$ rpki-client -vvf rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft File: nB5FqAhMMR3VAEShc2BejuPEzJU.mft (raw, json) Hash identifier: b85+z1K1LfULrpyDFkiw7rW0TWIOhyLGwCBr7eg8qyk= Subject key identifier: 9C:C3:AB:DE:EE:D9:C3:24:ED:69:E8:21:0C:99:70:65:E2:69:FC:F1 Authority key identifier: 9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 Certificate issuer: /CN=A91491CC/serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft Manifest number: 9D Signing time: Mon 27 Jul 2026 09:28:36 +0000 Manifest this update: Mon 27 Jul 2026 09:28:36 +0000 Manifest next update: Mon 03 Aug 2026 09:28:36 +0000 Files and hashes: 1: nB5FqAhMMR3VAEShc2BejuPEzJU.crl (hash: uqdv11zW8rVWwZWYVRZaVTh1GcKGl1bAufAp6+Lgp5w=) 2: 31E9004E9A0F11F0BC057E7DC4F9AE02.roa (hash: lMXIM574jb3Z0QsqRGCGYyP7C5VSgFPD1a4YIovILSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91491CC, serialNumber=9C1E45A8084C311DD50044A173605E8EE3C4CC95 Validity Not Before: Jul 27 09:28:36 2026 GMT Not After : Aug 3 09:28:36 2026 GMT Subject: CN=6a6724c4-97a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:70:ae:5e:0c:6f:1b:17:d5:ea:08:e5:04: 53:f2:15:80:ab:20:9d:71:95:9f:a1:94:41:01:bf: 41:96:2f:99:8c:9f:0e:d6:92:5e:8a:39:c6:27:28: 8d:3b:79:3d:58:0b:bb:ca:43:b4:d4:9e:34:f3:41: fe:e8:75:b6:81:bf:de:bd:e8:da:1d:69:e1:82:5f: 2a:f2:48:e8:bb:81:32:44:63:5f:a1:87:e2:2c:75: 98:6f:9e:e2:b8:b4:e8:97:3e:5b:e3:86:e4:c5:5e: b4:ea:5d:19:dd:47:eb:65:c8:9d:60:7d:c6:fb:b2: e1:ca:93:19:2b:ee:2c:0d:69:8d:fb:2d:59:eb:cf: 53:61:09:70:45:97:b1:3f:29:05:85:0c:62:15:39: 95:d4:80:e6:f3:05:f5:d8:3f:71:3e:c2:2c:14:44: ac:8a:ad:6f:e9:47:dd:28:32:18:69:f4:e9:07:8e: 14:47:99:1b:29:45:9b:76:da:70:1b:3d:0d:34:0d: c6:07:8d:cb:dd:87:b2:81:f9:05:32:51:9a:4c:02: 5e:b4:b7:0f:2e:80:61:e3:38:fc:4e:b5:d2:b4:16: a5:36:99:85:3e:e9:79:6e:83:65:95:ec:41:41:29: 74:28:65:89:8e:ca:6e:76:2b:85:d7:6b:a7:da:5f: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C3:AB:DE:EE:D9:C3:24:ED:69:E8:21:0C:99:70:65:E2:69:FC:F1 X509v3 Authority Key Identifier: keyid:9C:1E:45:A8:08:4C:31:1D:D5:00:44:A1:73:60:5E:8E:E3:C4:CC:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nB5FqAhMMR3VAEShc2BejuPEzJU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91491CC/9DF07E449A0E11F089C88B7CC4F9AE02/nB5FqAhMMR3VAEShc2BejuPEzJU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:63:8b:12:f2:8e:03:17:90:e3:b4:78:14:33:36:72:e9:e1: