$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft File: Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft (raw, json) Hash identifier: CZk8LiZpCnUB9cqYyR4CA8nlBNlfSUcwUnDof+byGco= Subject key identifier: 89:47:91:0F:FB:C8:12:42:27:BE:5F:8C:69:34:00:7E:4B:66:05:93 Authority key identifier: 16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E Certificate issuer: /CN=A91C8BAB/serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft Manifest number: 3E Signing time: Mon 27 Jul 2026 10:53:01 +0000 Manifest this update: Mon 27 Jul 2026 10:53:00 +0000 Manifest next update: Mon 03 Aug 2026 10:53:00 +0000 Files and hashes: 1: Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl (hash: trQ+if+va4O9zhfCqHDIGaWHHw/0R6FO+9Az3ILXbuU=) 2: B8FC2F342E4311F1A2579C1594833773.roa (hash: pjauDszwaF/mopQYyjDIvAGHDO32bERoI1rKGNgCq5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:52:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BAB, serialNumber=168D67D8E525898BFD0DDF2EF7CC41B89EB93C4E Validity Not Before: Jul 27 10:53:00 2026 GMT Not After : Aug 3 10:53:00 2026 GMT Subject: CN=6a67388d-a88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:c7:52:49:27:3b:67:96:40:cb:04:f2:c9: 95:50:e3:2d:8a:d5:b8:9d:e5:71:11:5a:c2:65:6f: 2c:fb:18:94:1e:07:00:a7:f0:a3:15:70:8d:51:47: 46:a4:db:c8:c7:56:f7:b5:6d:6b:39:d8:51:e9:cc: c0:28:e2:d6:14:fe:98:8e:b6:36:fd:1d:51:83:4c: 91:28:fb:df:99:74:01:ad:a3:75:e2:5a:8d:e6:44: 64:ab:f5:85:39:0d:d2:5b:d5:c1:6f:68:13:0a:0e: c6:cd:6c:2c:00:68:00:90:59:56:a4:62:c9:c9:28: 71:0a:87:ae:cd:c4:d7:81:06:08:c6:7d:f6:b4:88: 73:e8:88:af:2d:0a:0a:eb:43:da:2e:54:04:e5:9f: b3:a2:78:60:2f:18:52:f2:5e:f7:c7:58:66:3b:17: 2e:d5:25:88:7f:87:ca:12:da:bc:b1:7e:ac:12:5d: ec:ef:01:9d:2d:74:1c:ee:63:83:30:a0:6e:85:79: 69:68:c4:7d:29:91:b4:af:5f:86:6f:ef:4d:96:6d: 24:b5:01:34:0a:f5:8d:5f:7d:87:0a:3b:c9:22:c9: cf:93:36:d9:11:4f:53:3e:da:f7:e4:03:db:0c:eb: 64:9f:e3:87:82:24:be:a2:c7:5a:25:25:2b:ba:74: f7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:47:91:0F:FB:C8:12:42:27:BE:5F:8C:69:34:00:7E:4B:66:05:93 X509v3 Authority Key Identifier: keyid:16:8D:67:D8:E5:25:89:8B:FD:0D:DF:2E:F7:CC:41:B8:9E:B9:3C:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fo1n2OUliYv9Dd8u98xBuJ65PE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BAB/17849E442E4211F1AD9907B393833773/Fo1n2OUliYv9Dd8u98xBuJ65PE4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:fa:a4:69:55:08:91:e2:9f:a9:e8:99:57:da:73:03:b4:17: 