$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft File: ck4fZGxFGwGeHNo21DRq25tf2_g.mft (raw, json) Hash identifier: 6vIOiyWf6PA1vVjyV770tv8ANRWPLkBMIYP1HNq/AkU= Subject key identifier: C4:AA:35:19:56:73:59:49:1F:5E:AF:C5:E9:D8:7A:F7:6C:35:B2:95 Authority key identifier: 72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 Certificate issuer: /CN=A91B8E38/serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft Manifest number: 02D0 Signing time: Mon 27 Jul 2026 02:28:40 +0000 Manifest this update: Mon 27 Jul 2026 02:28:40 +0000 Manifest next update: Mon 03 Aug 2026 02:28:40 +0000 Files and hashes: 1: ck4fZGxFGwGeHNo21DRq25tf2_g.crl (hash: 0PCRY2BElo7gC7er39Z3NsHCgU+piQq8TBupeKGy5Xc=) 2: A6789038400211ED808CCF0DC4F9AE02.roa (hash: /OmusQFGUMLnSfPvaQeL+Y1Ye83OM/m03GrlGqmFNO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:28:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8E38, serialNumber=724E1F646C451B019E1CDA36D4346ADB9B5FDBF8 Validity Not Before: Jul 27 02:28:40 2026 GMT Not After : Aug 3 02:28:40 2026 GMT Subject: CN=6a66c258-716b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:43:d1:40:81:2a:01:a1:18:18:c4:2c:0b:55: 4e:77:f6:5a:0d:79:ff:e4:82:40:9f:55:85:41:ec: 45:e4:f7:b9:b1:a3:cf:40:d2:af:9a:95:cf:a1:78: 14:21:b9:1d:97:71:ce:aa:7f:72:76:5d:1b:25:17: 31:aa:45:d8:aa:c9:0e:6a:43:69:a9:67:f5:2d:49: 3b:ae:10:d3:cf:b0:3e:63:bd:2b:2e:68:4d:d2:52: 4b:65:a6:9e:c0:e9:a7:74:29:cd:33:74:1c:20:64: 0e:9b:ec:43:37:af:dd:b6:bd:d3:66:90:d4:74:a3: d9:b3:57:14:a6:de:42:29:9b:23:a6:14:fc:15:03: 8b:f9:af:27:bb:dc:39:63:15:9f:d0:ac:7e:8e:d3: c4:37:bd:6e:11:52:e2:af:d8:68:0f:2b:82:f0:d2: 54:c0:f5:0c:3b:89:6d:9b:03:30:1a:48:6e:46:19: ef:cc:9c:42:4d:96:6c:66:8c:a1:f4:08:b6:ca:78: 5b:a9:5d:a3:57:44:cc:0f:a0:95:1e:95:75:de:94: 20:e4:cb:b4:70:6c:01:c9:ee:d9:d4:fe:06:00:d1: 6f:03:a9:97:c1:ad:c2:b8:83:41:25:09:c0:28:70: 55:8c:3a:2b:57:3c:b7:ef:4e:7c:67:7d:f1:c6:4d: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AA:35:19:56:73:59:49:1F:5E:AF:C5:E9:D8:7A:F7:6C:35:B2:95 X509v3 Authority Key Identifier: keyid:72:4E:1F:64:6C:45:1B:01:9E:1C:DA:36:D4:34:6A:DB:9B:5F:DB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck4fZGxFGwGeHNo21DRq25tf2_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8E38/51F0DB3C3FFE11ED9A87A315C4F9AE02/ck4fZGxFGwGeHNo21DRq25tf2_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f0:02:05:b5:54:55:78:af:26:85:08:04:5e:ea:36:76:86: