$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft File: -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json) Hash identifier: 1jXRAXGmQt505CGr7GOMrxiVfyWLpRLBSfZW9S6uZCA= Subject key identifier: 61:7D:D4:9E:71:E7:ED:9B:BD:F1:D5:E3:8C:90:76:5A:93:35:3A:0A Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0D1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft Manifest number: 0D05 Signing time: Tue 28 Jul 2026 18:28:08 +0000 Manifest this update: Tue 28 Jul 2026 18:28:08 +0000 Manifest next update: Tue 04 Aug 2026 18:28:08 +0000 Files and hashes: 1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: vKQ0yVYXzP8VcegPEDFNtYzd8QtanpycWWBP4ydmw70=) 2: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: APn+F9xRovOSeD45jGA8svXtlMxctUkywPcao3lKdl4=) 3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: liqudEt944TPxlO6q13NxIFzhm26td/UszwH+GlqOU0=) 4: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: JgU3uHMLD1/j7W/OT0+XPxyyEVVhRjsVefR9u0vp7DA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3358 (0xd1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Jul 28 18:28:08 2026 GMT Not After : Aug 4 18:28:08 2026 GMT Subject: CN=6a68f4b8-de5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:dc:7a:c0:7f:a7:e0:22:98:69:7a:fd:4a: b5:3a:48:0e:0e:7f:ae:a7:7f:24:e7:53:70:97:f0: b8:b3:25:ae:d9:7d:0e:1f:89:a4:4c:55:cd:6a:c0: 53:6a:9f:ef:a4:12:24:8a:a9:73:75:77:23:03:86: c3:c7:cf:ac:89:4a:2e:06:7a:23:7d:45:30:35:1f: f8:10:3c:c4:14:ac:14:79:22:ec:48:20:9b:ee:5b: 2f:70:84:af:30:8f:49:1b:47:2b:cf:a3:8a:6e:03: 72:ab:12:9b:33:f4:45:c7:23:7e:c7:4a:3b:a4:a6: 63:47:4e:10:7b:2f:84:b4:dd:7f:10:53:e4:c3:7f: 31:e5:82:c1:24:5a:0a:ba:7d:c9:5c:d6:dc:27:0a: 7b:ce:21:9f:17:fe:82:52:74:15:b0:c3:ca:67:e5: f5:7e:d9:02:1d:00:30:e7:21:cc:a9:58:be:17:0e: 82:5c:66:b6:0a:40:81:f0:8a:2f:85:7f:97:d0:93: 97:52:92:d9:97:86:72:d7:4d:31:53:f9:fa:56:f1: 7b:f1:17:33:1d:76:aa:3d:9c:2c:7e:13:c0:50:f5: 83:25:db:3d:e5:c4:a4:aa:89:fd:bd:83:0c:a2:8d: 71:de:8d:d3:a0:3d:52:63:a2:50:e2:02:55:a3:95: a5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7D:D4:9E:71:E7:ED:9B:BD:F1:D5:E3:8C:90:76:5A:93:35:3A:0A X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:55:ef:fb:c2:9d:00:8b:b6:31:d1:75:08:ab:65:a5:59:71: f0:be:57:a2:a6:2e:0e:54:37:95:52:bd:e3:79:e8:7c:ee:9c: 39:8a:1f:12:32:df:b1:99:a7:07:9e:fa:66:3b:aa:be:e1:8e: 96:9a:9e:b2:4b:5c:d6:aa:48:a5:36:b4:26:d6:a6:63:09:96: 8b:aa:d6:fa:35:7b:6b:9b:0a:fe:85:15:14:ca:dc:45:03:6c: cc:0f:0a:fd:fc:c5:0e:8e:30:fd:f2:87:84:a6:52:42:83:52: 2c:57:3c:0e:3b:ec:72:c5:77:13:b5:01:99:ea:b2:36:8a:b4: e4:a7:cf:07:77:c3:01:c1:ab:24:28:77:91:71:9d:5d:c8:58: 5d:a9:44:5f:42:0b:41:99:4e:38:6b:fb:81:df:31:e2:c4:7c: 5b:eb:c1:d9:84:41:f8:fd:64:64:5a:08:e3:72:fa:f8:1d:35: 40:91:5f:02:a0:9d:a0:0c:38:a0:e5:5f:83:8e:7b:38:f7:6c: 2d:50:4d:2f:4e:fd:94:45:e8:ea:f4:cb:4d:7a:8f:7d:d4:aa: ef:63:56:52:5e:69:0d:2e:36:22:da:c3:3e:1f:47:bb:79:50: e2:f0:1f:83:c2:73:81:dc:bb:bc:c0:19:78:4c:39:c6:b1:79: 90:fc:8d:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjYwNzI4MTgyODA4WhcNMjYwODA0MTgyODA4WjAYMRYwFAYD VQQDEw02YTY4ZjRiOC1kZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFTcesB/p+AimGl6/Uq1OkgODn+up38k51Nwl/C4syWu2X0OH4mkTFXNasBT ap/vpBIkiqlzdXcjA4bDx8+siUouBnojfUUwNR/4EDzEFKwUeSLsSCCb7lsvcISv MI9JG0crz6OKbgNyqxKbM/RFxyN+x0o7pKZjR04Qey+EtN1/EFPkw38x5YLBJFoK un3JXNbcJwp7ziGfF/6CUnQVsMPKZ+X1ftkCHQAw5yHMqVi+Fw6CXGa2CkCB8Iov hX+X0JOXUpLZl4Zy100xU/n6VvF78RczHXaqPZwsfhPAUPWDJds95cSkqon9vYMM oo1x3o3ToD1SY6JQ4gJVo5WluQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGF91J5x 5+2bvfHV44yQdlqTNToKMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0 cFN0cElubWtMRXJfdGJjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC1Xv+8KdAIu2MdF1CKtlpVlx8L5XoqYuDlQ3lVK943nofO6cOYofEjLfsZmn B576ZjuqvuGOlpqesktc1qpIpTa0JtamYwmWi6rW+jV7a5sK/oUVFMrcRQNszA8K /fzFDo4w/fKHhKZSQoNSLFc8DjvscsV3E7UBmeqyNoq05KfPB3fDAcGrJCh3kXGd XchYXalEX0ILQZlOOGv7gd8x4sR8W+vB2YRB+P1kZFoI43L6+B01QJFfAqCdoAw4 oOVfg457OPdsLVBNL079lEXo6vTLTXqPfdSq72NWUl5pDS42ItrDPh9Hu3lQ4vAf g8Jzgdy7vMAZeEw5xrF5kPyNsg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:33:23 2026 by rpki-client