$ rpki-client -vvf rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.mft File: aF3dgfRvhIHFdwGF8Id0wf5N1Tc.mft (raw, json) Hash identifier: UbKQ5VTFlkA+T6GT7OxTVe/X2SOjw4bAEIeDI+DRwqA= Subject key identifier: 12:A4:F4:5C:1D:0F:3C:BB:80:E1:8E:A3:E4:AE:2E:47:CF:3F:E1:23 Authority key identifier: 68:5D:DD:81:F4:6F:84:81:C5:77:01:85:F0:87:74:C1:FE:4D:D5:37 Certificate issuer: /CN=A91D489F/serialNumber=685DDD81F46F8481C5770185F08774C1FE4DD537 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.mft Manifest number: 23 Signing time: Mon 27 Jul 2026 11:14:54 +0000 Manifest this update: Mon 27 Jul 2026 11:14:53 +0000 Manifest next update: Mon 03 Aug 2026 11:14:53 +0000 Files and hashes: 1: aF3dgfRvhIHFdwGF8Id0wf5N1Tc.crl (hash: QPNqJKUqGVoBojxTLEfyit/niowWiyfce1CpZ6oKIVQ=) 2: 5B4594F055C311F188536739A5833773.roa (hash: d4awFYfEMxrhM0/isi9cNnvYO5k9UvHtN05p4Ww23bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.crl rsync://rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D489F, serialNumber=685DDD81F46F8481C5770185F08774C1FE4DD537 Validity Not Before: Jul 27 11:14:53 2026 GMT Not After : Aug 3 11:14:53 2026 GMT Subject: CN=6a673dad-0ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:cc:ec:ab:70:14:d9:26:64:08:21:bf:c3:0b: 8b:68:56:51:ad:cf:e8:d6:28:e9:14:b8:9f:70:a6: d0:33:74:29:f4:ce:9a:8b:77:bb:1c:73:5f:5d:29: ed:e3:a3:04:f8:2a:06:bb:c8:e2:37:4f:36:96:f1: b4:3c:0c:da:e4:f4:bd:d4:98:ab:ff:6f:44:d3:95: 18:2b:e2:29:7d:3e:4a:3b:7e:98:e6:7f:16:8f:a4: e9:9e:19:05:80:ef:f9:20:00:2c:4b:c0:2b:f2:5d: c9:10:19:a0:75:0c:eb:47:10:0a:b8:01:81:1b:59: 7c:09:3a:59:33:93:48:68:9e:64:e0:08:02:5c:29: b5:63:11:45:d9:18:69:ae:f7:ec:b6:0c:ad:f8:43: 7a:de:7e:47:26:db:89:b0:07:6b:cf:0a:49:77:fc: ab:a1:63:d4:c8:41:06:74:3a:f5:8b:4f:da:17:4c: a4:eb:6e:cb:4d:a8:ab:fc:2f:c9:b5:ea:c6:d6:b6: 34:4d:e7:4b:2f:8f:6e:51:a3:43:35:6f:53:19:a7: 2f:e9:fe:a6:1a:53:76:ea:04:42:a6:50:29:45:49: 12:d5:72:69:75:39:f7:75:52:b1:a7:dc:3a:35:b1: e1:e9:36:c6:05:22:a6:81:d9:55:df:59:d9:43:5d: 2f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A4:F4:5C:1D:0F:3C:BB:80:E1:8E:A3:E4:AE:2E:47:CF:3F:E1:23 X509v3 Authority Key Identifier: keyid:68:5D:DD:81:F4:6F:84:81:C5:77:01:85:F0:87:74:C1:FE:4D:D5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D489F/63E088FA55C211F1B4E63802A5833773/aF3dgfRvhIHFdwGF8Id0wf5N1Tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7f:35:07:c3:d1:37:73:36:a0:09:8d:e2:6f:c0:cb:25:43: 