$ rpki-client -vvf rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft File: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft (raw, json) Hash identifier: 3czi5xqEAsy2dmo/vTndeXncXlYYYAzlczybGj0mDNE= Subject key identifier: 69:D9:E0:63:B4:DE:50:9A:F2:51:5C:8F:23:8A:7E:9F:5E:31:34:42 Authority key identifier: D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D Certificate issuer: /CN=A91174ED/serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft Manifest number: CA Signing time: Mon 27 Jul 2026 09:00:04 +0000 Manifest this update: Mon 27 Jul 2026 09:00:04 +0000 Manifest next update: Mon 03 Aug 2026 09:00:04 +0000 Files and hashes: 1: 1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl (hash: qIBX5JX91czktejP5as8yAlhJWeLYwCmSctg5um8xWk=) 2: FE892768620711F0BE75F534C4F9AE02.roa (hash: w6R9tkWMN6zGFTVsCrdtlZOXuO5ohHrK0PqrImTn4O4=) 3: E7BD97EE5D9311F0AFF08443C4F9AE02.roa (hash: wMqZyUHwFnm2prR30bhRvxTQaRsk2FAxurhzAGgKS+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174ED, serialNumber=D5BC790AB037B87DDF6393D74136BF077A1D299D Validity Not Before: Jul 27 09:00:04 2026 GMT Not After : Aug 3 09:00:04 2026 GMT Subject: CN=6a671e14-6afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f8:5e:b0:10:11:11:4f:72:30:26:97:4e:d0: dc:34:de:43:f7:b2:90:a4:9a:53:65:2d:7b:a5:70: 37:cd:a2:06:50:65:2b:2e:12:39:d1:cd:4c:8f:0e: 9e:c3:df:2d:2c:68:0e:88:50:bd:fa:bd:da:3c:cf: d3:bf:a6:34:e9:4b:fc:4a:3e:b5:17:26:95:cb:b0: 96:e0:46:83:f1:cc:4d:df:24:c9:77:4b:60:e0:79: 71:4f:b1:b0:b3:c7:6e:3a:52:37:8b:47:d1:19:20: 15:8c:53:54:e3:8f:2b:8e:df:18:96:40:e2:72:5d: ca:97:7a:63:b9:bb:64:9a:ea:ad:45:4f:5b:ba:c2: 5b:0d:c4:91:c7:b1:96:8c:f3:f3:27:57:45:50:42: 73:44:6a:ed:71:0f:23:82:45:81:ae:06:5d:4a:5f: 90:0e:f5:34:09:ee:c0:10:79:a6:28:e0:58:b4:63: 18:05:19:41:6d:60:47:9d:c7:81:19:a2:9b:0e:e6: 10:0c:7c:b0:53:2a:b5:1b:59:31:3e:79:18:67:d4: 60:0f:fa:cb:b7:4b:24:38:60:ba:ab:14:86:dc:3d: 26:e3:9d:e2:5a:36:89:88:62:90:28:26:63:f2:33: 1d:33:bc:5e:74:92:5d:32:6c:25:78:41:ee:e8:47: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D9:E0:63:B4:DE:50:9A:F2:51:5C:8F:23:8A:7E:9F:5E:31:34:42 X509v3 Authority Key Identifier: keyid:D5:BC:79:0A:B0:37:B8:7D:DF:63:93:D7:41:36:BF:07:7A:1D:29:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bx5CrA3uH3fY5PXQTa_B3odKZ0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174ED/143581625D9211F090DF3836C4F9AE02/1bx5CrA3uH3fY5PXQTa_B3odKZ0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:80:6a:1f:47:40:5d:06:43:f8:3d:3b:40:cf:0b:dc:8b:fe: