$ rpki-client -vvf rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft File: I90ea4NEljsEULkpM3adRKcyUWs.mft (raw, json) Hash identifier: QzP3SkFdsJ4iw5rOmnuFr/E5JyyCqpFZCfA1cJHS6IE= Subject key identifier: 73:AA:DE:C2:F1:00:12:07:D4:A5:4F:31:C1:1B:E1:EB:69:2A:76:61 Authority key identifier: 23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B Certificate issuer: /CN=A91437AC/serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft Manifest number: 021F Signing time: Mon 27 Jul 2026 04:21:13 +0000 Manifest this update: Mon 27 Jul 2026 04:21:12 +0000 Manifest next update: Mon 03 Aug 2026 04:21:12 +0000 Files and hashes: 1: I90ea4NEljsEULkpM3adRKcyUWs.crl (hash: lPxtObTFFBltO/Qk+g5YjfT2N26bhJcc5lTfSiWeJuo=) 2: 229EA4AC57D811EEAB6EE280C4F9AE02.roa (hash: hnFKBBY108dazlRhnbTksklhF3iwtTcT7etyMAPxnIw=) 3: 413CAD964D6011EE80905941C4F9AE02.roa (hash: 58pWdHGWJ/ggfr/u1qdz2+yvUUIbs/1dEuDaPVOcwn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91437AC, serialNumber=23DD1E6B8344963B0450B92933769D44A732516B Validity Not Before: Jul 27 04:21:12 2026 GMT Not After : Aug 3 04:21:12 2026 GMT Subject: CN=6a66dcb8-281c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:eb:80:ad:e4:65:cf:2b:bf:48:e3:84:a8: 81:1d:7b:54:3d:8d:12:58:59:fb:73:1b:59:6c:44: 15:ac:9b:5e:3d:f6:e5:22:cd:5f:95:c6:13:18:1e: 2d:0d:96:18:64:31:1e:d2:63:1a:cd:d4:78:e8:80: cb:41:00:1a:f8:e9:61:ff:2e:15:0b:7a:ec:a3:24: fa:55:0b:22:9a:fc:85:b2:92:ee:76:ee:45:fa:7d: 89:66:a1:2d:cb:2f:6e:34:e4:f3:72:b7:75:a2:c4: b4:a1:a1:8e:b0:5f:41:e9:7d:f4:f6:e5:d2:45:ff: 9f:29:69:c8:06:ce:12:40:18:21:66:21:4a:e2:d9: 79:8c:14:31:99:0b:77:ac:c4:68:89:ce:6d:9a:2f: e9:df:c1:13:b4:b1:fc:23:fc:ef:ab:dc:66:4e:8f: 82:0f:ff:44:5c:d3:3e:2d:45:d1:aa:f4:a6:29:75: ef:90:8d:13:e0:6b:c6:8c:6a:32:73:6b:1d:8b:18: 43:e2:0a:67:04:e4:fb:17:43:51:c6:95:80:eb:33: 5c:40:ae:2f:36:98:ce:ff:8f:0a:bb:96:49:e7:43: b3:84:0a:91:a6:e0:95:e5:59:1a:3b:04:1a:5d:96: a4:ab:2b:76:43:00:dd:b3:1a:6b:d6:ee:30:97:1e: 2a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:AA:DE:C2:F1:00:12:07:D4:A5:4F:31:C1:1B:E1:EB:69:2A:76:61 X509v3 Authority Key Identifier: keyid:23:DD:1E:6B:83:44:96:3B:04:50:B9:29:33:76:9D:44:A7:32:51:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I90ea4NEljsEULkpM3adRKcyUWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91437AC/0256EB964D6011EE8385F040C4F9AE02/I90ea4NEljsEULkpM3adRKcyUWs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:db:5e:ef:dd:06:7b:1a:8b:27:a2:96:71:a4:e3:05:dc:55: