$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: LidJAvHAevlYRBl/QPXrRH7JBE3Cw5HFBCIoE7QJejM= Subject key identifier: 0F:C3:FB:C4:21:5E:C3:4B:0A:66:F0:4A:B8:84:6B:09:6C:58:F2:01 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 0740 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 0740 Signing time: Sun 26 Jul 2026 22:31:02 +0000 Manifest this update: Sun 26 Jul 2026 22:31:01 +0000 Manifest next update: Sun 02 Aug 2026 22:31:01 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: f7rXR3mfJYhodRCw8bjZAUbwGOqxFehOgkahG7mc4tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1856 (0x740) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Jul 26 22:31:01 2026 GMT Not After : Aug 2 22:31:01 2026 GMT Subject: CN=6a668aa5-e508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:79:24:34:5b:0c:ee:47:a5:42:13:23:15:c7: 92:f8:c9:b8:72:bf:c3:ee:38:83:fa:5b:5e:be:31: 11:38:a6:b4:d2:8a:b3:c4:b4:14:06:b5:68:5a:b9: a1:3b:1d:75:83:69:23:6f:df:1d:54:44:72:ad:01: cc:d6:46:9a:a0:c6:21:8a:1a:58:2d:0d:98:2d:bd: 5e:48:3f:26:69:90:ac:a2:be:1b:4c:40:61:99:a2: ae:c8:c5:d1:74:b3:50:e7:c4:6b:3a:6f:d8:d6:5e: ce:3a:95:72:63:4e:0a:98:e1:fb:23:15:7e:19:01: ae:4a:f9:aa:7d:bd:c0:ed:7c:6e:fb:9a:01:a8:75: 69:6b:79:6f:8e:d3:07:bd:d7:b5:af:ce:06:39:e2: d9:19:ee:de:ef:d4:b3:09:16:ae:18:01:83:90:40: 06:2e:27:aa:12:14:03:ed:26:80:d2:ea:a3:e3:5e: b9:0e:d6:a5:14:b9:8b:88:cb:5d:44:a7:db:88:c4: e7:2b:0f:31:a5:81:be:6f:63:4a:e7:0c:5a:e1:db: 45:2e:2b:f1:1f:4e:1b:e8:fa:ca:c8:be:af:2a:71: a6:95:d2:db:92:a0:37:48:82:bd:46:de:41:02:6b: 6a:1f:a1:50:e4:b9:67:e1:53:9e:31:c5:65:d0:f9: 3c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C3:FB:C4:21:5E:C3:4B:0A:66:F0:4A:B8:84:6B:09:6C:58:F2:01 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:4b:21:f4:04:a5:90:ab:30:64:46:58:46:f4:b9:26:37:18: 68:d6:d2:83:be:a7:31:c6:ef:53:20:9f:15:6d:40:89:4a:1f: e3:01:4c:47:29:ff:db:72:97:f0:54:94:ab:34:d9:a6:bf:f9: b2:c6:9b:f4:dd:b9:bc:9a:71:87:ce:39:81:1e:3f:87:25:5a: 1e:a4:db:20:b9:dc:a8:d8:a7:cc:f3:c4:b4:e9:e1:68:37:31: 4b:43:63:db:e7:3c:f2:63:70:d1:40:9f:88:07:e2:26:af:89: 53:00:5a:ee:11:76:d9:17:3f:af:9b:e4:7e:01:cb:5a:c7:bb: 6a:bc:f2:52:74:30:4b:0a:ea:43:65:64:ed:0e:2e:11:e7:b3: 28:ec:21:96:43:6d:2b:70:be:27:85:b4:bf:ea:18:ef:3d:62: 67:f1:50:61:df:13:b5:7c:b7:67:a1:2b:82:6e:2e:46:a9:bd: b3:d6:5a:c2:9d:82:bb:9e:dc:3a:72:5b:99:1e:23:90:3d:2e: f2:fe:86:5f:5c:47:6b:95:66:65:c4:86:94:b6:21:9a:ad:19: ef:90:a3:6c:3a:68:97:aa:a7:b8:fc:c2:28:6e:29:92:cf:f0: ea:dc:8e:32:9b:2b:d6:73:bb:73:ba:3f:58:43:d9:17:f1:c4: d2:cc:08:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjYwNzI2MjIzMTAxWhcNMjYwODAyMjIzMTAxWjAYMRYwFAYD VQQDEw02YTY2OGFhNS1lNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhnkkNFsM7kelQhMjFceS+Mm4cr/D7jiD+ltevjEROKa00oqzxLQUBrVoWrmh Ox11g2kjb98dVERyrQHM1kaaoMYhihpYLQ2YLb1eSD8maZCsor4bTEBhmaKuyMXR dLNQ58RrOm/Y1l7OOpVyY04KmOH7IxV+GQGuSvmqfb3A7Xxu+5oBqHVpa3lvjtMH vde1r84GOeLZGe7e79SzCRauGAGDkEAGLieqEhQD7SaA0uqj4165DtalFLmLiMtd RKfbiMTnKw8xpYG+b2NK5wxa4dtFLivxH04b6PrKyL6vKnGmldLbkqA3SIK9Rt5B AmtqH6FQ5Lln4VOeMcVl0Pk8QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/D+8Qh XsNLCmbwSriEawlsWPIBMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlksh9ASlkKswZEZYRvS5JjcYaNbSg76nMcbvUyCfFW1AiUof4wFMRyn/23KX 8FSUqzTZpr/5ssab9N25vJpxh845gR4/hyVaHqTbILncqNinzPPEtOnhaDcxS0Nj 2+c88mNw0UCfiAfiJq+JUwBa7hF22Rc/r5vkfgHLWse7arzyUnQwSwrqQ2Vk7Q4u EeezKOwhlkNtK3C+J4W0v+oY7z1iZ/FQYd8TtXy3Z6Ergm4uRqm9s9Zawp2Cu57c OnJbmR4jkD0u8v6GX1xHa5VmZcSGlLYhmq0Z75CjbDpol6qnuPzCKG4pks/w6tyO Mpsr1nO7c7o/WEPZF/HE0swIdg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:56:31 2026 by rpki-client