$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft File: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft (raw, json) Hash identifier: gcR239/zxUNBKB16PCJ6CjvdKlMuhb1uJmV7jpHB0/E= Subject key identifier: CF:56:2D:B7:D6:CA:89:B3:7A:E7:18:39:E4:3A:EE:56:4E:A4:DD:CD Authority key identifier: E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 Certificate issuer: /CN=A91F59A6/serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Certificate serial: 0969 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft Manifest number: 093D Signing time: Tue 28 Jul 2026 18:02:27 +0000 Manifest this update: Tue 28 Jul 2026 18:02:27 +0000 Manifest next update: Tue 04 Aug 2026 18:02:27 +0000 Files and hashes: 1: 4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl (hash: nPP+6GH759mHrYnRj/NEW5p8GQbl4qeneWYUWcBDuMw=) 2: D385E420314711EBA579873DC4F9AE02.roa (hash: OXpsFXQnHysc6JgYoLG/ywf9w/jV3FpEntMMj1+ecpM=) 3: 19B0BAAE1CE611EBB543881CC4F9AE02.roa (hash: x1jD2hg6E8urDPutIfNWsExPrrmq8yEETqPUKu1cNM8=) 4: 18B1B5361CE611EBB543881CC4F9AE02.roa (hash: BoTL56JNkoT8zZTebPvc7QbRsS4FGOp32MGJ/vJjCqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2409 (0x969) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F59A6, serialNumber=E25FCD9B7725853942791A62D475ECFED7C03F64 Validity Not Before: Jul 28 18:02:27 2026 GMT Not After : Aug 4 18:02:27 2026 GMT Subject: CN=6a68eeb3-b520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:2c:f2:b3:b4:7f:5a:e7:5a:68:f8:ea:45: 05:5e:c8:f5:27:4f:0d:d6:f1:f0:c2:4f:24:66:84: a7:c1:a9:84:0f:a6:35:86:67:d0:f1:a1:ae:fd:d1: 73:28:08:0d:dd:3c:d3:9f:1f:48:b9:21:8a:41:ef: 48:f3:4c:7f:00:cf:44:fe:42:3f:2c:fb:6d:25:1b: 4e:9a:b9:34:01:72:76:67:f2:6b:89:19:b8:63:63: 75:fb:92:3f:6a:74:b1:4e:cf:29:52:98:0e:a8:7c: 7c:32:b5:00:19:0d:e9:03:72:08:91:67:cd:a4:e3: 37:2e:ec:0a:43:af:43:be:de:85:b0:a0:a2:9d:aa: 8c:8a:75:27:fd:74:16:ae:26:0b:f2:be:28:e8:01: 7d:76:d9:a7:60:8d:b9:96:dd:f5:7b:74:c2:78:b5: 86:3d:c2:26:37:4c:a0:27:70:f7:5f:fc:b4:c7:4c: be:73:14:c3:2f:54:1f:b5:54:65:6d:77:8e:c4:f5: 76:87:53:80:d4:8c:c2:55:20:a6:ee:10:c6:ad:45: c5:71:fe:19:f4:6c:e9:e3:e0:57:8e:3d:ae:fc:ba: d0:83:e2:9a:2f:cf:68:79:88:c2:dd:5c:8a:07:df: b3:83:24:92:f8:cf:be:72:48:bc:c6:b1:bf:9d:39: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:56:2D:B7:D6:CA:89:B3:7A:E7:18:39:E4:3A:EE:56:4E:A4:DD:CD X509v3 Authority Key Identifier: keyid:E2:5F:CD:9B:77:25:85:39:42:79:1A:62:D4:75:EC:FE:D7:C0:3F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59A6/E4EDAC18CB1A11EA87CD5544C4F9AE02/4l_Nm3clhTlCeRpi1HXs_tfAP2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:91:6b:de:74:a8:ff:d8:e7:9d:d8:eb:af:db:ec:0b:33:48: 6e:9d:2f:60:67:6d:79:56:db:a0:69:8a:1b:47:f9:4c:96:f5: d6:df:17:9f:9d:b2:9f:07:ee:0a:f5:c5:41:5a:ef:6d:e3:32: 96:3c:92:7b:21:11:5b:2c:9d:c2:41:6f:64:71:50:28:b7:c3: 8f:76:92:f2:25:9d:12:a5:f7:c7:5a:28:b8:10:ad:b2:98:19: 38:41:75:51:2a:bb:9b:33:e4:b2:a0:ee:ad:ca:70:0b:e5:11: 8f:7b:25:f7:38:45:20:ad:7c:34:56:38:76:49:1a:3c:26:fe: 60:3c:6f:27:b3:d4:5f:e4:3f:57:f6:d9:9d:6a:72:5d:8d:64: 65:2f:d5:7f:51:be:0b:3b:3f:91:bb:a8:e8:6c:62:25:be:b4: 7f:1b:85:21:ad:97:87:fc:48:87:c6:d8:61:f9:eb:85:a8:89: b4:b8:77:c4:97:a3:16:f7:f5:0a:b5:a1:d8:fd:8f:48:79:00: a5:85:f3:65:e2:5b:95:e8:77:90:a6:c9:08:ff:32:d7:32:c0: 96:49:0b:16:6e:98:3b:7a:84:28:24:c2:20:13:c9:ae:a5:db: 9f:80:9a:0c:7c:e7:58:67:a0:dc:d1:3f:a5:8f:79:fa:d9:fe: 87:93:db:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU5QTYxMTAvBgNVBAUTKEUyNUZDRDlCNzcyNTg1Mzk0Mjc5MUE2MkQ0NzVFQ0ZF RDdDMDNGNjQwHhcNMjYwNzI4MTgwMjI3WhcNMjYwODA0MTgwMjI3WjAYMRYwFAYD VQQDEw02YTY4ZWViMy1iNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKIs8rO0f1rnWmj46kUFXsj1J08N1vHwwk8kZoSnwamED6Y1hmfQ8aGu/dFz KAgN3TzTnx9IuSGKQe9I80x/AM9E/kI/LPttJRtOmrk0AXJ2Z/JriRm4Y2N1+5I/ anSxTs8pUpgOqHx8MrUAGQ3pA3IIkWfNpOM3LuwKQ69Dvt6FsKCinaqMinUn/XQW riYL8r4o6AF9dtmnYI25lt31e3TCeLWGPcImN0ygJ3D3X/y0x0y+cxTDL1QftVRl bXeOxPV2h1OA1IzCVSCm7hDGrUXFcf4Z9Gzp4+BXjj2u/LrQg+KaL89oeYjC3VyK B9+zgySS+M++cki8xrG/nTnBrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM9WLbfW yomzeucYOeQ67lZOpN3NMB8GA1UdIwQYMBaAFOJfzZt3JYU5QnkaYtR17P7XwD9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTlBNi9FNEVEQUMxOENC MUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhUbENlUnBpMUhYc190ZkFQ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRsX05tM2NsaFRsQ2VScGkxSFhzX3RmQVAyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTlBNi9FNEVEQUMxOENCMUExMUVBODdDRDU1NDRDNEY5QUUwMi80bF9ObTNjbGhU bENlUnBpMUhYc190ZkFQMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR5Fr3nSo/9jnndjrr9vsCzNIbp0vYGdteVbboGmKG0f5TJb11t8Xn52ynwfu CvXFQVrvbeMyljySeyERWyydwkFvZHFQKLfDj3aS8iWdEqX3x1oouBCtspgZOEF1 USq7mzPksqDurcpwC+URj3sl9zhFIK18NFY4dkkaPCb+YDxvJ7PUX+Q/V/bZnWpy XY1kZS/Vf1G+Czs/kbuo6GxiJb60fxuFIa2Xh/xIh8bYYfnrhaiJtLh3xJejFvf1 CrWh2P2PSHkApYXzZeJbleh3kKbJCP8y1zLAlkkLFm6YO3qEKCTCIBPJrqXbn4Ca DHznWGeg3NE/pY95+tn+h5PbjA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:49:44 2026 by rpki-client