$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft File: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft (raw, json) Hash identifier: OaV4cwzFJotdn/25IIPHucG1hD3rxFxHyw3Bz3TETdk= Subject key identifier: 16:B1:CA:A3:4E:B2:C8:23:BB:16:72:CC:F5:D3:B3:61:C6:27:FA:D1 Authority key identifier: AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 Certificate issuer: /CN=A91F3F02/serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Certificate serial: 10A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft Manifest number: 105D Signing time: Tue 28 Jul 2026 17:29:49 +0000 Manifest this update: Tue 28 Jul 2026 17:29:49 +0000 Manifest next update: Tue 04 Aug 2026 17:29:49 +0000 Files and hashes: 1: r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl (hash: 7h8ijseA3ppmsHbTRMA7JI0x5KDxKncgKmN/e9R3cts=) 2: B2B2930C21C911EB991D562EC4F9AE02.roa (hash: Sm/OBak1L/GxeMDIT65Qr8dDGwL4HkNDx/zYxoxP+Z8=) 3: 4BF23558026D11EBB136622CC4F9AE02.roa (hash: uBTNO8LacSzwG2NHzzxDXw4qYGxUCRj8Y9JqVZrsvk4=) 4: 8663E8B6658A11E9930DC678C4F9AE02.roa (hash: Ep5ULjpLJ97bV5VifiZFQEn0w2yErIZH+uUxSWGKvrg=) 5: B490CD0621C911EB991D562EC4F9AE02.roa (hash: HAKJGo3+54uKtPG7Z+H+eKIrSnUl+M/R2bQu2unHATw=) 6: F98DEF9A231F11EB99F53580C4F9AE02.roa (hash: MMtbNQJMN6S4OIeEKXKOY3PxiKyZUm2osdIwKT/I6/8=) 7: E049FDF87A4511EBBB2D0A52C4F9AE02.roa (hash: 8pSbOUGcxd9kIRUOKnyb177dIko/tnYgGhNgiXbljP4=) 8: B3876B1821C911EB991D562EC4F9AE02.roa (hash: MalwjoN5cuoqPXC8qDmvp2vBk51alqMZE2wuotImz1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4257 (0x10a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3F02, serialNumber=AF44780813BB6C05E997545B08D37936FFAC4661 Validity Not Before: Jul 28 17:29:49 2026 GMT Not After : Aug 4 17:29:49 2026 GMT Subject: CN=6a68e70d-4f6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ab:6d:92:c9:a8:96:a2:28:e1:f9:09:d2:75: f2:9d:0a:68:19:87:c1:cc:18:a6:33:ea:be:4b:43: 33:18:0d:b7:ad:1c:a7:76:39:61:32:3b:8a:b3:b3: 86:d8:9a:32:4b:68:3e:f9:89:9d:37:15:09:12:5f: cb:6a:f4:e2:2b:3e:ef:2c:d1:87:23:8d:40:c9:5b: ef:0b:70:70:fd:a2:67:0c:a4:b7:12:da:20:28:6a: 9b:c3:d7:0b:ea:ad:5a:56:17:eb:ac:68:22:b9:b3: f3:bc:58:c9:a1:06:15:b7:7a:90:55:70:37:c6:61: b7:fd:b7:57:b6:5a:5c:23:aa:b2:b8:44:89:c3:31: a7:fc:be:e0:3d:ea:f0:24:d9:31:96:4a:e5:ca:c3: c2:b0:e9:43:48:62:ab:67:12:75:2c:e4:5e:75:15: 3e:86:89:d3:6f:ad:d1:9d:f5:1a:5c:10:a8:8c:95: ce:74:03:dc:5f:29:e3:c5:af:66:f5:44:20:9c:61: 2b:d7:8e:a6:79:fa:80:cb:a3:d6:07:2b:57:c6:b5: 65:dd:2b:2b:df:99:e2:e7:67:54:c8:60:5e:7d:54: d6:0b:68:3d:17:fb:22:93:e4:f0:53:ab:d5:23:9f: 1f:8c:22:ef:87:0b:1b:31:89:09:9c:e5:a8:30:34: 56:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B1:CA:A3:4E:B2:C8:23:BB:16:72:CC:F5:D3:B3:61:C6:27:FA:D1 