$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft File: _0lSk8tfFeXRS6zC2xBSsuLIJcg.mft (raw, json) Hash identifier: sDkqSWG91CV5G1s2LlyscI2kzqrqsUI/nhEhzX/nUDQ= Subject key identifier: 87:64:63:4B:29:EA:66:66:92:75:6C:87:64:FC:1E:CA:BE:3C:7E:04 Authority key identifier: FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 Certificate issuer: /CN=A91CEAA2/serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Certificate serial: 35B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft Manifest number: 357F Signing time: Tue 28 Jul 2026 15:18:04 +0000 Manifest this update: Tue 28 Jul 2026 15:18:04 +0000 Manifest next update: Tue 04 Aug 2026 15:18:04 +0000 Files and hashes: 1: _0lSk8tfFeXRS6zC2xBSsuLIJcg.crl (hash: fjO4glC+yJGkX8HIr1JrEveiHxYl/Rz9mCJGdeB0gZA=) 2: 0DEF13D4FC1711EC919B6757C4F9AE02.roa (hash: oZ6+TXbsKzCb1H31cqRGHknA2NY+Q5lG0k3cYCJhmRg=) 3: 75906378FC1F11ECAD09AF21C4F9AE02.roa (hash: 3RMRBjMY5rIEnAXqqJa1OtU6bMq0UxFTQ4CaQEQ/7hk=) 4: 767E7B3CA60211EFBFCDB65FC4F9AE02.roa (hash: vf7yinj1S9cWrGMf1fGP8uJmMGRAcRT+S6wc+GqOAfM=) 5: B2306182F3F911EAB9D11D26C4F9AE02.roa (hash: EjjdhavOBifQ/TWD+ksl2xyIA2vVpvp6HiibsqNwUc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13753 (0x35b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAA2, serialNumber=FF495293CB5F15E5D14BACC2DB1052B2E2C825C8 Validity Not Before: Jul 28 15:18:04 2026 GMT Not After : Aug 4 15:18:04 2026 GMT Subject: CN=6a68c82c-373f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:85:2d:d2:b9:c2:9f:16:e9:2f:ac:12:04:6f: 71:7a:2b:7d:03:ac:11:0b:0b:c9:ed:24:6d:12:a8: fb:21:66:10:37:bb:2f:f0:17:7b:4e:67:0e:e7:31: 19:ad:3e:59:8b:99:26:81:73:c0:6f:27:65:b7:27: a1:59:26:84:0e:b9:8c:4b:33:06:de:4c:9c:fd:a5: 25:b0:4c:ab:af:61:d4:55:de:b3:87:39:3f:02:2f: 83:ef:a3:21:6f:9e:fb:0e:6f:c7:ef:d8:fe:02:81: b3:90:39:d7:1f:c4:e3:d3:1e:14:cb:09:af:22:52: 37:6d:b2:6d:6f:97:26:63:d7:06:e5:39:3a:8f:e5: d0:1b:30:19:46:30:d4:7a:dd:25:f5:97:92:c0:42: 71:59:c7:c9:26:2a:92:a6:83:b0:09:93:e3:35:d8: fd:0d:95:7b:85:a9:5e:f9:61:b9:b9:54:c9:12:8c: 00:93:00:d8:1e:ec:9e:76:0e:9c:6c:eb:47:b8:2c: 36:f2:13:28:fd:aa:a1:d9:a4:2b:11:b1:6b:90:25: 6b:41:0d:c2:2a:76:53:41:d6:b5:43:4a:c8:2d:58: 55:9a:d4:9a:94:ee:c6:4c:ce:0f:e5:65:f1:4b:cb: fa:28:29:e0:83:05:45:ca:6e:10:cf:9c:59:e1:4b: fe:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:64:63:4B:29:EA:66:66:92:75:6C:87:64:FC:1E:CA:BE:3C:7E:04 X509v3 Authority Key Identifier: