$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: eFpJodYYcviIBw7wdCx+B2PGyzEfQtYRt8Phu2PsVCw= Subject key identifier: 3F:2E:11:C7:E3:3B:49:FA:7C:C3:25:86:99:F6:2C:FF:37:99:B5:90 Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 12BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 129E Signing time: Tue 28 Jul 2026 17:10:06 +0000 Manifest this update: Tue 28 Jul 2026 17:10:06 +0000 Manifest next update: Tue 04 Aug 2026 17:10:06 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: EXosRR0TnVXxMqN4esN2a4OoXjIbv99rsJddyQRE8P8=) 2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: Q8GHoeHbmqW7M4R7JqdbouyG47lAXEk2l5ZINQlZhUw=) 3: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: B4PjSBYjorfWxo1YSpPxhGaOBSD9dJ0o8/kl1/H4JCI=) 4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: zTMcMU85Vfrv28bnOAwruUSVF1/v5V80nulZ37SkFAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:10:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4799 (0x12bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Jul 28 17:10:06 2026 GMT Not After : Aug 4 17:10:06 2026 GMT Subject: CN=6a68e26e-ff29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6a:31:8b:48:e3:6d:c9:34:77:ff:53:10:98: 1c:00:1b:32:c3:84:37:8a:b3:b4:81:4a:a0:b4:b6: cb:81:86:13:cf:bc:b8:46:c0:13:14:9f:e2:4b:47: f5:b5:15:a1:5b:f7:68:85:b1:a9:0d:a1:18:3b:5e: 95:63:28:8d:1a:28:83:9b:75:19:06:c7:3a:9c:a4: 17:d6:ce:7b:c0:10:18:e3:d7:14:2c:a7:1c:28:f6: 08:e6:9e:f1:a0:58:66:72:ec:3b:79:bc:5a:ec:da: 04:ee:30:d1:87:02:b9:6d:03:05:32:9f:5f:7f:a9: 38:7d:54:c5:a4:20:6b:6c:4b:11:8e:04:8e:ca:25: 0e:9a:1b:6d:1d:76:6b:fe:8c:a9:42:93:f3:e0:a2: 94:2d:12:03:dc:78:4b:79:e6:1c:81:92:cb:aa:e5: 5e:f7:f0:bc:c9:4d:74:9d:1f:65:dd:b2:f1:1a:c5: f9:ed:63:5c:6a:43:c8:be:10:06:72:cc:3b:7c:cd: b5:c9:f8:2b:88:1f:a7:25:7b:ed:9a:b7:4a:17:81: a5:7d:b5:0a:32:78:8f:68:3e:08:98:77:88:bb:bd: 23:03:e0:3f:e6:ac:7e:a3:bd:98:f3:5d:d2:6c:0a: b9:68:7b:0e:89:a1:b4:b0:35:30:52:9e:e7:b3:71: 47:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2E:11:C7:E3:3B:49:FA:7C:C3:25:86:99:F6:2C:FF:37:99:B5:90 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c3:9c:65:e2:e1:f0:e2:0d:84:5d:d6:6c:fd:09:55:d7:80: 4a:10:7a:06:c4:2c:b1:a9:41:27:ef:b6:c2:e0:8c:3b:a2:aa: 0f:f8:62:55:ab:0d:3c:b5:a8:04:a7:03:b5:b0:55:f1:2c:e6: 1a:22:a6:42:05:43:4e:27:93:dc:ae:90:4e:cd:60:3d:6c:ac: b3:fe:32:e9:3b:44:e9:0a:0c:fd:cb:3c:cc:6e:30:d6:6d:03: 11:82:ea:63:30:ed:37:d3:d4:df:19:61:62:de:99:64:5c:60: c8:7c:83:a7:a2:ff:69:06:49:01:97:5b:67:e2:ae:8e:86:b5: d3:bc:b3:d5:5a:af:f0:4e:d0:d5:1c:a7:ff:f6:12:ec:a0:3c: 4c:0d:86:ef:71:52:d2:24:b3:ef:be:c2:c8:a5:1e:d3:e4:37: 77:f8:3b:75:a9:af:92:17:82:76:5d:91:29:f4:2f:89:3b:a4: b1:18:70:b8:22:44:c4:b0:a9:7c:06:f3:9f:75:74:a2:38:41: e2:45:f1:11:e2:b5:ed:9a:5b:c2:82:d3:4e:02:f9:ee:c8:a4: 04:e2:ec:91:24:14:1c:0f:db:a4:9d:68:e8:79:1d:cb:fc:2e: 21:2a:49:fd:2a:2f:84:43:ce:a8:cb:35:39:1e:d2:1b:8c:ad: b6:40:de:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjYwNzI4MTcxMDA2WhcNMjYwODA0MTcxMDA2WjAYMRYwFAYD VQQDEw02YTY4ZTI2ZS1mZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGoxi0jjbck0d/9TEJgcABsyw4Q3irO0gUqgtLbLgYYTz7y4RsATFJ/iS0f1 tRWhW/dohbGpDaEYO16VYyiNGiiDm3UZBsc6nKQX1s57wBAY49cULKccKPYI5p7x oFhmcuw7ebxa7NoE7jDRhwK5bQMFMp9ff6k4fVTFpCBrbEsRjgSOyiUOmhttHXZr /oypQpPz4KKULRID3HhLeeYcgZLLquVe9/C8yU10nR9l3bLxGsX57WNcakPIvhAG csw7fM21yfgriB+nJXvtmrdKF4GlfbUKMniPaD4ImHeIu70jA+A/5qx+o72Y813S bAq5aHsOiaG0sDUwUp7ns3FHJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD8uEcfj O0n6fMMlhpn2LP83mbWQMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcsOcZeLh8OINhF3WbP0JVdeAShB6BsQssalBJ++2wuCMO6KqD/hiVasNPLWo BKcDtbBV8SzmGiKmQgVDTieT3K6QTs1gPWyss/4y6TtE6QoM/cs8zG4w1m0DEYLq YzDtN9PU3xlhYt6ZZFxgyHyDp6L/aQZJAZdbZ+Kujoa107yz1Vqv8E7Q1Ryn//YS 7KA8TA2G73FS0iSz777CyKUe0+Q3d/g7damvkheCdl2RKfQviTuksRhwuCJExLCp fAbzn3V0ojhB4kXxEeK17ZpbwoLTTgL57sikBOLskSQUHA/bpJ1o6Hkdy/wuISpJ /SovhEPOqMs1OR7SG4yttkDeGA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:16:21 2026 by rpki-client