$ rpki-client -vvf rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft File: PB_di6MB3OPbPwvMJchpTOG83H0.mft (raw, json) Hash identifier: strMpO2L2S9sC2g14wbPtJlZbzJfd++V8VOk8/ZZGC0= Subject key identifier: 57:C5:F0:4F:B3:86:A9:29:D6:A7:E1:06:41:42:5C:45:8D:9D:2F:3F Authority key identifier: 3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D Certificate issuer: /CN=A91A08FD/serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Certificate serial: 0E5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft Manifest number: 0E53 Signing time: Tue 28 Jul 2026 17:53:32 +0000 Manifest this update: Tue 28 Jul 2026 17:53:32 +0000 Manifest next update: Tue 04 Aug 2026 17:53:32 +0000 Files and hashes: 1: PB_di6MB3OPbPwvMJchpTOG83H0.crl (hash: in3RHIAPJHXcTqOtnMSGIyl66227YmnE+/BRW+E9yTQ=) 2: 3802A98EC8AC11E9877DCE2FC4F9AE02.roa (hash: yYvSgR/d3pmtKa3loQQjhww8sMlH1QWIAa+l4ZsuXaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3679 (0xe5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A08FD, serialNumber=3C1FDD8BA301DCE3DB3F0BCC25C8694CE1BCDC7D Validity Not Before: Jul 28 17:53:32 2026 GMT Not After : Aug 4 17:53:32 2026 GMT Subject: CN=6a68ec9c-e067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:73:81:64:38:6a:25:1a:c2:6c:9e:1e:ed:2a: c6:f7:47:f6:85:e7:7d:e5:bd:a4:3d:6c:dc:51:ae: 50:40:b9:9c:79:4d:c4:49:62:1a:97:04:38:6b:56: 16:f3:13:6c:06:7b:33:49:02:c9:35:c0:17:c5:7b: 58:7c:77:d4:6b:3c:d9:05:dc:3a:bc:f1:de:21:fe: ea:3d:d3:61:ae:19:b3:cf:91:d6:f1:22:5d:38:52: 3d:09:a0:82:34:73:cd:89:4a:c2:56:ad:1e:4b:61: e2:e3:74:c1:d3:ef:4c:cb:55:32:e3:c2:39:28:c6: 3b:a0:0e:91:94:2d:b9:75:03:bf:b9:cc:7a:3c:d4: 64:23:06:47:e4:c9:57:f1:a6:3d:19:a3:d1:66:30: 3d:8d:40:b3:21:97:b0:0a:ed:fa:be:07:cb:18:87: 5f:a3:09:04:9c:d9:ed:81:0f:1c:a6:c2:89:48:ac: c9:75:ec:d5:c7:ee:f5:f8:e1:a8:7f:81:a3:d8:ee: ee:aa:b8:09:a9:ab:4d:63:00:72:5e:a4:aa:f4:eb: f8:40:30:51:6f:eb:63:f5:e6:ac:d6:b3:e8:12:95: 53:7d:fa:75:55:05:42:de:2f:b4:e9:02:76:2b:b8: 0c:a7:46:35:37:db:eb:65:1a:b6:76:60:80:a6:48: 89:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C5:F0:4F:B3:86:A9:29:D6:A7:E1:06:41:42:5C:45:8D:9D:2F:3F X509v3 Authority Key Identifier: keyid:3C:1F:DD:8B:A3:01:DC:E3:DB:3F:0B:CC:25:C8:69:4C:E1:BC:DC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PB_di6MB3OPbPwvMJchpTOG83H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A08FD/9F42EAD8C8AB11E9829D282FC4F9AE02/PB_di6MB3OPbPwvMJchpTOG83H0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:af:14:ce:98:bf:ca:f0:d0:42:bd:a0:56:4b:22:1d:66:0d: 