$ rpki-client -vvf rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft File: L4dzyVEFOxQ4vCfsxV45KvteK7I.mft (raw, json) Hash identifier: 3PMn0CaXTCm/bnBvtX5S2gr8P3+7JwmMzqlxwgnAd70= Subject key identifier: 10:C2:04:E9:84:C9:76:0C:6E:4B:8E:8D:CA:43:7A:F4:F6:1D:63:00 Authority key identifier: 2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 Certificate issuer: /CN=A91B56F0/serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft Manifest number: 0C21 Signing time: Sun 26 Jul 2026 19:11:23 +0000 Manifest this update: Sun 26 Jul 2026 19:11:22 +0000 Manifest next update: Sun 02 Aug 2026 19:11:22 +0000 Files and hashes: 1: L4dzyVEFOxQ4vCfsxV45KvteK7I.crl (hash: 4lnPnhgEQEcOauP/3UE6+rbomW9jah0B5srZJWdBJ2Y=) 2: F90AE9C413AB11F1B2F915E2033D8C67.roa (hash: qP73CAez9BA/Kxf0LXcrxOa4cBuTk6ek4TGHHpeWEII=) 3: 60CAF672CAC211F08083F41BC4F9AE02.roa (hash: kq7sx+cXw+m9S0qiyAa+VcKr/WKvuChbXwIbeJRy3rg=) 4: 84AC17989B0811EDB5FDAF75C4F9AE02.roa (hash: ZdWgxsTDmp2SCgpKV/pUzjdMnUTtasFIwHsMjvPLzoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B56F0, serialNumber=2F8773C951053B1438BC27ECC55E392AFB5E2BB2 Validity Not Before: Jul 26 19:11:22 2026 GMT Not After : Aug 2 19:11:22 2026 GMT Subject: CN=6a665bda-1a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:c6:fe:78:ee:36:df:68:2c:a4:eb:28:fa: 78:4d:3f:20:21:5d:5b:3b:2c:f0:93:36:21:13:1e: d3:ef:8b:dc:80:e5:59:e9:b2:a4:62:49:0d:e8:9b: db:a4:a3:ab:8e:fd:31:3d:99:61:16:ee:62:e0:d7: 28:03:fe:0b:14:75:a8:2b:87:3f:88:05:02:7a:bb: 7c:78:f1:67:b8:04:6d:2b:10:e4:3a:a9:77:60:4d: d8:73:37:53:af:aa:71:4b:f9:47:f8:c1:0e:80:22: 8f:3a:41:ce:1f:c5:b0:95:f5:f2:00:2f:7e:3b:5f: 7b:f1:6e:0c:c0:2d:36:f9:44:29:88:82:80:b7:5f: 7d:4c:61:9c:3c:cb:df:51:b2:2d:40:65:07:31:6e: 6f:b2:e5:dd:5b:2d:9b:ea:d9:8a:26:4e:51:d2:67: 11:a7:d6:59:ff:09:1d:19:43:8d:c0:5b:fc:f8:1b: aa:4c:00:a4:51:c2:24:91:6b:85:e1:b3:c0:49:5f: 1b:c9:78:21:07:5f:14:b1:02:67:00:9e:25:05:b5: 93:ed:08:ac:01:98:7e:9b:44:a4:9f:0d:e1:d5:2f: c3:de:dd:7d:7b:fb:9f:e0:f3:71:72:60:e9:ee:0e: 4a:8a:50:cc:1b:58:a8:eb:bd:0e:b9:7c:d0:d1:5f: 7e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C2:04:E9:84:C9:76:0C:6E:4B:8E:8D:CA:43:7A:F4:F6:1D:63:00 X509v3 Authority Key Identifier: keyid:2F:87:73:C9:51:05:3B:14:38:BC:27:EC:C5:5E:39:2A:FB:5E:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L4dzyVEFOxQ4vCfsxV45KvteK7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B56F0/7D67E4D4384C11EABEA2DB71C4F9AE02/L4dzyVEFOxQ4vCfsxV45KvteK7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:3b:dc:5c:30:06:3e:df:65:c2:d5:da:9d:c5:51:52:4e:f5: 