$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: Rh4J7IuGp5SwxI6kUJ3xo/QF1DK9MZDcvO8UBcJ2w8k= Subject key identifier: B3:42:75:8D:A5:D5:F5:83:52:F8:C5:71:7B:92:2B:AE:8D:60:28:FE Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 04AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 04A1 Signing time: Mon 27 Jul 2026 00:58:13 +0000 Manifest this update: Mon 27 Jul 2026 00:58:13 +0000 Manifest next update: Mon 03 Aug 2026 00:58:13 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: wIluKvliHgneWe8Sn7nuvRjnKnoA1iushSSFZUkZpm0=) 2: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: uD8GePRFSBxxXJ8AP7OzAcQNkEfD5CvwBitNqcupV10=) 3: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cOZek2T+bNDJmdSxWR5ARqOZYYj4cniIid9SflDDcn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:58:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Jul 27 00:58:13 2026 GMT Not After : Aug 3 00:58:13 2026 GMT Subject: CN=6a66ad25-fb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:30:37:b8:32:9a:11:87:55:ac:26:60:ff: 7e:ba:2b:19:0d:d9:3c:58:0d:d5:1a:22:ac:94:7a: 3f:b6:03:43:bb:06:96:58:12:ff:70:c6:eb:f6:49: 1f:3d:57:3f:34:95:f2:6a:e4:9c:b2:ad:a7:c6:56: 8d:c5:d7:e8:26:5d:1b:c3:25:d9:12:64:20:cc:75: 49:fd:b4:10:a1:12:fe:55:81:03:9a:04:11:a6:bb: f2:ca:bf:50:e0:cd:43:ab:db:3c:e1:d4:ea:d4:ff: 96:99:d0:8c:08:c7:9d:68:83:c1:82:35:cf:d8:06: bc:62:32:45:4b:ea:49:8d:a6:27:03:4c:24:b4:99: 03:7b:45:fc:14:f5:10:c2:10:9d:8c:1a:8e:5c:37: 7a:62:bd:40:6b:83:20:63:58:c8:40:10:a0:66:b3: 13:dd:1f:1c:0c:d2:4b:be:73:08:98:70:75:0e:df: a9:8e:80:c0:2f:15:b3:e3:3a:c8:6c:1b:1c:e7:33: 23:70:76:aa:3e:84:26:73:a2:c1:e0:7f:9b:dc:fd: 87:e2:10:b8:da:f1:f2:3d:4d:11:d3:b5:f5:12:91: 98:b5:02:f4:f5:48:e5:90:1a:90:79:16:60:05:ac: 6c:96:58:d8:85:a4:d7:2b:21:4c:0c:42:bd:7c:6e: b5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:42:75:8D:A5:D5:F5:83:52:F8:C5:71:7B:92:2B:AE:8D:60:28:FE X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:85:76:8e:d6:f4:47:28:ab:f8:6a:5a:10:39:97:8f:ba:b0: 68:b1:c6:df:d1:2e:3a:c4:c9:e0:d3:4d:8c:73:3a:79:71:12: 84:dc:e1:a7:54:68:16:e2:a5:a3:12:b8:7a:83:c2:f5:69:af: fd:79:14:26:20:06:f7:00:dc:95:ff:9d:26:26:e4:15:05:6c: 3d:f2:ba:72:bf:35:bb:f8:05:37:87:4d:8e:82:89:7a:32:fd: c8:eb:f6:a5:5a:15:d0:6d:b0:1c:b9:5e:6a:df:18:ad:ae:f2: 35:c4:6c:24:14:83:5c:14:73:6b:ba:61:63:f7:34:67:8c:f6: e0:a0:15:b8:59:42:02:b8:0d:91:8a:67:80:84:27:d7:15:07: 59:63:b3:90:65:c3:dd:cc:03:40:55:dc:41:90:4c:c5:c5:e2: 11:39:f7:cf:98:9e:83:40:1f:ba:75:ea:58:c0:12:c6:a7:03: 36:ab:58:6a:ac:bb:bc:23:57:b7:09:2a:d8:bd:0c:36:2e:11: 33:e3:11:79:ca:a3:6b:9a:10:56:d7:ae:17:0d:5c:d1:6c:59: bc:1d:90:2b:b2:dc:e8:e2:0b:ec:1d:7e:f8:d6:ba:1b:dc:88: 99:47:ca:c0:c0:ad:0e:d7:15:35:7a:74:9d:8a:dd:2f:2f:f3: ee:3f:2d:6a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjYwNzI3MDA1ODEzWhcNMjYwODAzMDA1ODEzWjAYMRYwFAYD VQQDEw02YTY2YWQyNS1mYjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyH0wN7gymhGHVawmYP9+uisZDdk8WA3VGiKslHo/tgNDuwaWWBL/cMbr9kkf PVc/NJXyauScsq2nxlaNxdfoJl0bwyXZEmQgzHVJ/bQQoRL+VYEDmgQRprvyyr9Q 4M1Dq9s84dTq1P+WmdCMCMedaIPBgjXP2Aa8YjJFS+pJjaYnA0wktJkDe0X8FPUQ whCdjBqOXDd6Yr1Aa4MgY1jIQBCgZrMT3R8cDNJLvnMImHB1Dt+pjoDALxWz4zrI bBsc5zMjcHaqPoQmc6LB4H+b3P2H4hC42vHyPU0R07X1EpGYtQL09UjlkBqQeRZg BaxslljYhaTXKyFMDEK9fG61WQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNCdY2l 1fWDUvjFcXuSK66NYCj+MB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk4V2jtb0Ryir+GpaEDmXj7qwaLHG39EuOsTJ4NNNjHM6eXEShNzhp1RoFuKl oxK4eoPC9Wmv/XkUJiAG9wDclf+dJibkFQVsPfK6cr81u/gFN4dNjoKJejL9yOv2 pVoV0G2wHLleat8Yra7yNcRsJBSDXBRza7phY/c0Z4z24KAVuFlCArgNkYpngIQn 1xUHWWOzkGXD3cwDQFXcQZBMxcXiETn3z5ieg0AfunXqWMASxqcDNqtYaqy7vCNX twkq2L0MNi4RM+MRecqja5oQVteuFw1c0WxZvB2QK7Lc6OIL7B1++Na6G9yImUfK wMCtDtcVNXp0nYrdLy/z7j8tag== -----END CERTIFICATE-----Generated at Tue Jul 28 20:14:17 2026 by rpki-client