$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft File: -AbfRcmATdTJ0eUsYuDig8D4DFM.mft (raw, json) Hash identifier: hWg2BjE/YqPDrbs7ApLMSczxZzdComM+hpmT/Yc9UYA= Subject key identifier: B5:47:A7:83:C1:A2:15:EF:3D:9C:11:7F:74:CB:07:FF:18:DC:0F:F1 Authority key identifier: F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 Certificate issuer: /CN=A91FD292/serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Certificate serial: 0B07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft Manifest number: 0B04 Signing time: Sun 26 Jul 2026 19:47:07 +0000 Manifest this update: Sun 26 Jul 2026 19:47:07 +0000 Manifest next update: Sun 02 Aug 2026 19:47:07 +0000 Files and hashes: 1: -AbfRcmATdTJ0eUsYuDig8D4DFM.crl (hash: W8Z+DQPoyYd0Kgi+oMH9qsvkCt5Jqkmasy6EcuUFBvU=) 2: 2F05099CEC5611F094F5171C4A6F56BC.roa (hash: h3ulFk49Rm6PN3v20dTyyirREDU7f9uOVa0xWMwIDh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2823 (0xb07) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD292, serialNumber=F806DF45C9804DD4C9D1E52C62E0E283C0F80C53 Validity Not Before: Jul 26 19:47:07 2026 GMT Not After : Aug 2 19:47:07 2026 GMT Subject: CN=6a66643b-59cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:8d:8d:68:c8:3f:d6:1f:b5:e5:28:77:10: 6c:6d:0e:80:48:10:1c:ca:78:0a:a3:15:1d:02:e3: 3d:a5:a6:a5:43:03:3b:03:cc:d0:2d:47:dd:e7:05: 3c:09:b4:dc:33:6c:8f:68:06:2d:83:ed:bb:7c:a3: 9c:df:70:db:92:4d:7d:70:b2:65:4a:9d:fb:d4:91: d3:a6:e2:97:ee:9a:d3:be:e7:01:60:ea:cd:03:7b: 82:f6:a3:24:7d:a6:bd:2f:dd:6d:41:dd:2c:cb:88: 8b:ea:e5:7b:80:49:c8:e7:37:46:47:bf:f9:77:c7: d0:99:57:f9:03:9c:65:75:49:52:c7:34:cd:84:ed: a3:13:e0:76:7d:51:f1:57:ce:d1:95:e9:7c:27:69: 62:7e:c6:cc:b9:23:14:a2:1d:a4:27:47:75:85:17: 0c:a8:76:b7:6f:c5:b5:f9:ce:76:39:14:d7:c9:e6: f9:01:89:a0:1b:cc:b2:b2:f2:79:14:4f:8d:68:5b: ed:95:38:7f:4c:a9:55:b3:dd:d6:09:e8:0b:c1:87: af:e1:66:78:3d:45:f0:92:82:97:d2:85:90:69:da: c2:d6:35:a6:24:af:05:e0:86:30:b3:2f:cc:98:dc: 41:1d:82:b7:6e:a7:98:68:f0:32:b2:30:fc:ff:2c: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:47:A7:83:C1:A2:15:EF:3D:9C:11:7F:74:CB:07:FF:18:DC:0F:F1 X509v3 Authority Key Identifier: keyid:F8:06:DF:45:C9:80:4D:D4:C9:D1:E5:2C:62:E0:E2:83:C0:F8:0C:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-AbfRcmATdTJ0eUsYuDig8D4DFM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD292/D1619A646CC511EAA8359953C4F9AE02/-AbfRcmATdTJ0eUsYuDig8D4DFM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:f5:d3:2b:eb:10:eb:ac:a4:ff:f4:6a:37:c2:5c:b2:c5:45: 