X509v3 Authority Key Identifier: keyid:AF:44:78:08:13:BB:6C:05:E9:97:54:5B:08:D3:79:36:FF:AC:46:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3F02/CCAB575063F011E9A9BCA141C4F9AE02/r0R4CBO7bAXpl1RbCNN5Nv-sRmE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:fb:15:7b:39:a3:cb:d9:5f:ff:1c:e3:84:2c:ac:61:8c:5c: 0a:19:b6:0a:41:94:0d:6d:39:4a:3e:0f:60:89:8a:fa:15:43: 60:cf:0f:50:6a:3b:39:9f:88:9b:c5:e6:d5:3e:f7:8f:b0:1e: 06:b5:20:42:fb:11:62:fd:de:a5:18:f9:c3:21:81:e1:dd:9c: d2:6c:83:c2:e0:b5:dd:98:90:31:14:ab:07:21:37:9d:94:e4: 2d:42:3c:9c:7b:9e:05:ed:94:82:c4:62:ff:26:0e:ac:74:75: 6e:7f:dc:53:e5:21:51:28:5b:67:68:fe:59:70:da:ca:8f:9b: 4d:ae:ed:30:6c:b4:9a:7f:d8:55:dd:7c:eb:8e:1c:56:7e:52: dc:72:4a:92:08:7a:c8:60:61:88:7f:b7:1d:48:44:a4:e0:a2: ab:4b:3f:74:bb:75:ef:ba:c3:ff:66:aa:b1:98:0c:e4:be:20: 7c:16:73:90:ee:ce:ac:64:ed:e0:04:57:db:39:2d:90:a2:ea: ab:c2:87:1a:a2:be:47:ce:cd:a9:24:97:3d:71:28:d7:ba:9b: ec:c3:6e:f5:d7:a6:8f:d6:7b:6c:30:b7:d5:2b:11:bc:cc:c4: 32:33:50:93:c0:78:cb:60:2e:82:0e:c1:d5:38:96:52:cd:68: 62:7a:e4:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNGMDIxMTAvBgNVBAUTKEFGNDQ3ODA4MTNCQjZDMDVFOTk3NTQ1QjA4RDM3OTM2 RkZBQzQ2NjEwHhcNMjYwNzI4MTcyOTQ5WhcNMjYwODA0MTcyOTQ5WjAYMRYwFAYD VQQDEw02YTY4ZTcwZC00ZjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KttksmolqIo4fkJ0nXynQpoGYfBzBimM+q+S0MzGA23rRyndjlhMjuKs7OG 2JoyS2g++YmdNxUJEl/LavTiKz7vLNGHI41AyVvvC3Bw/aJnDKS3EtogKGqbw9cL 6q1aVhfrrGgiubPzvFjJoQYVt3qQVXA3xmG3/bdXtlpcI6qyuESJwzGn/L7gPerw JNkxlkrlysPCsOlDSGKrZxJ1LORedRU+honTb63RnfUaXBCojJXOdAPcXynjxa9m 9UQgnGEr146mefqAy6PWBytXxrVl3Ssr35ni52dUyGBefVTWC2g9F/sik+TwU6vV I58fjCLvhwsbMYkJnOWoMDRWBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBaxyqNO ssgjuxZyzPXTs2HGJ/rRMB8GA1UdIwQYMBaAFK9EeAgTu2wF6ZdUWwjTeTb/rEZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0YwMi9DQ0FCNTc1MDYz RjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JBWHBsMVJiQ05ONU52LXNS bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwUjRDQk83YkFYcGwxUmJDTk41TnYtc1JtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0YwMi9DQ0FCNTc1MDYzRjAxMUU5QTlCQ0ExNDFDNEY5QUUwMi9yMFI0Q0JPN2JB WHBsMVJiQ05ONU52LXNSbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnvsVezmjy9lf/xzjhCysYYxcChm2CkGUDW05Sj4PYImK+hVDYM8PUGo7OZ+I m8Xm1T73j7AeBrUgQvsRYv3epRj5wyGB4d2c0myDwuC13ZiQMRSrByE3nZTkLUI8 nHueBe2UgsRi/yYOrHR1bn/cU+UhUShbZ2j+WXDayo+bTa7tMGy0mn/YVd18644c Vn5S3HJKkgh6yGBhiH+3HUhEpOCiq0s/dLt177rD/2aqsZgM5L4gfBZzkO7OrGTt 4ARX2zktkKLqq8KHGqK+R87NqSSXPXEo17qb7MNu9demj9Z7bDC31SsRvMzEMjNQ k8B4y2Augg7B1TiWUs1oYnrkOw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:05:49 2026 by rpki-client