$ rpki-client -vvf rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft File: D0a9vHSQTl34KfAVlbUcqqIBuds.mft (raw, json) Hash identifier: nJaDaYGTEnQuRDC0T5E1i8k39Acv098a4wqZF9NqOKs= Subject key identifier: F8:F7:14:42:23:94:AA:0C:1F:E2:55:AE:72:87:FD:57:55:D6:CF:BD Authority key identifier: 0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB Certificate issuer: /CN=A91449E2/serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft Manifest number: 025B Signing time: Mon 27 Jul 2026 03:41:14 +0000 Manifest this update: Mon 27 Jul 2026 03:41:14 +0000 Manifest next update: Mon 03 Aug 2026 03:41:14 +0000 Files and hashes: 1: D0a9vHSQTl34KfAVlbUcqqIBuds.crl (hash: Hl4ZLN5/rJ43ssqiMJFUGjkT43y+kVWI41cc8GIvI3g=) 2: 568D8AACF00511ED9239BC6EC4F9AE02.roa (hash: XrKHKQzHMa1y0uVAA7/pa5YvcBRJFX+HV140KMXuEWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91449E2, serialNumber=0F46BDBC74904E5DF829F01595B51CAAA201B9DB Validity Not Before: Jul 27 03:41:14 2026 GMT Not After : Aug 3 03:41:14 2026 GMT Subject: CN=6a66d35a-fce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:e3:14:5c:30:eb:d0:bb:77:3a:d2:54:6d: 99:7a:61:95:83:8a:a3:59:25:33:4a:5f:24:c9:db: e5:28:a4:9b:b4:6f:f4:fe:7e:7d:2c:ec:b6:b2:af: 81:e2:43:18:4f:00:86:e4:9d:41:87:99:68:c8:2d: cb:61:df:e0:51:f3:b5:0b:44:ea:56:9a:e7:db:45: 21:aa:68:da:4f:cc:c8:50:8d:84:4e:9e:bc:48:6f: 4c:b1:d7:eb:7b:8b:7f:cf:b9:d6:55:fa:9d:36:1f: 90:9f:dd:07:9d:8f:43:ea:20:d3:70:6d:e1:f2:05: 17:ee:ac:12:79:48:41:5e:0c:84:fe:c0:72:ef:5c: 62:cf:4d:27:f7:dd:50:0a:d4:f2:9d:cc:15:43:f5: 4b:1a:d5:f4:a8:d3:18:5b:ae:ff:b0:fd:1e:4d:a7: 20:08:90:1d:81:1b:27:18:07:c1:8f:60:c7:ee:8f: 76:a9:23:1a:c4:3d:5c:c5:a2:9b:a8:09:f3:68:e9: a8:db:d6:ea:e1:ec:54:ca:54:6c:fc:9c:96:83:48: 3c:17:66:eb:a0:d3:38:5a:28:3f:2b:03:5a:db:e9: ee:58:e3:d9:7b:1e:5a:13:4b:7e:54:c4:8b:07:8b: a8:e4:10:5a:4d:b2:e3:e9:2b:9d:ec:ad:a3:c5:d2: d0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F7:14:42:23:94:AA:0C:1F:E2:55:AE:72:87:FD:57:55:D6:CF:BD X509v3 Authority Key Identifier: keyid:0F:46:BD:BC:74:90:4E:5D:F8:29:F0:15:95:B5:1C:AA:A2:01:B9:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D0a9vHSQTl34KfAVlbUcqqIBuds.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91449E2/B6443384EFFF11ED8556EE54C4F9AE02/D0a9vHSQTl34KfAVlbUcqqIBuds.