$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft File: EqEC8I7RT2I_puMdurSaJNG5oVE.mft (raw, json) Hash identifier: I0Z8fPXjBjiP9GfA4Z7pdM5GcUsRcpPpsi0xiY4XqoQ= Subject key identifier: 24:42:2A:D0:C6:18:15:DA:8F:D8:A5:EC:6F:68:FF:43:D1:B7:3E:9C Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft Manifest number: 012C Signing time: Mon 27 Jul 2026 07:42:52 +0000 Manifest this update: Mon 27 Jul 2026 07:42:51 +0000 Manifest next update: Mon 03 Aug 2026 07:42:51 +0000 Files and hashes: 1: EqEC8I7RT2I_puMdurSaJNG5oVE.crl (hash: btKOizx8qU1Cmidvl6o98ICJz2eXe42gd2q6Mnhqj4I=) 2: C168AD504F2C11F1ABC5AA8AB2833773.roa (hash: L5WX9m+gsDcb4Xkr5gwSf+uci5kp8CuE133PRLJNs5k=) 3: 9D269AE068A111F1B35136357747A888.roa (hash: Gf69RYkyEiyVqtQXBLOZ3FGll0UR1zPQP9SnHZMHYUs=) 4: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (hash: OlddN+1Btn05jfz7izHATCAFLY0/IBXnBfKOwKNZEMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238, serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Validity Not Before: Jul 27 07:42:51 2026 GMT Not After : Aug 3 07:42:51 2026 GMT Subject: CN=6a670bfb-d2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:a4:c4:8f:2a:1f:b5:19:4c:8d:ef:7c:ec: 1d:8f:be:97:5f:a6:c4:6e:55:6b:ee:7a:10:f6:94: 09:2a:ab:39:d6:18:7f:e4:be:d9:74:aa:ec:57:56: c6:d0:03:08:54:71:89:b5:b0:48:9a:7d:8b:fa:42: ef:5d:fd:72:66:e0:eb:53:f2:aa:67:c7:90:c8:99: 39:94:41:b0:40:f5:ef:86:8d:09:02:11:87:88:cf: b7:a4:c8:d6:1e:23:d9:73:5b:2b:40:2b:20:e9:43: b5:03:2a:0f:c6:18:62:70:ad:fc:4d:62:d9:6c:31: 22:d2:c7:8d:1d:2a:e9:b9:bf:06:b4:d2:a7:60:a2: 7f:da:72:12:27:27:35:18:90:3c:63:f3:98:8b:de: 28:ed:56:7a:5d:35:ff:16:46:2d:e7:f2:c9:91:be: 0c:47:46:ea:6b:88:18:a7:ef:f5:be:dc:fb:00:f8: b8:df:20:82:cd:13:18:f3:31:3a:82:02:c0:f1:df: 5c:fb:e4:2d:f2:97:76:0d:ea:a5:7d:7c:d5:af:3c: 65:3a:9e:f7:20:ee:c0:ad:99:87:12:0a:7d:3c:01: 62:bd:bc:1e:81:18:f5:ab:91:f4:8e:d8:eb:e9:31: cd:96:ce:b6:90:e1:f5:50:c9:5b:69:64:f7:1b:fb: 87:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:42:2A:D0:C6:18:15:DA:8F:D8:A5:EC:6F:68:FF:43:D1:B7:3E:9C X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:6c:f8:3f:d9:2e:e7:dc:f5:0f:8c:c8:d3:57:f8:5f:08:27: 94:cb:f2:29:b9:10:6a:4a:e3:81:3a:13:eb:7e:80:1a:65:6f: 8e:cc:49:53:ea:27:21:79:2d:19:96:d5:ec:96:6d:56:49:ff: ab:55:79:16:58:60:57:61:d3:08:2a:c5:d1:43:77:68:96:cf: 58:bf:d0:1b:0f:5b:1e:64:5b:55:91:0c:58:42:f9:9e:8e:93: b6:a6:2e:23:61:72:ca:af:10:59:84:89:18:93:51:38:f4:40: fa:d1:1d:12:66:ca:00:63:5d:0e:4e:ad:70:39:7b:8d:e2:72: 89:73:0d:10:06:ad:51:28:84:c8:bb:cb:d0:97:5e:dd:b1:54: 6d:80:58:6e:ca:f9:0a:51:9d:46:98:37:b5:9e:ca:d6:1c:8a: 3d:95:e3:98:43:63:c9:e9:15:03:64:89:77:9c:5e:d1:0c:c8: 33:b9:cd:b5:86:05:fd:54:13:52:19:e2:1f:d2:9c:85:76:f7: f9:30:cf:f7:44:99:f8:00:8a:c4:ef:df:86:e8:fb:0a:8a:56: 38:e7:7c:89:3e:8c:b9:24:1c:de:ea:ff:e4:12:1b:ca:27:0f: b3:7d:ef:eb:bc:f1:64:d4:dd:96:45:5f:66:05:72:fe:3b:ce: c6:ad:65:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyMzgxMTAvBgNVBAUTKDEyQTEwMkYwOEVEMTRGNjIzRkE2RTMxREJBQjQ5QTI0 RDFCOUExNTEwHhcNMjYwNzI3MDc0MjUxWhcNMjYwODAzMDc0MjUxWjAYMRYwFAYD VQQDEw02YTY3MGJmYi1kMmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlCkxI8qH7UZTI3vfOwdj76XX6bEblVr7noQ9pQJKqs51hh/5L7ZdKrsV1bG 0AMIVHGJtbBImn2L+kLvXf1yZuDrU/KqZ8eQyJk5lEGwQPXvho0JAhGHiM+3pMjW HiPZc1srQCsg6UO1AyoPxhhicK38TWLZbDEi0seNHSrpub8GtNKnYKJ/2nISJyc1 GJA8Y/OYi94o7VZ6XTX/FkYt5/LJkb4MR0bqa4gYp+/1vtz7APi43yCCzRMY8zE6 ggLA8d9c++Qt8pd2DeqlfXzVrzxlOp73IO7ArZmHEgp9PAFivbwegRj1q5H0jtjr 6THNls62kOH1UMlbaWT3G/uH/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCRCKtDG GBXaj9il7G9o/0PRtz6cMB8GA1UdIwQYMBaAFBKhAvCO0U9iP6bjHbq0miTRuaFR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzIzOC9DRDcxN0Q5Q0NC RjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQySV9wdU1kdXJTYUpORzVv VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9WRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi9FcUVDOEk3UlQy SV9wdU1kdXJTYUpORzVvVkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ2z4P9ku59z1D4zI01f4XwgnlMvyKbkQakrjgToT636AGmVvjsxJU+onIXkt GZbV7JZtVkn/q1V5FlhgV2HTCCrF0UN3aJbPWL/QGw9bHmRbVZEMWEL5no6TtqYu I2Fyyq8QWYSJGJNROPRA+tEdEmbKAGNdDk6tcDl7jeJyiXMNEAatUSiEyLvL0Jde 3bFUbYBYbsr5ClGdRpg3tZ7K1hyKPZXjmENjyekVA2SJd5xe0QzIM7nNtYYF/VQT UhniH9KchXb3+TDP90SZ+ACKxO/fhuj7CopWOOd8iT6MuSQc3ur/5BIbyicPs33v 67zxZNTdlkVfZgVy/jvOxq1loA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:37:42 2026 by rpki-client