$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft File: U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json) Hash identifier: NkYWf661OsTQi2vAuLIEshpfXn6MiVXw4Nq+BMrio6M= Subject key identifier: 0C:7E:C2:FD:B6:A1:2B:85:6E:B3:83:C6:7B:89:63:40:1E:2B:0A:61 Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 Certificate issuer: /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Certificate serial: 0A60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft Manifest number: 0A4A Signing time: Sun 26 Jul 2026 20:11:49 +0000 Manifest this update: Sun 26 Jul 2026 20:11:49 +0000 Manifest next update: Sun 02 Aug 2026 20:11:49 +0000 Files and hashes: 1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: xSK38RSEXtFsSSqjOIi8YCqod8Gx0lHd+U3TNBlwwDI=) 2: 35831FCE937011EA8A795583C4F9AE02.roa (hash: KU74ZbX8QctQD6oWhNP2ZPDiRV7nlnVfxskUU58FW+U=) 3: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: pxNuh5srbtMxxnoUXoogGH47f0VhHR+2FLeTjpcucQE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:11:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2656 (0xa60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829 Validity Not Before: Jul 26 20:11:49 2026 GMT Not After : Aug 2 20:11:49 2026 GMT Subject: CN=6a666a05-8719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bb:f4:13:52:59:13:b1:8c:4e:12:d6:c4:5a: 8c:c6:8f:64:db:7b:a6:cc:48:31:fe:c9:c7:69:6a: fb:a2:ba:34:5c:7a:91:98:36:1d:a8:45:7d:d7:e1: 6d:fb:86:1d:c7:d5:65:56:98:f3:c0:21:be:3e:1e: ee:13:d9:1e:e3:b6:93:33:f7:0f:71:0d:ac:61:13: ef:bd:cc:72:4e:47:2a:e9:6b:13:36:0a:0a:06:08: d9:76:8f:3e:7c:b3:af:f1:a4:7b:16:ff:9b:07:20: b3:ba:a2:9b:74:a9:25:d5:77:cb:78:e0:11:79:d8: f4:a9:f8:4b:fc:81:ab:2e:22:51:d7:47:79:dd:8f: 3f:58:e6:c5:ee:94:64:aa:38:f5:c6:40:b9:3c:4e: de:39:3c:a6:bf:dc:e1:06:e9:f1:9e:f5:ea:94:87: e5:e5:70:a3:6a:b3:b6:7a:c5:ca:02:43:de:ae:97: 3e:f9:7e:2e:8e:0b:58:66:84:c4:fd:4e:3e:f1:84: 39:e1:aa:a2:f9:5a:d4:fa:6d:0f:f4:e8:ec:ff:37: cf:d2:ce:89:81:9e:54:c0:ee:ed:c9:d1:70:9c:7b: 57:3e:77:54:45:bf:0c:50:8f:4a:b2:db:70:cb:4f: 8f:f2:7c:32:ad:7b:8f:8e:58:cb:3c:22:45:5e:90: fc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7E:C2:FD:B6:A1:2B:85:6E:B3:83:C6:7B:89:63:40:1E:2B:0A:61 X509v3 Authority Key Identifier: keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a3:f8:a3:fd:ab:bc:79:87:9c:4d:6b:40:a9:5e:06:5f:c7: 46:a3:f2:b9:b0:a8:62:6f:af:75:81:ad:d4:da:56:19:b5:13: d6:2b:45:74:93:86:8b:a6:d0:30:16:ed:36:4b:d6:f6:6a:f2: 43:f9:87:45:6d:e1:c7:79:8d:50:7d:16:78:26:fa:f0:39:0f: fe:b5:f5:ec:dd:8d:2a:30:e0:88:2e:c9:51:7c:88:d4:d8:61: d5:b4:ca:64:49:ee:84:9c:b1:73:8e:27:60:43:bb:8d:9e:7a: ae:14:0b:3d:b9:f1:3b:23:7f:c8:bf:d7:8f:42:8c:e1:22:7d: 60:1a:51:e5:f2:45:92:ac:c0:32:c5:3c:5e:3e:fa:73:f0:e6: 97:2a:27:4d:4c:68:00:1f:d9:ad:93:57:20:f0:9b:d8:ff:11: 24:5a:0d:9f:67:a1:d7:58:71:2d:9e:e8:dc:94:ab:71:09:71: b0:55:82:4f:ca:99:0c:60:ac:25:50:57:d2:5c:2b:fd:6b:56: 75:08:91:96:32:04:e6:fe:5f:8d:4e:2e:c9:54:64:b1:c1:dd: c4:19:02:65:49:37:2f:b3:de:c4:b1:37:1b:62:3f:e3:07:d0: ae:ea:d9:3f:31:66:cf:ac:3f:15:44:6d:1d:bd:f3:f5:82:5b: 9f:3b:93:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNGRUIxMTAvBgNVBAUTKDUzODVFMTNBMUI1ODQ1RkI0NENFRUI2QkVEOERFQjRF ODlBRjM4MjkwHhcNMjYwNzI2MjAxMTQ5WhcNMjYwODAyMjAxMTQ5WjAYMRYwFAYD VQQDEw02YTY2NmEwNS04NzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Lv0E1JZE7GMThLWxFqMxo9k23umzEgx/snHaWr7oro0XHqRmDYdqEV91+Ft +4Ydx9VlVpjzwCG+Ph7uE9ke47aTM/cPcQ2sYRPvvcxyTkcq6WsTNgoKBgjZdo8+ fLOv8aR7Fv+bByCzuqKbdKkl1XfLeOARedj0qfhL/IGrLiJR10d53Y8/WObF7pRk qjj1xkC5PE7eOTymv9zhBunxnvXqlIfl5XCjarO2esXKAkPerpc++X4ujgtYZoTE /U4+8YQ54aqi+VrU+m0P9Ojs/zfP0s6JgZ5UwO7tydFwnHtXPndURb8MUI9Ksttw y0+P8nwyrXuPjljLPCJFXpD8iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAx+wv22 oSuFbrODxnuJY0AeKwphMB8GA1UdIwQYMBaAFFOF4TobWEX7RM7ra+2N606Jrzgp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0ZFQi9DQjJDMzNFNjkz NkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJmdEV6dXRyN1kzclRvbXZP Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0WGhPaHRZUmZ0RXp1dHI3WTNyVG9tdk9Day5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Q0ZFQi9DQjJDMzNFNjkzNkUxMUVBQTVFNTZCN0VDNEY5QUUwMi9VNFhoT2h0WVJm dEV6dXRyN1kzclRvbXZPQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgaP4o/2rvHmHnE1rQKleBl/HRqPyubCoYm+vdYGt1NpWGbUT1itFdJOGi6bQ MBbtNkvW9mryQ/mHRW3hx3mNUH0WeCb68DkP/rX17N2NKjDgiC7JUXyI1Nhh1bTK ZEnuhJyxc44nYEO7jZ56rhQLPbnxOyN/yL/Xj0KM4SJ9YBpR5fJFkqzAMsU8Xj76 c/DmlyonTUxoAB/ZrZNXIPCb2P8RJFoNn2eh11hxLZ7o3JSrcQlxsFWCT8qZDGCs JVBX0lwr/WtWdQiRljIE5v5fjU4uyVRkscHdxBkCZUk3L7PexLE3G2I/4wfQrurZ PzFmz6w/FURtHb3z9YJbnzuTfA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:50 2026 by rpki-client