$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft File: 4JI7Cl99XGi66s5BQV9CpSDXSyo.mft (raw, json) Hash identifier: KLlNEiXsO5D44yiSwtJqbBjAneyxKiTLs7gAQj3ZaQc= Subject key identifier: FB:C9:E2:46:A2:40:C3:4C:75:7B:3B:F8:21:7B:A9:98:B3:C9:C7:64 Authority key identifier: E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A Certificate issuer: /CN=A91D9E49/serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Certificate serial: 0BF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft Manifest number: 0BE7 Signing time: Sun 26 Jul 2026 19:19:34 +0000 Manifest this update: Sun 26 Jul 2026 19:19:34 +0000 Manifest next update: Sun 02 Aug 2026 19:19:34 +0000 Files and hashes: 1: 4JI7Cl99XGi66s5BQV9CpSDXSyo.crl (hash: 4Z289oZyKoV9w21NXLjthJbeqRXCthJx7xRhl+Va6K0=) 2: 4CC0341641A311EABAADCE0AC4F9AE02.roa (hash: K1S8Q65Z3w1SElyF5atmBbQ9pOqRtecrW95mrmJVLwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3057 (0xbf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9E49, serialNumber=E0923B0A5F7D5C68BAEACE41415F42A520D74B2A Validity Not Before: Jul 26 19:19:34 2026 GMT Not After : Aug 2 19:19:34 2026 GMT Subject: CN=6a665dc6-e986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:09:9f:36:55:97:01:16:8d:2a:0f:2f:1a:b1: 60:be:fa:55:f6:f2:7e:44:6c:20:83:a6:4f:0e:a2: bd:eb:c6:d0:b5:32:2b:19:06:e4:22:28:9d:19:8d: dd:6c:3a:dd:6d:13:14:bc:e3:20:e2:93:33:77:d8: 97:f1:4d:0e:b0:a0:ca:44:28:86:80:3c:cf:c8:83: 26:78:2a:85:af:c8:75:20:a8:6f:3b:03:0b:43:6c: 06:cb:49:7a:5b:f9:f7:2c:ae:1e:ef:12:2e:44:66: 76:f9:bf:69:70:53:da:c8:96:eb:f8:4c:2d:99:6a: 89:03:1f:59:e3:67:16:fc:d4:3f:0c:ed:ad:94:9d: 15:a8:53:7a:c6:ee:d5:77:13:fd:6d:50:07:9a:c2: 4f:81:70:98:dc:c4:c5:5f:6a:5b:3f:cd:55:f4:44: 18:b8:5f:d5:9b:dc:4f:a8:0c:5a:dc:92:75:13:e9: 50:5b:49:40:37:ea:83:f4:6e:b5:a5:54:f6:13:5b: 28:c3:20:06:9f:f0:3a:1f:fd:94:8c:33:b1:f4:a0: fd:d4:94:f6:84:0a:0b:f1:35:1e:61:c7:dc:b5:19: f7:a0:f1:aa:72:e5:22:e2:94:55:17:e3:2e:ec:66: 1d:2a:06:89:77:5e:55:07:0d:89:b4:7b:d6:24:07: e7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C9:E2:46:A2:40:C3:4C:75:7B:3B:F8:21:7B:A9:98:B3:C9:C7:64 X509v3 Authority Key Identifier: keyid:E0:92:3B:0A:5F:7D:5C:68:BA:EA:CE:41:41:5F:42:A5:20:D7:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JI7Cl99XGi66s5BQV9CpSDXSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9E49/04049D0841A211EA9F269587C4F9AE02/4JI7Cl99XGi66s5BQV9CpSDXSyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:e3:ce:25:45:26:d1:c3:76:a0:25:7b:86:d0:51:63:52:db: