$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft File: eHnvTZd9yKcBAzr1eKtUikC2lOE.mft (raw, json) Hash identifier: qZu837MfX2ZbgCTv/rid8zH6hiV9XVkKU4SrAPiO7NU= Subject key identifier: FC:31:9C:A0:C4:06:7A:55:49:E4:29:78:43:C4:3B:C0:CA:E5:F2:B3 Authority key identifier: 78:79:EF:4D:97:7D:C8:A7:01:03:3A:F5:78:AB:54:8A:40:B6:94:E1 Certificate issuer: /CN=A91F0EF9/serialNumber=7879EF4D977DC8A701033AF578AB548A40B694E1 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft Manifest number: 02 Signing time: Tue 28 Jul 2026 15:37:09 +0000 Manifest this update: Tue 28 Jul 2026 15:37:08 +0000 Manifest next update: Tue 04 Aug 2026 15:37:08 +0000 Files and hashes: 1: eHnvTZd9yKcBAzr1eKtUikC2lOE.crl (hash: 8HDNGDqwttjwOCk5c9MfrwIGkfsptmc6v4m5BOPP0m8=) 2: 2C9C69108A9A11F1AFC3D80E4E11F970.roa (hash: uSqkn8LIl8mlBYrH3ffPd4fErtRj9+veTGhqeaUcpmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.crl rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:37:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0EF9, serialNumber=7879EF4D977DC8A701033AF578AB548A40B694E1 Validity Not Before: Jul 28 15:37:08 2026 GMT Not After : Aug 4 15:37:08 2026 GMT Subject: CN=6a68cca4-188b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:e5:c4:e1:69:b3:47:91:85:69:d8:89:5c: e3:94:93:f9:6f:e2:7d:4d:63:ef:25:c4:83:bc:48: 2b:73:da:e1:8a:35:09:15:4f:f3:44:38:9a:b0:f6: 11:92:e1:91:30:e5:c1:5d:e0:42:98:fd:0f:90:29: bc:0c:4b:a6:2b:1b:9f:27:38:50:4a:0a:85:81:82: f8:97:12:c8:04:b4:59:05:93:d5:cb:cf:d2:eb:02: 5d:43:47:2a:b7:67:d6:23:fd:5e:2a:19:32:2f:6e: 95:5d:74:68:67:b8:94:7c:46:cb:93:6d:4b:23:6f: d9:63:69:cb:5c:1c:1d:43:98:5c:01:5d:45:98:1f: e0:ef:11:50:86:af:cb:03:16:d4:9e:93:39:c9:b8: c7:be:ed:6b:9f:2a:50:d0:1d:d5:4c:a7:5f:3f:60: 56:15:47:f9:4d:5b:2b:1d:36:3f:42:49:ae:36:7c: 1b:dc:cf:03:50:4f:f3:b6:3a:3a:a2:ef:e5:fb:79: a3:57:36:14:51:f2:de:94:76:39:fd:d2:0b:c5:32: 69:b3:d6:95:73:4d:1c:2b:9b:99:1d:f6:43:2e:66: 6d:29:32:f5:fb:02:8e:c8:e0:55:f0:3e:da:c2:66: 2a:6e:42:a4:a5:d9:50:2c:b5:aa:ae:60:89:bb:5c: a5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:31:9C:A0:C4:06:7A:55:49:E4:29:78:43:C4:3B:C0:CA:E5:F2:B3 X509v3 Authority Key Identifier: keyid:78:79:EF:4D:97:7D:C8:A7:01:03:3A:F5:78:AB:54:8A:40:B6:94:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHnvTZd9yKcBAzr1eKtUikC2lOE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0EF9/E2906AAC8A9811F18065D4D94D11F970/eHnvTZd9yKcBAzr1eKtUikC2lOE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:1a:b5:cc:08:d6:f9:16:b1:90:bc:9f:6f:52:41:7c:d0:53: 