$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft File: 5D3SMzFr8OKboG0g3sJdtMwRbgg.mft (raw, json) Hash identifier: TDtSq5i9YUFcg8GS/ZTJEE5jeMhA1LLwoIbjKezKq7s= Subject key identifier: B1:2F:B5:C0:6D:CF:91:D8:24:BF:08:1D:7B:FC:F8:38:ED:3B:28:52 Authority key identifier: E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 Certificate issuer: /CN=A9120AC1/serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft Manifest number: 0591 Signing time: Tue 28 Jul 2026 23:53:40 +0000 Manifest this update: Tue 28 Jul 2026 23:53:39 +0000 Manifest next update: Tue 04 Aug 2026 23:53:39 +0000 Files and hashes: 1: 5D3SMzFr8OKboG0g3sJdtMwRbgg.crl (hash: B81j4AMYF6uPEH1+iBoRpGgQ5NS0DES7lV0UFl/X0B4=) 2: 579B33AE886F11F0A02D4009C4F9AE02.roa (hash: kvqSrwpHPLZJw/K+1ltO2ek3REXXe9HMAbW/Edna9+s=) 3: 3A2A80AE3C8311ECA86D031EC4F9AE02.roa (hash: MUl/v1p+vm1Iz1fhfXWdiu0rlYEkwrSBTJH5GlDUE7w=) 4: 94AB76D86DE711F196A4F1FD5BA30FBC.roa (hash: kx05g5sFc7i3wM9cZ3d4c4kpJCzSjVmmtIWjZ9lyY9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 23:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=E43DD233316BF0E29BA06D20DEC25DB4CC116E08 Validity Not Before: Jul 28 23:53:39 2026 GMT Not After : Aug 4 23:53:39 2026 GMT Subject: CN=6a694103-80f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e7:d6:d1:e1:74:dc:c3:28:bf:20:62:53:34: e1:26:fc:fe:97:a4:a0:86:80:c7:7a:97:7e:04:53: ec:14:db:0a:92:63:ac:d8:e4:79:93:91:1d:8a:9f: de:18:dc:52:ae:f1:50:6d:65:aa:02:30:b0:1d:92: 9e:cd:f1:54:8d:9b:1e:b2:6e:43:48:dc:e3:b3:8b: 9f:02:5e:08:fa:7b:df:fa:c4:00:b1:ce:fe:bf:12: 8e:52:7e:ce:01:06:15:cc:cb:2f:cf:bd:24:ff:b3: e6:1f:ba:9e:cf:32:5d:2b:64:8a:da:7f:6f:44:76: 22:e8:01:49:2a:1f:f4:53:c1:8c:7b:5a:3a:5a:ad: 17:f4:27:a2:02:6e:73:1e:00:eb:05:39:42:4d:e2: df:d6:e0:61:9f:25:76:3c:c3:8f:e8:fc:6b:24:8c: 40:4c:2c:10:6b:49:b4:a4:e1:ad:81:91:f9:f6:03: d2:3a:af:1b:8f:7a:29:83:5a:1e:72:4e:43:82:43: 7f:83:7a:86:49:11:3b:38:e0:f9:a4:30:5d:77:57: 16:f7:f5:34:75:66:34:c5:78:61:02:e4:0b:1d:67: 0b:7e:d4:68:51:84:c4:6c:83:96:9b:a3:f5:a5:6c: aa:9f:f4:ce:57:2b:66:bb:58:32:69:d4:d3:ac:63: b6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2F:B5:C0:6D:CF:91:D8:24:BF:08:1D:7B:FC:F8:38:ED:3B:28:52 X509v3 Authority Key Identifier: keyid:E4:3D:D2:33:31:6B:F0:E2:9B:A0:6D:20:DE:C2:5D:B4:CC:11:6E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5D3SMzFr8OKboG0g3sJdtMwRbgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/3E9A4AE0309711ECB285A64BC4F9AE02/5D3SMzFr8OKboG0g3sJdtMwRbgg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:81:df:ba:9d:d6:f6:04:7f:6d:84:09:91:6d:f3:17:5a:2f: 