e9:6b:e0:30:7e:72:65:41:41:53:95:64:d0:76:8d:59:90:ad: 91:c6:a9:f3:2f:c3:fa:39:59:df:b4:e7:5e:68:cb:d2:cc:29: e4:45:e1:06:59:60:9e:99:69:61:8c:f4:e0:dc:2e:fe:fb:dd: 80:6b:0a:dd:9b:02:43:d0:b6:31:33:08:4b:d7:f1:ac:ad:59: 4c:12:e9:7f:4b:5f:58:4c:c0:55:c4:d7:0a:55:a8:d4:d5:b1: e3:3a:dd:3e:d5:c4:11:8c:a1:e4:62:8c:84:d3:ea:b9:57:68: 81:bb:ed:6f:a4:1c:8b:ca:43:f4:c5:00:68:21:12:40:3f:ba: b2:8c:22:1c:d0:5f:63:0c:00:31:2b:fa:22:c2:dc:6a:5b:9d: 65:31:b1:40:70:b4:06:15:1e:33:21:6d:5f:e3:e0:d3:4d:cb: 80:db:72:85:8e:ce:69:62:c6:b1:c5:4a:41:7b:db:46:dd:81: 8d:0c:45:55:33:7e:27:b0:ba:43:cf:32:eb:de:d5:e2:c5:ab: c7:8a:bb:74:05:74:70:3b:c9:94:ef:82:a5:22:bd:02:90:5a: 39:3c:79:b6:bd:82:01:25:ca:69:f5:29:8d:3f:69:9f:ff:3c: 6d:b5:6f:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM3QUMxMTAvBgNVBAUTKDIzREQxRTZCODM0NDk2M0IwNDUwQjkyOTMzNzY5RDQ0 QTczMjUxNkIwHhcNMjYwNzI3MDQyMTEyWhcNMjYwODAzMDQyMTEyWjAYMRYwFAYD VQQDEw02YTY2ZGNiOC0yODFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgrrgK3kZc8rv0jjhKiBHXtUPY0SWFn7cxtZbEQVrJtePfblIs1flcYTGB4t DZYYZDEe0mMazdR46IDLQQAa+Olh/y4VC3rsoyT6VQsimvyFspLudu5F+n2JZqEt yy9uNOTzcrd1osS0oaGOsF9B6X309uXSRf+fKWnIBs4SQBghZiFK4tl5jBQxmQt3 rMRoic5tmi/p38ETtLH8I/zvq9xmTo+CD/9EXNM+LUXRqvSmKXXvkI0T4GvGjGoy c2sdixhD4gpnBOT7F0NRxpWA6zNcQK4vNpjO/48Ku5ZJ50OzhAqRpuCV5VkaOwQa XZakqyt2QwDdsxpr1u4wlx4qvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHOq3sLx ABIH1KVPMcEb4etpKnZhMB8GA1UdIwQYMBaAFCPdHmuDRJY7BFC5KTN2nUSnMlFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzdBQy8wMjU2RUI5NjRE NjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxqc0VVTGtwTTNhZFJLY3lV V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5MGVhNE5FbGpzRVVMa3BNM2FkUktjeVVXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzdBQy8wMjU2RUI5NjRENjAxMUVFODM4NUYwNDBDNEY5QUUwMi9JOTBlYTRORWxq c0VVTGtwTTNhZFJLY3lVV3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS9te790GexqLJ6KWcaTjBdxV6WvgMH5yZUFBU5Vk0HaNWZCtkcap8y/D+jlZ 37TnXmjL0swp5EXhBllgnplpYYz04Nwu/vvdgGsK3ZsCQ9C2MTMIS9fxrK1ZTBLp f0tfWEzAVcTXClWo1NWx4zrdPtXEEYyh5GKMhNPquVdogbvtb6Qci8pD9MUAaCES QD+6sowiHNBfYwwAMSv6IsLcaludZTGxQHC0BhUeMyFtX+Pg003LgNtyhY7OaWLG scVKQXvbRt2BjQxFVTN+J7C6Q88y697V4sWrx4q7dAV0cDvJlO+CpSK9ApBaOTx5 tr2CASXKafUpjT9pn/88bbVvTw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:09:17 2026 by rpki-client