e1:f0:9c:bb:fb:0a:2b:da:7d:3c:50:f6:fd:e7:52:9b:3b:aa: e5:47:dc:55:6d:b4:91:aa:eb:7d:af:e0:bc:e3:41:ec:30:ab: 32:b4:8d:33:f6:c8:94:e4:c3:4b:a9:8c:72:5d:3f:9a:90:2d: 9b:a4:c2:ee:56:14:50:6a:14:64:63:97:98:d8:d8:c1:ef:8f: de:07:3e:4e:8c:92:51:b5:69:c3:ff:28:6d:6d:97:dd:e7:e0: 13:4f:1a:2c:1a:72:67:be:a2:43:03:b3:02:9e:10:0d:e1:90: 27:2e:9d:0b:3e:8d:8f:57:73:ff:3d:e6:60:d5:86:f8:cc:bf: 98:a5:9e:74:7a:51:8f:2f:5c:ac:07:d7:49:0e:34:f0:33:82: 8d:38:b5:5f:eb:41:07:de:19:da:98:53:96:6e:47:46:fa:c9: 9f:e8:f5:ef:12:db:e3:01:1b:db:1e:9c:f2:de:2a:2a:f6:3a: 75:5a:45:f2:d8:77:00:9b:91:d7:12:30:d4:7c:af:27:0c:12: 79:90:d9:fd:46:20:b0:ee:2a:10:69:57:e2:6b:12:92:23:fb: 6f:ba:32:ce:fe:b2:79:e5:a2:78:f4:46:d1:56:94:4b:01:de: 73:71:4f:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkxQ0MxMTAvBgNVBAUTKDlDMUU0NUE4MDg0QzMxMURENTAwNDRBMTczNjA1RThF RTNDNENDOTUwHhcNMjYwNzI3MDkyODM2WhcNMjYwODAzMDkyODM2WjAYMRYwFAYD VQQDEw02YTY3MjRjNC05N2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp8twrl4MbxsX1eoI5QRT8hWAqyCdcZWfoZRBAb9Bli+ZjJ8O1pJeijnGJyiN O3k9WAu7ykO01J4080H+6HW2gb/evejaHWnhgl8q8kjou4EyRGNfoYfiLHWYb57i uLTolz5b44bkxV606l0Z3UfrZcidYH3G+7LhypMZK+4sDWmN+y1Z689TYQlwRZex PykFhQxiFTmV1IDm8wX12D9xPsIsFESsiq1v6UfdKDIYafTpB44UR5kbKUWbdtpw Gz0NNA3GB43L3YeygfkFMlGaTAJetLcPLoBh4zj8TrXStBalNpmFPul5boNllexB QSl0KGWJjspudiuF12un2l/wrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzDq97u 2cMk7WnoIQyZcGXiafzxMB8GA1UdIwQYMBaAFJweRagITDEd1QBEoXNgXo7jxMyV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTFDQy85REYwN0U0NDlB MEUxMUYwODlDODhCN0NDNEY5QUUwMi9uQjVGcUFoTU1SM1ZBRVNoYzJCZWp1UEV6 SlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25CNUZxQWhNTVIzVkFFU2hjMkJlanVQRXpKVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTFDQy85REYwN0U0NDlBMEUxMUYwODlDODhCN0NDNEY5QUUwMi9uQjVGcUFoTU1S M1ZBRVNoYzJCZWp1UEV6SlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR2OLEvKOAxeQ47R4FDM2cunh4fCcu/sKK9p9PFD2/edSmzuq5UfcVW20karr fa/gvONB7DCrMrSNM/bIlOTDS6mMcl0/mpAtm6TC7lYUUGoUZGOXmNjYwe+P3gc+ ToySUbVpw/8obW2X3efgE08aLBpyZ76iQwOzAp4QDeGQJy6dCz6Nj1dz/z3mYNWG +My/mKWedHpRjy9crAfXSQ408DOCjTi1X+tBB94Z2phTlm5HRvrJn+j17xLb4wEb 2x6c8t4qKvY6dVpF8th3AJuR1xIw1HyvJwwSeZDZ/UYgsO4qEGlX4msSkiP7b7oy zv6yeeWiePRG0VaUSwHec3FP/w== -----END CERTIFICATE-----Generated at Tue Jul 28 18:32:32 2026 by rpki-client