$ rpki-client -vvf rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft File: EhrxRNkD4_iJffD-0gcaFkd17U8.mft (raw, json) Hash identifier: 2LkIDovZNJHaIGEspCduJKmCZel2wE6BVGoyUpuG0Lc= Subject key identifier: 56:5A:04:DB:AF:17:AE:D4:28:60:2A:04:58:7B:1C:8C:81:C5:DF:DA Authority key identifier: 12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F Certificate issuer: /CN=A91E554A/serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft Manifest number: 0155 Signing time: Mon 27 Jul 2026 07:11:29 +0000 Manifest this update: Mon 27 Jul 2026 07:11:29 +0000 Manifest next update: Mon 03 Aug 2026 07:11:29 +0000 Files and hashes: 1: EhrxRNkD4_iJffD-0gcaFkd17U8.crl (hash: jiykhWgV0WNlPi4v8oXb5OtjhoZ2jl29aT/YOtLOWq8=) 2: 01C9DEFC7DE811F1B49B5A6A63A30FBC.roa (hash: Ga1gZ7IxHn2IC+iE25UbgfqUt3X5U/1/OgUyd7yyVT0=) 3: E12300F27DE711F1A1F9DA6963A30FBC.roa (hash: CLjO1Bnvk0710BZL66L/XRdRq4LOS+bYZOmQijT3wNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E554A, serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F Validity Not Before: Jul 27 07:11:29 2026 GMT Not After : Aug 3 07:11:29 2026 GMT Subject: CN=6a6704a1-1dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:49:3d:30:36:2e:26:24:3c:22:20:43:f6: 04:28:1f:92:6f:4d:10:a8:d7:8a:b0:0c:81:d3:92: 51:ba:1d:11:ab:06:13:3b:25:8a:5b:5b:e4:c9:ac: 38:eb:f2:ce:66:61:03:aa:99:05:6b:22:7a:b1:6f: 9a:55:71:41:11:a4:ad:a1:b4:74:4a:e6:22:ed:fc: 01:42:cd:92:82:da:16:9c:ab:9b:ba:7c:39:31:0e: b4:7d:89:fe:5a:80:89:2d:0d:e9:4a:4d:81:bf:39: a8:15:db:dd:d9:87:48:d6:c2:13:e2:be:b2:10:71: b9:7f:31:b2:d8:35:a3:0b:28:09:4e:c0:9d:d0:d9: 4b:70:1a:4e:03:c3:dc:b8:d9:56:f0:37:f5:90:82: 99:0e:10:68:bd:81:de:39:16:de:33:a9:bb:1b:83: a6:a2:9b:d2:ab:06:1b:35:d3:26:c8:ac:21:83:16: 78:99:38:9f:a5:28:a1:06:72:60:c1:a0:e7:df:c2: da:54:b9:35:75:1c:9a:44:45:3a:6d:d4:19:1a:6a: 1f:74:6c:a8:4e:b6:45:81:ad:b5:19:ea:87:c2:f8: fa:d8:f8:1f:08:37:97:62:81:39:57:65:1d:00:14: 70:f9:fc:66:84:cd:27:17:fe:d6:36:3d:82:6c:f2: 70:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5A:04:DB:AF:17:AE:D4:28:60:2A:04:58:7B:1C:8C:81:C5:DF:DA X509v3 Authority Key Identifier: keyid:12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:3a:58:61:9c:f7:3d:65:d6:fb:1d:15:33:30:56:9b:64:31: ab:41:46:18:91:77:aa:80:cd:a9:73:5d:00:e0:8f:51:53:08: 