$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft File: akXWGoN3DJDQWMdBUx2NnGtnk1o.mft (raw, json) Hash identifier: Sl81SfmS5L9TfBvDui0mPbF7ZstSMEe7BlALsxOYbfg= Subject key identifier: 70:69:2E:59:9D:5E:14:37:30:53:AB:F6:D2:DF:65:ED:66:50:FF:F2 Authority key identifier: 6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A Certificate issuer: /CN=A91D1AC7/serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Certificate serial: 0B2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft Manifest number: 0B0E Signing time: Tue 28 Jul 2026 19:38:01 +0000 Manifest this update: Tue 28 Jul 2026 19:38:00 +0000 Manifest next update: Tue 04 Aug 2026 19:38:00 +0000 Files and hashes: 1: akXWGoN3DJDQWMdBUx2NnGtnk1o.crl (hash: C85I7Tqc4defUkX+ZvNpPQOP+Cj72PbmldPkbeVistg=) 2: 6EE80A72F80A11F0BD0E5DB76F6F56BC.roa (hash: sUHEm0sthEP5Lto5Jyv7yFbAnqT7Ikn9wDCxjmSd04U=) 3: 6E71C43EF80A11F0BD0E5DB76F6F56BC.roa (hash: EAWXNHbw72NGXN5onuQ/WOahqrbdihDLckXMN5kD8CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2863 (0xb2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1AC7, serialNumber=6A45D61A83770C90D058C741531D8D9C6B67935A Validity Not Before: Jul 28 19:38:00 2026 GMT Not After : Aug 4 19:38:00 2026 GMT Subject: CN=6a690518-f62e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:0f:a1:80:48:6b:1f:fb:98:4f:8c:76:42: 6f:8d:09:c9:3a:b6:f6:f3:50:a2:b4:45:c9:97:42: 87:a5:39:40:20:5c:38:78:3f:0b:b1:10:e8:18:56: 00:5f:d8:9b:c9:15:b9:cf:f8:c8:93:96:24:78:16: 4d:90:c7:da:4d:38:ba:e2:38:59:cd:5f:14:d2:72: cd:6c:0c:e4:4a:9d:cb:49:f1:c9:53:7b:b1:0d:61: 18:f2:a5:83:fa:c5:98:e2:4a:1a:6d:a0:a3:ca:59: 0d:e2:72:f3:bb:6e:ac:14:e1:b9:b9:c5:91:a0:8d: 64:ae:2a:23:8f:d2:08:f6:fc:f2:d0:57:7b:e1:8d: 0e:b1:79:02:f8:31:1e:84:75:21:18:43:c6:cc:71: 0e:e3:37:29:cc:c5:90:a3:67:7f:a9:04:83:e8:d4: 58:7d:f2:25:27:6f:48:74:94:fd:a3:d3:c0:c7:eb: 97:59:77:ce:1a:1a:c9:db:23:48:a2:b2:ba:fc:64: 72:03:43:dd:f2:c4:32:d2:03:bb:69:1c:85:17:cd: b6:7f:bd:7f:8e:98:db:0d:f7:ca:57:1c:14:03:74: ed:a6:2f:b0:59:bc:92:0d:f3:e1:0f:1f:01:61:f1: 75:3b:7b:80:00:81:75:39:74:0b:4c:0b:01:d9:f7: 8a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:69:2E:59:9D:5E:14:37:30:53:AB:F6:D2:DF:65:ED:66:50:FF:F2 X509v3 Authority Key Identifier: keyid:6A:45:D6:1A:83:77:0C:90:D0:58:C7:41:53:1D:8D:9C:6B:67:93:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/akXWGoN3DJDQWMdBUx2NnGtnk1o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1AC7/81A4C4D66E4311EA949D9922C4F9AE02/akXWGoN3DJDQWMdBUx2NnGtnk1o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:1d:bd:9c:4e:3f:bf:78:31:e6:22:49:4a:ed:05:9d:f5:a6: 