04:72:52:96:31:39:40:3e:42:f2:1e:3e:f4:e9:05:fc:30:4f: 68:19:00:45:51:36:cc:e2:d2:7c:7f:e9:d1:a4:f1:7f:80:68: 98:6a:be:38:57:f9:e1:39:5a:e0:6b:3f:fe:72:82:d9:c7:1e: 6b:a2:3f:33:4e:95:03:33:fa:31:79:92:6d:7d:6e:19:46:41: ac:5f:25:c4:23:cb:e4:17:f6:af:c3:f0:34:e0:5d:4c:97:76: 12:f3:9b:24:c5:dd:f5:eb:15:7a:97:2d:ef:8b:75:25:6b:36: 23:6b:52:23:24:be:ad:d0:ce:50:73:5a:a3:90:0e:23:b6:1b: 81:2d:5f:74:e1:2e:4a:56:d9:94:7c:38:86:d7:dc:01:1f:c6: d4:fc:24:6e:e8:9e:e7:7b:f6:bf:49:f9:8d:14:6a:70:5e:3a: 47:b0:7b:d6:9a:d3:11:63:a1:c1:58:1c:28:16:e2:63:ed:97: 4e:94:f4:1e:11:63:9a:81:02:1e:f5:39:67:67:73:64:b8:ab: 56:f3:1c:8d:e3:d6:52:aa:27:1b:cd:83:76:47:01:c4:bc:c7: ee:c2:56:21:88:c8:6e:10:24:4a:39:1f:22:72:1a:5b:7d:57: 05:f5:4b:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyOTIxMTAvBgNVBAUTKEY4MDZERjQ1Qzk4MDRERDRDOUQxRTUyQzYyRTBFMjgz QzBGODBDNTMwHhcNMjYwNzI2MTk0NzA3WhcNMjYwODAyMTk0NzA3WjAYMRYwFAYD VQQDEw02YTY2NjQzYi01OWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8uNjWjIP9YfteUodxBsbQ6ASBAcyngKoxUdAuM9paalQwM7A8zQLUfd5wU8 CbTcM2yPaAYtg+27fKOc33Dbkk19cLJlSp371JHTpuKX7prTvucBYOrNA3uC9qMk faa9L91tQd0sy4iL6uV7gEnI5zdGR7/5d8fQmVf5A5xldUlSxzTNhO2jE+B2fVHx V87Rlel8J2lifsbMuSMUoh2kJ0d1hRcMqHa3b8W1+c52ORTXyeb5AYmgG8yysvJ5 FE+NaFvtlTh/TKlVs93WCegLwYev4WZ4PUXwkoKX0oWQadrC1jWmJK8F4IYwsy/M mNxBHYK3bqeYaPAysjD8/yxBhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVHp4PB ohXvPZwRf3TLB/8Y3A/xMB8GA1UdIwQYMBaAFPgG30XJgE3UydHlLGLg4oPA+AxT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDI5Mi9EMTYxOUE2NDZD QzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRkVEowZVVzWXVEaWc4RDRE Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1BYmZSY21BVGRUSjBlVXNZdURpZzhENERGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDI5Mi9EMTYxOUE2NDZDQzUxMUVBQTgzNTk5NTNDNEY5QUUwMi8tQWJmUmNtQVRk VEowZVVzWXVEaWc4RDRERk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIfXTK+sQ66yk//RqN8JcssVFBHJSljE5QD5C8h4+9OkF/DBPaBkARVE2zOLS fH/p0aTxf4BomGq+OFf54Tla4Gs//nKC2ccea6I/M06VAzP6MXmSbX1uGUZBrF8l xCPL5Bf2r8PwNOBdTJd2EvObJMXd9esVepct74t1JWs2I2tSIyS+rdDOUHNao5AO I7YbgS1fdOEuSlbZlHw4htfcAR/G1Pwkbuie53v2v0n5jRRqcF46R7B71prTEWOh wVgcKBbiY+2XTpT0HhFjmoECHvU5Z2dzZLirVvMcjePWUqonG82DdkcBxLzH7sJW IYjIbhAkSjkfInIaW31XBfVL1g== -----END CERTIFICATE-----Generated at Tue Jul 28 19:22:28 2026 by rpki-client