$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft File: -JbMT1PCpnswRuerKQM9UPSC1Ig.mft (raw, json) Hash identifier: C4AsECleEPm+zSIAxqWQbDKYrfmkXmOF/m4dIZbC7BU= Subject key identifier: 40:25:17:36:40:6E:78:9C:99:58:7E:41:B1:60:31:C5:FD:DB:68:FD Authority key identifier: F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 Certificate issuer: /CN=A91CEF3E/serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Certificate serial: 0F60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft Manifest number: 0F4B Signing time: Tue 28 Jul 2026 17:39:53 +0000 Manifest this update: Tue 28 Jul 2026 17:39:53 +0000 Manifest next update: Tue 04 Aug 2026 17:39:53 +0000 Files and hashes: 1: -JbMT1PCpnswRuerKQM9UPSC1Ig.crl (hash: e9gbdsnYrh5jj3t8LzF5GHCSkLP38/HXhrp0bOYSgmk=) 2: 1D59FA3EADF311E980380735C4F9AE02.roa (hash: 0pDPKVbVvWSeAR338iLPukYfLq9BMpbP9fcDOLwkjEE=) 3: 1D2E7286A6B111E997D5EA57C4F9AE02.roa (hash: QgnZ4sc6Puwjs/s8k5cb77PzqC45+lyxM26KCi/2eRw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:39:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3936 (0xf60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEF3E, serialNumber=F896CC4F53C2A67B3046E7AB29033D50F482D488 Validity Not Before: Jul 28 17:39:53 2026 GMT Not After : Aug 4 17:39:53 2026 GMT Subject: CN=6a68e969-6d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:4e:de:a5:c2:66:29:56:3a:e8:cb:f1:fa: 52:ba:c1:46:f7:77:a0:8d:a3:26:b8:41:b8:c4:d1: b9:02:b3:06:87:50:17:7a:78:1f:6c:d5:b0:31:5b: 0f:ff:46:59:c3:55:bf:b3:bf:9f:2a:fc:2f:10:eb: da:a2:0d:03:14:a4:8d:23:11:c8:4b:6f:e6:7e:59: 2e:d8:e4:98:46:c2:17:43:df:99:b8:08:ca:9c:8e: 6b:24:98:0f:6f:3e:b9:55:22:80:e4:70:d4:a0:25: 5b:85:c7:32:e8:96:1f:10:40:13:be:a1:b2:d7:ac: ff:81:c1:d9:c9:e4:ef:3e:e2:66:c0:71:ea:44:a8: 67:6e:6e:85:ec:93:99:81:0c:24:01:84:0e:61:67: 43:8e:c7:2e:da:4a:6b:b4:b2:41:ad:5e:28:be:c7: 95:5d:97:e4:3a:26:57:05:83:eb:f8:bf:e2:3a:6f: f8:38:75:1d:6f:a3:8b:92:e8:c8:1c:c2:fe:d5:43: 82:a0:ee:b6:b2:05:e6:1f:bf:23:dc:3b:ce:ea:fb: 34:d9:7d:8c:66:82:21:d6:33:6d:75:f9:d6:18:c2: 30:8e:c3:52:3e:2d:fc:ec:8f:0e:e0:14:5b:69:b1: cf:cd:64:5a:12:ad:23:d9:fa:d2:23:37:37:a6:16: 39:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:25:17:36:40:6E:78:9C:99:58:7E:41:B1:60:31:C5:FD:DB:68:FD X509v3 Authority Key Identifier: keyid:F8:96:CC:4F:53:C2:A6:7B:30:46:E7:AB:29:03:3D:50:F4:82:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JbMT1PCpnswRuerKQM9UPSC1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/D254B5C4987B11E983ECCF13C4F9AE02/-JbMT1PCpnswRuerKQM9UPSC1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:03:93:fa:ba:9f:a3:dc:43:cf:ec:86:69:07:f0:4d:d3:95: f4:da:24:8d:c7:f9:71:2d:73:5a:2a:a2:db:7a:cc:60:35:58: 6f:ca:15:32:8d:62:5b:32:5e:f7:3a:22:5c:c7:f4:b1:08:27: af:76:fe:36:0b:50:2f:3f:12:e3:16:c7:e0:b5:6f:91:ed:18: 22:7f:6f:7c:41:e2:9e:fd:cf:84:10:4a:7e:ff:47:74:fc:33: c3:8b:b3:5b:b0:2f:99:40:84:d1:da:b6:ed:1a:54:f5:0f:cc: 2a:06:50:14:93:fa:c9:e0:8a:cb:0a:42:e4:05:89:00:68:be: 0d:f7:05:91:d7:62:83:a5:49:6a:cb:0b:79:da:15:fa:77:ae: ba:2d:98:7b:a1:30:c3:42:0e:67:ef:4c:65:1f:ba:98:1e:11: 70:91:99:d5:b6:b9:df:8a:c5:d8:b5:83:4a:ed:a9:3d:d2:68: d5:9d:91:f8:42:fe:e6:6d:27:9c:20:4e:8c:39:9f:80:8a:4e: ba:97:26:79:41:b6:d7:7c:f6:d7:6d:43:e8:b5:65:5c:b0:eb: f5:a8:1a:6e:a2:2b:f9:7d:33:c0:da:ba:a7:43:4d:e4:a0:41: fd:1b:0e:c9:27:d8:70:18:bc:9b:ba:3c:96:98:99:d6:9b:1b: 53:61:e0:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VGM0UxMTAvBgNVBAUTKEY4OTZDQzRGNTNDMkE2N0IzMDQ2RTdBQjI5MDMzRDUw RjQ4MkQ0ODgwHhcNMjYwNzI4MTczOTUzWhcNMjYwODA0MTczOTUzWjAYMRYwFAYD VQQDEw02YTY4ZTk2OS02ZDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPVO3qXCZilWOujL8fpSusFG93egjaMmuEG4xNG5ArMGh1AXengfbNWwMVsP /0ZZw1W/s7+fKvwvEOvaog0DFKSNIxHIS2/mflku2OSYRsIXQ9+ZuAjKnI5rJJgP bz65VSKA5HDUoCVbhccy6JYfEEATvqGy16z/gcHZyeTvPuJmwHHqRKhnbm6F7JOZ gQwkAYQOYWdDjscu2kprtLJBrV4ovseVXZfkOiZXBYPr+L/iOm/4OHUdb6OLkujI HML+1UOCoO62sgXmH78j3DvO6vs02X2MZoIh1jNtdfnWGMIwjsNSPi387I8O4BRb abHPzWRaEq0j2frSIzc3phY5XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEAlFzZA bnicmVh+QbFgMcX922j9MB8GA1UdIwQYMBaAFPiWzE9TwqZ7MEbnqykDPVD0gtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUYzRS9EMjU0QjVDNDk4 N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Buc3dSdWVyS1FNOVVQU0Mx SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KYk1UMVBDcG5zd1J1ZXJLUU05VVBTQzFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUYzRS9EMjU0QjVDNDk4N0IxMUU5ODNFQ0NGMTNDNEY5QUUwMi8tSmJNVDFQQ3Bu c3dSdWVyS1FNOVVQU0MxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARQOT+rqfo9xDz+yGaQfwTdOV9Nokjcf5cS1zWiqi23rMYDVYb8oVMo1iWzJe 9zoiXMf0sQgnr3b+NgtQLz8S4xbH4LVvke0YIn9vfEHinv3PhBBKfv9HdPwzw4uz W7AvmUCE0dq27RpU9Q/MKgZQFJP6yeCKywpC5AWJAGi+DfcFkddig6VJassLedoV +neuui2Ye6Eww0IOZ+9MZR+6mB4RcJGZ1ba534rF2LWDSu2pPdJo1Z2R+EL+5m0n nCBOjDmfgIpOupcmeUG213z2121D6LVlXLDr9agabqIr+X0zwNq6p0NN5KBB/RsO ySfYcBi8m7o8lpiZ1psbU2HgVQ== -----END CERTIFICATE-----Generated at Wed Jul 29 02:03:57 2026 by rpki-client