$ rpki-client -vvf rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft File: snbxWm1Kl8SBkekr0WYfNovvIeQ.mft (raw, json) Hash identifier: u746/f4gvEdfyRa9SKqqukg/wAtVix0qHfM/RAYFDmM= Subject key identifier: 33:4D:06:AF:16:AA:A9:97:75:D9:1D:C7:1C:AB:E1:1D:AD:2B:3F:6F Authority key identifier: B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4 Certificate issuer: /CN=A91B37C4/serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft Manifest number: 0152 Signing time: Mon 27 Jul 2026 07:06:59 +0000 Manifest this update: Mon 27 Jul 2026 07:06:59 +0000 Manifest next update: Mon 03 Aug 2026 07:06:59 +0000 Files and hashes: 1: snbxWm1Kl8SBkekr0WYfNovvIeQ.crl (hash: XgqtTlLnMz4gG81WwZZrXGLRiQr038Y30BtXghXh1g8=) 2: 3E4B01008BDA11EFA4A11684C4F9AE02.roa (hash: efzaqQoS8xAy0qR24miaNeo4rUHDpnVE5YQrIw9jbAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B37C4, serialNumber=B276F15A6D4A97C48191E92BD1661F368BEF21E4 Validity Not Before: Jul 27 07:06:59 2026 GMT Not After : Aug 3 07:06:59 2026 GMT Subject: CN=6a670393-4a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:cd:7d:9f:38:32:b3:6e:f0:10:7b:b6:7f: b3:1e:73:b4:f6:a0:da:9d:ad:72:98:28:09:71:88: 4a:9b:44:b2:b5:af:f4:08:05:24:f9:74:85:85:78: f4:b2:3b:cf:09:1e:ff:5c:bf:a4:fc:9d:9e:c9:0c: 63:37:ec:c2:d5:7d:10:b1:3d:9e:c1:12:57:f7:96: fa:a5:6d:b4:2b:8e:94:10:44:c3:ad:a9:ea:85:2d: d4:54:db:bc:85:4a:c5:31:2e:ed:01:ad:7b:e1:2b: ab:2d:4d:d9:c4:97:a0:b8:14:3e:8b:02:a0:62:ba: 9f:2f:66:22:61:ff:b7:6d:8d:1b:98:a7:7e:5e:e0: 59:83:78:e7:8e:82:67:77:1d:57:2b:a2:e5:32:6d: 3f:c4:6a:07:23:6c:0a:0f:c0:eb:07:f3:bd:e4:f6: 4b:9c:a4:45:56:fd:74:e4:f9:79:bc:59:5c:8d:d7: 61:6d:3d:0f:a0:0a:ac:40:b4:26:6e:63:e3:14:66: 0d:e7:7b:a9:3b:e1:8a:11:94:de:60:ed:12:d4:c7: fd:3c:e7:2d:72:73:d5:8b:92:2a:76:38:39:ca:ed: 2d:7a:ea:ba:db:22:0b:36:01:f9:34:e0:be:0d:44: be:c0:60:ed:a0:35:87:d5:9a:e0:18:0d:5f:42:4b: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4D:06:AF:16:AA:A9:97:75:D9:1D:C7:1C:AB:E1:1D:AD:2B:3F:6F X509v3 Authority Key Identifier: keyid:B2:76:F1:5A:6D:4A:97:C4:81:91:E9:2B:D1:66:1F:36:8B:EF:21:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snbxWm1Kl8SBkekr0WYfNovvIeQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B37C4/A2ABA72C8BD911EF9F96BA4EC4F9AE02/snbxWm1Kl8SBkekr0WYfNovvIeQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d8:e7:11:5b:95:00:29:fc:03:ca:5c:d2:12:0c:44:c2:ff: 