$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft File: G5HVFg99VrcFqFFsahz0L0ln71Y.mft (raw, json) Hash identifier: fQobFTa3NTDQe0mQk6Y5wdUr/Uuuq9CKeGs3rzXqxb4= Subject key identifier: DC:E8:BA:E0:66:E2:3C:C4:9B:58:F4:54:A6:BC:79:79:76:5C:7E:CC Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0A21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft Manifest number: 0A16 Signing time: Tue 28 Jul 2026 20:06:22 +0000 Manifest this update: Tue 28 Jul 2026 20:06:22 +0000 Manifest next update: Tue 04 Aug 2026 20:06:22 +0000 Files and hashes: 1: G5HVFg99VrcFqFFsahz0L0ln71Y.crl (hash: MVZW9oD8nT/Ji5M/9XvmnFcD5EhF9gHS9jLkHhGp3p0=) 2: A37D1F4AF51A11F08A3A39E6586F56BC.roa (hash: dtXmtJBVm8P8OuQoT+Q52qD+Vudy7GZ/K52aKBTJI5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2593 (0xa21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: Jul 28 20:06:22 2026 GMT Not After : Aug 4 20:06:22 2026 GMT Subject: CN=6a690bbe-5689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7b:e6:ec:35:2c:56:87:cf:b1:d3:ca:d2:5a: 98:59:75:b4:50:c3:9f:8c:9d:a0:99:63:6a:36:7b: d4:0a:a9:04:6e:44:3d:f0:b8:bc:20:b2:ba:49:c3: 53:64:b8:fc:7e:d5:04:02:51:16:1a:5d:92:73:c7: 0b:20:fb:16:4c:4f:ab:43:3e:eb:85:ac:23:de:c3: 22:4f:59:c1:d6:28:c5:be:68:e3:05:c0:4a:59:93: 8a:05:64:34:51:75:b4:24:53:46:f6:d6:9a:03:a0: e0:b4:c9:39:74:55:85:55:6c:1c:70:5a:90:7b:c8: d3:d9:a8:4d:6c:9f:5a:08:8f:85:95:95:36:98:92: 5c:3b:17:4a:f0:8b:c7:42:dc:3a:66:44:a1:d4:bf: 96:b1:c1:7a:34:a2:a9:d2:ef:8f:f7:c9:30:37:8d: c5:98:fb:a5:fe:11:6a:f8:52:53:78:72:60:2e:b2: c7:5c:0a:78:08:91:81:da:49:c9:7a:10:96:fb:f0: 5b:27:3e:02:b2:80:91:45:3c:0f:f3:9a:70:42:88: 2f:ba:90:17:7f:4e:f0:00:b0:9a:b6:c3:3f:a2:37: 60:ec:12:04:42:1c:67:3f:92:4b:5e:42:84:be:33: fc:de:9b:bb:27:4a:d1:53:84:08:7c:98:a9:5f:69: b1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E8:BA:E0:66:E2:3C:C4:9B:58:F4:54:A6:BC:79:79:76:5C:7E:CC X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:5c:d3:8b:75:c0:68:c1:f4:08:cf:ef:b3:e5:97:82:4b:c7: c6:f6:97:e5:e6:77:2d:c0:b9:c6:35:f3:ef:63:d8:f8:d1:d7: a8:d4:95:c8:fe:ea:ea:1a:06:4d:2d:c2:bc:3f:41:0c:50:e4: 2f:ca:80:75:63:37:d4:8f:c3:92:92:f9:d7:d4:62:a8:4e:9e: c3:a5:a4:7a:84:c7:69:d3:2f:fe:03:9c:69:0b:ec:6b:10:25: 84:95:77:cd:04:31:c0:90:15:22:c1:5a:72:5a:d7:7f:17:eb: 3f:e9:4c:8f:08:1e:6f:ee:8d:29:8a:fb:2e:1a:75:a0:3a:e1: b2:e1:aa:98:4e:56:a0:67:ee:ce:1d:63:4e:ff:16:3c:65:96: 7e:6d:0f:0d:3c:5d:51:9a:5b:69:96:3d:d3:32:15:a5:e7:39: 72:06:df:78:20:2b:28:57:c1:e6:1c:e4:0f:db:9c:09:49:94: 20:f9:ca:e4:d6:5b:46:3e:60:c4:2c:2a:1f:63:fc:a5:bf:0a: 94:e3:6f:aa:95:5b:ac:1c:dc:34:07:d8:4a:ed:63:42:48:de: c5:8a:0f:90:b0:f2:0c:12:07:13:26:c9:c4:5d:2b:3c:5c:8f: 16:1b:72:36:a1:82:2b:fb:54:0a:2d:07:07:d6:55:01:ae:4a: 60:bd:fb:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjYwNzI4MjAwNjIyWhcNMjYwODA0MjAwNjIyWjAYMRYwFAYD VQQDEw02YTY5MGJiZS01Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nvm7DUsVofPsdPK0lqYWXW0UMOfjJ2gmWNqNnvUCqkEbkQ98Li8ILK6ScNT ZLj8ftUEAlEWGl2Sc8cLIPsWTE+rQz7rhawj3sMiT1nB1ijFvmjjBcBKWZOKBWQ0 UXW0JFNG9taaA6DgtMk5dFWFVWwccFqQe8jT2ahNbJ9aCI+FlZU2mJJcOxdK8IvH Qtw6ZkSh1L+WscF6NKKp0u+P98kwN43FmPul/hFq+FJTeHJgLrLHXAp4CJGB2knJ ehCW+/BbJz4CsoCRRTwP85pwQogvupAXf07wALCatsM/ojdg7BIEQhxnP5JLXkKE vjP83pu7J0rRU4QIfJipX2mx6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNzouuBm 4jzEm1j0VKa8eXl2XH7MMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjU1NC9FQjFDQkJFMjlFNUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZy Y0ZxRkZzYWh6MEwwbG43MVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj1zTi3XAaMH0CM/vs+WXgkvHxvaX5eZ3LcC5xjXz72PY+NHXqNSVyP7q6hoG TS3CvD9BDFDkL8qAdWM31I/DkpL519RiqE6ew6WkeoTHadMv/gOcaQvsaxAlhJV3 zQQxwJAVIsFaclrXfxfrP+lMjwgeb+6NKYr7Lhp1oDrhsuGqmE5WoGfuzh1jTv8W PGWWfm0PDTxdUZpbaZY90zIVpec5cgbfeCArKFfB5hzkD9ucCUmUIPnK5NZbRj5g xCwqH2P8pb8KlONvqpVbrBzcNAfYSu1jQkjexYoPkLDyDBIHEybJxF0rPFyPFhty NqGCK/tUCi0HB9ZVAa5KYL37Eg== -----END CERTIFICATE-----Generated at Wed Jul 29 17:50:59 2026 by rpki-client