$ rpki-client -vvf rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft File: 509GTECGWe0lidtmTOjvamxgDEc.mft (raw, json) Hash identifier: BSVIanOLiCRecsNJYRgyXMpSLRY5Mg+n/GqSpfWzOm0= Subject key identifier: 85:DE:19:1E:6B:74:EA:02:CF:C5:44:1A:15:CB:86:AB:21:FE:92:C4 Authority key identifier: E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 Certificate issuer: /CN=A91A06F2/serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Certificate serial: 0C12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft Manifest number: 0BFF Signing time: Tue 28 Jul 2026 19:07:00 +0000 Manifest this update: Tue 28 Jul 2026 19:07:00 +0000 Manifest next update: Tue 04 Aug 2026 19:07:00 +0000 Files and hashes: 1: 509GTECGWe0lidtmTOjvamxgDEc.crl (hash: DfhFmOnEuoA7M2IibnsQEYx2FJ8v5ctHs8DRmUqzLug=) 2: 8B37D2C40D2511EFA2E4D985C4F9AE02.roa (hash: Nnnq4X2pr12xKRIifzfba52zTnL3E4FSIZx5q2aHomI=) 3: D40428EC3D5511F18320D810A8833773.roa (hash: GiqC1fPItzwUUjM6WaOHq6c0vxZNE0S017OV+sd3TxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3090 (0xc12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A06F2, serialNumber=E74F464C408659ED2589DB664CE8EF6A6C600C47 Validity Not Before: Jul 28 19:07:00 2026 GMT Not After : Aug 4 19:07:00 2026 GMT Subject: CN=6a68fdd4-80a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5f:ad:93:a8:d5:57:fd:73:a5:a3:ce:11:ce: 3d:64:a4:e8:c1:65:af:bd:12:94:b9:1a:eb:6d:96: 78:b2:6d:45:b2:d1:f5:d8:17:df:15:56:38:03:ef: af:57:0f:11:0f:2a:8e:ba:be:85:41:44:ae:5b:35: f7:5d:41:b6:02:85:c2:7d:63:de:cb:cb:e5:e3:a1: 56:9f:61:c4:9d:cf:93:fb:33:64:2b:d0:76:ae:fd: 9f:be:85:3a:5c:97:13:8c:72:5c:24:e7:e9:bc:c0: c8:0d:67:d8:00:a3:5b:f9:ba:3d:6f:b8:78:da:2c: 7d:e3:82:b9:cb:f4:51:8c:ec:5b:56:00:bf:1e:ee: 9e:07:33:28:91:15:d3:2f:f9:31:a3:cb:2c:3f:7d: 81:06:7d:eb:21:4e:d3:71:2e:66:4a:de:ba:42:1e: 18:a4:44:f5:5b:9a:0c:84:fb:27:0f:87:52:6c:48: dc:6c:eb:6f:e2:f5:15:0d:05:0b:f0:88:95:1d:60: e1:01:7f:3f:34:72:40:8b:03:47:3d:52:5a:89:fa: 2c:fb:c1:39:98:c9:4d:7e:03:a4:d4:49:7f:7c:2d: 0f:ed:5b:ba:43:54:ce:3f:c1:5c:7f:3c:22:88:a6: 52:bb:ba:58:b7:b3:50:67:33:2f:76:a1:c3:92:09: 48:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DE:19:1E:6B:74:EA:02:CF:C5:44:1A:15:CB:86:AB:21:FE:92:C4 X509v3 Authority Key Identifier: keyid:E7:4F:46:4C:40:86:59:ED:25:89:DB:66:4C:E8:EF:6A:6C:60:0C:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/509GTECGWe0lidtmTOjvamxgDEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A06F2/8B8C4DD23F4711EA8E5DA87CC4F9AE02/509GTECGWe0lidtmTOjvamxgDEc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:56:ad:bc:b4:18:18:5a:8f:16:50:bd:7e:b5:bb:66:e7:60: 