$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft File: lCSgucmNtjIaU5IMb0410jGc9G4.mft (raw, json) Hash identifier: 6uuQ2JFecBoQMm8D6TVzaAWsv93F2UGlmElPKhcl9bQ= Subject key identifier: B2:C0:09:D9:6C:4C:78:0C:F1:D2:E2:C5:0D:F5:F5:A2:E2:FD:FB:5B Authority key identifier: 94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E Certificate issuer: /CN=A91FB642/serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft Manifest number: 4A Signing time: Mon 27 Jul 2026 10:43:41 +0000 Manifest this update: Mon 27 Jul 2026 10:43:40 +0000 Manifest next update: Mon 03 Aug 2026 10:43:40 +0000 Files and hashes: 1: lCSgucmNtjIaU5IMb0410jGc9G4.crl (hash: 0XSP3AxqMyEtKcMhlHRSpqEdh7azl0rq0XbUx5yUX/g=) 2: 0985425A1DB511F1A030A5CB3F3D8C67.roa (hash: jL1weeYdf5UVgi3H8dQWMroRrXWySaPVDw+CBr3Q+X4=) 3: FF33C1BC1DB111F186D8EF283F3D8C67.roa (hash: YICsi1o5Z1QCNa3raABk0vbNZqKDNF4/heN9D5mwTtc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB642, serialNumber=9424A0B9C98DB6321A53920C6F4E35D2319CF46E Validity Not Before: Jul 27 10:43:40 2026 GMT Not After : Aug 3 10:43:40 2026 GMT Subject: CN=6a67365d-f005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:9b:4c:24:42:4b:9c:95:18:28:d7:6e:aa: a5:54:20:31:fc:3b:bf:89:ee:90:61:4d:0e:3e:8f: a0:12:d6:88:4a:64:2a:c3:d1:80:0b:9a:af:47:6b: 7c:09:32:64:c3:7a:64:4b:68:33:4e:2a:aa:10:58: ca:fe:a4:4a:8e:9a:c8:d2:32:e8:92:58:9b:37:82: 49:27:34:ce:5e:16:59:38:ef:db:6e:7b:46:91:03: b3:1d:d2:5e:03:75:7b:56:f6:9e:84:cb:88:0c:6b: 8a:78:a3:6d:15:36:af:23:b2:88:54:8e:07:8d:b4: b7:ee:32:57:40:a7:d9:f4:3d:a7:8b:88:d2:f1:80: c9:c3:35:d5:4b:43:66:7c:a9:57:b8:fd:06:5c:61: 88:71:21:21:b4:61:92:4b:cb:e4:fc:d5:ce:95:e2: 79:35:7a:75:13:d7:48:da:23:e5:6c:6e:97:dd:06: 4d:95:1e:19:7b:50:db:e8:59:52:17:b8:4f:e4:3e: 8c:25:93:07:3c:75:c6:24:6b:72:94:6f:00:ad:da: 6e:f5:84:9b:c2:0d:39:c5:7e:f2:6c:45:ff:5c:ab: 93:8b:77:d3:48:87:c7:19:5f:96:b5:3f:69:76:08: 94:f5:ff:be:08:a3:70:db:04:ea:41:55:24:92:aa: 9d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:C0:09:D9:6C:4C:78:0C:F1:D2:E2:C5:0D:F5:F5:A2:E2:FD:FB:5B X509v3 Authority Key Identifier: keyid:94:24:A0:B9:C9:8D:B6:32:1A:53:92:0C:6F:4E:35:D2:31:9C:F4:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCSgucmNtjIaU5IMb0410jGc9G4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB642/7CF8A0821DB111F1BC1C6D523E3D8C67/lCSgucmNtjIaU5IMb0410jGc9G4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b3:f5:42:cf:ef:94:3e:2e:68:30:2b:84:24:f3:f5:80:ef: