$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft File: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json) Hash identifier: fmScJ2Wu2hqa30JaAUPS8sLQ7iCLZkTN5nbDL95oUjQ= Subject key identifier: 92:02:F2:15:67:8E:B2:DC:BB:75:1B:5C:33:7C:00:74:71:6D:28:45 Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E Certificate issuer: /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E Certificate serial: 0888 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft Manifest number: 0871 Signing time: Sun 26 Jul 2026 21:28:37 +0000 Manifest this update: Sun 26 Jul 2026 21:28:36 +0000 Manifest next update: Sun 02 Aug 2026 21:28:36 +0000 Files and hashes: 1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: UoSY4GB41Gwyq4a7LF9yztPC6vf2B2dOilpBnlnWKiw=) 2: B1B8588ADAE511F0B4F8D00379D3641D.roa (hash: 7Hski1LihuXP4DCejah8rpbbpApVv3sXUWUNBiqFJoY=) 3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: PI9xVbuN9iLwRFvPVikPHj6xkwP6ohiLgSsNDUNun9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2184 (0x888) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E Validity Not Before: Jul 26 21:28:36 2026 GMT Not After : Aug 2 21:28:36 2026 GMT Subject: CN=6a667c04-1473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:6f:bf:2f:c2:d1:82:8b:3f:dc:bb:34:dc: 72:6b:6f:69:3b:9d:a2:10:a2:50:ca:74:8d:98:1f: b6:39:ac:04:29:8b:02:81:5c:c6:59:6b:1b:80:11: 66:a2:de:79:1f:b7:5b:e2:fd:6b:ea:e7:21:de:56: a6:fc:48:9e:10:8c:74:91:ff:66:bc:9f:6b:ac:ec: b5:f9:3c:03:87:c9:3f:c8:42:c8:91:d3:01:7d:58: f8:9f:f6:af:d5:1d:c9:14:40:20:ce:10:96:f3:94: 5b:2b:69:94:c2:4f:ff:b8:00:57:c7:73:70:8c:02: c3:87:17:d4:1a:64:c1:20:7c:7d:83:23:e1:6a:0d: b1:5c:21:d3:e7:fb:05:d8:9c:35:2c:a0:8c:58:67: b2:80:0b:c8:89:ab:25:0c:75:21:ad:6a:0c:ce:09: ab:b3:04:15:f7:ed:7e:2c:8d:0d:be:ed:8b:72:64: 46:dd:92:36:cb:c1:b7:9f:3c:0f:18:cd:5d:d1:fc: dc:9a:d0:19:eb:0c:e5:24:00:39:86:fb:93:92:80: b1:24:c7:43:ce:5b:43:15:37:df:e6:39:d0:fb:ea: 2b:f7:ac:82:e2:88:67:a9:00:1f:b9:8a:40:f4:d1: 50:7f:bb:55:7a:94:3a:e1:b2:3a:71:ca:23:b1:c2: f0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:02:F2:15:67:8E:B2:DC:BB:75:1B:5C:33:7C:00:74:71:6D:28:45 X509v3 Authority Key Identifier: keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:17:e8:0b:0a:00:cd:e1:e1:c9:da:44:92:84:59:9e:6b:e2: c2:17:41:f8:a5:5f:be:d8:4c:14:c4:cb:44:29:81:33:83:00: 74:d5:fc:36:b5:e1:55:36:9e:88:9e:ea:78:7f:df:f1:44:de: a9:a1:25:98:3c:d1:92:0e:84:0b:26:9a:42:7e:b9:02:d6:14: 74:49:bc:46:87:e9:83:73:45:e2:29:72:39:39:5a:03:f5:7c: 8f:a2:3e:06:2a:c2:36:3e:d4:93:85:7f:51:4e:69:eb:1d:b4: fe:87:fe:bb:5a:50:cc:aa:5b:78:0b:1e:16:5e:9c:e6:6c:56: ee:f5:09:f9:94:c3:3f:70:4f:58:8e:95:0e:d0:52:21:e2:ee: ae:7e:f1:83:27:33:3f:b2:b7:8b:f7:32:f9:3b:5f:f9:aa:da: a7:3d:d3:ff:1c:e7:98:0b:57:67:9a:ff:80:ba:e2:6e:1a:0e: 7b:73:47:bb:25:97:8e:3d:d0:05:82:95:32:f7:13:37:c0:95: 41:ca:13:23:14:bb:41:cc:79:af:48:5b:fb:c3:45:31:5e:aa: 0d:03:5d:3d:02:52:89:f8:39:2c:a4:36:39:9e:1d:f9:93:67: b1:b2:52:82:74:3b:94:5b:f9:1a:6b:4e:84:41:a4:a5:7f:ac: 1b:4e:3b:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw QzAxMzFFMkUwHhcNMjYwNzI2MjEyODM2WhcNMjYwODAyMjEyODM2WjAYMRYwFAYD VQQDEw02YTY2N2MwNC0xNDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWtvvy/C0YKLP9y7NNxya29pO52iEKJQynSNmB+2OawEKYsCgVzGWWsbgBFm ot55H7db4v1r6uch3lam/EieEIx0kf9mvJ9rrOy1+TwDh8k/yELIkdMBfVj4n/av 1R3JFEAgzhCW85RbK2mUwk//uABXx3NwjALDhxfUGmTBIHx9gyPhag2xXCHT5/sF 2Jw1LKCMWGeygAvIiaslDHUhrWoMzgmrswQV9+1+LI0Nvu2LcmRG3ZI2y8G3nzwP GM1d0fzcmtAZ6wzlJAA5hvuTkoCxJMdDzltDFTff5jnQ++or96yC4ohnqQAfuYpA 9NFQf7tVepQ64bI6ccojscLwYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJIC8hVn jrLcu3UbXDN8AHRxbShFMB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsRfoCwoAzeHhydpEkoRZnmviwhdB+KVfvthMFMTLRCmBM4MAdNX8NrXhVTae iJ7qeH/f8UTeqaElmDzRkg6ECyaaQn65AtYUdEm8Rofpg3NF4ilyOTlaA/V8j6I+ BirCNj7Uk4V/UU5p6x20/of+u1pQzKpbeAseFl6c5mxW7vUJ+ZTDP3BPWI6VDtBS IeLurn7xgyczP7K3i/cy+Ttf+arapz3T/xznmAtXZ5r/gLribhoOe3NHuyWXjj3Q BYKVMvcTN8CVQcoTIxS7Qcx5r0hb+8NFMV6qDQNdPQJSifg5LKQ2OZ4d+ZNnsbJS gnQ7lFv5GmtOhEGkpX+sG047pw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:22:54 2026 by rpki-client