25:7c:95:ea:25:b5:81:0c:59:15:01:48:76:51:f5:1d:e2:a4: 4c:54:f1:b1:92:59:36:d8:12:c4:18:d3:e0:58:60:ff:82:2b: f2:0c:cd:36:5f:35:a8:c9:be:d0:8e:a5:52:b7:51:06:3b:09: 4f:35:22:10:ed:79:ae:03:65:92:09:e8:36:58:22:2d:4f:e4: aa:f0:1a:bb:5a:c3:6e:37:73:65:7f:71:94:96:d6:95:5c:f5: c9:a5:f9:54:a9:27:be:5d:35:5c:bc:1e:00:51:fa:fa:37:02: a9:73:a8:f1:7d:e6:ec:44:7b:e3:34:5e:1f:23:e6:12:86:3b: d8:16:cb:44:a9:f5:98:ef:1b:83:99:ce:a0:dd:94:f3:d7:f0: 6e:71:e7:43:b8:c2:56:aa:9a:d0:b1:65:93:ca:50:33:e0:47: 21:87:5c:49:5f:5d:87:c3:dc:26:ed:f4:50:eb:f2:e0:e6:84: 70:b1:47:cc:e4:3b:4d:aa:0f:44:f3:b6:ae:fd:0b:a9:30:b3: be:bc:0c:22:c6:d7:ba:e6:41:a5:68:85:21:52:d0:e0:ec:ea: 3b:13:2a:6b:ac:65:25:19:7f:e3:ba:6c:40:75:b3:52:05:99: cb:cb:2d:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA2RjIxMTAvBgNVBAUTKEU3NEY0NjRDNDA4NjU5RUQyNTg5REI2NjRDRThFRjZB NkM2MDBDNDcwHhcNMjYwNzI4MTkwNzAwWhcNMjYwODA0MTkwNzAwWjAYMRYwFAYD VQQDEw02YTY4ZmRkNC04MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA91+tk6jVV/1zpaPOEc49ZKTowWWvvRKUuRrrbZZ4sm1FstH12BffFVY4A++v Vw8RDyqOur6FQUSuWzX3XUG2AoXCfWPey8vl46FWn2HEnc+T+zNkK9B2rv2fvoU6 XJcTjHJcJOfpvMDIDWfYAKNb+bo9b7h42ix944K5y/RRjOxbVgC/Hu6eBzMokRXT L/kxo8ssP32BBn3rIU7TcS5mSt66Qh4YpET1W5oMhPsnD4dSbEjcbOtv4vUVDQUL 8IiVHWDhAX8/NHJAiwNHPVJaifos+8E5mMlNfgOk1El/fC0P7Vu6Q1TOP8Fcfzwi iKZSu7pYt7NQZzMvdqHDkglIFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXeGR5r dOoCz8VEGhXLhqsh/pLEMB8GA1UdIwQYMBaAFOdPRkxAhlntJYnbZkzo72psYAxH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDZGMi84QjhDNEREMjNG NDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dlMGxpZHRtVE9qdmFteGdE RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzUwOUdURUNHV2UwbGlkdG1UT2p2YW14Z0RFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDZGMi84QjhDNEREMjNGNDcxMUVBOEU1REE4N0NDNEY5QUUwMi81MDlHVEVDR1dl MGxpZHRtVE9qdmFteGdERWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGlatvLQYGFqPFlC9frW7ZudgJXyV6iW1gQxZFQFIdlH1HeKkTFTxsZJZNtgS xBjT4Fhg/4Ir8gzNNl81qMm+0I6lUrdRBjsJTzUiEO15rgNlkgnoNlgiLU/kqvAa u1rDbjdzZX9xlJbWlVz1yaX5VKknvl01XLweAFH6+jcCqXOo8X3m7ER74zReHyPm EoY72BbLRKn1mO8bg5nOoN2U89fwbnHnQ7jCVqqa0LFlk8pQM+BHIYdcSV9dh8Pc Ju30UOvy4OaEcLFHzOQ7TaoPRPO2rv0LqTCzvrwMIsbXuuZBpWiFIVLQ4OzqOxMq a6xlJRl/47psQHWzUgWZy8stRA== -----END CERTIFICATE-----Generated at Wed Jul 29 00:34:05 2026 by rpki-client