3b:cc:84:f4:31:27:03:4d:8a:1e:38:53:12:b0:8d:85:6a:7e: 20:57:5c:00:7c:37:71:1d:35:43:3f:9c:35:83:ed:c0:56:03: ec:9f:46:05:06:e0:c2:e0:ff:77:ab:c8:62:9c:77:81:27:5d: 62:e5:c1:bc:15:da:7a:78:d3:1c:20:bb:5d:1c:57:f5:94:cd: 87:40:8b:2c:20:dc:19:c4:d1:57:60:ad:75:65:9f:75:f2:22: 7e:59:09:f5:05:64:a8:9f:01:54:51:89:e1:a9:c7:e1:67:41: 28:71:1c:ba:4f:5d:97:17:1f:35:3f:4c:86:2e:46:b5:d6:06: 09:d1:0f:40:b6:92:48:87:73:95:2e:1e:e0:02:ca:f3:4e:c5: 53:65:56:82:7d:70:11:a5:d2:b2:8e:5f:5d:09:28:41:ae:3d: ef:6d:dd:f8:5f:9c:36:a2:6a:00:85:12:45:40:4d:55:d0:ee: f9:6c:6c:d4:3c:25:32:dd:f8:21:0b:7d:7c:8c:1e:86:37:b0: 2d:43:82:32:d1:e1:94:50:98:f9:92:63:19:ef:5c:2e:a5:73: ec:30:6f:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU1NEExMTAvBgNVBAUTKDEyMUFGMTQ0RDkwM0UzRjg4OTdERjBGRUQyMDcxQTE2 NDc3NUVENEYwHhcNMjYwNzI3MDcxMTI5WhcNMjYwODAzMDcxMTI5WjAYMRYwFAYD VQQDEw02YTY3MDRhMS0xZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp9lJPTA2LiYkPCIgQ/YEKB+Sb00QqNeKsAyB05JRuh0RqwYTOyWKW1vkyaw4 6/LOZmEDqpkFayJ6sW+aVXFBEaStobR0SuYi7fwBQs2SgtoWnKubunw5MQ60fYn+ WoCJLQ3pSk2BvzmoFdvd2YdI1sIT4r6yEHG5fzGy2DWjCygJTsCd0NlLcBpOA8Pc uNlW8Df1kIKZDhBovYHeORbeM6m7G4OmopvSqwYbNdMmyKwhgxZ4mTifpSihBnJg waDn38LaVLk1dRyaREU6bdQZGmofdGyoTrZFga21GeqHwvj62PgfCDeXYoE5V2Ud ABRw+fxmhM0nF/7WNj2CbPJwRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZaBNuv F67UKGAqBFh7HIyBxd/aMB8GA1UdIwQYMBaAFBIa8UTZA+P4iX3w/tIHGhZHde1P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTU0QS83OTVFNzNEMDkx RjcxMUVGQURFMTEyNjZDNEY5QUUwMi9FaHJ4Uk5rRDRfaUpmZkQtMGdjYUZrZDE3 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VocnhSTmtENF9pSmZmRC0wZ2NhRmtkMTdVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTU0QS83OTVFNzNEMDkxRjcxMUVGQURFMTEyNjZDNEY5QUUwMi9FaHJ4Uk5rRDRf aUpmZkQtMGdjYUZrZDE3VTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACDpYYZz3PWXW+x0VMzBWm2Qxq0FGGJF3qoDNqXNdAOCPUVMIO8yE9DEnA02K HjhTErCNhWp+IFdcAHw3cR01Qz+cNYPtwFYD7J9GBQbgwuD/d6vIYpx3gSddYuXB vBXaenjTHCC7XRxX9ZTNh0CLLCDcGcTRV2CtdWWfdfIiflkJ9QVkqJ8BVFGJ4anH 4WdBKHEcuk9dlxcfNT9Mhi5GtdYGCdEPQLaSSIdzlS4e4ALK807FU2VWgn1wEaXS so5fXQkoQa49723d+F+cNqJqAIUSRUBNVdDu+Wxs1DwlMt34IQt9fIwehjewLUOC MtHhlFCY+ZJjGe9cLqVz7DBvWQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:31:56 2026 by rpki-client