17:7b:50:32:76:d7:eb:9f:9a:c2:b5:c5:09:4f:da:38:b1:61: 14:e5:b4:5a:c2:ef:a5:75:4f:31:fa:fd:36:6b:53:c6:fe:db: f2:04:09:7b:fb:f9:59:3f:96:13:19:70:57:cb:55:32:cd:b3: 71:bb:04:79:15:5f:f9:b1:d4:b1:5a:df:7b:b5:a4:c1:41:dd: 9e:df:59:38:38:96:b6:d0:8a:e9:f1:8c:93:b1:09:2e:83:71: 38:f8:4e:98:a1:c3:71:9f:22:78:b9:82:a5:f8:73:d6:7c:d5: 58:9b:92:0b:af:97:b6:64:a6:7e:b2:bb:e1:22:47:9a:f4:8d: de:96:ce:fa:fa:78:99:8c:57:9c:1c:91:1c:37:ea:ab:be:ce: f9:89:b4:cf:1d:47:c1:36:45:c4:6f:56:9a:b0:41:52:28:9d: 27:06:af:e9:7a:90:83:d3:82:43:5d:64:f1:cd:a3:a1:96:1b: 71:40:8e:97:5b:27:ea:3a:c5:dc:7a:be:d2:0b:14:fa:45:c3: e3:a5:2f:05:c4:1d:1f:cc:16:97:63:71:21:59:df:f8:8b:2d: 0c:3e:01:6c:27:e2:a7:46:f6:1c:c0:5c:ae:b5:50:c6:5a:8a: cc:1d:16:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU2RjAxMTAvBgNVBAUTKDJGODc3M0M5NTEwNTNCMTQzOEJDMjdFQ0M1NUUzOTJB RkI1RTJCQjIwHhcNMjYwNzI2MTkxMTIyWhcNMjYwODAyMTkxMTIyWjAYMRYwFAYD VQQDEw02YTY2NWJkYS0xYTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsezG/njuNt9oLKTrKPp4TT8gIV1bOyzwkzYhEx7T74vcgOVZ6bKkYkkN6Jvb pKOrjv0xPZlhFu5i4NcoA/4LFHWoK4c/iAUCert8ePFnuARtKxDkOql3YE3YczdT r6pxS/lH+MEOgCKPOkHOH8WwlfXyAC9+O1978W4MwC02+UQpiIKAt199TGGcPMvf UbItQGUHMW5vsuXdWy2b6tmKJk5R0mcRp9ZZ/wkdGUONwFv8+BuqTACkUcIkkWuF 4bPASV8byXghB18UsQJnAJ4lBbWT7QisAZh+m0Sknw3h1S/D3t19e/uf4PNxcmDp 7g5KilDMG1io670OuXzQ0V9+8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDCBOmE yXYMbkuOjcpDevT2HWMAMB8GA1UdIwQYMBaAFC+Hc8lRBTsUOLwn7MVeOSr7Xiuy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTZGMC83RDY3RTRENDM4 NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94UTR2Q2ZzeFY0NUt2dGVL N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w0ZHp5VkVGT3hRNHZDZnN4VjQ1S3Z0ZUs3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTZGMC83RDY3RTRENDM4NEMxMUVBQkVBMkRCNzFDNEY5QUUwMi9MNGR6eVZFRk94 UTR2Q2ZzeFY0NUt2dGVLN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASTvcXDAGPt9lwtXancVRUk71F3tQMnbX65+awrXFCU/aOLFhFOW0WsLvpXVP Mfr9NmtTxv7b8gQJe/v5WT+WExlwV8tVMs2zcbsEeRVf+bHUsVrfe7WkwUHdnt9Z ODiWttCK6fGMk7EJLoNxOPhOmKHDcZ8ieLmCpfhz1nzVWJuSC6+XtmSmfrK74SJH mvSN3pbO+vp4mYxXnByRHDfqq77O+Ym0zx1HwTZFxG9WmrBBUiidJwav6XqQg9OC Q11k8c2joZYbcUCOl1sn6jrF3Hq+0gsU+kXD46UvBcQdH8wWl2NxIVnf+IstDD4B bCfip0b2HMBcrrVQxlqKzB0WEw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:07:07 2026 by rpki-client