c4:ad:3e:cd:9d:df:51:a9:ce:ad:7b:fa:19:17:f0:86:9c:c2: 0f:34:79:aa:a3:f2:d1:c8:44:26:ab:71:82:1d:14:e1:ec:8a: 47:89:28:23:2f:79:6c:3b:c4:9b:b9:df:82:9b:67:cf:b1:fc: e7:9a:11:1e:85:d3:11:72:09:92:7f:6b:a1:a1:fa:fe:be:f4: 55:64:0f:b4:6a:3d:78:e3:8e:dd:9d:06:06:ba:bb:0a:bd:db: ad:12:0b:dd:e1:c8:ef:94:51:50:08:ac:88:d4:bf:3a:fb:79: 65:70:ee:e4:d5:5f:b9:ff:ca:71:30:81:d3:43:e9:1d:9a:81: 09:d6:79:96:0f:33:df:48:fb:df:46:18:92:bd:ca:bd:d9:1d: 8d:15:23:0a:fd:e0:ad:fd:d6:8f:61:21:3f:f8:9f:11:6b:4b: ca:7c:27:28:76:ba:22:f5:36:f1:a7:e5:86:03:3b:38:b0:cb: cc:cb:23:a2:c2:59:ca:19:db:bb:11:b5:32:8a:c9:df:7c:79: 8f:56:53:5f:72:8c:3d:3e:22:cd:3c:ca:ce:69:9b:7a:9a:87: ac:5c:39:ff:fd:9e:f6:e8:96:40:ed:48:7e:66:34:7b:1c:21: 93:3a:ff:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFNDkxMTAvBgNVBAUTKEUwOTIzQjBBNUY3RDVDNjhCQUVBQ0U0MTQxNUY0MkE1 MjBENzRCMkEwHhcNMjYwNzI2MTkxOTM0WhcNMjYwODAyMTkxOTM0WjAYMRYwFAYD VQQDEw02YTY2NWRjNi1lOTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAmfNlWXARaNKg8vGrFgvvpV9vJ+RGwgg6ZPDqK968bQtTIrGQbkIiidGY3d bDrdbRMUvOMg4pMzd9iX8U0OsKDKRCiGgDzPyIMmeCqFr8h1IKhvOwMLQ2wGy0l6 W/n3LK4e7xIuRGZ2+b9pcFPayJbr+EwtmWqJAx9Z42cW/NQ/DO2tlJ0VqFN6xu7V dxP9bVAHmsJPgXCY3MTFX2pbP81V9EQYuF/Vm9xPqAxa3JJ1E+lQW0lAN+qD9G61 pVT2E1sowyAGn/A6H/2UjDOx9KD91JT2hAoL8TUeYcfctRn3oPGqcuUi4pRVF+Mu 7GYdKgaJd15VBw2JtHvWJAfnDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvJ4kai QMNMdXs7+CF7qZizycdkMB8GA1UdIwQYMBaAFOCSOwpffVxouurOQUFfQqUg10sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUU0OS8wNDA0OUQwODQx QTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhHaTY2czVCUVY5Q3BTRFhT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRKSTdDbDk5WEdpNjZzNUJRVjlDcFNEWFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUU0OS8wNDA0OUQwODQxQTIxMUVBOUYyNjk1ODdDNEY5QUUwMi80Skk3Q2w5OVhH aTY2czVCUVY5Q3BTRFhTeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcePOJUUm0cN2oCV7htBRY1LbxK0+zZ3fUanOrXv6GRfwhpzCDzR5qqPy0chE Jqtxgh0U4eyKR4koIy95bDvEm7nfgptnz7H855oRHoXTEXIJkn9roaH6/r70VWQP tGo9eOOO3Z0GBrq7Cr3brRIL3eHI75RRUAisiNS/Ovt5ZXDu5NVfuf/KcTCB00Pp HZqBCdZ5lg8z30j730YYkr3KvdkdjRUjCv3grf3Wj2EhP/ifEWtLynwnKHa6IvU2 8aflhgM7OLDLzMsjosJZyhnbuxG1MorJ33x5j1ZTX3KMPT4izTzKzmmbepqHrFw5 //2e9uiWQO1IfmY0exwhkzr/dQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:23 2026 by rpki-client