da:0b:f6:9a:6f:15:45:04:23:ed:4a:3f:d7:34:83:d4:f5:f0: 5f:38:ae:b5:ca:2d:5a:25:47:4d:12:02:d0:e4:36:69:45:a5: a9:2f:ec:49:03:b7:1b:52:1c:72:b1:19:13:b9:9d:11:a9:71: 6c:49:8c:e3:92:41:c5:90:f5:4c:97:d8:1e:04:8d:e8:a0:3a: c3:3c:7b:c7:9a:46:e2:9b:4d:47:49:d2:b5:2a:df:8e:80:7a: 24:ce:ac:e9:c2:01:7d:4b:f9:ad:e0:8b:e5:50:bb:f2:79:83: cc:22:de:80:66:0f:da:20:00:14:3f:3b:23:4a:51:8d:c0:6f: 52:05:a9:62:ef:87:ef:19:85:f5:76:ed:ee:7a:24:64:fe:8a: b6:34:4a:fa:46:f3:a2:ad:74:6f:ca:5d:3a:fe:73:c3:3c:3c: c1:66:32:85:c1:9e:1d:a2:00:4d:9c:6c:56:fe:62:18:38:2d: 67:38:f2:3b:ae:48:5e:d3:29:4a:0c:e2:d7:32:3a:16:5c:47: 84:9c:9e:c6:7b:32:88:8c:04:8e:ae:ac:b8:3e:ef:55:15:65: 69:90:30:36:28:0f:44:af:c4:4d:4e:e5:bf:0e:b7:0a:66:a0: fe:58:8d:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhFMzgxMTAvBgNVBAUTKDcyNEUxRjY0NkM0NTFCMDE5RTFDREEzNkQ0MzQ2QURC OUI1RkRCRjgwHhcNMjYwNzI3MDIyODQwWhcNMjYwODAzMDIyODQwWjAYMRYwFAYD VQQDEw02YTY2YzI1OC03MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp0PRQIEqAaEYGMQsC1VOd/ZaDXn/5IJAn1WFQexF5Pe5saPPQNKvmpXPoXgU Ibkdl3HOqn9ydl0bJRcxqkXYqskOakNpqWf1LUk7rhDTz7A+Y70rLmhN0lJLZaae wOmndCnNM3QcIGQOm+xDN6/dtr3TZpDUdKPZs1cUpt5CKZsjphT8FQOL+a8nu9w5 YxWf0Kx+jtPEN71uEVLir9hoDyuC8NJUwPUMO4ltmwMwGkhuRhnvzJxCTZZsZoyh 9Ai2ynhbqV2jV0TMD6CVHpV13pQg5Mu0cGwBye7Z1P4GANFvA6mXwa3CuINBJQnA KHBVjDorVzy37058Z33xxk1GuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSqNRlW c1lJH16vxenYevdsNbKVMB8GA1UdIwQYMBaAFHJOH2RsRRsBnhzaNtQ0atubX9v4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEUzOC81MUYwREIzQzNG RkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3R2VITm8yMURScTI1dGYy X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrNGZaR3hGR3dHZUhObzIxRFJxMjV0ZjJfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEUzOC81MUYwREIzQzNGRkUxMUVEOUE4N0EzMTVDNEY5QUUwMi9jazRmWkd4Rkd3 R2VITm8yMURScTI1dGYyX2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOvACBbVUVXivJoUIBF7qNnaG2gv2mm8VRQQj7Uo/1zSD1PXwXziutcotWiVH TRIC0OQ2aUWlqS/sSQO3G1IccrEZE7mdEalxbEmM45JBxZD1TJfYHgSN6KA6wzx7 x5pG4ptNR0nStSrfjoB6JM6s6cIBfUv5reCL5VC78nmDzCLegGYP2iAAFD87I0pR jcBvUgWpYu+H7xmF9Xbt7nokZP6KtjRK+kbzoq10b8pdOv5zwzw8wWYyhcGeHaIA TZxsVv5iGDgtZzjyO65IXtMpSgzi1zI6FlxHhJyexnsyiIwEjq6suD7vVRVlaZAw NigPRK/ETU7lvw63Cmag/liNMg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:55 2026 by rpki-client