$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft File: df43qD7agAphAmCFh-30CJ2CQOA.mft (raw, json) Hash identifier: WmbsYAQV+jY0mmgqt8VePtJzUIldBk6GCkKPaSa/oyY= Subject key identifier: 44:5A:DA:05:F6:72:CE:17:1A:E0:A8:A2:53:2F:7C:56:B5:DA:B8:1A Authority key identifier: 75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 Certificate issuer: /CN=A91DC7AA/serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft Manifest number: EC Signing time: Mon 27 Jul 2026 08:34:21 +0000 Manifest this update: Mon 27 Jul 2026 08:34:20 +0000 Manifest next update: Mon 03 Aug 2026 08:34:20 +0000 Files and hashes: 1: df43qD7agAphAmCFh-30CJ2CQOA.crl (hash: hE339WSdQdIjYHXAajzzekcNbEJX1rwGBsAUICyYDkI=) 2: A7C7EF962A8911F09526D35BC4F9AE02.roa (hash: HcYhHFFcvCKuaGxFRTIVt3Z+Wah4d0SujZ+rvqoNWCE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC7AA, serialNumber=75FE37A83EDA800A6102608587EDF4089D8240E0 Validity Not Before: Jul 27 08:34:20 2026 GMT Not After : Aug 3 08:34:20 2026 GMT Subject: CN=6a67180d-7a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:26:18:16:32:c9:87:a7:30:0f:20:31:f8: 82:bd:57:2b:0d:a3:d4:f1:f7:5f:f9:4f:bf:66:43: bc:8d:79:c0:99:b9:a6:28:c1:68:7f:9f:f1:e4:12: 94:87:34:15:ce:b2:79:86:fa:85:56:31:5b:e6:f4: dc:63:f9:66:f2:b8:3a:99:e6:79:11:21:8a:23:91: df:18:0f:ff:48:5e:c8:ba:04:a5:83:9c:85:7e:61: d1:e1:48:78:26:63:91:b4:04:17:d3:6d:43:4d:ea: 41:bc:59:57:5a:ad:6d:4c:57:e9:0c:55:2c:e2:e2: 8f:b9:d5:f4:c2:ce:19:17:51:b4:c6:b9:b3:fd:6f: 63:70:2e:4f:39:f7:2c:cf:05:4b:c3:b6:9f:c4:7d: a5:2c:1b:0c:8c:ac:37:0c:15:c5:aa:38:ac:84:9d: 85:5b:f5:cd:2e:b5:bb:99:f8:91:eb:ed:d3:ed:20: 21:72:10:69:45:c4:75:12:6c:8b:f0:cf:51:e2:70: da:f5:21:bf:8f:2a:ba:6b:65:a1:2c:46:ce:b8:5d: 1d:2c:80:c8:61:10:a9:86:5a:a2:43:9e:0a:fd:83: dc:79:a9:64:48:4b:e0:90:5e:47:80:db:18:77:b4: 06:db:7e:e3:fd:74:2d:c4:1d:b2:d4:e2:3a:61:4b: 59:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5A:DA:05:F6:72:CE:17:1A:E0:A8:A2:53:2F:7C:56:B5:DA:B8:1A X509v3 Authority Key Identifier: keyid:75:FE:37:A8:3E:DA:80:0A:61:02:60:85:87:ED:F4:08:9D:82:40:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/df43qD7agAphAmCFh-30CJ2CQOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC7AA/D22EDA342A8811F0A30D9159C4F9AE02/df43qD7agAphAmCFh-30CJ2CQOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:14:67:41:de:2b:f8:0a:29:59:3c:50:b6:f6:03:8c:ee:cc: 