4d:e5:99:ef:7b:40:cd:d5:11:74:57:87:4a:c5:95:b3:e6:92: e1:6e:60:d4:bd:99:12:87:0a:f6:9f:73:3f:da:bb:48:8d:41: fa:dc:2e:99:3b:4f:fb:4f:1d:be:6d:e5:68:ad:39:8b:93:54: 03:66:83:e3:b9:6f:d0:c9:3c:ca:7a:9a:3e:9d:2e:6b:30:91: 8b:14:04:bc:3c:f3:43:b0:1c:51:71:75:52:f3:a6:99:33:0f: f4:db:ec:55:db:86:fd:98:63:d7:fe:1e:d3:f1:0e:61:b7:56: e0:ab:8f:e0:0b:48:46:c5:fa:09:65:ce:e1:61:cd:ea:5a:6b: 9f:b3:6c:6d:37:4e:23:cb:21:a2:30:f6:7c:a2:19:f4:33:57: 7c:ee:99:10:43:8e:b8:41:01:be:4c:ff:40:b5:65:7b:37:a3: ba:9d:cc:7e:90:0f:e2:15:9f:8c:4a:9c:4e:e2:df:44:26:7b: 2e:d0:0b:bd:09:76:c0:05:52:77:b7:f9:82:af:62:62:56:99: 5c:a4:d9:9f:89:7f:43:bc:7a:61:36:88:bf:88:f9:1b:62:e3: 67:ce:9c:e0:40:04:42:0d:12:72:91:cc:cd:d8:d3:87:a3:7e: 2b:1f:6d:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKEU0M0REMjMzMzE2QkYwRTI5QkEwNkQyMERFQzI1REI0 Q0MxMTZFMDgwHhcNMjYwNzI4MjM1MzM5WhcNMjYwODA0MjM1MzM5WjAYMRYwFAYD VQQDEw02YTY5NDEwMy04MGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlufW0eF03MMovyBiUzThJvz+l6SghoDHepd+BFPsFNsKkmOs2OR5k5Edip/e GNxSrvFQbWWqAjCwHZKezfFUjZsesm5DSNzjs4ufAl4I+nvf+sQAsc7+vxKOUn7O AQYVzMsvz70k/7PmH7qezzJdK2SK2n9vRHYi6AFJKh/0U8GMe1o6Wq0X9CeiAm5z HgDrBTlCTeLf1uBhnyV2PMOP6PxrJIxATCwQa0m0pOGtgZH59gPSOq8bj3opg1oe ck5DgkN/g3qGSRE7OOD5pDBdd1cW9/U0dWY0xXhhAuQLHWcLftRoUYTEbIOWm6P1 pWyqn/TOVytmu1gyadTTrGO2NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLEvtcBt z5HYJL8IHXv8+DjtOyhSMB8GA1UdIwQYMBaAFOQ90jMxa/Dim6BtIN7CXbTMEW4I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zRTlBNEFFMDMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhPS2JvRzBnM3NKZHRNd1Ji Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVEM1NNekZyOE9LYm9HMGczc0pkdE13UmJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zRTlBNEFFMDMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi81RDNTTXpGcjhP S2JvRzBnM3NKZHRNd1JiZ2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA4Hfup3W9gR/bYQJkW3zF1ovTeWZ73tAzdURdFeHSsWVs+aS4W5g1L2ZEocK 9p9zP9q7SI1B+twumTtP+08dvm3laK05i5NUA2aD47lv0Mk8ynqaPp0uazCRixQE vDzzQ7AcUXF1UvOmmTMP9NvsVduG/Zhj1/4e0/EOYbdW4KuP4AtIRsX6CWXO4WHN 6lprn7NsbTdOI8shojD2fKIZ9DNXfO6ZEEOOuEEBvkz/QLVlezejup3MfpAP4hWf jEqcTuLfRCZ7LtALvQl2wAVSd7f5gq9iYlaZXKTZn4l/Q7x6YTaIv4j5G2LjZ86c 4EAEQg0ScpHMzdjTh6N+Kx9tTw== -----END CERTIFICATE-----Generated at Wed Jul 29 08:30:32 2026 by rpki-client