$ rpki-client -vvf rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft File: 4lmIZ0880loTYNf-lTpYTxqvq8c.mft (raw, json) Hash identifier: AIZriiGy7T/B8bCrOBDzUlWQzht0IyVwg0bD8TXXFUY= Subject key identifier: 08:26:EA:E0:68:DE:BA:7C:45:91:B4:F2:6A:A8:65:F0:38:00:60:D5 Authority key identifier: E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 Certificate issuer: /CN=A91B296A/serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft Manifest number: 3D Signing time: Wed 29 Jul 2026 10:10:27 +0000 Manifest this update: Wed 29 Jul 2026 10:10:26 +0000 Manifest next update: Wed 05 Aug 2026 10:10:26 +0000 Files and hashes: 1: 4lmIZ0880loTYNf-lTpYTxqvq8c.crl (hash: O5rlX89QF3qe1mTitrtAvFZKX0MiCpXpjfD51G6wPBA=) 2: F8C00164383D11F19F938D80A4833773.roa (hash: JA9a2tMNHCe2mcsEqThoattlGfh1KZXTRBAODQIj2BE=) 3: F685154E343511F194D2A58293833773.roa (hash: gqBjSjVoyBRxofp8a9jrvox3u68qYGspZzJrkr23A5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 10:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B296A, serialNumber=E25988674F3CD25A1360D7FE953A584F1AAFABC7 Validity Not Before: Jul 29 10:10:26 2026 GMT Not After : Aug 5 10:10:26 2026 GMT Subject: CN=6a69d192-e0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:b5:c0:82:29:ad:78:2b:b4:c5:6d:9f:9a: 48:8d:6a:fe:0f:ad:7c:a1:f2:5a:e3:f3:93:ec:64: d9:b0:03:59:21:af:c4:ea:aa:72:ce:ff:8c:7c:b1: c4:53:e9:9f:7d:99:3a:4f:11:61:d9:85:e8:78:8c: 4e:fa:0b:0a:b3:96:3c:3e:69:e0:35:79:95:60:4d: 04:e6:0a:77:bf:9c:93:79:02:11:33:a0:48:67:a2: 48:08:68:7f:ff:3a:d6:06:e6:25:fb:3b:e2:15:63: 8e:9c:3a:c8:88:37:31:c6:6a:aa:c9:d6:cd:41:a9: 93:5f:5c:42:33:15:9e:74:89:52:fb:d7:40:a9:05: 33:64:4f:ad:ac:4f:4b:31:8a:52:57:5f:de:64:5c: 92:19:15:37:a1:05:01:18:42:98:8f:1b:6f:11:e6: df:e3:13:26:a5:19:30:89:d2:af:ae:b3:66:e4:a2: 7f:1c:a6:99:f3:05:ad:ea:78:6e:74:bb:84:b4:85: 85:d5:08:20:20:a0:b0:fc:aa:86:70:fc:00:18:11: 16:50:6e:6e:10:dc:a7:75:84:a5:c3:22:b2:ef:39: 9d:57:20:77:c8:ff:88:ff:76:7c:8e:63:b3:e4:9a: 6f:7d:a1:ed:60:c3:24:de:93:be:7f:90:6e:30:4e: 0d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:26:EA:E0:68:DE:BA:7C:45:91:B4:F2:6A:A8:65:F0:38:00:60:D5 X509v3 Authority Key Identifier: keyid:E2:59:88:67:4F:3C:D2:5A:13:60:D7:FE:95:3A:58:4F:1A:AF:AB:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lmIZ0880loTYNf-lTpYTxqvq8c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B296A/AADEB730343511F18291821293833773/4lmIZ0880loTYNf-lTpYTxqvq8c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f1:75:9e:bd:a9:2f:06:96:88:c3:b4:25:f7:71:69:53:e8: 