$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft File: U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json) Hash identifier: YNNDOAu9IYO0g01UOw+WAJG+QumWp5bViqo7ZYObTm8= Subject key identifier: 4C:9B:9C:0F:C9:78:97:6E:12:45:3B:70:2E:2C:DC:41:36:DB:F0:0D Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 Certificate issuer: /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Certificate serial: 0F36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft Manifest number: 0F2C Signing time: Tue 28 Jul 2026 17:41:51 +0000 Manifest this update: Tue 28 Jul 2026 17:41:50 +0000 Manifest next update: Tue 04 Aug 2026 17:41:50 +0000 Files and hashes: 1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: gKepKvVvsi8tkAD+Nd6JWCCHN8bPR0qSugDu7PpGtPg=) 2: C2213CFC2CC311F1A8A01C5D8F833773.roa (hash: tkrVJ/cVpoiHk0cmXy2YYFkJoXN9OgcqITOcYSO8FI4=) 3: 350711FA881211EE9710F928C4F9AE02.roa (hash: /Sl1+zcuYzALlR5FExQ8VOIo7ICRp9RWUJXD4AKkevs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3894 (0xf36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4 Validity Not Before: Jul 28 17:41:50 2026 GMT Not After : Aug 4 17:41:50 2026 GMT Subject: CN=6a68e9df-8593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:f5:30:5b:31:54:0b:09:4a:c6:8a:80:ff: 38:15:d4:d0:4d:68:8d:03:1b:b7:0a:ca:41:40:f0: 76:01:6b:27:84:a6:56:30:69:e0:5a:fc:8b:6d:89: e9:92:54:2b:29:1b:08:67:2d:0d:2d:31:69:dc:47: 7d:ee:7f:bb:12:cd:45:0f:bc:34:94:dc:49:69:98: fc:e6:3d:4b:e1:90:da:f4:59:fb:37:b5:34:04:58: c5:e4:47:42:16:86:bf:75:ff:f4:df:8d:f3:4e:ae: af:b3:3d:3b:a3:62:93:3f:11:dc:af:5a:a7:a0:c8: 85:b0:1d:9c:2d:f8:67:78:af:c1:be:df:44:f5:06: fc:a7:88:b9:ab:87:8c:cc:44:26:9b:37:3c:74:c6: f4:46:12:c3:3b:9b:be:3b:67:f1:ff:30:01:d2:a1: fb:52:9a:c9:f6:71:e4:32:83:37:d6:9f:7b:d5:a6: 12:cb:02:c3:5b:b5:dd:84:a4:a2:80:43:d3:4f:63: 48:90:ce:72:42:b3:27:4d:e0:ed:18:0a:9c:8f:68: 5b:57:fb:d1:ee:97:55:97:bb:7a:ae:54:3d:cd:78: 93:e8:bf:67:b2:54:36:0d:35:e6:6c:ec:ed:45:a8: ae:bb:b8:aa:93:ce:cd:fc:13:bc:ad:59:0f:79:11: 73:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9B:9C:0F:C9:78:97:6E:12:45:3B:70:2E:2C:DC:41:36:DB:F0:0D X509v3 Authority Key Identifier: keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:f2:8d:e2:a6:c9:45:04:d0:06:e3:49:ee:2a:f9:45:bb:01: 99:a0:18:ce:7f:f3:85:3f:ba:42:4e:31:ac:69:01:29:f4:03: 8d:80:6c:c7:a1:39:93:8a:d1:ef:6c:35:e8:c7:89:3c:f4:02: fc:b7:d6:57:02:0f:f5:ba:2a:63:5a:37:fc:c8:79:f0:63:39: 95:45:05:ef:40:15:fc:44:ee:19:e1:a4:31:a5:8e:63:f4:ea: 06:7b:60:9d:18:7f:13:e0:83:68:c3:a2:66:a3:0e:0b:3e:e2: d1:7c:84:d9:b4:df:6d:f9:85:4d:cc:eb:e3:16:9e:5f:d6:ad: b2:c4:80:e3:83:7f:4e:b3:a2:e7:1d:58:71:67:58:49:07:16: dd:99:e5:de:82:99:99:fb:cc:4e:91:5d:55:13:3d:74:ba:a2: 03:19:46:14:c2:8f:38:14:cc:89:e3:e0:ae:43:93:47:db:ab: d0:ee:2d:db:50:24:97:e3:57:24:09:81:c8:1b:e9:45:b8:2c: 46:66:ea:a2:7a:be:93:2a:89:6f:7d:35:f5:87:32:07:69:28: ea:36:c7:d0:e9:90:e8:03:8f:b0:4b:d0:bb:58:9b:72:f9:3e: 02:f9:36:99:d6:fa:39:8d:e6:17:79:98:fd:fc:68:2a:02:75: 67:8d:91:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY4NTYxMTAvBgNVBAUTKDUzODI2NDJFQkQ3OTlBMEY4Mjg2RDA2NTQ4MjlFRDc2 ODQzMEY5RTQwHhcNMjYwNzI4MTc0MTUwWhcNMjYwODA0MTc0MTUwWjAYMRYwFAYD VQQDEw02YTY4ZTlkZi04NTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/r1MFsxVAsJSsaKgP84FdTQTWiNAxu3CspBQPB2AWsnhKZWMGngWvyLbYnp klQrKRsIZy0NLTFp3Ed97n+7Es1FD7w0lNxJaZj85j1L4ZDa9Fn7N7U0BFjF5EdC Foa/df/0343zTq6vsz07o2KTPxHcr1qnoMiFsB2cLfhneK/Bvt9E9Qb8p4i5q4eM zEQmmzc8dMb0RhLDO5u+O2fx/zAB0qH7UprJ9nHkMoM31p971aYSywLDW7XdhKSi gEPTT2NIkM5yQrMnTeDtGAqcj2hbV/vR7pdVl7t6rlQ9zXiT6L9nslQ2DTXmbOzt Raiuu7iqk87N/BO8rVkPeRFzDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEybnA/J eJduEkU7cC4s3EE22/ANMB8GA1UdIwQYMBaAFFOCZC69eZoPgobQZUgp7XaEMPnk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjg1Ni8yQ0Q0NUZCQTlF MjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1nLUNodEJsU0NudGRvUXct ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U0SmtMcjE1bWctQ2h0QmxTQ250ZG9Rdy1lUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Njg1Ni8yQ0Q0NUZCQTlFMjQxMUU5QjE0M0JFNzFDNEY5QUUwMi9VNEprTHIxNW1n LUNodEJsU0NudGRvUXctZVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATvKN4qbJRQTQBuNJ7ir5RbsBmaAYzn/zhT+6Qk4xrGkBKfQDjYBsx6E5k4rR 72w16MeJPPQC/LfWVwIP9boqY1o3/Mh58GM5lUUF70AV/ETuGeGkMaWOY/TqBntg nRh/E+CDaMOiZqMOCz7i0XyE2bTfbfmFTczr4xaeX9atssSA44N/TrOi5x1YcWdY SQcW3Znl3oKZmfvMTpFdVRM9dLqiAxlGFMKPOBTMiePgrkOTR9ur0O4t21Akl+NX JAmByBvpRbgsRmbqonq+kyqJb3019YcyB2ko6jbH0OmQ6AOPsEvQu1ibcvk+Avk2 mdb6OY3mF3mY/fxoKgJ1Z42RoQ== -----END CERTIFICATE-----Generated at Wed Jul 29 01:31:34 2026 by rpki-client