$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft File: 49O0eIJzzkWSmwmYOr9ktdRNHwg.mft (raw, json) Hash identifier: EEn/zWZitkdr2PXFcxeCusEX+DTUp0FcC1UxkZgYkac= Subject key identifier: 54:32:95:5F:5B:FE:39:F4:6F:77:BA:2B:88:23:32:99:84:B0:57:7D Authority key identifier: E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 Certificate issuer: /CN=A91FF634/serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Certificate serial: 120D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft Manifest number: 11F3 Signing time: Tue 28 Jul 2026 17:15:55 +0000 Manifest this update: Tue 28 Jul 2026 17:15:54 +0000 Manifest next update: Tue 04 Aug 2026 17:15:54 +0000 Files and hashes: 1: 49O0eIJzzkWSmwmYOr9ktdRNHwg.crl (hash: xGOtgAMUFsM6KUZftsGjspQ/kFd+Bm7dR2jmxrvnSXo=) 2: 97F937E440BC11EAA2B89432C4F9AE02.roa (hash: dJ40ZvkvEtXP02NZp3lyJfj9qvrbjW3gvJFMNBqnO1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4621 (0x120d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF634, serialNumber=E3D3B4788273CE45929B09983ABF64B5D44D1F08 Validity Not Before: Jul 28 17:15:54 2026 GMT Not After : Aug 4 17:15:54 2026 GMT Subject: CN=6a68e3cb-68ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b6:04:37:96:60:b9:b6:d9:2a:c1:f0:a3:32: f9:a7:a8:ba:17:3d:85:43:69:6e:38:f7:f4:30:3e: 30:33:2f:6c:b0:36:16:df:43:61:33:5d:55:1f:a8: d0:12:28:9d:62:db:d4:7f:49:9f:91:ec:63:7c:ee: 33:8e:4f:46:15:84:d1:6b:f5:33:22:5b:db:bf:31: a6:fe:eb:1d:dd:b2:48:9e:6a:2a:fa:1f:49:06:c2: df:06:20:46:68:d3:b2:fc:70:b2:d7:1c:7e:e2:fe: 3a:6d:07:03:31:f2:67:d2:a9:a7:7b:8c:52:97:d7: 86:0b:22:f5:58:38:ed:94:40:9b:7c:5c:3a:be:7e: 65:a1:ce:64:06:dc:f3:78:eb:27:66:2c:a6:cd:6c: 0d:fe:63:ff:fe:f4:62:12:e7:e8:1c:66:fc:3c:61: 38:d9:64:2a:95:f2:58:c6:d4:76:4c:92:22:9b:e3: 2c:40:74:96:69:14:94:26:3d:1e:4d:79:e4:1c:4e: 76:c6:2f:97:85:7e:32:a8:51:a1:b0:a0:49:98:73: af:8c:3b:0b:8a:eb:dd:a5:20:92:ec:50:0e:7f:35: 9a:be:a0:90:66:0c:74:60:96:ee:fb:c2:af:28:5f: fa:fa:99:b8:3b:e3:f7:f1:24:45:f2:4f:be:dd:1a: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:32:95:5F:5B:FE:39:F4:6F:77:BA:2B:88:23:32:99:84:B0:57:7D X509v3 Authority Key Identifier: keyid:E3:D3:B4:78:82:73:CE:45:92:9B:09:98:3A:BF:64:B5:D4:4D:1F:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/49O0eIJzzkWSmwmYOr9ktdRNHwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF634/1327A73E172911E98DD18E23C4F9AE02/49O0eIJzzkWSmwmYOr9ktdRNHwg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:53:22:9b:aa:ff:fe:1d:e6:97:4f:99:48:53:da:c3:7d:79: eb:3d:16:e4:d8:40:5f:a9:76:50:ee:1b:67:eb:26:6d:e3:e0: 6d:8e:64:92:31:66:68:4b:c6:f5:ad:2c:3c:8a:21:11:40:3e: 96:32:3c:9a:37:e6:f8:ef:ce:54:a2:a2:c6:d0:fc:83:ed:16: a6:2b:da:08:e4:4e:62:3a:e5:9a:1e:43:8b:af:e7:8d:26:b6: 9c:77:94:f6:9e:72:92:f6:f6:57:2e:ba:dd:aa:5e:17:fd:0c: 40:f5:2b:f9:97:1d:cb:3c:aa:5f:66:38:23:32:d0:46:00:88: 39:84:77:b9:8a:d9:7b:7a:74:02:c7:6b:16:ea:b1:13:28:a4: 74:04:2f:eb:27:f1:af:a7:a4:c0:18:7e:11:d5:f0:31:b6:2f: 5e:a0:ba:64:15:9b:10:17:43:a0:c8:b9:16:08:9e:20:50:0a: 5a:90:5f:e6:ab:ca:e9:1c:61:c3:b4:1d:d5:c6:94:f1:fe:ec: a5:c8:94:64:5a:4e:30:a0:d7:cf:03:1f:ad:aa:46:20:f1:53: 1c:5d:ff:a7:a0:e6:70:31:cc:74:ae:bb:d6:35:38:5b:20:76: e7:82:d8:b2:de:88:e1:4c:da:0e:f9:a7:14:72:d5:79:6d:1d: e6:2a:cc:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY2MzQxMTAvBgNVBAUTKEUzRDNCNDc4ODI3M0NFNDU5MjlCMDk5ODNBQkY2NEI1 RDQ0RDFGMDgwHhcNMjYwNzI4MTcxNTU0WhcNMjYwODA0MTcxNTU0WjAYMRYwFAYD VQQDEw02YTY4ZTNjYi02OGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA57YEN5ZgubbZKsHwozL5p6i6Fz2FQ2luOPf0MD4wMy9ssDYW30NhM11VH6jQ EiidYtvUf0mfkexjfO4zjk9GFYTRa/UzIlvbvzGm/usd3bJInmoq+h9JBsLfBiBG aNOy/HCy1xx+4v46bQcDMfJn0qmne4xSl9eGCyL1WDjtlECbfFw6vn5loc5kBtzz eOsnZiymzWwN/mP//vRiEufoHGb8PGE42WQqlfJYxtR2TJIim+MsQHSWaRSUJj0e TXnkHE52xi+XhX4yqFGhsKBJmHOvjDsLiuvdpSCS7FAOfzWavqCQZgx0YJbu+8Kv KF/6+pm4O+P38SRF8k++3RpcKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFQylV9b /jn0b3e6K4gjMpmEsFd9MB8GA1UdIwQYMBaAFOPTtHiCc85FkpsJmDq/ZLXUTR8I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjYzNC8xMzI3QTczRTE3 MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenprV1Ntd21ZT3I5a3RkUk5I d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ5TzBlSUp6emtXU213bVlPcjlrdGRSTkh3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjYzNC8xMzI3QTczRTE3MjkxMUU5OEREMThFMjNDNEY5QUUwMi80OU8wZUlKenpr V1Ntd21ZT3I5a3RkUk5Id2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQlMim6r//h3ml0+ZSFPaw3156z0W5NhAX6l2UO4bZ+smbePgbY5kkjFmaEvG 9a0sPIohEUA+ljI8mjfm+O/OVKKixtD8g+0WpivaCOROYjrlmh5Di6/njSa2nHeU 9p5ykvb2Vy663apeF/0MQPUr+ZcdyzyqX2Y4IzLQRgCIOYR3uYrZe3p0AsdrFuqx EyikdAQv6yfxr6ekwBh+EdXwMbYvXqC6ZBWbEBdDoMi5FgieIFAKWpBf5qvK6Rxh w7Qd1caU8f7spciUZFpOMKDXzwMfrapGIPFTHF3/p6DmcDHMdK671jU4WyB254LY st6I4UzaDvmnFHLVeW0d5irM8g== -----END CERTIFICATE-----Generated at Tue Jul 28 22:30:51 2026 by rpki-client