17:c9:1d:db:d3:a0:5e:cf:9d:e1:09:4f:f4:97:a2:9c:7b:44: 39:15:ea:ad:02:38:70:32:95:28:18:c2:19:48:60:82:6b:3d: 44:c0:31:4c:9c:89:d0:e9:0a:f1:16:5b:44:c8:91:8b:2e:6d: ed:84:d1:c6:6a:97:61:ff:05:38:2e:ad:17:60:84:73:56:93: 19:38:98:d9:8a:f9:80:56:da:51:27:ee:5b:0d:8d:47:a9:df: 66:69:0b:f4:41:5c:d6:8c:2d:d5:ef:65:0c:cf:67:3f:af:03: 53:ed:4e:3f:9a:69:0c:70:49:dc:0e:0a:46:dd:c7:ec:8b:09: 9f:f1:5e:52:06:aa:62:2c:0b:80:0f:30:28:74:15:78:fd:ad: b5:23:f8:8a:65:0e:1f:01:02:0b:7f:62:48:a0:94:9e:29:02: f8:2c:b3:4d:3d:64:3d:48:01:57:44:da:d5:ad:29:be:3f:b3: 04:dc:24:32:d4:bf:be:dc:1a:af:1c:4e:8c:13:d8:e8:f0:ec: d8:f3:cb:14:bd:5a:37:11:b2:e3:b5:13:20:41:4f:bc:60:8f: d5:1f:90:60:c5:da:25:c9:a9:c6:a6:5f:7b:61:0e:fb:5f:1b: 11:42:28:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4RkQxMTAvBgNVBAUTKDNDMUZERDhCQTMwMURDRTNEQjNGMEJDQzI1Qzg2OTRD RTFCQ0RDN0QwHhcNMjYwNzI4MTc1MzMyWhcNMjYwODA0MTc1MzMyWjAYMRYwFAYD VQQDEw02YTY4ZWM5Yy1lMDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnOBZDhqJRrCbJ4e7SrG90f2hed95b2kPWzcUa5QQLmceU3ESWIalwQ4a1YW 8xNsBnszSQLJNcAXxXtYfHfUazzZBdw6vPHeIf7qPdNhrhmzz5HW8SJdOFI9CaCC NHPNiUrCVq0eS2Hi43TB0+9My1Uy48I5KMY7oA6RlC25dQO/ucx6PNRkIwZH5MlX 8aY9GaPRZjA9jUCzIZewCu36vgfLGIdfowkEnNntgQ8cpsKJSKzJdezVx+71+OGo f4Gj2O7uqrgJqatNYwByXqSq9Ov4QDBRb+tj9eas1rPoEpVTffp1VQVC3i+06QJ2 K7gMp0Y1N9vrZRq2dmCApkiJawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFfF8E+z hqkp1qfhBkFCXEWNnS8/MB8GA1UdIwQYMBaAFDwf3YujAdzj2z8LzCXIaUzhvNx9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDhGRC85RjQyRUFEOEM4 QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNPUGJQd3ZNSmNocFRPRzgz SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BCX2RpNk1CM09QYlB3dk1KY2hwVE9HODNIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDhGRC85RjQyRUFEOEM4QUIxMUU5ODI5RDI4MkZDNEY5QUUwMi9QQl9kaTZNQjNP UGJQd3ZNSmNocFRPRzgzSDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiK8Uzpi/yvDQQr2gVksiHWYNF8kd29OgXs+d4QlP9JeinHtEORXqrQI4cDKV KBjCGUhggms9RMAxTJyJ0OkK8RZbRMiRiy5t7YTRxmqXYf8FOC6tF2CEc1aTGTiY 2Yr5gFbaUSfuWw2NR6nfZmkL9EFc1owt1e9lDM9nP68DU+1OP5ppDHBJ3A4KRt3H 7IsJn/FeUgaqYiwLgA8wKHQVeP2ttSP4imUOHwECC39iSKCUnikC+CyzTT1kPUgB V0Ta1a0pvj+zBNwkMtS/vtwarxxOjBPY6PDs2PPLFL1aNxGy47UTIEFPvGCP1R+Q YMXaJcmpxqZfe2EO+18bEUIoDQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:21:48 2026 by rpki-client