1d:2f:54:61:ca:fb:76:4a:7b:5f:b3:34:a0:bb:81:cc:a1:03: b1:1a:62:e6:e5:b5:43:d1:44:64:b7:b6:07:3a:47:52:e1:f8: 4d:cb:a5:a2:0e:15:32:d7:02:1c:48:66:de:2b:b2:34:45:64: 6b:22:1c:c5:db:5a:4c:af:28:89:1b:4b:06:55:78:bf:16:56: 81:96:2e:94:a4:63:86:f7:25:7a:b5:d9:9e:b2:53:b5:65:05: c8:ab:c2:34:33:1e:d4:39:22:ad:bb:50:d5:17:85:a5:39:32: f2:23:72:3f:10:95:ec:26:e1:a2:c6:0d:9a:54:43:54:d6:47: ac:cd:12:ab:60:b4:a5:f1:74:33:45:6c:9f:e6:81:8b:df:69: da:55:66:aa:bb:b3:53:14:57:f7:55:18:1c:00:93:ff:44:81: 9d:b3:ff:93:2a:b9:b8:6b:85:05:e0:d4:72:f8:68:c5:12:43: 28:e4:0a:ad:d1:ee:ee:fb:89:27:25:82:fa:5b:c1:3f:55:52: 0c:7f:6f:cb:fc:10:6e:2e:11:6a:0a:50:38:dc:11:ff:da:b8: d5:b4:91:d8:d9:18:b0:6a:4c:8e:93:fd:fe:25:69:2e:41:22: b5:c2:c2:a2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBQzcxMTAvBgNVBAUTKDZBNDVENjFBODM3NzBDOTBEMDU4Qzc0MTUzMUQ4RDlD NkI2NzkzNUEwHhcNMjYwNzI4MTkzODAwWhcNMjYwODA0MTkzODAwWjAYMRYwFAYD VQQDEw02YTY5MDUxOC1mNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uYPoYBIax/7mE+MdkJvjQnJOrb281CitEXJl0KHpTlAIFw4eD8LsRDoGFYA X9ibyRW5z/jIk5YkeBZNkMfaTTi64jhZzV8U0nLNbAzkSp3LSfHJU3uxDWEY8qWD +sWY4koabaCjylkN4nLzu26sFOG5ucWRoI1kriojj9II9vzy0Fd74Y0OsXkC+DEe hHUhGEPGzHEO4zcpzMWQo2d/qQSD6NRYffIlJ29IdJT9o9PAx+uXWXfOGhrJ2yNI orK6/GRyA0Pd8sQy0gO7aRyFF822f71/jpjbDffKVxwUA3Ttpi+wWbySDfPhDx8B YfF1O3uAAIF1OXQLTAsB2feKdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHBpLlmd XhQ3MFOr9tLfZe1mUP/yMB8GA1UdIwQYMBaAFGpF1hqDdwyQ0FjHQVMdjZxrZ5Na MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUFDNy84MUE0QzRENjZF NDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RKRFFXTWRCVXgyTm5HdG5r MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrWFdHb04zREpEUVdNZEJVeDJObkd0bmsxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUFDNy84MUE0QzRENjZFNDMxMUVBOTQ5RDk5MjJDNEY5QUUwMi9ha1hXR29OM0RK RFFXTWRCVXgyTm5HdG5rMW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQx29nE4/v3gx5iJJSu0FnfWmHS9UYcr7dkp7X7M0oLuBzKEDsRpi5uW1Q9FE ZLe2BzpHUuH4Tculog4VMtcCHEhm3iuyNEVkayIcxdtaTK8oiRtLBlV4vxZWgZYu lKRjhvclerXZnrJTtWUFyKvCNDMe1DkirbtQ1ReFpTky8iNyPxCV7CbhosYNmlRD VNZHrM0Sq2C0pfF0M0Vsn+aBi99p2lVmqruzUxRX91UYHACT/0SBnbP/kyq5uGuF BeDUcvhoxRJDKOQKrdHu7vuJJyWC+lvBP1VSDH9vy/wQbi4RagpQONwR/9q41bSR 2NkYsGpMjpP9/iVpLkEitcLCog== -----END CERTIFICATE-----Generated at Tue Jul 28 20:44:13 2026 by rpki-client