c3:12:56:51:e0:e4:aa:b4:d6:1b:aa:08:06:d4:fd:dd:ff:02: b3:57:8e:0f:df:f6:92:7b:ef:9d:58:15:d3:0a:ff:d8:02:1c: 7c:ad:18:e0:2c:1f:cd:2c:fc:60:05:3d:e9:a9:44:03:5c:ab: 94:da:75:8b:94:41:ed:bf:1f:86:70:73:d3:fa:13:46:6d:d6: db:05:89:c0:b3:4d:39:9c:be:02:fd:4c:75:26:18:71:b8:d4: c8:03:6a:2c:d0:de:c2:59:97:90:83:d0:fb:06:ea:f2:f2:73: 56:13:5d:48:3d:7e:a1:e0:40:0a:38:69:37:bb:14:4d:3e:e3: 8a:b1:6d:9c:e2:05:2c:56:e2:12:03:fd:b2:73:69:fc:fb:63: 4e:97:12:8e:bb:88:ee:5a:08:f6:ba:9d:6f:a2:02:e2:c1:0a: b3:db:48:52:5c:b7:bb:07:56:ba:6d:94:e7:f3:2b:57:2c:44: f9:d8:b3:33:28:3e:93:ce:a0:a9:ea:7a:57:b0:ea:45:18:d2: 42:b3:08:09:fd:ed:da:93:38:d7:42:88:d1:79:f1:fd:e9:f3: 03:bf:b7:0f:ca:86:ab:70:d9:0f:84:e9:01:55:9a:09:6b:e7: 36:cd:ed:69 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc0RUQxMTAvBgNVBAUTKEQ1QkM3OTBBQjAzN0I4N0RERjYzOTNENzQxMzZCRjA3 N0ExRDI5OUQwHhcNMjYwNzI3MDkwMDA0WhcNMjYwODAzMDkwMDA0WjAYMRYwFAYD VQQDEw02YTY3MWUxNC02YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvhesBAREU9yMCaXTtDcNN5D97KQpJpTZS17pXA3zaIGUGUrLhI50c1Mjw6e w98tLGgOiFC9+r3aPM/Tv6Y06Uv8Sj61FyaVy7CW4EaD8cxN3yTJd0tg4HlxT7Gw s8duOlI3i0fRGSAVjFNU448rjt8YlkDicl3Kl3pjubtkmuqtRU9busJbDcSRx7GW jPPzJ1dFUEJzRGrtcQ8jgkWBrgZdSl+QDvU0Ce7AEHmmKOBYtGMYBRlBbWBHnceB GaKbDuYQDHywUyq1G1kxPnkYZ9RgD/rLt0skOGC6qxSG3D0m453iWjaJiGKQKCZj 8jMdM7xedJJdMmwleEHu6EcIEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGnZ4GO0 3lCa8lFcjyOKfp9eMTRCMB8GA1UdIwQYMBaAFNW8eQqwN7h932OT10E2vwd6HSmd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzRFRC8xNDM1ODE2MjVE OTIxMUYwOTBERjM4MzZDNEY5QUUwMi8xYng1Q3JBM3VIM2ZZNVBYUVRhX0Izb2RL WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFieDVDckEzdUgzZlk1UFhRVGFfQjNvZEtaMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzRFRC8xNDM1ODE2MjVEOTIxMUYwOTBERjM4MzZDNEY5QUUwMi8xYng1Q3JBM3VI M2ZZNVBYUVRhX0Izb2RLWjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM4BqH0dAXQZD+D07QM8L3Iv+wxJWUeDkqrTWG6oIBtT93f8Cs1eOD9/2knvv nVgV0wr/2AIcfK0Y4CwfzSz8YAU96alEA1yrlNp1i5RB7b8fhnBz0/oTRm3W2wWJ wLNNOZy+Av1MdSYYcbjUyANqLNDewlmXkIPQ+wbq8vJzVhNdSD1+oeBACjhpN7sU TT7jirFtnOIFLFbiEgP9snNp/PtjTpcSjruI7loI9rqdb6IC4sEKs9tIUly3uwdW um2U5/MrVyxE+dizMyg+k86gqep6V7DqRRjSQrMICf3t2pM410KI0Xnx/enzA7+3 D8qGq3DZD4TpAVWaCWvnNs3taQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:33:06 2026 by rpki-client