$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft File: 1AI0WEr2BZHzfdP7on68uFzHZWo.mft (raw, json) Hash identifier: IZFG4sIu0C67U09Q5hwr2MupFhRuAUCusxDGCxdQvWg= Subject key identifier: 10:CF:91:30:47:61:9D:4D:38:8C:59:2F:B2:33:21:18:2D:CF:44:CB Authority key identifier: D4:02:34:58:4A:F6:05:91:F3:7D:D3:FB:A2:7E:BC:B8:5C:C7:65:6A Certificate issuer: /CN=A91E27F3/serialNumber=D40234584AF60591F37DD3FBA27EBCB85CC7656A Certificate serial: 3574 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft Manifest number: 356C Signing time: Tue 28 Jul 2026 15:08:39 +0000 Manifest this update: Tue 28 Jul 2026 15:08:38 +0000 Manifest next update: Tue 04 Aug 2026 15:08:38 +0000 Files and hashes: 1: 1AI0WEr2BZHzfdP7on68uFzHZWo.crl (hash: YV/F0GvUQjcmczGKl1wBTznk1tGKPIGGoPzDj6l4f8Q=) 2: 1B4B4FC2152F11ECB72E546FC4F9AE02.roa (hash: grlNN+mm97djcRhLgczSf6yBI8MB1/S7/60D7ODVKSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.crl rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13684 (0x3574) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E27F3, serialNumber=D40234584AF60591F37DD3FBA27EBCB85CC7656A Validity Not Before: Jul 28 15:08:38 2026 GMT Not After : Aug 4 15:08:38 2026 GMT Subject: CN=6a68c5f7-a97b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:99:ed:4f:9b:b4:9e:01:6c:ab:32:89:ee: 3d:66:62:c8:ce:ea:58:11:05:d9:4b:a2:26:11:7e: a5:c3:de:86:38:0d:ec:eb:b1:83:14:77:cc:64:dc: 17:90:aa:b7:5f:94:82:c1:09:3b:64:ce:ef:fa:29: cb:3a:35:c2:4d:e4:67:87:53:4e:87:1c:7a:cf:31: 7e:18:3b:a4:5c:8a:f8:ac:4b:28:36:3d:57:63:cc: a0:be:5c:16:ee:4b:cf:18:c0:94:2e:47:80:53:7e: f8:68:e0:e8:22:df:ef:11:de:d6:dd:e8:47:ce:59: a3:a5:6a:94:e1:81:6f:68:e0:3f:8f:2c:a0:89:8e: c9:d0:e0:13:99:7b:18:cf:da:9e:47:6f:98:a1:be: 80:ae:05:85:47:be:c2:0d:6e:13:6e:4f:63:5f:96: 30:cb:13:86:ab:ac:d7:0d:de:b9:9f:84:1c:90:9c: 0c:99:c9:91:67:82:52:b9:4e:d5:d0:6a:ae:a7:94: 74:a5:b4:d8:6c:d3:3f:d3:29:9e:f8:02:8a:17:c0: 45:a7:10:e4:46:f7:28:9e:7d:99:ec:45:8d:bc:2f: 40:50:19:7c:40:e1:1e:c0:a9:a6:d5:fc:64:bb:ca: 01:c8:ba:f2:0f:c0:de:a6:a7:6d:ff:19:3b:24:8a: 03:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CF:91:30:47:61:9D:4D:38:8C:59:2F:B2:33:21:18:2D:CF:44:CB X509v3 Authority Key Identifier: keyid:D4:02:34:58:4A:F6:05:91:F3:7D:D3:FB:A2:7E:BC:B8:5C:C7:65:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1AI0WEr2BZHzfdP7on68uFzHZWo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27F3/A6DE1CE81DA111E2A32EF29308B02CD2/1AI0WEr2BZHzfdP7on68uFzHZWo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:d9:e0:5a:3f:42:5c:a9:d1:d1:42:f4:31:41:31:3c:2d:69: 