$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft File: m2fIchTtmWVAcRkL688LjZ-hr04.mft (raw, json) Hash identifier: Q5/vCTGDVNidRKVWbZF17H8vc5aEPRpPnIRPZ+w5NdE= Subject key identifier: 74:24:FA:72:F1:77:35:95:17:0F:15:D8:5A:6D:DB:14:42:29:3F:B4 Authority key identifier: 9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E Certificate issuer: /CN=A91CBDC8/serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Certificate serial: 0CF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft Manifest number: 0CD5 Signing time: Tue 28 Jul 2026 18:41:08 +0000 Manifest this update: Tue 28 Jul 2026 18:41:07 +0000 Manifest next update: Tue 04 Aug 2026 18:41:07 +0000 Files and hashes: 1: m2fIchTtmWVAcRkL688LjZ-hr04.crl (hash: ptNc1HzOWbZBc/hlpWz5UsPff1sLDXwUSlSSwFVjFXs=) 2: 988741FEDB8111F0B008B5AB60D3641D.roa (hash: rh5kanvG5QXPAMOrNiNLJLVHnbyU12f7aHXUzCF2hMw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:41:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3312 (0xcf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBDC8, serialNumber=9B67C87214ED99654071190BEBCF0B8D9FA1AF4E Validity Not Before: Jul 28 18:41:07 2026 GMT Not After : Aug 4 18:41:07 2026 GMT Subject: CN=6a68f7c4-c536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:a1:1d:f8:56:a7:9b:51:00:b8:b6:bb:8e: 15:29:3a:53:c6:86:34:f4:5c:52:b9:51:a3:d4:0d: d0:87:d1:ad:cf:54:6b:89:19:1e:3d:b6:e3:c2:4f: a6:4d:be:a4:16:e7:d7:a2:dd:cd:50:71:7c:5b:99: 4c:fa:4d:e4:48:0c:03:9d:65:ea:6e:20:d5:49:9f: a8:84:f3:39:a2:cc:64:7e:b9:e5:a9:e6:e9:8e:03: d6:74:5a:e5:4c:7a:34:34:b6:cf:05:ef:fc:c1:63: a4:bf:c3:4a:ad:24:36:0f:28:03:6d:21:46:62:54: 9d:51:20:48:54:cc:fe:0f:cf:df:bd:1b:38:64:0b: c5:bb:da:75:35:aa:f4:19:52:01:2a:33:11:98:7b: 37:24:a8:24:1b:e2:0d:2b:a1:cb:56:ed:e9:2b:3f: 4b:c9:90:92:20:01:d2:2b:70:50:25:bf:94:75:83: 55:66:fa:12:2a:d5:78:0d:fc:20:3c:7a:95:c0:29: d4:84:88:c2:be:59:bd:ca:9a:2f:26:a3:ff:b6:bd: ea:c6:52:82:5b:f8:c8:b9:60:80:90:e3:4d:5e:66: ee:c1:44:ea:79:47:60:5f:0d:1f:b4:c5:9a:7a:eb: 1b:4c:2f:56:44:de:46:49:fe:75:96:7d:95:9b:55: 26:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:24:FA:72:F1:77:35:95:17:0F:15:D8:5A:6D:DB:14:42:29:3F:B4 X509v3 Authority Key Identifier: keyid:9B:67:C8:72:14:ED:99:65:40:71:19:0B:EB:CF:0B:8D:9F:A1:AF:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m2fIchTtmWVAcRkL688LjZ-hr04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBDC8/669763F018E011EAA0C38E7BC4F9AE02/m2fIchTtmWVAcRkL688LjZ-hr04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1b:ac:0e:5d:d2:37:8e:c0:5d:20:d4:9b:0b:32:dc:b8:b2: 