$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft File: AaQS70FsiE9vY38b2oAOtu9nttY.mft (raw, json) Hash identifier: NTvSTgcATiEeGsuX2PdA0qamPo/BpoE5dBkVvwZT13I= Subject key identifier: C4:C1:A8:03:A1:FA:FB:EB:6B:AB:C1:21:88:84:5A:80:F3:29:93:A9 Authority key identifier: 01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 Certificate issuer: /CN=A91E4845/serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Certificate serial: 2341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft Manifest number: 22EA Signing time: Tue 28 Jul 2026 15:56:28 +0000 Manifest this update: Tue 28 Jul 2026 15:56:28 +0000 Manifest next update: Tue 04 Aug 2026 15:56:28 +0000 Files and hashes: 1: AaQS70FsiE9vY38b2oAOtu9nttY.crl (hash: b4hwfF0IOY6r5PAJvhgDk41E370yyUZVCaAhsSTcyyM=) 2: 114016CE65DB11F0A01C3E60C4F9AE02.roa (hash: qG9igdUpXB7wk8yx/k2tOuq/gYueDRGW4t5eH6cDkms=) 3: B4A61D2A501511F19B7490E3C0833773.roa (hash: ULhHp7+sYXuEA4oAMAlvVXNC4B0eNrv0HmhmrXot1Bo=) 4: E049BA50335911F193981E57CA833773.roa (hash: ccrqPCbKxkHUXLuFhP49NrNOV6bbgxDvMbrEYPU0/70=) 5: 05302944D38811F096791A31C4F9AE02.roa (hash: 0TpazCbbP+eq5jbcmOC+QEukwM8XRQa407MbLaS5Vso=) 6: D128F6A2366111F19FA677FACA833773.roa (hash: ZY7Vk9qpQDHcmIYTowz44r/Aadjt59khWHwSNvAaAYk=) 7: 0EB9C488501611F1BCA6FB50C1833773.roa (hash: hjLor0naDuB1MHE0ASMpLEp5N2HxCBYq1jwBVQbTUI4=) 8: 11D9E3F865DB11F0A01C3E60C4F9AE02.roa (hash: fekDwvX/Pg2YZ9Fe3QZAnU92TpFpbncEnNKE83KMH+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9025 (0x2341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4845, serialNumber=01A412EF416C884F6F637F1BDA800EB6EF67B6D6 Validity Not Before: Jul 28 15:56:28 2026 GMT Not After : Aug 4 15:56:28 2026 GMT Subject: CN=6a68d12c-73b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2c:2a:fe:13:a8:bd:74:93:f5:f6:68:3b:07: 3e:a3:db:94:89:6e:3d:e8:ea:68:00:cf:cb:2f:d0: 4b:8f:51:a2:66:5e:d4:64:9e:43:91:d8:7c:d4:4b: 83:f8:7f:80:fa:01:3a:29:b1:3a:44:e8:d5:b1:88: 74:6b:46:30:4a:e8:f8:15:60:e1:ac:5c:4c:56:04: 01:6d:a5:08:5b:4b:19:51:8d:7b:5a:2b:9c:e2:87: 22:9a:20:98:ce:10:84:e4:fd:e8:11:33:89:6c:18: be:b7:4b:f9:96:30:26:f9:0d:4b:ee:97:63:93:da: 54:11:11:eb:30:b9:41:91:80:29:cc:2f:95:46:cc: 0c:3b:63:ad:e7:5d:c1:45:93:70:0e:1e:91:ce:a8: 65:1e:f8:9f:5e:9b:6c:52:b0:72:9a:7a:e2:1f:cc: 3e:a3:dd:83:28:23:87:a2:99:2b:24:66:88:e9:f8: d1:6d:c7:e9:9e:91:94:42:c3:6b:22:ce:73:ad:1a: 8d:3b:ac:44:58:ec:17:89:06:28:33:1d:1a:ae:c0: e3:f6:71:68:77:7d:80:8d:5c:3b:83:4b:6a:bf:88: 1b:c1:b6:3f:88:83:38:fd:74:e1:45:e8:0a:5e:51: 84:45:ec:76:cb:64:e4:ce:7a:49:fc:f9:2a:54:b7: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:C1:A8:03:A1:FA:FB:EB:6B:AB:C1:21:88:84:5A:80:F3:29:93:A9 X509v3 Authority Key