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ac:e4:fb:f4:4c:3f:a4:44:df:fb:b2:f3:42:57:79:51:44: a9:71:75:6f:4b:12:a4:90:9e:39:97:9c:c4:be:2f:33:5a:88: 7c:8e:89:21:c8:c1:82:68:7d:a9:62:9d:95:e9:27:a6:69:50: 9f:18:1d:f2:d9:4e:4e:e6:36:43:51:68:f0:76:98:bf:6a:24: 2e:56:d5:63:93:07:7c:2a:89:55:4e:94:ff:b5:9a:a2:b9:52: cf:cf:56:59:91:e8:7d:a8:83:72:c4:f3:a5:f9:c4:0e:c4:7d: c8:ad:74:c9:f3:ff:23:1b:f8:f8:a0:31:79:a2:6c:f0:36:10: 89:be:76:08:19:d5:2c:b7:35:af:26:b3:4f:84:04:16:26:c7: c3:99:de:f1:3c:aa:82:33:00:a6:af:8f:48:57:65:a0:b1:f2: c8:30:49:4b:cb:b6:d7:03:6a:8b:8f:3b:7a:d6:1c:ff:ec:a0: 6b:37:d4:e0:4a:6b:f7:48:cd:d8:c4:52:e0:fb:a3:e6:be:82: 3b:f7:5b:09:84:df:cd:e5:b3:ce:06:2e:c6:a2:27:49:db:aa: b3:c2:f4:ef:a8:94:82:b8:a1:e5:da:70:68:73:50:b9:2d:11: f8:14:74:30:8e:47:14:b0:e9:7d:ed:2a:fb:5a:fa:ea:29:be: 2a:52:d2:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ5RTIxMTAvBgNVBAUTKDBGNDZCREJDNzQ5MDRFNURGODI5RjAxNTk1QjUxQ0FB QTIwMUI5REIwHhcNMjYwNzI3MDM0MTE0WhcNMjYwODAzMDM0MTE0WjAYMRYwFAYD VQQDEw02YTY2ZDM1YS1mY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5PjFFww69C7dzrSVG2ZemGVg4qjWSUzSl8kydvlKKSbtG/0/n59LOy2sq+B 4kMYTwCG5J1Bh5loyC3LYd/gUfO1C0TqVprn20UhqmjaT8zIUI2ETp68SG9Msdfr e4t/z7nWVfqdNh+Qn90HnY9D6iDTcG3h8gUX7qwSeUhBXgyE/sBy71xiz00n991Q CtTyncwVQ/VLGtX0qNMYW67/sP0eTacgCJAdgRsnGAfBj2DH7o92qSMaxD1cxaKb qAnzaOmo29bq4exUylRs/JyWg0g8F2broNM4Wig/KwNa2+nuWOPZex5aE0t+VMSL B4uo5BBaTbLj6Sud7K2jxdLQ9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPj3FEIj lKoMH+JVrnKH/VdV1s+9MB8GA1UdIwQYMBaAFA9Gvbx0kE5d+CnwFZW1HKqiAbnb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDlFMi9CNjQ0MzM4NEVG RkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRsMzRLZkFWbGJVY3FxSUJ1 ZHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QwYTl2SFNRVGwzNEtmQVZsYlVjcXFJQnVkcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDlFMi9CNjQ0MzM4NEVGRkYxMUVEODU1NkVFNTRDNEY5QUUwMi9EMGE5dkhTUVRs MzRLZkFWbGJVY3FxSUJ1ZHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC6zk+/RMP6RE3/uy80JXeVFEqXF1b0sSpJCeOZecxL4vM1qIfI6JIcjBgmh9 qWKdleknpmlQnxgd8tlOTuY2Q1Fo8HaYv2okLlbVY5MHfCqJVU6U/7WaorlSz89W WZHofaiDcsTzpfnEDsR9yK10yfP/Ixv4+KAxeaJs8DYQib52CBnVLLc1ryazT4QE FibHw5ne8TyqgjMApq+PSFdloLHyyDBJS8u21wNqi487etYc/+ygazfU4Epr90jN 2MRS4Puj5r6CO/dbCYTfzeWzzgYuxqInSduqs8L076iUgrih5dpwaHNQuS0R+BR0 MI5HFLDpfe0q+1r66im+KlLSJQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:10:29 2026 by rpki-client