$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft File: _0Md-OE71_7FHntTUHtFOan5ZWY.mft (raw, json) Hash identifier: 5ffxh3JIZu9ie7uF66v7xQsMG01bP5bhFHqzycdurSk= Subject key identifier: AB:96:4C:06:CC:71:64:7A:87:3F:8C:68:47:96:40:B4:28:2C:E1:82 Authority key identifier: FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 Certificate issuer: /CN=A91E6C4E/serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Certificate serial: 21E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft Manifest number: 21D9 Signing time: Tue 28 Jul 2026 15:59:17 +0000 Manifest this update: Tue 28 Jul 2026 15:59:17 +0000 Manifest next update: Tue 04 Aug 2026 15:59:17 +0000 Files and hashes: 1: _0Md-OE71_7FHntTUHtFOan5ZWY.crl (hash: fYy6nXqLSRcZThaCh+gUsGU4occ1+faPml2CWIt49Jw=) 2: 5F0B20081CBF11EAA5FCAC86C4F9AE02.roa (hash: h5Pjnbs6tYIgU2xEGeVFnaHiDWrTR38hutsH6p/eIKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8680 (0x21e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6C4E, serialNumber=FF431DF8E13BD7FEC51E7B53507B4539A9F96566 Validity Not Before: Jul 28 15:59:17 2026 GMT Not After : Aug 4 15:59:17 2026 GMT Subject: CN=6a68d1d5-292a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:42:e2:1d:9a:a2:ee:8c:a4:75:2f:52:2d:70: 9f:7f:d9:4a:47:5f:c6:91:28:36:41:c5:2c:ab:16: bf:9b:3a:55:e5:cb:15:3c:57:50:a9:a7:98:24:9d: 4c:f2:73:58:dc:af:5e:23:ad:3b:49:bd:f9:3d:a5: 86:2c:c5:6c:dc:10:15:2c:29:85:f1:83:5a:0a:74: 2b:ab:f6:c5:dd:12:aa:ba:47:78:c2:f7:ba:63:63: 88:69:d3:7b:8c:e8:c9:11:ba:9e:02:67:bf:53:00: 17:72:2d:31:f1:cd:a8:44:2f:ed:75:f2:e5:64:84: 31:b5:d4:0b:93:1e:66:34:2c:0d:2d:7f:c6:d9:0d: d9:a4:cd:e8:76:c1:6a:36:16:93:0e:0d:d8:ef:3e: 3f:b0:fe:90:62:70:76:50:04:34:0e:14:95:cf:9a: ce:e1:b4:b5:fc:b1:a7:01:71:3f:7d:be:a1:d2:5d: 34:f1:fd:c5:4f:8b:e6:30:9c:4c:15:75:15:c5:1c: e1:fb:02:73:7f:bc:33:a3:98:23:ec:0f:e7:2a:a6: f1:24:d6:72:49:e1:1e:03:b9:99:36:33:f7:1d:ff: a0:b0:eb:76:91:2d:4a:1a:fc:68:56:f0:03:a0:17: 61:e0:9f:75:a0:c8:ca:dd:36:e6:c0:b5:9f:e5:93: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:96:4C:06:CC:71:64:7A:87:3F:8C:68:47:96:40:B4:28:2C:E1:82 X509v3 Authority Key Identifier: keyid:FF:43:1D:F8:E1:3B:D7:FE:C5:1E:7B:53:50:7B:45:39:A9:F9:65:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_0Md-OE71_7FHntTUHtFOan5ZWY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6C4E/3448652CF3CB11E5AE366062C4F9AE02/_0Md-OE71_7FHntTUHtFOan5ZWY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ed:07:d2:7b:0a:42:02:e8:39:cd:0c:cf:66:be:69:4b:e8: 