Identifier: keyid:01:A4:12:EF:41:6C:88:4F:6F:63:7F:1B:DA:80:0E:B6:EF:67:B6:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AaQS70FsiE9vY38b2oAOtu9nttY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4845/400153B6D2EB11E5B4D15A4EC4F9AE02/AaQS70FsiE9vY38b2oAOtu9nttY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d7:b7:5c:86:6f:49:21:65:0b:66:f9:9a:9a:51:93:3e:78: 1d:31:54:1b:89:fc:5d:c8:74:b0:a4:14:e1:e7:14:20:63:35: bb:6c:69:d9:8a:6e:e0:e7:f9:54:be:b1:44:0d:a0:99:1f:df: 0d:c5:b1:0c:50:5d:4f:df:27:4a:89:9f:a2:dc:29:77:09:d1: 67:81:3b:16:9e:da:c4:8f:45:0d:52:e9:2c:68:2e:c8:c8:95: af:f6:48:ac:c4:a3:dd:bd:3f:cf:80:49:96:9d:3b:34:14:84: 8b:db:fd:83:aa:73:6c:08:1a:8d:f8:c0:3e:ea:fd:da:8e:b3: 61:87:6d:45:60:a8:ec:8f:24:e6:75:14:c6:70:1a:70:18:3d: 06:06:c9:86:8e:ec:f4:31:bc:31:b2:03:62:bf:bb:94:54:2e: 2f:89:39:fc:89:33:03:9f:cd:cf:1b:f5:4b:0b:66:cc:95:b4: 7b:9d:4e:21:23:0e:41:5e:33:35:1a:18:8c:cb:8f:46:8e:b4: 77:15:df:6d:f8:59:f2:2a:c6:8b:45:6a:73:95:5f:4c:b5:b8: ce:5a:13:8f:7d:33:77:0d:10:9b:72:09:5c:10:a3:2a:f1:da: c6:3a:d0:89:6c:8f:b7:a2:e8:1a:72:ff:f9:32:fb:d1:30:e4: 7d:26:9a:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ4NDUxMTAvBgNVBAUTKDAxQTQxMkVGNDE2Qzg4NEY2RjYzN0YxQkRBODAwRUI2 RUY2N0I2RDYwHhcNMjYwNzI4MTU1NjI4WhcNMjYwODA0MTU1NjI4WjAYMRYwFAYD VQQDEw02YTY4ZDEyYy03M2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iwq/hOovXST9fZoOwc+o9uUiW496OpoAM/LL9BLj1GiZl7UZJ5Dkdh81EuD +H+A+gE6KbE6ROjVsYh0a0YwSuj4FWDhrFxMVgQBbaUIW0sZUY17Wiuc4ocimiCY zhCE5P3oETOJbBi+t0v5ljAm+Q1L7pdjk9pUERHrMLlBkYApzC+VRswMO2Ot513B RZNwDh6RzqhlHvifXptsUrBymnriH8w+o92DKCOHopkrJGaI6fjRbcfpnpGUQsNr Is5zrRqNO6xEWOwXiQYoMx0arsDj9nFod32AjVw7g0tqv4gbwbY/iIM4/XThRegK XlGERex2y2TkznpJ/PkqVLdn3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTBqAOh +vvra6vBIYiEWoDzKZOpMB8GA1UdIwQYMBaAFAGkEu9BbIhPb2N/G9qADrbvZ7bW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDg0NS80MDAxNTNCNkQy RUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lFOXZZMzhiMm9BT3R1OW50 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FhUVM3MEZzaUU5dlkzOGIyb0FPdHU5bnR0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDg0NS80MDAxNTNCNkQyRUIxMUU1QjREMTVBNEVDNEY5QUUwMi9BYVFTNzBGc2lF OXZZMzhiMm9BT3R1OW50dFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcNe3XIZvSSFlC2b5mppRkz54HTFUG4n8Xch0sKQU4ecUIGM1u2xp2Ypu4Of5 VL6xRA2gmR/fDcWxDFBdT98nSomfotwpdwnRZ4E7Fp7axI9FDVLpLGguyMiVr/ZI rMSj3b0/z4BJlp07NBSEi9v9g6pzbAgajfjAPur92o6zYYdtRWCo7I8k5nUUxnAa cBg9BgbJho7s9DG8MbIDYr+7lFQuL4k5/IkzA5/Nzxv1SwtmzJW0e51OISMOQV4z NRoYjMuPRo60dxXfbfhZ8irGi0Vqc5VfTLW4zloTj30zdw0Qm3IJXBCjKvHaxjrQ iWyPt6LoGnL/+TL70TDkfSaaNA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:44 2026 by rpki-client