$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft File: 1sP4E3joVAB4unmUQu7b7HgOD3s.mft (raw, json) Hash identifier: UQ2OQPykb0DTD9z2MJUQQnoaOdtQYOO2oErDoL9fW6M= Subject key identifier: D9:37:20:83:72:18:2D:DA:53:5C:95:3B:C6:FF:3E:CC:A5:71:84:A8 Authority key identifier: D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B Certificate issuer: /CN=A91C8DD5/serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B Certificate serial: 1C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft Manifest number: 1C20 Signing time: Tue 28 Jul 2026 16:18:25 +0000 Manifest this update: Tue 28 Jul 2026 16:18:25 +0000 Manifest next update: Tue 04 Aug 2026 16:18:25 +0000 Files and hashes: 1: 1sP4E3joVAB4unmUQu7b7HgOD3s.crl (hash: 5Y/2z4UN0c8CxoZZr/EL/EHmK/eJFW2CtJg8mnJSV64=) 2: 020A31F812B011E7A7C42661C4F9AE02.roa (hash: nc44lOcLMZ4ITfntFCsBtBPJVq4Kig5VsyDlbVHPWAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:18:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7212 (0x1c2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD5, serialNumber=D6C3F81378E8540078BA799442EEDBEC780E0F7B Validity Not Before: Jul 28 16:18:25 2026 GMT Not After : Aug 4 16:18:25 2026 GMT Subject: CN=6a68d651-6e98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:d9:92:1f:55:e9:0d:81:ae:66:dc:0e:87: 70:bb:e0:3d:a6:d6:00:b8:a6:fd:c5:eb:c4:5f:0f: eb:08:61:1f:c0:7d:0a:c9:8b:fb:80:f1:3d:e1:d2: cb:cb:a5:a2:4c:f8:33:1a:a9:52:3d:a6:51:b4:8d: d2:d5:2b:fb:2a:86:e9:bc:94:45:43:bb:5c:59:67: 31:a0:f5:81:54:cf:6c:d4:41:d0:af:93:06:99:84: 67:f7:c3:c0:68:af:e3:01:27:31:a4:9d:bb:74:12: 92:60:d7:bd:93:df:f4:cb:5a:f0:4a:8d:a0:0f:94: 2f:62:ad:fe:b6:79:44:37:9a:e7:46:fe:e2:c8:93: 6f:76:44:1d:c3:5e:98:12:0f:63:21:78:ac:63:59: fc:22:4b:ab:43:23:6d:d8:ed:03:a9:12:24:6e:46: 4a:13:88:c7:a6:9e:5d:6f:7a:9c:12:ec:9e:fb:20: 93:a0:af:c8:fe:f9:b0:08:04:29:81:8e:10:45:61: 12:97:43:3f:b2:17:90:cd:68:23:66:a8:3e:83:f2: 79:05:b3:1a:53:c0:36:a8:bc:0e:f2:e5:ca:5a:f6: c7:81:8b:d2:fd:ce:f2:7e:70:7f:d4:4b:0a:8b:4e: 96:bb:78:48:6b:23:1e:cb:2c:46:9b:9c:83:35:1c: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:20:83:72:18:2D:DA:53:5C:95:3B:C6:FF:3E:CC:A5:71:84:A8 X509v3 Authority Key Identifier: keyid:D6:C3:F8:13:78:E8:54:00:78:BA:79:94:42:EE:DB:EC:78:0E:0F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1sP4E3joVAB4unmUQu7b7HgOD3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD5/D5A1A1C612A711E7ADB4DE4DC4F9AE02/1sP4E3joVAB4unmUQu7b7HgOD3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ca:59:82:a8:b1:e8:51:c5:59:56:8a:61:91:cb:dd:c5:8d: 