$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft File: aGr0G8M9rvgo-rSuSjoNWHutDT8.mft (raw, json) Hash identifier: CQ63p8kN4lAETaQp863ZAguzgMmpYBOIzM1ap4onGUE= Subject key identifier: 3C:7E:F0:30:53:FD:9E:AC:04:DA:CF:C2:2F:E4:AC:55:D8:6E:69:02 Authority key identifier: 68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F Certificate issuer: /CN=A91E4D3D/serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft Manifest number: 0673 Signing time: Tue 28 Jul 2026 23:12:15 +0000 Manifest this update: Tue 28 Jul 2026 23:12:14 +0000 Manifest next update: Tue 04 Aug 2026 23:12:14 +0000 Files and hashes: 1: aGr0G8M9rvgo-rSuSjoNWHutDT8.crl (hash: B1e1Qk9pYxM9xZsZ8VgUEbp2K3XbOnuNZDKx45UKCIs=) 2: 63FEB4F8D97411EBB8CC3F40C4F9AE02.roa (hash: GBummmykHnsRNOp2UTZVHW61aelGglaz1bE3tCnWo5M=) 3: 40310456D8D211EB97FF5586C4F9AE02.roa (hash: ljhzAAAHOEbQtw8/O2WirKoWv6XtLYHxhjuJKY3iiZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 23:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D3D, serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Validity Not Before: Jul 28 23:12:14 2026 GMT Not After : Aug 4 23:12:14 2026 GMT Subject: CN=6a69374f-687a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2e:79:6c:36:b9:55:df:6a:5d:fe:48:18:ca: 86:bc:45:5d:70:1a:80:da:0a:b6:db:cc:2c:26:b2: 25:08:7e:5b:1d:b7:0a:11:95:cf:aa:4c:d0:2c:ea: b4:1e:68:6c:ca:01:34:a3:9d:fd:8f:2e:b9:f4:4f: 3d:97:90:6c:b7:d2:29:ef:20:b0:1d:8a:f9:4b:11: cc:52:ef:69:6d:a1:69:b6:9f:6d:17:06:16:c2:48: 63:99:9f:2e:47:9b:6e:45:a1:fa:ba:2e:e4:3b:9c: 6a:2d:b7:45:ab:5b:7b:22:c6:ce:54:64:e8:71:4a: f6:e8:35:b0:c0:82:ae:d6:ad:e7:4a:e0:d0:3c:22: 03:e7:cf:a1:e6:4c:bb:c3:0f:b4:c7:78:2a:ca:a5: 4b:14:a2:81:83:50:c7:fb:4a:06:d6:f4:d3:cd:4c: 17:3a:22:45:95:69:f5:98:0b:c5:6f:03:39:b3:50: e5:c8:d1:91:f8:16:e6:ff:0d:49:d1:35:d7:d7:fc: ff:ef:c4:57:82:7a:d2:f5:2b:4c:9e:25:7a:45:2c: b7:a2:8e:46:d8:3f:7e:7a:98:fc:b0:49:00:7b:dd: 4f:f1:c1:83:da:ce:f8:fc:98:9d:4f:23:07:d0:03: 3c:27:7b:b7:c5:23:98:fc:40:d0:b9:a1:45:ec:d3: ac:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7E:F0:30:53:FD:9E:AC:04:DA:CF:C2:2F:E4:AC:55:D8:6E:69:02 X509v3 Authority Key Identifier: keyid:68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e3:a4:46:3f:9a:17:71:09:2c:41:52:ff:98:01:d1:eb:f5: 50:f2:ac:31:a9:24:99:36:a0:36:a8:29:8e:c2:55:47:28:88: a6:ee:c9:b1:b0:12:dc:22:7c:3c:46:82:d5:e1:e3:8c:f8:ac: 58:47:88:a9:bf:96:bb:7b:bf:9f:d0:27:d6:10:7c:fc:7a:0f: 2f:45:81:7a:73:96:31:f4:a2:ab:e0:8b:1a:70:d1:6f:0b:c2: c3:cd:94:2d:76:5a:74:a1:1f:f8:f5:7a:12:23:bf:0f:ee:20: 8c:1a:c2:90:fb:3c:ff:f4:2f:c5:73:74:14:ab:9c:99:36:4e: ef:58:8a:16:7f:4b:ab:b2:d2:a8:01:71:8f:b5:43:2c:39:c5: d4:fc:c7:52:41:4c:d8:51:27:46:8d:ae:11:3a:f3:52:1d:30: c9:2c:6a:bd:03:0d:f9:d5:20:03:dd:b7:35:fc:5c:cf:68:c9: dc:eb:6b:4f:18:0c:2f:43:86:35:b9:dc:21:b3:ce:8f:37:38: 30:c6:c7:3a:86:3c:02:dc:d6:b4:6f:8c:a8:7d:8c:20:0c:b4: f7:be:a6:12:1a:e3:53:87:c3:e8:25:0b:7a:94:d7:7c:da:fa: 55:5a:4c:aa:a7:50:16:25:ff:b3:d3:8f:58:d7:af:e2:af:c3: 09:ec:90:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREM0QxMTAvBgNVBAUTKDY4NkFGNDFCQzMzREFFRjgyOEZBQjRBRTRBM0EwRDU4 N0JBRDBEM0YwHhcNMjYwNzI4MjMxMjE0WhcNMjYwODA0MjMxMjE0WjAYMRYwFAYD VQQDEw02YTY5Mzc0Zi02ODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8S55bDa5Vd9qXf5IGMqGvEVdcBqA2gq228wsJrIlCH5bHbcKEZXPqkzQLOq0 HmhsygE0o539jy659E89l5Bst9Ip7yCwHYr5SxHMUu9pbaFptp9tFwYWwkhjmZ8u R5tuRaH6ui7kO5xqLbdFq1t7IsbOVGTocUr26DWwwIKu1q3nSuDQPCID58+h5ky7 ww+0x3gqyqVLFKKBg1DH+0oG1vTTzUwXOiJFlWn1mAvFbwM5s1DlyNGR+Bbm/w1J 0TXX1/z/78RXgnrS9StMniV6RSy3oo5G2D9+epj8sEkAe91P8cGD2s74/JidTyMH 0AM8J3u3xSOY/EDQuaFF7NOslwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDx+8DBT /Z6sBNrPwi/krFXYbmkCMB8GA1UdIwQYMBaAFGhq9BvDPa74KPq0rko6DVh7rQ0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9BNzBBOEZFRUQ4 QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2Z28tclN1U2pvTldIdXRE VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FHcjBHOE05cnZnby1yU3VTam9OV0h1dERUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEQzRC9BNzBBOEZFRUQ4QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2 Z28tclN1U2pvTldIdXREVDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHuOkRj+aF3EJLEFS/5gB0ev1UPKsMakkmTagNqgpjsJVRyiIpu7JsbAS3CJ8 PEaC1eHjjPisWEeIqb+Wu3u/n9An1hB8/HoPL0WBenOWMfSiq+CLGnDRbwvCw82U LXZadKEf+PV6EiO/D+4gjBrCkPs8//QvxXN0FKucmTZO71iKFn9Lq7LSqAFxj7VD LDnF1PzHUkFM2FEnRo2uETrzUh0wySxqvQMN+dUgA923Nfxcz2jJ3OtrTxgML0OG NbncIbPOjzc4MMbHOoY8AtzWtG+MqH2MIAy0976mEhrjU4fD6CULepTXfNr6VVpM qqdQFiX/s9OPWNev4q/DCeyQVQ== -----END CERTIFICATE-----Generated at Wed Jul 29 05:27:57 2026 by rpki-client