$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft File: 4CEd1HfFtNoX56IChgOs2OcWZrU.mft (raw, json) Hash identifier: cyVkUYoxc+/tVJkvaVUGwRxGnSsCY8FFb/aqR6+/+Nw= Subject key identifier: F6:E3:1C:8F:DD:ED:9A:9E:A0:7F:CA:9C:91:69:67:8F:BA:08:3E:9F Authority key identifier: E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 Certificate issuer: /CN=A91EB1BE/serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Certificate serial: 13B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft Manifest number: 13A1 Signing time: Tue 28 Jul 2026 17:03:15 +0000 Manifest this update: Tue 28 Jul 2026 17:03:14 +0000 Manifest next update: Tue 04 Aug 2026 17:03:14 +0000 Files and hashes: 1: 4CEd1HfFtNoX56IChgOs2OcWZrU.crl (hash: jLh6s9UUiFP1Aj0lplxDKwsrmZvZ/+ddV8ZbrOuBfHY=) 2: 31E1DE72B04B11EE9F3B384BC4F9AE02.roa (hash: O9w5ukmDcrFDcEjD6HiwQa6Y82NCxJ277Oe6QTyQjzM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:03:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5045 (0x13b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB1BE, serialNumber=E0211DD477C5B4DA17E7A2028603ACD8E71666B5 Validity Not Before: Jul 28 17:03:14 2026 GMT Not After : Aug 4 17:03:14 2026 GMT Subject: CN=6a68e0d3-67b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a5:db:78:01:57:2e:35:db:e8:e1:61:43:04: cc:a3:91:0f:75:7e:72:11:67:13:10:44:98:3c:de: d8:ec:bf:30:df:11:a0:79:ae:1c:ce:38:bc:06:21: 21:ac:5f:9e:e7:57:6b:b3:63:bc:b9:8e:53:ca:d0: f2:bf:77:ba:63:4b:49:84:f3:47:86:d3:be:45:b6: 10:3f:c3:91:05:af:b0:75:e2:b6:a5:ff:54:4b:11: 72:70:b9:95:54:bd:b8:6d:a9:61:ef:48:66:cf:6f: 69:49:cb:26:7c:9d:17:12:93:af:8b:8a:cf:e9:c2: 8a:92:49:f3:0a:9f:21:04:77:0b:6f:e6:25:f4:89: 55:44:b4:cb:7d:c0:41:f6:ca:dc:d4:a7:89:71:ba: cb:10:89:d7:e5:a0:98:53:9c:e9:ec:72:a4:61:3f: 2a:bc:a0:34:bf:4c:90:20:39:36:be:ba:6d:1c:16: 66:9c:f3:21:70:c4:60:20:b9:1f:ae:71:9c:f8:d8: 75:ac:81:5e:3b:23:ff:81:e0:0d:ce:53:5c:72:33: ce:48:01:02:76:38:a4:fb:83:51:4c:1b:4c:ac:93: 7b:26:66:2c:fd:4e:2b:51:0e:e3:3f:51:a1:12:5e: 5b:65:48:a2:3e:05:91:0a:ca:43:76:ca:0c:b5:73: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E3:1C:8F:DD:ED:9A:9E:A0:7F:CA:9C:91:69:67:8F:BA:08:3E:9F X509v3 Authority Key Identifier: keyid:E0:21:1D:D4:77:C5:B4:DA:17:E7:A2:02:86:03:AC:D8:E7:16:66:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4CEd1HfFtNoX56IChgOs2OcWZrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB1BE/5A57786CC0C811E8AE805334C4F9AE02/4CEd1HfFtNoX56IChgOs2OcWZrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:f0:de:87:24:70:f1:8e:1a:8a:39:d5:2c:f5:ab:f6:1b:1d: 