$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: AyjLZ/9SddykOwjlcFgBoczTz9sy/Pv5o8CmTKtnb1g= Subject key identifier: 85:78:8C:F0:22:6A:EB:39:A3:D7:44:37:40:8E:05:B4:2F:66:06:F0 Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 35C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 3590 Signing time: Tue 28 Jul 2026 14:39:21 +0000 Manifest this update: Tue 28 Jul 2026 14:39:21 +0000 Manifest next update: Tue 04 Aug 2026 14:39:21 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: sS3p/YtW0yUoq+PNhsv6OOpJGQfQ9fpC4uqGJBlkihY=) 2: DA8A3692A59411F0BF072D6DC4F9AE02.roa (hash: KPbP95r3TCc58AOeYUlQqKFz/YOZ3L4nxR/B312mHxQ=) 3: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: d1VOETNhFOccLSwqdQXH2GNl8fCdfHMVZ6K7EwkYRNQ=) 4: F62323DEB97911F0A728D041C4F9AE02.roa (hash: VYA799jHHyf/EZwQx98vKIoBtcAMfoZki4v45ia4iow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13768 (0x35c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Jul 28 14:39:21 2026 GMT Not After : Aug 4 14:39:21 2026 GMT Subject: CN=6a68bf19-d651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:85:be:8e:48:88:74:7f:d1:e5:0c:9f:02: c2:96:64:34:ff:be:5f:48:66:8b:0a:1c:49:f9:1b: 30:7a:ab:21:90:8e:be:e7:6a:81:a1:e5:b5:3b:b7: fd:82:fe:27:c5:9d:07:4b:a8:35:15:e2:0b:e4:8c: 4b:23:e4:54:2f:5b:8a:6a:a9:b2:e1:04:76:60:43: 43:b0:0c:5a:11:18:fa:64:fd:0a:d0:1b:b3:92:ce: 44:8d:0b:2a:d0:ba:f6:0e:d3:1a:eb:5e:0d:07:d4: 40:09:b0:6e:34:db:60:ab:cb:b7:3d:f0:6b:42:1b: cc:be:32:69:33:1f:49:20:aa:6f:21:31:67:5a:3e: 08:ea:45:93:ad:e9:88:06:08:7a:cb:a4:7b:3e:e5: 1b:7d:2d:02:2c:18:4b:6c:97:a3:e6:47:bb:a6:73: af:e3:16:85:68:53:d8:87:52:bd:21:d6:ed:c4:23: 86:44:23:e5:0e:b8:c5:f2:de:ad:dd:87:97:f5:3b: 6c:e5:cc:6d:e3:aa:89:ad:29:71:12:24:fd:e4:a5: 05:57:df:bb:ad:04:3b:3b:54:fe:56:6e:fe:65:bd: 23:71:73:04:81:94:59:d9:0e:06:5f:7d:eb:40:6d: 4d:07:2f:06:30:4a:f8:2e:c3:a4:1c:f0:29:d3:97: 88:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:78:8C:F0:22:6A:EB:39:A3:D7:44:37:40:8E:05:B4:2F:66:06:F0 X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:a0:55:db:18:dc:ab:44:51:ad:d0:24:82:15:64:a5:07:12: 9e:17:15:73:ac:05:b0:a3:28:9e:35:86:d1:f9:6f:83:af:49: 0b:6c:fe:ce:a4:30:b0:c2:d3:78:97:12:bb:97:b4:de:cd:54: 92:ae:98:b4:f3:43:79:f8:2c:49:8e:8b:8e:60:39:95:cb:1b: 41:eb:52:ca:da:11:54:e4:ee:e0:24:62:b9:7d:41:17:f6:56: d4:6c:39:0a:08:59:a9:b2:dc:81:a5:fe:40:79:86:7d:88:b7: 7b:8c:e5:d2:ae:62:ce:f7:c2:b7:d3:5c:a3:fb:32:ea:b1:f0: fc:13:b4:8d:ba:14:ad:37:38:61:f9:14:5f:49:5e:c6:04:ec: 0c:3b:7d:81:85:75:7e:4a:0d:c4:25:ca:f9:21:ee:41:1a:e2: 7b:24:96:30:d0:7b:6b:2f:0a:68:b6:10:a1:d2:f6:86:3a:c7: 85:57:7b:21:97:2c:02:1f:2b:fa:4e:0c:73:7d:aa:d8:ed:9c: c8:e4:3c:ec:a7:de:79:ff:27:b7:2d:00:a3:42:7c:59:54:bd: dc:c0:3a:22:88:05:8a:5f:37:d8:2c:17:ab:de:1e:84:d9:64: 3b:4b:cd:99:f4:44:11:2f:a9:a0:ba:ec:2e:5f:77:3c:28:ad: 81:fc:c9:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjYwNzI4MTQzOTIxWhcNMjYwODA0MTQzOTIxWjAYMRYwFAYD VQQDEw02YTY4YmYxOS1kNjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+SFvo5IiHR/0eUMnwLClmQ0/75fSGaLChxJ+RsweqshkI6+52qBoeW1O7f9 gv4nxZ0HS6g1FeIL5IxLI+RUL1uKaqmy4QR2YENDsAxaERj6ZP0K0Buzks5EjQsq 0Lr2DtMa614NB9RACbBuNNtgq8u3PfBrQhvMvjJpMx9JIKpvITFnWj4I6kWTremI Bgh6y6R7PuUbfS0CLBhLbJej5ke7pnOv4xaFaFPYh1K9IdbtxCOGRCPlDrjF8t6t 3YeX9Tts5cxt46qJrSlxEiT95KUFV9+7rQQ7O1T+Vm7+Zb0jcXMEgZRZ2Q4GX33r QG1NBy8GMEr4LsOkHPAp05eIrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIV4jPAi aus5o9dEN0COBbQvZgbwMB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsaBV2xjcq0RRrdAkghVkpQcSnhcVc6wFsKMonjWG0flvg69JC2z+zqQwsMLT eJcSu5e03s1Ukq6YtPNDefgsSY6LjmA5lcsbQetSytoRVOTu4CRiuX1BF/ZW1Gw5 CghZqbLcgaX+QHmGfYi3e4zl0q5izvfCt9Nco/sy6rHw/BO0jboUrTc4YfkUX0le xgTsDDt9gYV1fkoNxCXK+SHuQRrieySWMNB7ay8KaLYQodL2hjrHhVd7IZcsAh8r +k4Mc32q2O2cyOQ87Kfeef8nty0Ao0J8WVS93MA6IogFil832CwXq94ehNlkO0vN mfREES+poLrsLl93PCitgfzJjw== -----END CERTIFICATE-----Generated at Wed Jul 29 14:16:59 2026 by rpki-client