8b:ac:08:18:05:81:85:82:78:f2:13:3e:66:a2:49:d9:fe:60: d9:5d:69:31:6a:bf:9f:39:72:ce:2c:5b:66:c9:80:ba:25:9b: 1a:15:34:d9:64:76:c5:32:69:4e:0d:df:6d:11:dc:7d:fb:65: af:5e:1b:14:3c:96:c9:7d:5c:9f:b9:1f:bf:c6:09:55:46:b7: a7:b1:fb:9b:64:59:b0:ad:52:24:c0:a0:77:6a:73:c4:79:19: 1c:14:95:0b:4e:f5:c2:36:68:8d:13:f7:76:db:f8:2c:57:8e: cf:cc:63:df:b1:57:9f:f3:23:69:63:57:a5:2b:b4:f8:32:4c: 3f:64:fa:bd:7d:d0:62:49:f8:7c:7f:66:c8:74:ed:65:f9:ca: 9d:00:e4:24:f8:6c:8e:06:85:9e:0f:2b:9f:31:d2:be:b4:8a: 49:92:41:9c:9a:7a:e7:31:38:a8:04:3d:23:db:3a:a7:56:1d: 16:84:8a:55:ee:db:1e:96:0e:ea:59:e2:fe:32:41:05:af:94: 6e:1b:fe:4c:ef:be:4f:5b:6e:ec:a8:8b:83:b0:56:0d:9a:20: 8e:e7:db:bd:7a:8b:b2:f1:ef:32:75:42:4c:29:b5:82:0e:b4: 9b:9c:ce:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhERDUxMTAvBgNVBAUTKEQ2QzNGODEzNzhFODU0MDA3OEJBNzk5NDQyRUVEQkVD NzgwRTBGN0IwHhcNMjYwNzI4MTYxODI1WhcNMjYwODA0MTYxODI1WjAYMRYwFAYD VQQDEw02YTY4ZDY1MS02ZTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApm7Zkh9V6Q2BrmbcDodwu+A9ptYAuKb9xevEXw/rCGEfwH0KyYv7gPE94dLL y6WiTPgzGqlSPaZRtI3S1Sv7KobpvJRFQ7tcWWcxoPWBVM9s1EHQr5MGmYRn98PA aK/jAScxpJ27dBKSYNe9k9/0y1rwSo2gD5QvYq3+tnlEN5rnRv7iyJNvdkQdw16Y Eg9jIXisY1n8IkurQyNt2O0DqRIkbkZKE4jHpp5db3qcEuye+yCToK/I/vmwCAQp gY4QRWESl0M/sheQzWgjZqg+g/J5BbMaU8A2qLwO8uXKWvbHgYvS/c7yfnB/1EsK i06Wu3hIayMeyyxGm5yDNRxYrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNk3IINy GC3aU1yVO8b/PsylcYSoMB8GA1UdIwQYMBaAFNbD+BN46FQAeLp5lELu2+x4Dg97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOERENS9ENUExQTFDNjEy QTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZBQjR1bm1VUXU3YjdIZ09E M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFzUDRFM2pvVkFCNHVubVVRdTdiN0hnT0Qzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OERENS9ENUExQTFDNjEyQTcxMUU3QURCNERFNERDNEY5QUUwMi8xc1A0RTNqb1ZB QjR1bm1VUXU3YjdIZ09EM3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa8pZgqix6FHFWVaKYZHL3cWNi6wIGAWBhYJ48hM+ZqJJ2f5g2V1pMWq/nzly zixbZsmAuiWbGhU02WR2xTJpTg3fbRHcfftlr14bFDyWyX1cn7kfv8YJVUa3p7H7 m2RZsK1SJMCgd2pzxHkZHBSVC071wjZojRP3dtv4LFeOz8xj37FXn/MjaWNXpSu0 +DJMP2T6vX3QYkn4fH9myHTtZfnKnQDkJPhsjgaFng8rnzHSvrSKSZJBnJp65zE4 qAQ9I9s6p1YdFoSKVe7bHpYO6lni/jJBBa+Ubhv+TO++T1tu7KiLg7BWDZogjufb vXqLsvHvMnVCTCm1gg60m5zOGw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:11:22 2026 by rpki-client