25:48:d0:f2:61:92:13:45:84:68:2f:6c:1a:e4:f4:1d:a3:97: 29:21:20:71:53:aa:d4:da:ac:46:72:c6:1d:7e:d4:fe:41:7d: 28:58:4a:b1:28:db:6b:8f:df:d8:32:ff:26:2b:da:a2:17:d3: 2b:63:f3:2e:0a:61:0e:96:2b:de:70:39:a0:c3:32:57:1d:08: 89:5e:25:1c:ff:a2:47:0d:7c:dd:78:ec:90:82:56:9a:7c:c4: a2:d2:30:0c:de:37:92:ed:a5:7c:9b:5b:1a:e6:33:b5:4e:f3: a3:a9:95:47:2b:db:92:5d:e3:e8:10:e0:14:c5:b1:72:03:9f: 0f:44:3d:1b:37:83:a0:1d:bd:f8:10:91:dc:20:3a:2d:2c:53: 11:f3:03:e7:7f:fd:de:fe:d4:82:0b:04:bf:24:dc:b8:68:d7: e1:6e:55:bb:08:c9:24:9a:ae:c3:bc:d0:07:78:dc:e7:d8:6c: 63:75:00:88:78:10:0d:bd:c9:6e:9d:bf:25:7e:55:27:c7:b4: 19:b8:76:7c:1e:75:a9:27:80:47:51:cf:9d:20:cd:05:b9:27: 77:4c:a4:99:e2:ec:c1:71:06:c7:ad:8b:72:1d:d1:ac:38:1f: 54:0e:a4:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM3QUExMTAvBgNVBAUTKDc1RkUzN0E4M0VEQTgwMEE2MTAyNjA4NTg3RURGNDA4 OUQ4MjQwRTAwHhcNMjYwNzI3MDgzNDIwWhcNMjYwODAzMDgzNDIwWjAYMRYwFAYD VQQDEw02YTY3MTgwZC03YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dImGBYyyYenMA8gMfiCvVcrDaPU8fdf+U+/ZkO8jXnAmbmmKMFof5/x5BKU hzQVzrJ5hvqFVjFb5vTcY/lm8rg6meZ5ESGKI5HfGA//SF7IugSlg5yFfmHR4Uh4 JmORtAQX021DTepBvFlXWq1tTFfpDFUs4uKPudX0ws4ZF1G0xrmz/W9jcC5POfcs zwVLw7afxH2lLBsMjKw3DBXFqjishJ2FW/XNLrW7mfiR6+3T7SAhchBpRcR1EmyL 8M9R4nDa9SG/jyq6a2WhLEbOuF0dLIDIYRCphlqiQ54K/YPcealkSEvgkF5HgNsY d7QG237j/XQtxB2y1OI6YUtZWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERa2gX2 cs4XGuCoolMvfFa12rgaMB8GA1UdIwQYMBaAFHX+N6g+2oAKYQJghYft9AidgkDg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzdBQS9EMjJFREEzNDJB ODgxMUYwQTMwRDkxNTlDNEY5QUUwMi9kZjQzcUQ3YWdBcGhBbUNGaC0zMENKMkNR T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmNDNxRDdhZ0FwaEFtQ0ZoLTMwQ0oyQ1FPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzdBQS9EMjJFREEzNDJBODgxMUYwQTMwRDkxNTlDNEY5QUUwMi9kZjQzcUQ3YWdB cGhBbUNGaC0zMENKMkNRT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbxRnQd4r+AopWTxQtvYDjO7MJUjQ8mGSE0WEaC9sGuT0HaOXKSEgcVOq1Nqs RnLGHX7U/kF9KFhKsSjba4/f2DL/JivaohfTK2PzLgphDpYr3nA5oMMyVx0IiV4l HP+iRw183XjskIJWmnzEotIwDN43ku2lfJtbGuYztU7zo6mVRyvbkl3j6BDgFMWx cgOfD0Q9GzeDoB29+BCR3CA6LSxTEfMD53/93v7UggsEvyTcuGjX4W5VuwjJJJqu w7zQB3jc59hsY3UAiHgQDb3Jbp2/JX5VJ8e0Gbh2fB51qSeAR1HPnSDNBbknd0yk meLswXEGx62Lch3RrDgfVA6kAg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:08 2026 by rpki-client