6d:95:88:2a:d1:0b:f4:41:c5:a9:fd:2b:80:a0:ff:9d:32:b9: 74:44:ec:6e:16:1b:28:59:89:8d:eb:df:90:fa:b1:88:a1:c8: 32:8a:e3:3e:10:ac:2b:d5:34:f4:dc:86:16:ba:4b:96:47:c3: 34:1b:82:33:3c:8d:51:12:b9:25:04:76:fd:c7:27:60:cc:a8: 3f:1b:18:40:d0:ca:91:68:55:10:70:ef:c7:db:52:75:70:a8: e9:e2:a1:2e:53:34:59:a7:fa:c8:d0:51:7d:34:d3:b4:f7:50: 8f:6a:60:3c:e7:3a:21:2e:5c:a8:f3:1e:13:12:84:0b:df:1f: 5c:20:c0:c7:87:80:40:19:1b:19:8f:05:91:16:07:88:18:f4: eb:e5:db:a7:42:9c:4e:89:68:9e:f6:83:6f:08:87:12:84:65: 2e:f3:de:68:e7:03:95:fc:62:81:53:da:c4:20:92:bc:6e:bb: ca:12:de:8e:96:05:95:56:79:f0:4e:fa:2f:af:0c:87:57:88: e1:34:4a:e6:50:34:b4:a8:c2:93:52:07:82:ae:5b:96:fc:da: 59:1e:a8:72:75:5f:5b:c0:bb:21:05:d1:72:92:a3:d3:a9:b1: 10:f7:5c:49 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDg5RjExMC8GA1UEBRMoNjg1REREODFGNDZGODQ4MUM1NzcwMTg1RjA4Nzc0QzFG RTRERDUzNzAeFw0yNjA3MjcxMTE0NTNaFw0yNjA4MDMxMTE0NTNaMBgxFjAUBgNV BAMTDTZhNjczZGFkLTBhZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvzOyrcBTZJmQIIb/DC4toVlGtz+jWKOkUuJ9wptAzdCn0zpqLd7scc19dKe3j owT4Kga7yOI3TzaW8bQ8DNrk9L3UmKv/b0TTlRgr4il9Pko7fpjmfxaPpOmeGQWA 7/kgACxLwCvyXckQGaB1DOtHEAq4AYEbWXwJOlkzk0honmTgCAJcKbVjEUXZGGmu 9+y2DK34Q3refkcm24mwB2vPCkl3/KuhY9TIQQZ0OvWLT9oXTKTrbstNqKv8L8m1 6sbWtjRN50svj25Ro0M1b1MZpy/p/qYaU3bqBEKmUClFSRLVcml1Ofd1UrGn3Do1 seHpNsYFIqaB2VXfWdlDXS+VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEqT0XB0P PLuA4Y6j5K4uR88/4SMwHwYDVR0jBBgwFoAUaF3dgfRvhIHFdwGF8Id0wf5N1Tcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0ODlGLzYzRTA4OEZBNTVD MjExRjFCNEU2MzgwMkE1ODMzNzczL2FGM2RnZlJ2aElIRmR3R0Y4SWQwd2Y1TjFU Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYUYzZGdmUnZoSUhGZHdHRjhJZDB3ZjVOMVRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0 ODlGLzYzRTA4OEZBNTVDMjExRjFCNEU2MzgwMkE1ODMzNzczL2FGM2RnZlJ2aElI RmR3R0Y4SWQwd2Y1TjFUYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCXfzUHw9E3czagCY3ib8DLJUNtlYgq0Qv0QcWp/SuAoP+dMrl0ROxuFhsoWYmN 69+Q+rGIocgyiuM+EKwr1TT03IYWukuWR8M0G4IzPI1RErklBHb9xydgzKg/GxhA 0MqRaFUQcO/H21J1cKjp4qEuUzRZp/rI0FF9NNO091CPamA85zohLlyo8x4TEoQL 3x9cIMDHh4BAGRsZjwWRFgeIGPTr5dunQpxOiWie9oNvCIcShGUu895o5wOV/GKB U9rEIJK8brvKEt6OlgWVVnnwTvovrwyHV4jhNErmUDS0qMKTUgeCrluW/NpZHqhy dV9bwLshBdFykqPTqbEQ91xJ -----END CERTIFICATE-----Generated at Wed Jul 29 00:53:16 2026 by rpki-client