af:33:b7:dd:c0:35:02:c8:d9:98:94:3b:b8: 97:cc:fb:d7:82:6e:1c:0b:ff:a8:29:a0:b4:78:67:e8:06:79: 69:82:73:e1:dc:64:2a:e6:a1:55:8d:d0:9b:47:0a:21:d0:e0: ab:37:9b:15 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QkQ0MTExMC8GA1UEBRMoQjJCNDQxMzM3MjQ4NEVFM0NFQzJCM0NGRjAzMEIwMzdB QkY2RjgyRTAeFw0yNjA3MjcxMTMyMjJaFw0yNjA4MDMxMTMyMjJaMBgxFjAUBgNV BAMTDTZhNjc0MWM3LTA0YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFYmjxhd+MIa83xGKklXLHydzruUrPXI/MCRjKEdhnjhLd1M01GdREYglS9W7Z zewv2e8OsMVp1+Q7P9mG3iBvk5z6Pf4Kpdx8a806snmvY8My7w0Er94HvZudDyR2 L3cL42IF/8IS3RtVBMPFEMKt6nORLeCqVRtR2AP2v+ZFc+vJQdU5WkT4vza+cQoV 9aTdhaojnJHidmZ++1lNPLmS7RzVtXmvcGq7AC+QCoE/Nic9BPxj07QyZn1FjcIC ATW0Y/s8l/VG1Xb9tn+v0d+j/ASwsIblIg0/fnREfDxXx5BSmq093vOUjHKMbHyo 8OG+iVvPKej2h9DsxnBfdA5XAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWhD+anMo yBnrTaPLir0Mh3xj0CgwHwYDVR0jBBgwFoAUsrRBM3JITuPOwrPP8DCwN6v2+C4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCRDQxL0MzNkFFNDk0NzlE QzExRjE4MTVFNEJGRTYzQTMwRkJDL3NyUkJNM0pJVHVQT3dyUFA4REN3TjZ2Mi1D NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc3JSQk0zSklUdVBPd3JQUDhEQ3dONnYyLUM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC RDQxL0MzNkFFNDk0NzlEQzExRjE4MTVFNEJGRTYzQTMwRkJDL3NyUkJNM0pJVHVQ T3dyUFA4REN3TjZ2Mi1DNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBPtHZMrRNHizG0wJXq2RJt9hwOIX0/xiHq1VucdJYM3SzfIciVVJO5JlJG4eGS 3Dxa3XAul+RGWiHbcVU/3tDlz+VoeN/JVgLFFd/L4rnUsWQYhsEchV+FqhtB8BQ9 8j7B7GVdsaXkdWpemMX9IWwh1vKY9TGpGWxudl8dnPQWfr7+x1j9k+LRj/R4MG/Z IxYZXwa4MzwJXxuSN3HNM/ucYTFMU47Z+f0HFbnvA02dSkSh3HcPLX4F7fa1sFgv uXmej8oii7S20geiyK8zt93ANQLI2ZiUO7iXzPvXgm4cC/+oKaC0eGfoBnlpgnPh 3GQq5qFVjdCbRwoh0OCrN5sV -----END CERTIFICATE-----Generated at Tue Jul 28 15:38:22 2026 by rpki-client