$ rpki-client -vvf rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft File: 0va3pYZYVsPyxEYWNgMfsFtgYGo.mft (raw, json) Hash identifier: oqXb2q4n90QH3hWK3HZy2hL3AL4EGXWEel6yXCj20sc= Subject key identifier: 6B:B6:5C:F6:23:06:75:71:D9:1F:FE:2B:11:5B:2B:7B:AE:8F:5C:94 Authority key identifier: D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A Certificate issuer: /CN=A91149C8/serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Certificate serial: 0D4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft Manifest number: 0D41 Signing time: Tue 28 Jul 2026 18:11:30 +0000 Manifest this update: Tue 28 Jul 2026 18:11:30 +0000 Manifest next update: Tue 04 Aug 2026 18:11:30 +0000 Files and hashes: 1: 0va3pYZYVsPyxEYWNgMfsFtgYGo.crl (hash: CmTAqN2B6sLhx0jbt1NDfk6/DnjqOknhQ7MERJJpNhE=) 2: A2A7584ACA7F11EAB343722AC4F9AE02.roa (hash: M8VzcHzGGFzODlt0s8FMTbdg4bvEqOp4tLkXsR05vew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3406 (0xd4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91149C8, serialNumber=D2F6B7A5865856C3F2C4461636031FB05B60606A Validity Not Before: Jul 28 18:11:30 2026 GMT Not After : Aug 4 18:11:30 2026 GMT Subject: CN=6a68f0d2-dfb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:6c:c3:2a:cb:9c:39:dc:45:0b:1b:44:7a: d4:2d:34:0f:57:c6:95:84:f3:0e:fd:51:11:7c:e6: 31:ab:e1:e1:b9:c9:d0:2c:96:9e:18:43:fb:8e:79: 0e:2a:ed:29:a8:f0:ea:90:be:4d:ea:40:ed:7c:30: 5c:d1:b9:d7:25:b1:92:1f:4d:2b:17:85:9e:e6:0a: e5:97:9a:30:d3:70:a2:f0:20:77:49:72:95:98:14: 7f:f1:0e:d3:29:58:7d:68:f3:7c:2e:c3:d3:a4:bd: 84:9f:41:2f:62:e8:aa:95:86:32:42:31:0e:a9:9b: 60:5c:7f:85:86:b6:6a:dd:74:3b:af:90:77:a7:fc: 06:bd:a0:62:d4:b1:78:a3:6f:4f:dd:88:13:d3:35: 4f:11:cd:0a:83:5a:c5:b2:8e:e5:30:2f:53:a6:62: b4:82:c3:07:0d:f4:c5:3e:b3:44:e5:cf:62:85:ae: 6c:df:a0:41:15:61:4f:ca:f9:a4:19:42:70:3a:30: 71:a2:d0:06:a2:47:c9:da:3a:67:11:f4:05:a7:b8: 30:09:9f:37:d5:18:32:a8:96:5d:89:d6:4e:9e:32: 93:45:e0:99:3c:3e:99:a2:52:81:0b:97:82:4d:1a: 73:d6:d3:8f:f7:92:2b:85:64:fa:cf:85:0d:0a:cb: f3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B6:5C:F6:23:06:75:71:D9:1F:FE:2B:11:5B:2B:7B:AE:8F:5C:94 X509v3 Authority Key Identifier: keyid:D2:F6:B7:A5:86:58:56:C3:F2:C4:46:16:36:03:1F:B0:5B:60:60:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0va3pYZYVsPyxEYWNgMfsFtgYGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91149C8/2FC46590FF2B11E9BF20BF1DC4F9AE02/0va3pYZYVsPyxEYWNgMfsFtgYGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:9d:8c:df:0c:85:cd:04:12:ca:02:aa:49:39:55:7f:3c:7b: 