99:b7:84:7c:de:59:58:d2:43:f9:cb:65:da:79:eb:a0:70:17: e9:eb:32:f9:8a:3b:1b:d6:c5:bc:39:83:30:35:95:12:fa:5d: 0e:51:4c:c3:10:74:d1:25:26:54:f2:0a:28:b6:8a:f4:14:2b: e3:52:00:1f:9c:11:e3:a3:b5:ef:d8:35:25:a9:63:85:e9:eb: 30:1c:d6:a2:49:74:22:78:fc:98:96:de:5d:02:b7:45:ab:34: e1:c9:49:ca:9d:4d:96:4a:a8:ef:37:f7:8c:5c:15:a8:c2:14: 90:2d:6c:ee:3d:6c:22:d0:ef:ea:51:2f:92:89:d0:4a:e3:ec: 1b:dd:5e:93:81:a2:f9:9c:c6:f1:e8:4c:30:e9:c6:47:a1:54: 7b:55:67:da:c5:bf:b0:cb:21:9a:b4:a8:a3:52:c0:03:03:e1: 05:e8:cd:7b:91:b2:83:54:09:90:22:d0:68:66:27:44:f7:c1: 11:25:2e:61:6a:be:7e:fe:08:88:26:cc:c4:b1:09:a1:6d:b4: 8a:18:61:a7:16:ee:04:06:16:a0:bf:43:e8:0e:c2:b9:a7:7b: 2c:93:99:fd:ae:00:06:74:c9:5f:4a:5d:03:ef:15:5e:e8:64: b5:f7:c9:cf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEVGOTExMC8GA1UEBRMoNzg3OUVGNEQ5NzdEQzhBNzAxMDMzQUY1NzhBQjU0OEE0 MEI2OTRFMTAeFw0yNjA3MjgxNTM3MDhaFw0yNjA4MDQxNTM3MDhaMBgxFjAUBgNV BAMTDTZhNjhjY2E0LTE4OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGhuXE4WmzR5GFadiJXOOUk/lv4n1NY+8lxIO8SCtz2uGKNQkVT/NEOJqw9hGS 4ZEw5cFd4EKY/Q+QKbwMS6YrG58nOFBKCoWBgviXEsgEtFkFk9XLz9LrAl1DRyq3 Z9Yj/V4qGTIvbpVddGhnuJR8RsuTbUsjb9ljactcHB1DmFwBXUWYH+DvEVCGr8sD FtSekznJuMe+7WufKlDQHdVMp18/YFYVR/lNWysdNj9CSa42fBvczwNQT/O2Ojqi 7+X7eaNXNhRR8t6Udjn90gvFMmmz1pVzTRwrm5kd9kMuZm0pMvX7Ao7I4FXwPtrC ZipuQqSl2VAstaquYIm7XKVPAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/DGcoMQG elVJ5Cl4Q8Q7wMrl8rMwHwYDVR0jBBgwFoAUeHnvTZd9yKcBAzr1eKtUikC2lOEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwRUY5L0UyOTA2QUFDOEE5 ODExRjE4MDY1RDREOTREMTFGOTcwL2VIbnZUWmQ5eUtjQkF6cjFlS3RVaWtDMmxP RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZUhudlRaZDl5S2NCQXpyMWVLdFVpa0MybE9FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw RUY5L0UyOTA2QUFDOEE5ODExRjE4MDY1RDREOTREMTFGOTcwL2VIbnZUWmQ5eUtj QkF6cjFlS3RVaWtDMmxPRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQClGrXMCNb5FrGQvJ9vUkF80FOZt4R83llY0kP5y2XaeeugcBfp6zL5ijsb1sW8 OYMwNZUS+l0OUUzDEHTRJSZU8gootor0FCvjUgAfnBHjo7Xv2DUlqWOF6eswHNai SXQiePyYlt5dArdFqzThyUnKnU2WSqjvN/eMXBWowhSQLWzuPWwi0O/qUS+SidBK 4+wb3V6TgaL5nMbx6Eww6cZHoVR7VWfaxb+wyyGatKijUsADA+EF6M17kbKDVAmQ ItBoZidE98ERJS5har5+/giIJszEsQmhbbSKGGGnFu4EBhagv0PoDsK5p3ssk5n9 rgAGdMlfSl0D7xVe6GS198nP -----END CERTIFICATE-----Generated at Wed Jul 29 11:06:26 2026 by rpki-client