$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: 4nSyVOGefITJFHgEsJdx4qJTs5MYHrrgFx9e68t2rhQ= Subject key identifier: A0:83:90:F8:5F:00:A1:2B:43:FE:43:0A:DA:84:D3:3D:D3:EE:BE:55 Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 35A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 3581 Signing time: Tue 28 Jul 2026 15:19:09 +0000 Manifest this update: Tue 28 Jul 2026 15:19:08 +0000 Manifest next update: Tue 04 Aug 2026 15:19:08 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: MN9ozzY+UTBrDin2bkuklmhqBxUO1eZrT38ejvMKsvw=) 2: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: 2hfGsNVUmbO2vvpF424TRAk1BpXknhQcicom2XdbcDU=) 3: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 7bGtPyBGoN1SwqVRrEUHmbCfJdOGkrb5JuyAmWIVvAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13734 (0x35a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Jul 28 15:19:08 2026 GMT Not After : Aug 4 15:19:08 2026 GMT Subject: CN=6a68c86c-cf2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:14:b2:62:98:b6:64:a3:88:71:81:f5:91:28: a7:99:21:ce:cc:41:e6:47:2b:39:e9:17:2f:f8:13: dd:6f:02:e6:2d:ea:35:01:9d:92:15:c2:a4:c6:c7: 27:1b:ac:94:0f:98:21:cf:aa:79:89:c1:c5:ca:9d: 59:78:6c:d4:d6:21:6c:8f:dd:35:cd:2f:7f:52:1f: 64:bb:20:8e:59:3d:0a:7e:bc:d2:6f:d0:df:51:1d: ec:0d:4c:cb:a2:9c:97:55:b8:f1:c4:c1:df:8e:c8: 7f:68:94:6f:00:b7:f3:3a:3f:d8:7b:ae:16:a6:5d: 02:a8:4a:9c:d3:e7:37:60:2d:ff:00:2d:08:2b:05: 68:68:41:92:4b:46:c0:d0:a0:11:31:80:70:69:58: f4:9e:74:c7:76:b1:23:1f:5b:e1:3f:2a:80:9e:28: 02:76:c0:16:c4:35:6b:5b:3f:fe:c3:41:03:0c:44: 49:fc:90:c0:f6:81:df:79:02:9e:02:c4:fc:7a:c6: 0a:38:8f:1e:1c:e0:ec:7d:cd:dd:dd:f8:cf:38:a2: e6:d2:77:89:7a:37:86:24:7b:39:a9:a9:ef:5f:ed: 20:34:93:71:5a:a8:19:ef:e1:9e:10:f1:ec:6a:f1: 70:45:5f:cc:1d:81:da:50:9a:61:5a:6c:f5:9d:5a: f3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:83:90:F8:5F:00:A1:2B:43:FE:43:0A:DA:84:D3:3D:D3:EE:BE:55 X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b0:32:f1:e4:84:b5:ef:c4:55:6d:30:e2:1a:d6:2a:87:07: 42:2b:54:a3:92:1d:b4:2f:15:ce:dd:95:cb:f9:35:df:54:60: 25:1a:da:ed:7b:4e:be:51:50:73:99:05:67:0a:24:52:55:28: 02:93:da:cc:3a:62:c1:95:a3:04:e5:de:9f:96:e7:8c:31:2a: 53:98:48:ee:c0:87:a3:31:a6:36:81:f8:55:06:8c:4d:92:7d: 11:c9:4b:9b:5e:8b:b1:69:34:71:31:a1:96:8d:25:e5:ae:b1: 98:d6:14:b2:f5:c8:d1:ab:49:c3:93:28:35:9a:df:98:0b:b9: 89:9b:38:63:c5:7e:a6:58:1a:16:15:75:b0:13:d9:df:39:8d: 95:85:96:a2:a7:2b:84:88:2c:83:87:8f:f7:e8:92:83:ca:d0: ee:30:e9:19:27:1e:c0:e9:fb:e1:dd:40:01:2a:dc:fa:a7:d5: 56:85:ba:db:9a:86:55:59:e9:8c:ec:04:c1:7e:74:c4:34:70: 3a:23:7b:bd:0d:f0:e8:c9:29:ef:28:5f:6e:01:a2:c6:07:9d: 6b:f3:e2:92:ee:6d:46:a1:4c:d4:81:e2:37:97:17:c4:b6:6e: 6c:71:4e:1f:62:ec:9b:9c:4a:3d:b0:b0:9f:c4:0d:96:7a:ef: 43:f5:e8:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjYwNzI4MTUxOTA4WhcNMjYwODA0MTUxOTA4WjAYMRYwFAYD VQQDEw02YTY4Yzg2Yy1jZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuBSyYpi2ZKOIcYH1kSinmSHOzEHmRys56Rcv+BPdbwLmLeo1AZ2SFcKkxscn G6yUD5ghz6p5icHFyp1ZeGzU1iFsj901zS9/Uh9kuyCOWT0KfrzSb9DfUR3sDUzL opyXVbjxxMHfjsh/aJRvALfzOj/Ye64Wpl0CqEqc0+c3YC3/AC0IKwVoaEGSS0bA 0KARMYBwaVj0nnTHdrEjH1vhPyqAnigCdsAWxDVrWz/+w0EDDERJ/JDA9oHfeQKe AsT8esYKOI8eHODsfc3d3fjPOKLm0neJejeGJHs5qanvX+0gNJNxWqgZ7+GeEPHs avFwRV/MHYHaUJphWmz1nVrzXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCDkPhf AKErQ/5DCtqE0z3T7r5VMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJLAy8eSEte/EVW0w4hrWKocHQitUo5IdtC8Vzt2Vy/k131RgJRra7XtOvlFQ c5kFZwokUlUoApPazDpiwZWjBOXen5bnjDEqU5hI7sCHozGmNoH4VQaMTZJ9EclL m16LsWk0cTGhlo0l5a6xmNYUsvXI0atJw5MoNZrfmAu5iZs4Y8V+plgaFhV1sBPZ 3zmNlYWWoqcrhIgsg4eP9+iSg8rQ7jDpGScewOn74d1AASrc+qfVVoW625qGVVnp jOwEwX50xDRwOiN7vQ3w6Mkp7yhfbgGixgeda/Piku5tRqFM1IHiN5cXxLZubHFO H2Lsm5xKPbCwn8QNlnrvQ/XoFQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:29:34 2026 by rpki-client