41:96:3b:93:b5:47:0b:84:0d:38:76:e0:2c:e9:61:b1:ef:9b: bd:73:99:90:0a:19:5b:cf:a9:73:24:82:ea:42:0b:b3:5b:55: 8f:6d:e9:f3:07:8f:57:e5:aa:88:26:67:6e:db:24:ed:6e:c5: e1:b5:01:3c:05:3c:4a:c2:ac:88:20:1b:33:0e:ed:4c:31:9b: 7f:de:a2:a8:4b:74:d4:4b:cb:3d:f5:03:0c:65:48:28:d3:71: 68:69:ce:34:3f:aa:f4:90:6b:b0:b6:48:f1:89:2b:01:2c:57: c4:87:18:34:a4:19:ff:a5:a6:be:f8:57:60:e6:ad:77:c6:56: 1e:f4:aa:ca:83:fa:ac:49:67:bb:a3:0a:0f:b8:30:ef:36:e0: 6d:dd:78:fe:a0:7d:8e:fa:61:bf:f4:84:68:66:37:11:04:ba: 9a:82:94:4c:6c:40:a7:4a:8c:78:b7:63:38:ae:87:b0:a7:b2: db:16:c2:d0:23:35:09:d9:b4:8d:ba:35:27:a7:07:4a:13:f5: 85:c6:6b:2c:84:1e:f1:5e:e3:53:74:81:e9:8a:73:ef:81:e5: 53:a3:c6:d0:2a:68:00:a1:a5:69:b7:49:a0:76:7e:40:f0:14: 74:ae:e4:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ5QzgxMTAvBgNVBAUTKEQyRjZCN0E1ODY1ODU2QzNGMkM0NDYxNjM2MDMxRkIw NUI2MDYwNkEwHhcNMjYwNzI4MTgxMTMwWhcNMjYwODA0MTgxMTMwWjAYMRYwFAYD VQQDEw02YTY4ZjBkMi1kZmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsJ1swyrLnDncRQsbRHrULTQPV8aVhPMO/VERfOYxq+HhucnQLJaeGEP7jnkO Ku0pqPDqkL5N6kDtfDBc0bnXJbGSH00rF4We5grll5ow03Ci8CB3SXKVmBR/8Q7T KVh9aPN8LsPTpL2En0EvYuiqlYYyQjEOqZtgXH+FhrZq3XQ7r5B3p/wGvaBi1LF4 o29P3YgT0zVPEc0Kg1rFso7lMC9TpmK0gsMHDfTFPrNE5c9iha5s36BBFWFPyvmk GUJwOjBxotAGokfJ2jpnEfQFp7gwCZ831RgyqJZdidZOnjKTReCZPD6ZolKBC5eC TRpz1tOP95IrhWT6z4UNCsvzUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGu2XPYj BnVx2R/+KxFbK3uuj1yUMB8GA1UdIwQYMBaAFNL2t6WGWFbD8sRGFjYDH7BbYGBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDlDOC8yRkM0NjU5MEZG MkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZzUHl4RVlXTmdNZnNGdGdZ R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB2YTNwWVpZVnNQeXhFWVdOZ01mc0Z0Z1lHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDlDOC8yRkM0NjU5MEZGMkIxMUU5QkYyMEJGMURDNEY5QUUwMi8wdmEzcFlaWVZz UHl4RVlXTmdNZnNGdGdZR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiZ2M3wyFzQQSygKqSTlVfzx7QZY7k7VHC4QNOHbgLOlhse+bvXOZkAoZW8+p cySC6kILs1tVj23p8wePV+WqiCZnbtsk7W7F4bUBPAU8SsKsiCAbMw7tTDGbf96i qEt01EvLPfUDDGVIKNNxaGnOND+q9JBrsLZI8YkrASxXxIcYNKQZ/6WmvvhXYOat d8ZWHvSqyoP6rElnu6MKD7gw7zbgbd14/qB9jvphv/SEaGY3EQS6moKUTGxAp0qM eLdjOK6HsKey2xbC0CM1Cdm0jbo1J6cHShP1hcZrLIQe8V7jU3SB6Ypz74HlU6PG 0CpoAKGlabdJoHZ+QPAUdK7kXA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:32:22 2026 by rpki-client