$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft File: l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft (raw, json) Hash identifier: EVK08m/3hKyh4A8lFv1KS4w4wD1FQJjkOc86K5HPWlM= Subject key identifier: FB:E7:C9:C2:96:EE:E2:87:C1:00:FF:24:7A:44:74:D9:BB:FE:BD:99 Authority key identifier: 97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 Certificate issuer: /CN=A91FE40B/serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Certificate serial: 0D28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft Manifest number: 0D1F Signing time: Tue 28 Jul 2026 18:20:38 +0000 Manifest this update: Tue 28 Jul 2026 18:20:38 +0000 Manifest next update: Tue 04 Aug 2026 18:20:38 +0000 Files and hashes: 1: l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl (hash: /KWB6ZM51ehGmQTkUyuF/2/uELMykHyk/kFKpQDwxWA=) 2: 993EC4A6053A11EAAC92336CC4F9AE02.roa (hash: eigBk5/FH4wHkZy6SPbCYbh6uzU3aFuUATntLzWiF2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3368 (0xd28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=97655E1F45383F9538ADB1518A3486A4602BED44 Validity Not Before: Jul 28 18:20:38 2026 GMT Not After : Aug 4 18:20:38 2026 GMT Subject: CN=6a68f2f6-4d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bd:f8:d1:48:e2:86:86:06:32:4f:52:d4:5f: 1a:86:2f:13:d2:7e:63:e4:9b:60:c8:a3:1a:42:c2: 83:38:e5:c0:97:6e:a7:be:e2:d2:48:c1:43:3d:02: 44:cd:4b:cc:6e:40:07:ff:a9:35:27:8d:09:7a:1d: 24:18:80:10:7c:70:c9:dd:3b:c2:a2:cc:8a:5d:8f: 64:e5:8e:cc:3d:c8:ae:ef:58:62:59:36:6f:9c:2b: 2f:e1:12:3a:12:3c:49:d0:0d:3f:c6:fa:e0:07:99: 49:83:65:e1:95:43:8f:cf:a0:6f:66:67:66:56:f8: a9:10:29:a9:b9:60:b7:3e:27:fb:9a:b7:3b:84:10: 58:0c:8f:45:ad:51:5a:7d:b1:e2:39:4f:86:22:5f: 29:ae:1c:27:07:7a:4d:3d:fb:84:94:72:6b:50:b0: 9b:4c:4a:25:37:7f:91:af:13:79:83:ae:d4:60:f1: 0e:96:ec:b8:1b:89:eb:75:43:2f:11:67:69:2a:a9: 97:cd:7c:f9:f6:a9:49:89:03:50:74:fc:fa:aa:5f: 37:69:3f:76:6c:a8:fa:2b:b7:14:a7:81:c6:2a:d2: da:7b:84:c5:64:1c:53:24:ae:87:ce:58:31:4d:40: 0c:ba:97:dd:cb:4a:57:e3:b9:8c:26:fd:d4:f6:3f: 92:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E7:C9:C2:96:EE:E2:87:C1:00:FF:24:7A:44:74:D9:BB:FE:BD:99 X509v3 Authority Key Identifier: keyid:97:65:5E:1F:45:38:3F:95:38:AD:B1:51:8A:34:86:A4:60:2B:ED:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l2VeH0U4P5U4rbFRijSGpGAr7UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/DC5F1ACA053911EAB1742C6BC4F9AE02/l2VeH0U4P5U4rbFRijSGpGAr7UQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f1:06:c4:2f:f5:91:e6:70:ba:e6:c7:2b:e5:a5:75:b6:d0: a1:43:e5:68:26:8b:be:75:f5:9a:69:4d:31:00:73:87:e2:66: a1:e6:f0:a5:8b:f7:5f:ee:fc:f9:9b:1c:96:e0:61:73:bf:b0: 26:da:43:fd:62:b8:cf:ae:8b:d0:df:3a:3a:21:d7:ea:42:95: f5:65:10:7e:aa:6c:67:60:48:3e:58:91:a2:3e:88:48:dc:f9: 5c:9b:df:c1:26:01:33:6b:f6:78:ef:66:57:51:4a:87:fe:4c: 07:77:1f:35:a4:ba:f3:ed:44:de:99:c4:53:3f:14:5b:31:66: 1d:78:c9:91:49:0a:f7:77:42:d9:3d:9c:63:ff:8b:4f:14:b7: b5:6d:a7:93:13:64:b3:f9:88:18:60:77:1e:5b:09:b4:24:1e: 0b:47:65:80:3f:cb:47:54:47:80:0b:4f:0e:5b:5a:b3:41:cb: 31:04:21:41:23:d9:2d:b4:2d:1e:d4:4b:1a:ac:70:d4:74:4f: e0:61:b9:d7:34:fb:e7:12:98:35:4a:19:78:3a:28:3a:3c:02: 44:1c:1d:2d:65:3e:8b:84:5b:ca:b4:02:23:42:92:14:de:9c: f8:4a:92:39:01:04:f4:7f:16:11:a0:42:92:ea:27:7f:8f:b1: cd:e8:c3:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0MEIxMTAvBgNVBAUTKDk3NjU1RTFGNDUzODNGOTUzOEFEQjE1MThBMzQ4NkE0 NjAyQkVENDQwHhcNMjYwNzI4MTgyMDM4WhcNMjYwODA0MTgyMDM4WjAYMRYwFAYD VQQDEw02YTY4ZjJmNi00ZDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwL340UjihoYGMk9S1F8ahi8T0n5j5JtgyKMaQsKDOOXAl26nvuLSSMFDPQJE zUvMbkAH/6k1J40Jeh0kGIAQfHDJ3TvCosyKXY9k5Y7MPciu71hiWTZvnCsv4RI6 EjxJ0A0/xvrgB5lJg2XhlUOPz6BvZmdmVvipECmpuWC3Pif7mrc7hBBYDI9FrVFa fbHiOU+GIl8prhwnB3pNPfuElHJrULCbTEolN3+RrxN5g67UYPEOluy4G4nrdUMv EWdpKqmXzXz59qlJiQNQdPz6ql83aT92bKj6K7cUp4HGKtLae4TFZBxTJK6Hzlgx TUAMupfdy0pX47mMJv3U9j+S+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPvnycKW 7uKHwQD/JHpEdNm7/r2ZMB8GA1UdIwQYMBaAFJdlXh9FOD+VOK2xUYo0hqRgK+1E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQwQi9EQzVGMUFDQTA1 MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1VTRyYkZSaWpTR3BHQXI3 VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wyVmVIMFU0UDVVNHJiRlJpalNHcEdBcjdVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi9EQzVGMUFDQTA1MzkxMUVBQjE3NDJDNkJDNEY5QUUwMi9sMlZlSDBVNFA1 VTRyYkZSaWpTR3BHQXI3VVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWfEGxC/1keZwuubHK+WldbbQoUPlaCaLvnX1mmlNMQBzh+JmoebwpYv3X+78 +ZscluBhc7+wJtpD/WK4z66L0N86OiHX6kKV9WUQfqpsZ2BIPliRoj6ISNz5XJvf wSYBM2v2eO9mV1FKh/5MB3cfNaS68+1E3pnEUz8UWzFmHXjJkUkK93dC2T2cY/+L TxS3tW2nkxNks/mIGGB3HlsJtCQeC0dlgD/LR1RHgAtPDltas0HLMQQhQSPZLbQt HtRLGqxw1HRP4GG51zT75xKYNUoZeDooOjwCRBwdLWU+i4RbyrQCI0KSFN6c+EqS OQEE9H8WEaBCkuonf4+xzejDlA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:56:55 2026 by rpki-client