30:14:29:d7:c9:16:92:1c:5f:6b:b5:35:97:4f:98:5e:be:88: fa:5a:6a:8b:1c:11:95:a0:cc:d7:c0:50:19:14:1f:27:33:c5: dd:40:e3:b9:e6:68:9e:7e:a4:87:1d:14:35:68:b8:e2:a4:8a: 62:06:2e:9e:fc:c5:81:4b:cd:48:b5:ab:f3:23:7e:d5:49:63: c1:f1:ba:e1:a1:11:db:70:f3:e6:dc:a8:dc:b0:81:46:4e:2d: 2c:17:ec:ac:b3:af:61:ba:e1:d8:f8:dc:71:64:ed:60:4e:71: 8e:fa:ac:82:22:46:c6:eb:54:72:c3:f3:a2:4b:ba:9e:21:7d: 01:75:f4:58:3f:f3:1a:1a:af:11:8b:91:b7:51:b3:a9:95:2d: 0a:3c:62:d0:74:63:e1:40:77:dc:11:ac:dd:c4:4c:bd:e3:4a: e3:82:20:89:77:ff:f1:cb:4e:d2:0a:ac:85:b3:85:97:c8:9d: 3d:e5:ad:33:8b:f3:ca:37:52:62:34:80:58:0b:ab:20:4a:53: 76:c1:dc:e9:ac:89:9e:4e:8c:80:6a:79:4e:d7:43:38:da:16: f3:fc:64:a2:ce:d5:26:17:d9:70:ce:06:70:2a:c0:64:13:7c: ff:a2:54:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM3QzQxMTAvBgNVBAUTKEIyNzZGMTVBNkQ0QTk3QzQ4MTkxRTkyQkQxNjYxRjM2 OEJFRjIxRTQwHhcNMjYwNzI3MDcwNjU5WhcNMjYwODAzMDcwNjU5WjAYMRYwFAYD VQQDEw02YTY3MDM5My00YTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAru3NfZ84MrNu8BB7tn+zHnO09qDana1ymCgJcYhKm0Syta/0CAUk+XSFhXj0 sjvPCR7/XL+k/J2eyQxjN+zC1X0QsT2ewRJX95b6pW20K46UEETDranqhS3UVNu8 hUrFMS7tAa174SurLU3ZxJeguBQ+iwKgYrqfL2YiYf+3bY0bmKd+XuBZg3jnjoJn dx1XK6LlMm0/xGoHI2wKD8DrB/O95PZLnKRFVv105Pl5vFlcjddhbT0PoAqsQLQm bmPjFGYN53upO+GKEZTeYO0S1Mf9POctcnPVi5Iqdjg5yu0teuq62yILNgH5NOC+ DUS+wGDtoDWH1ZrgGA1fQkuJMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNNBq8W qqmXddkdxxyr4R2tKz9vMB8GA1UdIwQYMBaAFLJ28VptSpfEgZHpK9FmHzaL7yHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzdDNC9BMkFCQTcyQzhC RDkxMUVGOUY5NkJBNEVDNEY5QUUwMi9zbmJ4V20xS2w4U0JrZWtyMFdZZk5vdnZJ ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NuYnhXbTFLbDhTQmtla3IwV1lmTm92dkllUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzdDNC9BMkFCQTcyQzhCRDkxMUVGOUY5NkJBNEVDNEY5QUUwMi9zbmJ4V20xS2w4 U0JrZWtyMFdZZk5vdnZJZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKtjnEVuVACn8A8pc0hIMRML/MBQp18kWkhxfa7U1l0+YXr6I+lpqixwRlaDM 18BQGRQfJzPF3UDjueZonn6khx0UNWi44qSKYgYunvzFgUvNSLWr8yN+1UljwfG6 4aER23Dz5tyo3LCBRk4tLBfsrLOvYbrh2PjccWTtYE5xjvqsgiJGxutUcsPzoku6 niF9AXX0WD/zGhqvEYuRt1GzqZUtCjxi0HRj4UB33BGs3cRMveNK44IgiXf/8ctO 0gqshbOFl8idPeWtM4vzyjdSYjSAWAurIEpTdsHc6ayJnk6MgGp5TtdDONoW8/xk os7VJhfZcM4GcCrAZBN8/6JU6Q== -----END CERTIFICATE-----Generated at Tue Jul 28 21:35:54 2026 by rpki-client