59:29:f1:06:48:5d:dd:c3:2e:26:23:2f:55:a9:cb:73:cd:4c: 28:c1:88:3c:20:f7:50:74:80:61:39:e1:97:1e:30:bd:81:5a: ba:06:04:96:ac:96:bc:b3:86:86:51:e6:9b:ca:9e:be:54:21: ba:ac:20:74:5a:11:83:8b:b6:91:30:c8:f3:b7:f9:c1:9a:81: 7b:ba:d5:6d:21:42:da:3a:d2:07:c2:64:54:d6:f5:35:d3:dc: 21:19:5c:7e:31:c9:a5:72:c3:ee:79:4f:91:7d:8c:2f:6e:03: 94:dd:4f:46:f7:ed:aa:99:75:57:a5:fd:37:8f:0f:2f:ed:be: 1f:08:ad:84:79:ee:1b:05:07:53:e0:32:db:69:b1:55:25:f9: c7:b9:fe:59:2e:e0:25:52:a0:ae:30:93:78:a7:e8:4e:5a:f7: 51:a9:72:b0:ed:ba:f7:b8:c4:3d:d8:35:5c:88:c7:68:63:4a: 37:27:dd:18:22:2a:45:cc:0f:e6:6e:b8:80:07:bf:12:3a:08: 61:8a:b1:f5:b1:cc:75:0e:17:3c:31:6c:36:c7:ca:2d:f4:10: 02:61:67:77:ff:03:9a:39:e0:72:93:d7:46:3c:f1:eb:b7:31: ad:8a:49:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZDNEUxMTAvBgNVBAUTKEZGNDMxREY4RTEzQkQ3RkVDNTFFN0I1MzUwN0I0NTM5 QTlGOTY1NjYwHhcNMjYwNzI4MTU1OTE3WhcNMjYwODA0MTU1OTE3WjAYMRYwFAYD VQQDEw02YTY4ZDFkNS0yOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApkLiHZqi7oykdS9SLXCff9lKR1/GkSg2QcUsqxa/mzpV5csVPFdQqaeYJJ1M 8nNY3K9eI607Sb35PaWGLMVs3BAVLCmF8YNaCnQrq/bF3RKqukd4wve6Y2OIadN7 jOjJEbqeAme/UwAXci0x8c2oRC/tdfLlZIQxtdQLkx5mNCwNLX/G2Q3ZpM3odsFq NhaTDg3Y7z4/sP6QYnB2UAQ0DhSVz5rO4bS1/LGnAXE/fb6h0l008f3FT4vmMJxM FXUVxRzh+wJzf7wzo5gj7A/nKqbxJNZySeEeA7mZNjP3Hf+gsOt2kS1KGvxoVvAD oBdh4J91oMjK3TbmwLWf5ZOGxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKuWTAbM cWR6hz+MaEeWQLQoLOGCMB8GA1UdIwQYMBaAFP9DHfjhO9f+xR57U1B7RTmp+WVm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkM0RS8zNDQ4NjUyQ0Yz Q0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFfN0ZIbnRUVUh0Rk9hbjVa V1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18wTWQtT0U3MV83RkhudFRVSHRGT2FuNVpXWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkM0RS8zNDQ4NjUyQ0YzQ0IxMUU1QUUzNjYwNjJDNEY5QUUwMi9fME1kLU9FNzFf N0ZIbnRUVUh0Rk9hbjVaV1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtO0H0nsKQgLoOc0Mz2a+aUvoWSnxBkhd3cMuJiMvVanLc81MKMGIPCD3UHSA YTnhlx4wvYFaugYElqyWvLOGhlHmm8qevlQhuqwgdFoRg4u2kTDI87f5wZqBe7rV bSFC2jrSB8JkVNb1NdPcIRlcfjHJpXLD7nlPkX2ML24DlN1PRvftqpl1V6X9N48P L+2+HwithHnuGwUHU+Ay22mxVSX5x7n+WS7gJVKgrjCTeKfoTlr3UalysO2697jE Pdg1XIjHaGNKNyfdGCIqRcwP5m64gAe/EjoIYYqx9bHMdQ4XPDFsNsfKLfQQAmFn d/8DmjngcpPXRjzx67cxrYpJrg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:11:33 2026 by rpki-client