$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft File: rgDBosA0KnFSg1RO1ltGGGWC8mw.mft (raw, json) Hash identifier: /WoTqWcnI860c/c60SLzKA8RF08Q6T5kZtOEeOeyoGs= Subject key identifier: EC:F0:0E:76:AF:30:25:53:E5:28:37:D9:C1:42:D9:1B:10:3F:CC:14 Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C Certificate issuer: /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Certificate serial: 09E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft Manifest number: 09D2 Signing time: Sun 26 Jul 2026 20:24:08 +0000 Manifest this update: Sun 26 Jul 2026 20:24:07 +0000 Manifest next update: Sun 02 Aug 2026 20:24:07 +0000 Files and hashes: 1: rgDBosA0KnFSg1RO1ltGGGWC8mw.crl (hash: fJLb+xcTFHlascgSWMAt5IF1UXCIexUUW+u4Gc8N4DQ=) 2: 84FDF6D0AABA11EABB84756CC4F9AE02.roa (hash: QVfdEdXCocoSVGgWS+Yl9hl7mgDFeG4r0nSsOh9ZTOM=) 3: F99F89E2AAC211EABF603A0BC4F9AE02.roa (hash: PQw146eyKjPqxP/GNGS/hIkUi+lf/ZqFvVQElnQS1VQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2533 (0x9e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C Validity Not Before: Jul 26 20:24:07 2026 GMT Not After : Aug 2 20:24:07 2026 GMT Subject: CN=6a666ce8-91a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:68:d3:fb:7f:16:62:6b:b6:7a:3c:c3:e0:85: 77:a0:2a:97:a6:8c:f0:f1:b1:87:2f:a9:50:ef:70: 93:d4:f0:06:8b:90:6a:0d:6c:77:79:ee:55:bd:72: a8:ee:ab:8e:14:1d:14:fd:b3:12:8f:43:9e:41:14: cd:9f:be:90:11:fa:54:6b:9f:79:92:97:bf:77:91: 8a:4f:78:63:88:36:51:e9:20:fd:a2:14:d1:82:d4: 8f:7a:a9:da:4d:09:91:01:d8:dd:f0:a8:6d:c9:54: 5f:59:99:b5:80:87:c0:a8:1f:97:3a:ec:e5:4a:2f: 67:d0:01:c1:e4:b6:d3:46:78:40:c5:a1:78:f0:ac: 58:d0:85:3f:17:75:dc:ad:ef:c0:6e:e9:cb:2e:7b: d6:97:6b:3c:4c:25:fc:d0:bd:fd:e0:85:43:ae:9b: dd:fa:09:dd:61:42:31:eb:e9:a9:75:f1:dd:f1:59: 2f:be:4a:73:a9:b1:74:2e:e1:7d:85:41:a9:f4:58: a7:10:dc:0c:37:a1:0a:f8:c5:1f:2c:8d:a9:38:c4: 35:94:f6:81:e9:aa:c3:07:f6:c1:f3:88:9e:11:0a: 69:a0:f9:f6:64:19:d0:17:ce:ea:0e:b1:56:9c:51: b0:67:6e:6b:a2:07:72:93:a7:17:fc:8a:1c:2e:da: 3b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F0:0E:76:AF:30:25:53:E5:28:37:D9:C1:42:D9:1B:10:3F:CC:14 X509v3 Authority Key Identifier: keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:bc:cf:eb:f1:e4:9d:c0:cf:63:42:ac:7a:09:7c:4e:a1:3f: 03:96:7d:d3:0c:1e:80:48:ee:57:93:94:7f:e0:1f:86:45:98: 61:23:70:a1:54:0e:12:b5:19:94:1b:16:9e:6d:39:c8:aa:53: 1c:3d:e7:c2:50:08:89:4a:6d:10:52:5a:ba:41:a5:cf:bf:44: 48:bf:39:f7:58:af:b9:31:20:ba:b8:4b:64:19:6e:38:f7:b1: 1f:e7:84:f1:19:78:ec:35:47:7e:8b:e3:55:bd:0f:4c:93:ca: e4:0e:42:d2:da:bc:b4:b4:ae:80:e2:a1:28:6b:d7:07:fd:06: 37:48:a6:35:ad:f9:32:41:71:d6:66:8d:f6:e4:3e:6e:e5:b0: 61:53:9f:16:a4:3e:08:1f:41:d5:75:ab:5c:69:4c:67:83:2d: 3f:8d:49:06:b2:38:50:80:87:a4:37:e6:05:dc:62:20:af:c7: 22:4f:79:1d:a0:39:06:33:a6:67:ee:cd:cb:ef:80:36:0b:d5: 41:75:b3:94:1c:62:45:4f:81:e0:26:76:61:2d:2c:9d:cc:4f: c6:ab:d1:5e:5b:10:73:f8:f0:d4:62:94:8f:2f:81:cc:6a:7b: fc:ed:54:7d:4b:e3:7c:4a:70:29:3d:9a:96:36:22:37:31:a6: f2:60:7e:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY2RDYxMTAvBgNVBAUTKEFFMDBDMUEyQzAzNDJBNzE1MjgzNTQ0RUQ2NUI0NjE4 NjU4MkYyNkMwHhcNMjYwNzI2MjAyNDA3WhcNMjYwODAyMjAyNDA3WjAYMRYwFAYD VQQDEw02YTY2NmNlOC05MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAimjT+38WYmu2ejzD4IV3oCqXpozw8bGHL6lQ73CT1PAGi5BqDWx3ee5VvXKo 7quOFB0U/bMSj0OeQRTNn76QEfpUa595kpe/d5GKT3hjiDZR6SD9ohTRgtSPeqna TQmRAdjd8KhtyVRfWZm1gIfAqB+XOuzlSi9n0AHB5LbTRnhAxaF48KxY0IU/F3Xc re/AbunLLnvWl2s8TCX80L394IVDrpvd+gndYUIx6+mpdfHd8VkvvkpzqbF0LuF9 hUGp9FinENwMN6EK+MUfLI2pOMQ1lPaB6arDB/bB84ieEQppoPn2ZBnQF87qDrFW nFGwZ25rogdyk6cX/IocLto7xQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzwDnav MCVT5Sg32cFC2RsQP8wUMB8GA1UdIwQYMBaAFK4AwaLANCpxUoNUTtZbRhhlgvJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjZENi85QTU2Q0MyRUFB QjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtuRlNnMVJPMWx0R0dHV0M4 bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnREJvc0EwS25GU2cxUk8xbHRHR0dXQzhtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjZENi85QTU2Q0MyRUFBQjkxMUVBOTRENjgxNkJDNEY5QUUwMi9yZ0RCb3NBMEtu RlNnMVJPMWx0R0dHV0M4bXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASbzP6/HkncDPY0Ksegl8TqE/A5Z90wwegEjuV5OUf+AfhkWYYSNwoVQOErUZ lBsWnm05yKpTHD3nwlAIiUptEFJaukGlz79ESL8591ivuTEgurhLZBluOPexH+eE 8Rl47DVHfovjVb0PTJPK5A5C0tq8tLSugOKhKGvXB/0GN0imNa35MkFx1maN9uQ+ buWwYVOfFqQ+CB9B1XWrXGlMZ4MtP41JBrI4UICHpDfmBdxiIK/HIk95HaA5BjOm Z+7Ny++ANgvVQXWzlBxiRU+B4CZ2YS0sncxPxqvRXlsQc/jw1GKUjy+BzGp7/O1U fUvjfEpwKT2aljYiNzGm8mB+0A== -----END CERTIFICATE-----Generated at Tue Jul 28 18:31:49 2026 by rpki-client