62:62:3b:ab:1a:d8:56:a5:15:be:59:68:2d:67:b8:0e:56:f4: 0c:65:eb:36:db:f3:72:3f:ea:63:1d:7d:4d:37:a3:59:bd:2c: cb:b2:62:a1:1c:5b:ad:b5:2d:3d:cc:b9:c3:91:4b:7c:01:75: b7:ec:14:5d:f7:52:60:9a:c8:be:c2:a5:c9:b2:1f:2c:50:3b: cf:47:69:34:33:9f:c9:a4:fc:b3:69:09:ff:12:e8:e0:b6:ad: 88:19:e9:1a:de:d0:1a:14:dc:da:7b:51:58:6a:87:cb:c8:51: ee:62:69:9c:a8:8e:8d:c9:a0:72:da:d7:ca:d9:66:b6:67:9c: 40:fe:09:08:a8:82:5f:2f:7a:0f:6f:c5:11:32:5d:10:34:75: 35:82:e2:9b:94:84:8d:4f:0d:39:47:4d:12:ec:84:a2:c4:2d: bd:96:4b:b2:c2:07:74:23:a8:bb:42:aa:aa:2e:37:61:a1:94: 20:ce:44:e7:da:b1:3a:fa:e2:36:7f:c9:8a:e7:44:41:c2:06: 37:4c:10:7d:a5:d1:44:cb:9b:91:cf:9a:6e:59:24:d2:23:51: 86:2b:41:be:04:33:cd:11:ad:4e:a3:6f:77:5d:49:37:7c:f9: 19:d3:1b:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIxQkUxMTAvBgNVBAUTKEUwMjExREQ0NzdDNUI0REExN0U3QTIwMjg2MDNBQ0Q4 RTcxNjY2QjUwHhcNMjYwNzI4MTcwMzE0WhcNMjYwODA0MTcwMzE0WjAYMRYwFAYD VQQDEw02YTY4ZTBkMy02N2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwaXbeAFXLjXb6OFhQwTMo5EPdX5yEWcTEESYPN7Y7L8w3xGgea4czji8BiEh rF+e51drs2O8uY5TytDyv3e6Y0tJhPNHhtO+RbYQP8ORBa+wdeK2pf9USxFycLmV VL24balh70hmz29pScsmfJ0XEpOvi4rP6cKKkknzCp8hBHcLb+Yl9IlVRLTLfcBB 9src1KeJcbrLEInX5aCYU5zp7HKkYT8qvKA0v0yQIDk2vrptHBZmnPMhcMRgILkf rnGc+Nh1rIFeOyP/geANzlNccjPOSAECdjik+4NRTBtMrJN7JmYs/U4rUQ7jP1Gh El5bZUiiPgWRCspDdsoMtXPf6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPbjHI/d 7ZqeoH/KnJFpZ4+6CD6fMB8GA1UdIwQYMBaAFOAhHdR3xbTaF+eiAoYDrNjnFma1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjFCRS81QTU3Nzg2Q0Mw QzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnROb1g1NklDaGdPczJPY1da clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRDRWQxSGZGdE5vWDU2SUNoZ09zMk9jV1pyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjFCRS81QTU3Nzg2Q0MwQzgxMUU4QUU4MDUzMzRDNEY5QUUwMi80Q0VkMUhmRnRO b1g1NklDaGdPczJPY1daclUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMvDehyRw8Y4aijnVLPWr9hsdYmI7qxrYVqUVvlloLWe4Dlb0DGXrNtvzcj/q Yx19TTejWb0sy7JioRxbrbUtPcy5w5FLfAF1t+wUXfdSYJrIvsKlybIfLFA7z0dp NDOfyaT8s2kJ/xLo4LatiBnpGt7QGhTc2ntRWGqHy8hR7mJpnKiOjcmgctrXytlm tmecQP4JCKiCXy96D2/FETJdEDR1NYLim5SEjU8NOUdNEuyEosQtvZZLssIHdCOo u0Kqqi43YaGUIM5E59qxOvriNn/JiudEQcIGN0wQfaXRRMubkc+ablkk0iNRhitB vgQzzRGtTqNvd11JN3z5GdMbVg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:29:08 2026 by rpki-client