03:b4:67:72:c6:22:f6:e5:9c:5f:33:f6:9a:f6:da:84:de:96: b7:51:11:98:64:f6:45:24:71:dc:86:95:e0:f7:d1:08:fc:3f: cc:e1:36:5e:7f:a3:a2:c2:11:36:7f:bc:92:43:0c:40:0b:88: 1c:98:18:02:0b:02:97:c6:b7:55:90:92:79:e3:26:d6:19:f3: 72:ab:84:7d:c7:e9:10:4e:89:b4:25:37:7e:e1:bb:df:10:2c: 8e:51:b5:2c:79:31:f2:4b:3a:77:a4:ac:0c:93:4d:ce:a1:ab: 85:fd:8d:ab:03:cb:b6:32:5b:e8:8a:ec:52:e1:44:8e:69:29: 8b:ed:76:6b:8a:15:9c:93:c4:6e:78:b5:e6:66:29:ef:65:e3: d9:ff:6f:75:12:ee:b9:f7:7e:10:aa:df:d9:67:65:a2:c5:2c: f3:2b:d7:2a:1a:da:45:bc:10:7e:07:72:91:5a:86:db:97:51: df:c1:66:47:4b:49:50:d7:ef:3a:5c:5f:9e:aa:78:d0:69:32: 94:03:ea:40:d1:3b:bf:88:48:9f:96:b4:48:87:c9:2b:40:d7: dd:1b:48:2d:f3:4b:81:7a:19:04:43:d9:0e:cd:9b:5f:f5:b3: 5b:23:83:4a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OEJBQjExMC8GA1UEBRMoMTY4RDY3RDhFNTI1ODk4QkZEMERERjJFRjdDQzQxQjg5 RUI5M0M0RTAeFw0yNjA3MjcxMDUzMDBaFw0yNjA4MDMxMDUzMDBaMBgxFjAUBgNV BAMTDTZhNjczODhkLWE4OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChx8dSSSc7Z5ZAywTyyZVQ4y2K1bid5XERWsJlbyz7GJQeBwCn8KMVcI1RR0ak 28jHVve1bWs52FHpzMAo4tYU/piOtjb9HVGDTJEo+9+ZdAGto3XiWo3mRGSr9YU5 DdJb1cFvaBMKDsbNbCwAaACQWVakYsnJKHEKh67NxNeBBgjGffa0iHPoiK8tCgrr Q9ouVATln7OieGAvGFLyXvfHWGY7Fy7VJYh/h8oS2ryxfqwSXezvAZ0tdBzuY4Mw oG6FeWloxH0pkbSvX4Zv702WbSS1ATQK9Y1ffYcKO8kiyc+TNtkRT1M+2vfkA9sM 62Sf44eCJL6ix1olJSu6dPf1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUiUeRD/vI EkInvl+MaTQAfktmBZMwHwYDVR0jBBgwFoAUFo1n2OUliYv9Dd8u98xBuJ65PE4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4QkFCLzE3ODQ5RTQ0MkU0 MjExRjFBRDk5MDdCMzkzODMzNzczL0ZvMW4yT1VsaVl2OURkOHU5OHhCdUo2NVBF NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRm8xbjJPVWxpWXY5RGQ4dTk4eEJ1SjY1UEU0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4 QkFCLzE3ODQ5RTQ0MkU0MjExRjFBRDk5MDdCMzkzODMzNzczL0ZvMW4yT1VsaVl2 OURkOHU5OHhCdUo2NVBFNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBo+qRpVQiR4p+p6JlX2nMDtBcDtGdyxiL25ZxfM/aa9tqE3pa3URGYZPZFJHHc hpXg99EI/D/M4TZef6OiwhE2f7ySQwxAC4gcmBgCCwKXxrdVkJJ54ybWGfNyq4R9 x+kQTom0JTd+4bvfECyOUbUseTHySzp3pKwMk03OoauF/Y2rA8u2MlvoiuxS4USO aSmL7XZrihWck8RueLXmZinvZePZ/291Eu65934Qqt/ZZ2WixSzzK9cqGtpFvBB+ B3KRWobbl1HfwWZHS0lQ1+86XF+eqnjQaTKUA+pA0Tu/iEiflrRIh8krQNfdG0gt 80uBehkEQ9kOzZtf9bNbI4NK -----END CERTIFICATE-----Generated at Tue Jul 28 22:29:13 2026 by rpki-client