$ rpki-client -vvf rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft File: 0NDWzWh3DDh4O764QbES0FYBdKI.mft (raw, json) Hash identifier: //s60Jqm41MK8IctflsdGJOOv/nDwSyOuydtwUjMy2o= Subject key identifier: F3:44:B4:EE:5D:11:27:08:CE:FA:7A:20:73:FD:23:DD:9C:2D:20:57 Authority key identifier: D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 Certificate issuer: /CN=A91998BE/serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Certificate serial: 097F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft Manifest number: 093C Signing time: Tue 28 Jul 2026 20:37:52 +0000 Manifest this update: Tue 28 Jul 2026 20:37:51 +0000 Manifest next update: Tue 04 Aug 2026 20:37:51 +0000 Files and hashes: 1: 0NDWzWh3DDh4O764QbES0FYBdKI.crl (hash: cgQy7r37T3fJeAHg+gocn4b83HI/Q96aByJwyY3UEGo=) 2: 577FD5BE067C11ED882FC127C4F9AE02.roa (hash: oRxcNHxks0xSpQQ3xzQ2CValnLK9KvTZJVfHvaOGSxM=) 3: 530A6E26721711F1A345157A7BA30FBC.roa (hash: q5oiasmtw4zs+gP72ndK+9apIt6id57zzQstMwGY0i4=) 4: 4EF79184489411ED86987260C4F9AE02.roa (hash: FW+6trj4ky9MIx0ol9teJ9/ApDWDbFtG0371+JMzJmo=) 5: BD1D670AA9AE11F0BAAC4E40C4F9AE02.roa (hash: GzxogbU8QiwwF++aswC6YdHu3ZoZCEYz5G0xx5UJTJQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2431 (0x97f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91998BE, serialNumber=D0D0D6CD68770C38783BBEB841B112D0560174A2 Validity Not Before: Jul 28 20:37:51 2026 GMT Not After : Aug 4 20:37:51 2026 GMT Subject: CN=6a691320-0cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:d6:94:f2:c8:50:0e:aa:f6:9b:74:9a:19: 88:75:11:a7:23:92:7e:b8:ad:df:54:c0:b5:ac:b8: 7e:aa:46:1f:77:1e:a9:ce:d1:c0:d6:79:c7:92:10: 38:8c:90:7b:ff:dc:86:d6:6c:1c:f3:8f:39:56:fd: 9e:b5:49:c8:fa:f5:53:b1:99:d0:cc:69:f1:e5:89: b5:e4:15:88:e4:ca:24:cf:9b:55:ee:c5:0c:bd:c2: 1d:f1:c3:44:bc:23:2b:e2:da:2d:5a:f2:89:ba:53: 65:b8:9b:dc:98:11:71:a9:1f:c5:78:39:a7:cb:76: 01:cf:7c:35:ec:89:5b:6d:f8:e2:b7:9a:64:63:5c: 74:9e:06:91:8c:9d:0d:d4:be:db:44:1b:40:37:53: 9f:62:00:f7:8d:64:96:a0:6c:a3:5c:0c:dc:ff:ec: e0:3a:92:be:ad:ff:f4:9f:d2:5c:38:5f:10:98:14: ac:50:e5:1c:9c:57:89:4c:79:bf:92:12:0d:4d:02: bb:7e:b2:0b:6a:c0:3b:90:9d:32:bd:09:fc:b8:c6: ba:fc:38:db:53:0e:e0:4a:57:b7:0d:5a:ab:02:37: 0c:d0:da:01:b4:be:ec:45:04:ca:65:e7:ff:73:86: b5:a6:c4:15:6d:58:40:cf:6e:01:74:0d:58:12:41: 98:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:44:B4:EE:5D:11:27:08:CE:FA:7A:20:73:FD:23:DD:9C:2D:20:57 X509v3 Authority Key Identifier: keyid:D0:D0:D6:CD:68:77:0C:38:78:3B:BE:B8:41:B1:12:D0:56:01:74:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NDWzWh3DDh4O764QbES0FYBdKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91998BE/150E57C6CF4911EA9CC9353EC4F9AE02/0NDWzWh3DDh4O764QbES0FYBdKI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:3a:55:fc:24:e9:db:1b:fe:be:4e:16:3f:b2:2a:d6:b5:e7: bf:0c:58:34:19:ab:f5:69:dd:db:38:b1:43:b2:04:bf:66:7b: 82:41:a5:bd:4e:63:ca:9a:2f:8a:e6:0e:1a:2f:a3:6c:02:52: ac:73:ed:d5:5a:dc:98:56:aa:56:ec:16:f0:df:fd:e6:94:1b: aa:ea:df:0e:5b:83:96:2e:61:71:8f:83:0e:30:44:05:a9:b6: 2e:01:fd:53:ac:b5:fe:7d:bf:cd:04:ec:75:22:76:22:07:3f: 47:d6:da:40:6a:6f:8f:63:dc:46:e5:1a:61:7d:b0:20:6b:ed: f7:4c:5f:5d:b0:f4:92:87:1c:c0:f9:3b:76:2a:3d:38:43:5b: 71:a3:9f:59:da:e2:d7:a3:96:31:01:60:e8:04:53:e8:34:d1: da:35:4d:b7:6c:d8:7b:d0:42:0f:a1:5c:2c:36:f7:28:bf:13: 9c:0a:d8:fd:a4:c1:3f:96:0d:15:64:f0:34:80:65:64:33:ba: 1c:78:c5:af:b6:07:84:ad:ae:6b:94:97:d7:5f:d7:94:b0:52: 42:0a:aa:c2:c0:2c:7d:f3:06:17:c0:4c:67:0f:f1:09:9b:d6: 35:34:9f:bd:da:b7:68:33:64:ac:bc:9e:42:d0:44:aa:5a:5f: d7:ae:1d:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4QkUxMTAvBgNVBAUTKEQwRDBENkNENjg3NzBDMzg3ODNCQkVCODQxQjExMkQw NTYwMTc0QTIwHhcNMjYwNzI4MjAzNzUxWhcNMjYwODA0MjAzNzUxWjAYMRYwFAYD VQQDEw02YTY5MTMyMC0wY2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AvWlPLIUA6q9pt0mhmIdRGnI5J+uK3fVMC1rLh+qkYfdx6pztHA1nnHkhA4 jJB7/9yG1mwc8485Vv2etUnI+vVTsZnQzGnx5Ym15BWI5Mokz5tV7sUMvcId8cNE vCMr4totWvKJulNluJvcmBFxqR/FeDmny3YBz3w17Ilbbfjit5pkY1x0ngaRjJ0N 1L7bRBtAN1OfYgD3jWSWoGyjXAzc/+zgOpK+rf/0n9JcOF8QmBSsUOUcnFeJTHm/ khINTQK7frILasA7kJ0yvQn8uMa6/DjbUw7gSle3DVqrAjcM0NoBtL7sRQTKZef/ c4a1psQVbVhAz24BdA1YEkGYSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPNEtO5d EScIzvp6IHP9I92cLSBXMB8GA1UdIwQYMBaAFNDQ1s1odww4eDu+uEGxEtBWAXSi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OThCRS8xNTBFNTdDNkNG NDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0REaDRPNzY0UWJFUzBGWUJk S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBORFd6V2gzRERoNE83NjRRYkVTMEZZQmRLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OThCRS8xNTBFNTdDNkNGNDkxMUVBOUNDOTM1M0VDNEY5QUUwMi8wTkRXeldoM0RE aDRPNzY0UWJFUzBGWUJkS0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZTpV/CTp2xv+vk4WP7Iq1rXnvwxYNBmr9Wnd2zixQ7IEv2Z7gkGlvU5jypov iuYOGi+jbAJSrHPt1VrcmFaqVuwW8N/95pQbqurfDluDli5hcY+DDjBEBam2LgH9 U6y1/n2/zQTsdSJ2Igc/R9baQGpvj2PcRuUaYX2wIGvt90xfXbD0koccwPk7dio9 OENbcaOfWdri16OWMQFg6ART6DTR2jVNt2zYe9BCD6FcLDb3KL8TnArY/aTBP5YN FWTwNIBlZDO6HHjFr7YHhK2ua5SX11/XlLBSQgqqwsAsffMGF8BMZw/xCZvWNTSf vdq3aDNkrLyeQtBEqlpf164d9A== -----END CERTIFICATE-----Generated at Tue Jul 28 23:47:04 2026 by rpki-client