14:aa:46:a0:24:bb:62:4d:a4:b5:7b:cd:c6:bd:43:a4:9a:f2: ee:9c:26:e3:5c:8b:81:8e:d6:50:3f:14:24:c0:e4:75:be:f3: 72:62:d1:fa:af:cc:12:2b:ae:10:5b:23:9e:f1:d5:e1:23:89: ab:d6:33:a3:9f:9c:e4:ee:60:49:48:7a:2a:78:dd:8e:f1:3a: 28:67:c3:13:48:b3:a1:97:0c:23:c7:d1:75:c5:0f:c7:9d:29: 3f:25:07:bf:c5:1d:af:8f:26:cb:6f:56:87:e9:30:18:dc:e7: 2f:9b:65:04:95:dc:1b:ae:0d:3b:97:8f:fc:71:0c:88:b1:b0: d2:0c:53:50:9e:d7:da:55:76:b8:44:43:fd:fe:99:9d:30:9f: 1a:07:07:d2:5a:49:cc:76:74:64:d6:b2:07:c7:11:b7:31:83: 1e:7c:ca:3e:13:9c:b5:8b:18:6c:22:47:70:c4:82:e6:3c:e2: 81:38:17:f9:91:1f:61:4d:c0:66:39:1e:4c:b5:ba:eb:e8:15: 59:3a:8e:ba:91:52:68:47:be:93:dd:1b:88:ae:2f:84:6c:5f: 13:6d:e5:0f:d6:12:09:c9:77:35:b3:6f:35:1e:04:b5:f9:a3: c5:85:41:27 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Mjk2QTExMC8GA1UEBRMoRTI1OTg4Njc0RjNDRDI1QTEzNjBEN0ZFOTUzQTU4NEYx QUFGQUJDNzAeFw0yNjA3MjkxMDEwMjZaFw0yNjA4MDUxMDEwMjZaMBgxFjAUBgNV BAMTDTZhNjlkMTkyLWUwZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC0rXAgimteCu0xW2fmkiNav4PrXyh8lrj85PsZNmwA1khr8TqqnLO/4x8scRT 6Z99mTpPEWHZheh4jE76Cwqzljw+aeA1eZVgTQTmCne/nJN5AhEzoEhnokgIaH// OtYG5iX7O+IVY46cOsiINzHGaqrJ1s1BqZNfXEIzFZ50iVL710CpBTNkT62sT0sx ilJXX95kXJIZFTehBQEYQpiPG28R5t/jEyalGTCJ0q+us2bkon8cppnzBa3qeG50 u4S0hYXVCCAgoLD8qoZw/AAYERZQbm4Q3Kd1hKXDIrLvOZ1XIHfI/4j/dnyOY7Pk mm99oe1gwyTek75/kG4wTg3lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUCCbq4Gje unxFkbTyaqhl8DgAYNUwHwYDVR0jBBgwFoAU4lmIZ0880loTYNf+lTpYTxqvq8cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyOTZBL0FBREVCNzMwMzQz NTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxvVFlOZi1sVHBZVHhxdnE4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNGxtSVowODgwbG9UWU5mLWxUcFlUeHF2cThjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy OTZBL0FBREVCNzMwMzQzNTExRjE4MjkxODIxMjkzODMzNzczLzRsbUlaMDg4MGxv VFlOZi1sVHBZVHhxdnE4Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBz8XWevakvBpaIw7Ql93FpU+gUqkagJLtiTaS1e83GvUOkmvLunCbjXIuBjtZQ PxQkwOR1vvNyYtH6r8wSK64QWyOe8dXhI4mr1jOjn5zk7mBJSHoqeN2O8TooZ8MT SLOhlwwjx9F1xQ/HnSk/JQe/xR2vjybLb1aH6TAY3Ocvm2UEldwbrg07l4/8cQyI sbDSDFNQntfaVXa4REP9/pmdMJ8aBwfSWknMdnRk1rIHxxG3MYMefMo+E5y1ixhs IkdwxILmPOKBOBf5kR9hTcBmOR5Mtbrr6BVZOo66kVJoR76T3RuIri+EbF8TbeUP 1hIJyXc1s281HgS1+aPFhUEn -----END CERTIFICATE-----Generated at Wed Jul 29 16:34:06 2026 by rpki-client