keyid:FF:49:52:93:CB:5F:15:E5:D1:4B:AC:C2:DB:10:52:B2:E2:C8:25:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAA2/D2AB292C1D9911E2BA529A8608B02CD2/_0lSk8tfFeXRS6zC2xBSsuLIJcg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:f1:f6:94:5b:e9:9d:a2:5d:aa:e6:76:bc:7f:e8:1c:67:8f: c5:08:35:f8:26:21:21:7d:56:c9:fb:00:8f:c3:7e:74:33:e5: b8:f6:52:f2:c3:6b:73:43:25:b4:a3:83:db:95:5d:9f:51:a3: 88:25:f6:8d:3e:41:0c:41:0b:bd:a4:6b:11:d9:1e:92:78:98: b1:1c:b8:8e:5a:9f:c5:1e:07:76:78:b4:be:45:2c:15:80:58: fb:26:10:da:c8:47:22:25:a6:4a:38:59:4b:1b:da:6a:0d:1d: c7:c6:d1:1d:bf:9f:a7:22:b1:3a:21:d5:43:3b:a0:23:6e:b4: c3:45:73:89:cc:bd:64:45:f4:70:61:88:09:72:bd:52:b5:da: 6a:dd:89:61:69:fd:b7:6f:62:cc:6f:48:19:3b:1a:36:67:e0: 54:29:e6:ab:60:99:05:1c:21:c3:b4:75:7d:27:8a:c2:09:4a: a3:0b:11:71:61:77:4a:f1:0d:27:0e:80:86:f2:9e:b3:14:72: be:db:48:e1:30:80:3b:2f:b6:f9:ca:27:b9:fd:a4:d7:f3:bd: 78:49:62:bd:43:36:3d:da:8b:12:54:be:63:e3:1d:3e:7d:e2: 70:91:39:0b:0b:b6:19:ac:49:2f:b8:6b:fc:f3:49:f6:0f:3b: e9:37:24:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBQTIxMTAvBgNVBAUTKEZGNDk1MjkzQ0I1RjE1RTVEMTRCQUNDMkRCMTA1MkIy RTJDODI1QzgwHhcNMjYwNzI4MTUxODA0WhcNMjYwODA0MTUxODA0WjAYMRYwFAYD VQQDEw02YTY4YzgyYy0zNzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlIUt0rnCnxbpL6wSBG9xeit9A6wRCwvJ7SRtEqj7IWYQN7sv8Bd7TmcO5zEZ rT5Zi5kmgXPAbydltyehWSaEDrmMSzMG3kyc/aUlsEyrr2HUVd6zhzk/Ai+D76Mh b577Dm/H79j+AoGzkDnXH8Tj0x4UywmvIlI3bbJtb5cmY9cG5Tk6j+XQGzAZRjDU et0l9ZeSwEJxWcfJJiqSpoOwCZPjNdj9DZV7hale+WG5uVTJEowAkwDYHuyedg6c bOtHuCw28hMo/aqh2aQrEbFrkCVrQQ3CKnZTQda1Q0rILVhVmtSalO7GTM4P5WXx S8v6KCnggwVFym4Qz5xZ4Uv+8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIdkY0sp 6mZmknVsh2T8Hsq+PH4EMB8GA1UdIwQYMBaAFP9JUpPLXxXl0UuswtsQUrLiyCXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFBMi9EMkFCMjkyQzFE OTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZlWFJTNnpDMnhCU3N1TElK Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wbFNrOHRmRmVYUlM2ekMyeEJTc3VMSUpjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUFBMi9EMkFCMjkyQzFEOTkxMUUyQkE1MjlBODYwOEIwMkNEMi9fMGxTazh0ZkZl WFJTNnpDMnhCU3N1TElKY2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ/H2lFvpnaJdquZ2vH/oHGePxQg1+CYhIX1WyfsAj8N+dDPluPZS8sNrc0Ml tKOD25Vdn1GjiCX2jT5BDEELvaRrEdkekniYsRy4jlqfxR4Hdni0vkUsFYBY+yYQ 2shHIiWmSjhZSxvaag0dx8bRHb+fpyKxOiHVQzugI260w0Vzicy9ZEX0cGGICXK9 UrXaat2JYWn9t29izG9IGTsaNmfgVCnmq2CZBRwhw7R1fSeKwglKowsRcWF3SvEN Jw6AhvKesxRyvttI4TCAOy+2+conuf2k1/O9eElivUM2PdqLElS+Y+MdPn3icJE5 Cwu2GaxJL7hr/PNJ9g876TckFw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:39:12 2026 by rpki-client