c9:58:bb:cf:bf:40:bf:67:4e:4c:74:11:bd:12:4b:af:ec:b5: 2c:46:f3:d6:2f:3f:20:b4:1c:66:73:f6:a6:7d:7c:68:c7:15: 2b:4f:8c:11:5d:fb:ca:d6:da:d7:64:83:06:d0:cc:b7:81:d4: 46:a2:a8:a7:bf:04:8b:9e:87:1b:fe:ab:2e:3f:1c:93:20:f1: f2:6b:06:20:bc:66:8b:7c:21:15:ef:0a:d8:51:18:44:cb:79: 82:df:3a:bc:d2:3c:88:9b:2c:23:53:b8:e4:05:1c:fe:11:f2: db:72:05:88:ce:0b:e9:73:ba:2d:1e:e6:c9:d6:b4:53:4a:24: 04:e5:09:f9:f7:22:db:8b:22:32:ef:c6:da:5f:a3:d7:bd:67: fe:98:14:18:1a:38:90:00:d6:02:5f:42:76:86:a5:0c:d5:65: 4f:8b:58:48:58:f5:7f:91:d7:0e:ec:83:18:a6:9c:f9:e9:f7: ed:2e:1a:c6:73:a2:6e:55:81:ff:e5:45:c4:e8:c8:8d:11:0a: 80:08:e3:f8:4c:47:c3:dd:c0:9d:84:f0:63:a4:16:35:1b:09: 92:1f:43:b8:3c:b9:d2:e1:1c:90:38:31:9d:55:15:32:f1:78: 83:b7:a7:88 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QjY0MjExMC8GA1UEBRMoOTQyNEEwQjlDOThEQjYzMjFBNTM5MjBDNkY0RTM1RDIz MTlDRjQ2RTAeFw0yNjA3MjcxMDQzNDBaFw0yNjA4MDMxMDQzNDBaMBgxFjAUBgNV BAMTDTZhNjczNjVkLWYwMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5VJtMJEJLnJUYKNduqqVUIDH8O7+J7pBhTQ4+j6AS1ohKZCrD0YALmq9Ha3wJ MmTDemRLaDNOKqoQWMr+pEqOmsjSMuiSWJs3gkknNM5eFlk479tue0aRA7Md0l4D dXtW9p6Ey4gMa4p4o20VNq8jsohUjgeNtLfuMldAp9n0PaeLiNLxgMnDNdVLQ2Z8 qVe4/QZcYYhxISG0YZJLy+T81c6V4nk1enUT10jaI+VsbpfdBk2VHhl7UNvoWVIX uE/kPowlkwc8dcYka3KUbwCt2m71hJvCDTnFfvJsRf9cq5OLd9NIh8cZX5a1P2l2 CJT1/74Io3DbBOpBVSSSqp0/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUssAJ2WxM eAzx0uLFDfX1ouL9+1swHwYDVR0jBBgwFoAUlCSgucmNtjIaU5IMb0410jGc9G4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCNjQyLzdDRjhBMDgyMURC MTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJYVU1SU1iMDQxMGpHYzlH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbENTZ3VjbU50aklhVTVJTWIwNDEwakdjOUc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC NjQyLzdDRjhBMDgyMURCMTExRjFCQzFDNkQ1MjNFM0Q4QzY3L2xDU2d1Y21OdGpJ YVU1SU1iMDQxMGpHYzlHNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzs/VCz++UPi5oMCuEJPP1gO/JWLvPv0C/Z05MdBG9Ekuv7LUsRvPWLz8gtBxm c/amfXxoxxUrT4wRXfvK1trXZIMG0My3gdRGoqinvwSLnocb/qsuPxyTIPHyawYg vGaLfCEV7wrYURhEy3mC3zq80jyImywjU7jkBRz+EfLbcgWIzgvpc7otHubJ1rRT SiQE5Qn59yLbiyIy78baX6PXvWf+mBQYGjiQANYCX0J2hqUM1WVPi1hIWPV/kdcO 7IMYppz56fftLhrGc6JuVYH/5UXE6MiNEQqACOP4TEfD3cCdhPBjpBY1GwmSH0O4 PLnS4RyQODGdVRUy8XiDt6eI -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:58 2026 by rpki-client