34:0b:48:05:e3:6b:8c:88:ba:5c:83:38:af:83:7a:38:7f:23: e2:05:ae:57:02:00:27:f9:9b:55:23:9a:fd:f7:0e:f9:0b:d7: fe:b8:2c:ee:b3:3a:bb:69:0d:0f:0f:08:2b:20:66:91:bc:f6: 5b:c3:2b:c7:02:2c:37:bd:04:17:c5:e8:15:56:c1:e9:c7:4c: 6e:0c:ef:5e:65:56:08:3c:2f:d0:3b:5c:d7:79:70:37:f9:9f: 34:63:de:fc:28:99:6a:4c:3a:f1:34:3f:ff:bd:7b:c3:f8:06: 90:94:16:22:43:de:64:4a:05:29:f3:49:07:34:0a:a6:fb:ab: 39:fa:ac:be:73:0f:f0:59:03:3d:d5:db:9a:49:66:7a:70:df: 4e:25:ec:f1:bc:8d:bf:e0:0f:7a:90:10:26:8c:39:b1:28:e4: ce:30:bd:8a:b2:8f:86:6a:05:c2:bc:fa:77:a9:01:5a:b7:0b: 99:a2:aa:0d:aa:ea:7a:c6:e4:9e:bd:f9:ce:52:11:87:55:94: a0:0d:e0:42:9b:7f:37:87:3c:ad:b5:30:f1:b6:4a:d9:e6:9d: 20:eb:7c:3c:3f:a3:69:03:d7:b0:e8:b3:88:ae:7b:08:13:24: d0:68:4a:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI3RjMxMTAvBgNVBAUTKEQ0MDIzNDU4NEFGNjA1OTFGMzdERDNGQkEyN0VCQ0I4 NUNDNzY1NkEwHhcNMjYwNzI4MTUwODM4WhcNMjYwODA0MTUwODM4WjAYMRYwFAYD VQQDEw02YTY4YzVmNy1hOTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZuZ7U+btJ4BbKsyie49ZmLIzupYEQXZS6ImEX6lw96GOA3s67GDFHfMZNwX kKq3X5SCwQk7ZM7v+inLOjXCTeRnh1NOhxx6zzF+GDukXIr4rEsoNj1XY8ygvlwW 7kvPGMCULkeAU374aODoIt/vEd7W3ehHzlmjpWqU4YFvaOA/jyygiY7J0OATmXsY z9qeR2+Yob6ArgWFR77CDW4Tbk9jX5YwyxOGq6zXDd65n4QckJwMmcmRZ4JSuU7V 0Gqup5R0pbTYbNM/0yme+AKKF8BFpxDkRvconn2Z7EWNvC9AUBl8QOEewKmm1fxk u8oByLryD8Depqdt/xk7JIoD1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDPkTBH YZ1NOIxZL7IzIRgtz0TLMB8GA1UdIwQYMBaAFNQCNFhK9gWR833T+6J+vLhcx2Vq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdGMy9BNkRFMUNFODFE QTExMUUyQTMyRUYyOTMwOEIwMkNEMi8xQUkwV0VyMkJaSHpmZFA3b242OHVGekha V28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFBSTBXRXIyQlpIemZkUDdvbjY4dUZ6SFpXby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjdGMy9BNkRFMUNFODFEQTExMUUyQTMyRUYyOTMwOEIwMkNEMi8xQUkwV0VyMkJa SHpmZFA3b242OHVGekhaV28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKNngWj9CXKnR0UL0MUExPC1pNAtIBeNrjIi6XIM4r4N6OH8j4gWuVwIAJ/mb VSOa/fcO+QvX/rgs7rM6u2kNDw8IKyBmkbz2W8MrxwIsN70EF8XoFVbB6cdMbgzv XmVWCDwv0Dtc13lwN/mfNGPe/CiZakw68TQ//717w/gGkJQWIkPeZEoFKfNJBzQK pvurOfqsvnMP8FkDPdXbmklmenDfTiXs8byNv+APepAQJow5sSjkzjC9irKPhmoF wrz6d6kBWrcLmaKqDarqesbknr35zlIRh1WUoA3gQpt/N4c8rbUw8bZK2eadIOt8 PD+jaQPXsOiziK57CBMk0GhKwg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:53:06 2026 by rpki-client