$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: 9RJqheMn5XEXDDDnkPfeHW27zM6srmH+5srBHdkYFcA= Subject key identifier: 32:37:64:6D:3E:62:EC:1F:B1:40:CC:12:6B:E7:6B:B6:E2:0C:39:D0 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 01E6 Signing time: Mon 27 Jul 2026 05:09:55 +0000 Manifest this update: Mon 27 Jul 2026 05:09:54 +0000 Manifest next update: Mon 03 Aug 2026 05:09:54 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: 7F5jB/mh9Vbr4cNE0ycnWegKn6g7CBrRvCpxv62BTjA=) 2: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: PppVk2NI0XPWKna+ZtR6ofXLD7gkTcUleObVM6K34rE=) 3: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: mmPmljEgq/UT3GHcfHd5W8JqbEjou9e+RRjhVJG9hpU=) 4: BF8E316480F311F1948786A865A30FBC.roa (hash: PeNghzeUXrf6ti+HRsaZOotNYnd+fY4xMOkVpf/Gtss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Jul 27 05:09:54 2026 GMT Not After : Aug 3 05:09:54 2026 GMT Subject: CN=6a66e823-f31a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:4a:25:92:89:90:bc:64:53:6e:2a:8f:53: 05:41:89:1a:e4:27:d5:16:33:4d:76:6f:25:12:b7: 3f:9a:a2:34:08:dc:54:07:79:1f:df:1c:0c:4a:22: 9f:ae:74:a5:b6:fd:40:1a:cc:0d:10:ae:35:8d:19: fb:3f:78:3f:8c:1e:24:2e:6a:0d:cf:39:8b:ef:78: 5b:93:07:6f:1a:ef:c1:7c:5d:c4:9b:b9:9c:d7:5d: a7:65:3a:9c:d6:01:05:b2:29:42:33:c4:6e:a4:eb: 9b:35:53:97:21:f4:57:81:ad:c5:65:a3:d9:ff:57: d6:bb:0a:46:12:3d:00:ad:d2:66:b2:57:89:07:66: e4:92:8b:3d:dd:8f:4b:9f:c8:63:dc:56:ee:9d:51: 00:0b:90:f2:33:5c:21:7d:7b:e3:d0:4a:70:50:a1: 0e:30:8a:6b:c6:f7:31:b7:0f:cb:04:d0:d4:20:51: 30:b9:e2:d6:c0:da:48:49:5e:ea:7c:af:83:41:ac: 2e:92:c8:2a:78:30:28:fe:5f:82:0b:83:a0:44:7a: 06:16:a1:9d:34:9b:d5:b2:9d:3c:c4:e6:32:c0:bd: b6:2e:c5:15:43:c0:da:d4:49:24:63:e8:85:02:92: bc:14:c0:a6:33:09:b3:94:ce:a4:42:68:24:0c:a4: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:37:64:6D:3E:62:EC:1F:B1:40:CC:12:6B:E7:6B:B6:E2:0C:39:D0 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:15:b8:ed:f0:d3:0f:53:50:2e:eb:65:a7:5f:ad:61:8d:b2: aa:81:2a:c7:30:5c:f1:0d:e1:16:5a:8d:97:29:f2:b9:70:bc: 15:1b:28:5b:92:1c:17:01:ae:5f:ea:90:42:a6:66:cd:36:08: 1a:7d:62:48:b5:02:42:41:bc:b0:e0:3a:fc:7e:4c:78:11:75: 59:5b:4a:64:61:27:a4:d3:5e:01:c9:02:b3:16:ca:82:d6:57: a7:08:00:f9:d8:83:a2:e6:6e:32:41:b9:2d:af:92:d0:a7:af: 96:8d:19:4e:14:b5:39:f5:56:ce:1e:a1:ca:61:43:cb:73:0d: b8:83:3c:df:a2:9a:31:69:d6:cf:69:81:7e:54:48:2e:94:36: 72:79:2f:85:20:27:d9:c2:ab:5d:40:47:6d:a1:af:35:4c:5d: 47:dc:c5:bc:05:01:91:31:5d:95:2b:f5:44:ad:ad:d8:fe:68: 31:1c:7c:c0:c7:53:83:ab:34:55:b3:19:4c:00:cd:61:51:a8: cb:4e:9a:4c:61:bc:e6:f2:4b:2a:08:ea:7e:50:4d:00:d6:2d: 5e:dc:02:b2:36:ba:3e:a6:f6:ff:3b:db:13:3d:3f:56:be:5a: fc:a6:ae:eb:d0:f6:e9:00:a3:30:aa:21:52:46:eb:9f:92:e3: 99:61:51:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjYwNzI3MDUwOTU0WhcNMjYwODAzMDUwOTU0WjAYMRYwFAYD VQQDEw02YTY2ZTgyMy1mMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmRJKJZKJkLxkU24qj1MFQYka5CfVFjNNdm8lErc/mqI0CNxUB3kf3xwMSiKf rnSltv1AGswNEK41jRn7P3g/jB4kLmoNzzmL73hbkwdvGu/BfF3Em7mc112nZTqc 1gEFsilCM8RupOubNVOXIfRXga3FZaPZ/1fWuwpGEj0ArdJmsleJB2bkkos93Y9L n8hj3FbunVEAC5DyM1whfXvj0EpwUKEOMIprxvcxtw/LBNDUIFEwueLWwNpISV7q fK+DQawuksgqeDAo/l+CC4OgRHoGFqGdNJvVsp08xOYywL22LsUVQ8Da1EkkY+iF ApK8FMCmMwmzlM6kQmgkDKRouQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDI3ZG0+ YuwfsUDMEmvna7biDDnQMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlBW47fDTD1NQLutlp1+tYY2yqoEqxzBc8Q3hFlqNlynyuXC8FRsoW5IcFwGu X+qQQqZmzTYIGn1iSLUCQkG8sOA6/H5MeBF1WVtKZGEnpNNeAckCsxbKgtZXpwgA +diDouZuMkG5La+S0Kevlo0ZThS1OfVWzh6hymFDy3MNuIM836KaMWnWz2mBflRI LpQ2cnkvhSAn2cKrXUBHbaGvNUxdR9zFvAUBkTFdlSv1RK2t2P5oMRx8wMdTg6s0 VbMZTADNYVGoy06aTGG85vJLKgjqflBNANYtXtwCsja6Pqb2/zvbEz0/Vr5a/Kau 69D26QCjMKohUkbrn5LjmWFRlg== -----END CERTIFICATE-----Generated at Wed Jul 29 03:37:13 2026 by rpki-client