$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: 92WtEykADdcgwEdhX4opeAKFcSelSdXqigQAX6GPBO4= Subject key identifier: 9E:FC:B4:59:A3:40:66:F4:00:25:F1:B1:14:7A:A3:4E:F2:00:7F:62 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: EF Signing time: Mon 27 Jul 2026 08:33:50 +0000 Manifest this update: Mon 27 Jul 2026 08:33:49 +0000 Manifest next update: Mon 03 Aug 2026 08:33:49 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: eGKOplMuBP3HxPm4i2LeXBFD5/I9j3QivMy21zYKJvU=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: vheeXG/vC/HIJ00AInyN8xWUpuBcivs+sqQSJ/QC26k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Jul 27 08:33:49 2026 GMT Not After : Aug 3 08:33:49 2026 GMT Subject: CN=6a6717ee-6f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:dc:0d:b1:8c:b1:b5:3e:f4:e9:fb:f3:d1: b3:25:1e:46:94:d4:e1:49:0a:28:94:44:ad:5c:e9: 27:33:4c:93:91:7d:b0:0d:d5:6f:57:f9:50:6b:75: 90:6d:38:64:4e:58:76:53:00:c1:06:ac:36:6e:61: 35:32:2a:e0:0f:bd:dd:bc:f4:51:e7:ed:f2:b6:cd: d3:b9:fa:6f:38:52:1e:e5:d5:e7:9c:b7:d8:5f:ce: 54:d2:25:9e:35:ba:33:74:77:64:ef:32:f3:99:a5: 08:44:c2:34:15:4a:47:0e:55:89:56:8e:35:8d:14: a5:ef:4f:66:3e:fa:1e:58:b6:f5:7a:04:66:af:ab: 15:0f:20:9e:12:64:78:21:69:43:a3:72:16:7d:0d: 2d:31:bd:3e:4c:1f:5b:2e:9d:75:ab:0c:c0:1e:40: d5:11:d0:7e:f2:ce:a5:cf:ff:e4:2d:26:8b:e7:cd: 61:b0:61:c4:24:59:39:55:b9:4a:5a:56:9e:a3:56: e6:1a:dc:11:56:0d:7f:df:f3:6e:06:f9:bc:e5:7e: 2e:08:db:01:95:cb:7b:99:fd:f9:aa:0a:2e:b2:53: 5b:32:c3:7f:1f:d7:e1:a5:01:20:62:26:06:e9:a9: d8:24:4f:07:d3:6a:af:f3:0a:0c:ff:9c:94:72:81: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FC:B4:59:A3:40:66:F4:00:25:F1:B1:14:7A:A3:4E:F2:00:7F:62 X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:27:86:60:30:70:8c:72:6b:a7:89:2a:60:98:f7:7d:62:28: 84:1d:f8:5b:9b:6a:83:64:d9:ee:39:c0:34:94:75:db:19:91: 91:62:d1:69:96:1c:22:e4:03:96:1a:65:8e:bc:3f:9f:1c:44: f1:37:d9:7a:64:ef:6f:c1:a8:54:a8:d8:8e:a9:51:d8:b2:d2: 63:b2:bf:5d:98:2d:33:a1:d3:6c:f6:6e:68:b5:c7:3a:27:a3: 9b:34:63:2a:26:87:d1:f3:86:5b:63:54:34:86:36:c0:32:1a: 80:3b:c9:bf:2c:d9:23:5b:91:65:da:56:62:1b:34:e5:dd:d7: b8:ef:1d:c5:9e:0e:e4:7a:5b:1b:56:e2:d0:31:35:ea:0a:07: ba:c1:5a:f4:9e:9e:1b:0f:95:c3:3d:f5:3b:2c:2d:0f:b1:47: 72:ff:ea:50:4b:f8:8e:43:80:3a:dd:21:67:9b:ce:ad:70:f7: ee:9a:06:76:ab:6c:62:f2:0c:d0:93:52:37:26:35:0d:92:b4: 3e:7c:8b:34:fe:d1:e5:7e:84:b8:41:4a:f5:10:75:09:24:31: d1:4a:e0:a7:86:94:33:22:77:6a:ee:f6:24:99:19:5e:47:d8: 2f:52:b7:3d:f3:8b:42:20:47:68:59:de:5a:d4:2f:f9:35:d3: 5f:38:df:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdEQ0IxMTAvBgNVBAUTKDBBMkEzMzEyRTA4QkE5QzQxQkU3RTBGQjU4QUE2NDJD NkQwMUI4NzUwHhcNMjYwNzI3MDgzMzQ5WhcNMjYwODAzMDgzMzQ5WjAYMRYwFAYD VQQDEw02YTY3MTdlZS02ZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNncDbGMsbU+9On789GzJR5GlNThSQoolEStXOknM0yTkX2wDdVvV/lQa3WQ bThkTlh2UwDBBqw2bmE1MirgD73dvPRR5+3yts3TufpvOFIe5dXnnLfYX85U0iWe NbozdHdk7zLzmaUIRMI0FUpHDlWJVo41jRSl709mPvoeWLb1egRmr6sVDyCeEmR4 IWlDo3IWfQ0tMb0+TB9bLp11qwzAHkDVEdB+8s6lz//kLSaL581hsGHEJFk5VblK Wlaeo1bmGtwRVg1/3/NuBvm85X4uCNsBlct7mf35qgouslNbMsN/H9fhpQEgYiYG 6anYJE8H02qv8woM/5yUcoHk8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ78tFmj QGb0ACXxsRR6o07yAH9iMB8GA1UdIwQYMBaAFAoqMxLgi6nEG+fg+1iqZCxtAbh1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0RDQi8wMTUwNUEzMDI5 NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFjUWI1LUQ3V0twa0xHMEJ1 SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0RDQi8wMTUwNUEzMDI5NDUxMUYwQUUxQUJDNzRDNEY5QUUwMi9DaW96RXVDTHFj UWI1LUQ3V0twa0xHMEJ1SFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlSeGYDBwjHJrp4kqYJj3fWIohB34W5tqg2TZ7jnANJR12xmRkWLRaZYcIuQD lhpljrw/nxxE8TfZemTvb8GoVKjYjqlR2LLSY7K/XZgtM6HTbPZuaLXHOiejmzRj KiaH0fOGW2NUNIY2wDIagDvJvyzZI1uRZdpWYhs05d3XuO8dxZ4O5HpbG1bi0DE1 6goHusFa9J6eGw+Vwz31OywtD7FHcv/qUEv4jkOAOt0hZ5vOrXD37poGdqtsYvIM 0JNSNyY1DZK0PnyLNP7R5X6EuEFK9RB1CSQx0Urgp4aUMyJ3au72JJkZXkfYL1K3 PfOLQiBHaFneWtQv+TXTXzjfTQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:49 2026 by rpki-client