55:77:58:4a:47:3a:83:90:26:2b:7b:95:4f:b6:60:f5:b7:dc: a8:a0:7f:55:d1:bc:48:0a:ef:54:c0:a7:b0:aa:b0:d8:fc:da: 5a:93:ff:7f:b1:42:c7:cd:97:b1:b0:56:d8:c3:74:fd:54:03: 64:8c:77:5a:9a:cb:67:0e:ad:74:ec:f6:38:1c:f1:f3:94:3e: 1b:56:84:ea:d7:26:a5:95:e8:fa:6a:d2:7a:e0:88:1f:75:6f: 57:d5:73:f3:ad:1c:c8:72:82:49:23:58:43:7b:a6:7d:5e:de: 42:a2:96:c5:1e:fe:49:6f:bf:47:dc:e1:c1:2a:6f:ab:6a:13: e0:29:45:e5:29:bd:e0:9e:7c:10:8e:9f:22:b8:35:c3:16:fb: 22:ac:fa:40:50:4f:10:76:12:b1:55:df:89:2c:9a:8e:21:0b: 75:40:7b:ae:90:c8:64:32:03:b1:42:44:cc:a8:23:15:59:a5: 15:58:eb:17:b9:b0:ea:74:e7:54:2f:64:a4:cd:0c:e7:76:ba: 25:4f:76:db:bb:a2:ca:ae:ce:30:60:aa:a9:00:9d:61:6e:5a: bd:80:87:40:16:aa:63:df:1d:25:5a:3b:b7:16:91:3e:09:95: c3:3f:61:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JEQzgxMTAvBgNVBAUTKDlCNjdDODcyMTRFRDk5NjU0MDcxMTkwQkVCQ0YwQjhE OUZBMUFGNEUwHhcNMjYwNzI4MTg0MTA3WhcNMjYwODA0MTg0MTA3WjAYMRYwFAYD VQQDEw02YTY4ZjdjNC1jNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAujehHfhWp5tRALi2u44VKTpTxoY09FxSuVGj1A3Qh9Gtz1RriRkePbbjwk+m Tb6kFufXot3NUHF8W5lM+k3kSAwDnWXqbiDVSZ+ohPM5osxkfrnlqebpjgPWdFrl THo0NLbPBe/8wWOkv8NKrSQ2DygDbSFGYlSdUSBIVMz+D8/fvRs4ZAvFu9p1Nar0 GVIBKjMRmHs3JKgkG+INK6HLVu3pKz9LyZCSIAHSK3BQJb+UdYNVZvoSKtV4Dfwg PHqVwCnUhIjCvlm9ypovJqP/tr3qxlKCW/jIuWCAkONNXmbuwUTqeUdgXw0ftMWa eusbTC9WRN5GSf51ln2Vm1UmCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQk+nLx dzWVFw8V2Fpt2xRCKT+0MB8GA1UdIwQYMBaAFJtnyHIU7ZllQHEZC+vPC42foa9O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkRDOC82Njk3NjNGMDE4 RTAxMUVBQTBDMzhFN0JDNEY5QUUwMi9tMmZJY2hUdG1XVkFjUmtMNjg4TGpaLWhy MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20yZkljaFR0bVdWQWNSa0w2ODhMalotaHIwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkRDOC82Njk3NjNGMDE4RTAxMUVBQTBDMzhFN0JDNEY5QUUwMi9tMmZJY2hUdG1X VkFjUmtMNjg4TGpaLWhyMDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAixusDl3SN47AXSDUmwsy3LiyVXdYSkc6g5AmK3uVT7Zg9bfcqKB/VdG8SArv VMCnsKqw2PzaWpP/f7FCx82XsbBW2MN0/VQDZIx3WprLZw6tdOz2OBzx85Q+G1aE 6tcmpZXo+mrSeuCIH3VvV9Vz860cyHKCSSNYQ3umfV7eQqKWxR7+SW+/R9zhwSpv q2oT4ClF5Sm94J58EI6fIrg1wxb7Iqz6QFBPEHYSsVXfiSyajiELdUB7rpDIZDID sUJEzKgjFVmlFVjrF7mw6nTnVC9kpM0M53a6JU9227uiyq7OMGCqqQCdYW5avYCH QBaqY98dJVo7txaRPgmVwz9hrA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:58:18 2026 by rpki-client