$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft File: -tm5N3fQzrort6a3jVB_d5CSHAY.mft (raw, json) Hash identifier: pVup5BHdeN1a2inZy8jDUgCy0IxDjsqdb/lnPO2NSyo= Subject key identifier: 36:F1:43:F6:3E:BA:8C:C5:35:A2:BD:A8:F1:27:82:E4:2E:71:B4:0F Authority key identifier: FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06 Certificate issuer: /CN=A91557F2/serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06 Certificate serial: 07BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft Manifest number: 09E3 Signing time: Sun 26 Jul 2026 22:06:20 +0000 Manifest this update: Sun 26 Jul 2026 22:06:19 +0000 Manifest next update: Sun 02 Aug 2026 22:06:19 +0000 Files and hashes: 1: -tm5N3fQzrort6a3jVB_d5CSHAY.crl (hash: mCKOJQtygvs07+eaayu6y6U+L1HbiX2HI8EvQfzI6IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1983 (0x7bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557F2, serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06 Validity Not Before: Jul 26 22:06:19 2026 GMT Not After : Aug 2 22:06:19 2026 GMT Subject: CN=6a6684dc-3d2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:eb:31:93:01:ce:b2:97:32:60:ee:ce:51:78: 7e:da:bd:90:ac:e9:f7:0a:6f:50:78:bd:91:d1:d5: 6e:66:25:e8:99:c1:76:f5:15:5d:17:59:ec:1d:6b: d3:5e:21:24:2d:67:a6:17:36:c8:76:f9:e6:7f:da: 42:86:d5:fa:f8:15:a8:da:bb:c2:26:f0:cd:be:b7: 20:d8:53:27:65:74:18:4f:0f:fb:86:3f:4e:2a:6a: 11:a4:a1:c8:ce:5a:bd:a1:62:57:3a:42:64:64:90: 3d:3a:c7:35:da:0c:a3:14:a7:67:c1:be:c2:37:a8: 08:40:c7:82:19:5b:fb:aa:7e:22:da:2c:e7:11:7f: 6c:8c:8e:c2:54:87:53:5c:56:d7:50:14:ba:87:dd: 34:fc:c0:73:6a:e5:a8:2d:1a:d4:14:7f:ee:0d:d0: 79:02:83:99:43:55:6d:4d:0b:87:f7:d7:ea:b0:4f: 44:d5:8f:87:e4:30:50:74:2c:87:90:19:d2:a4:23: eb:04:2e:08:99:d9:a8:66:38:08:c5:88:38:33:a2: 03:d4:a2:c7:33:e6:e5:27:78:ba:1d:7b:0f:52:d9: 69:18:70:b1:16:2e:3a:eb:8a:fc:df:ee:9c:9a:fd: 9d:2a:da:57:c5:f2:8a:e9:ef:a5:ce:5e:7e:e7:9e: 45:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F1:43:F6:3E:BA:8C:C5:35:A2:BD:A8:F1:27:82:E4:2E:71:B4:0F X509v3 Authority Key Identifier: keyid:FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:39:d8:b0:92:6c:8d:94:61:11:f9:e8:d8:a1:47:3b:00:f2: 78:f2:ca:47:24:5b:32:4d:38:e4:bd:6c:93:58:a1:66:61:2a: ab:9e:40:f8:e0:61:8d:fb:22:89:6f:61:9b:52:f6:8c:84:d5: f4:2c:1b:db:9b:b0:b0:1a:d9:a8:f8:cb:11:38:7e:15:33:4e: 08:3c:b1:d0:06:62:05:45:cd:3f:f8:82:da:3b:ee:6b:c8:2b: 94:79:58:81:32:e9:31:a2:c8:89:96:78:2c:15:59:ca:d2:cb: b6:6e:cc:77:85:11:d1:b3:6f:b9:01:30:b1:75:8b:69:a3:c0: 0d:04:65:31:6b:0f:2d:85:d8:72:ef:d1:cc:b2:85:5a:91:b4: b5:7f:7f:78:67:16:75:5f:be:b3:f9:23:62:d2:2e:1c:67:16: 81:5d:65:74:df:f1:08:e8:ff:23:1f:d6:41:85:43:35:ee:d7: 2b:03:8b:f7:30:62:0c:9f:9d:c2:4e:42:ac:e1:f7:29:58:47: 44:6c:f2:11:53:a3:9d:09:66:7f:dd:1d:bd:55:33:2e:18:e5: e3:48:69:7a:56:cf:db:70:0f:32:c3:ae:f8:ed:69:8c:bb:52: 2e:2f:64:b5:51:9e:cf:53:5f:9d:58:ca:f7:7b:1d:bc:c8:f6: 6e:8a:67:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3RjIxMTAvBgNVBAUTKEZBRDlCOTM3NzdEMENFQkEyQkI3QTZCNzhENTA3Rjc3 OTA5MjFDMDYwHhcNMjYwNzI2MjIwNjE5WhcNMjYwODAyMjIwNjE5WjAYMRYwFAYD VQQDEw02YTY2ODRkYy0zZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+sxkwHOspcyYO7OUXh+2r2QrOn3Cm9QeL2R0dVuZiXomcF29RVdF1nsHWvT XiEkLWemFzbIdvnmf9pChtX6+BWo2rvCJvDNvrcg2FMnZXQYTw/7hj9OKmoRpKHI zlq9oWJXOkJkZJA9Osc12gyjFKdnwb7CN6gIQMeCGVv7qn4i2iznEX9sjI7CVIdT XFbXUBS6h900/MBzauWoLRrUFH/uDdB5AoOZQ1VtTQuH99fqsE9E1Y+H5DBQdCyH kBnSpCPrBC4ImdmoZjgIxYg4M6ID1KLHM+blJ3i6HXsPUtlpGHCxFi4664r83+6c mv2dKtpXxfKK6e+lzl5+555FGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbxQ/Y+ uozFNaK9qPEnguQucbQPMB8GA1UdIwQYMBaAFPrZuTd30M66K7emt41Qf3eQkhwG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi8yMzM1MDRBNDRG Q0MxMUVCOURCRTdGNURDNEY5QUUwMi8tdG01TjNmUXpyb3J0NmEzalZCX2Q1Q1NI QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy10bTVOM2ZRenJvcnQ2YTNqVkJfZDVDU0hBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTdGMi8yMzM1MDRBNDRGQ0MxMUVCOURCRTdGNURDNEY5QUUwMi8tdG01TjNmUXpy b3J0NmEzalZCX2Q1Q1NIQVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJjnYsJJsjZRhEfno2KFHOwDyePLKRyRbMk045L1sk1ihZmEqq55A+OBhjfsi iW9hm1L2jITV9Cwb25uwsBrZqPjLETh+FTNOCDyx0AZiBUXNP/iC2jvua8grlHlY gTLpMaLIiZZ4LBVZytLLtm7Md4UR0bNvuQEwsXWLaaPADQRlMWsPLYXYcu/RzLKF WpG0tX9/eGcWdV++s/kjYtIuHGcWgV1ldN/xCOj/Ix/WQYVDNe7XKwOL9zBiDJ+d wk5CrOH3KVhHRGzyEVOjnQlmf90dvVUzLhjl40hpelbP23APMsOu+O1pjLtSLi9k tVGez1NfnVjK93sdvMj2bopnJw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:35:25 2026 by rpki-client