$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: D7K+/mPRNbQ6GF7PStes1AIwpRnj6NFRlcYyMeFaqW8= Subject key identifier: 33:72:79:CE:C0:A3:BA:A4:EE:3C:79:89:D9:F3:9F:FA:4B:94:19:C5 Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 021B Signing time: Wed 29 Jul 2026 03:54:40 +0000 Manifest this update: Wed 29 Jul 2026 03:54:40 +0000 Manifest next update: Wed 05 Aug 2026 03:54:40 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: yyN4yZew9W5o9tMx3aua1f4uY0H88fUu4txpuuym9sY=) 2: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: Hlrpuim6i7fHk0KlEnhldHqMP2jG8T1/tqWjQFLYvbs=) 3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 59acFeQy4V5pQjYYCiasQgZVB5QvS3oo/PphMyeS6gg=) 4: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: dicUkqJpWBQlhJi+bO6jbQ3e2lQm0aq0QA9SUOerdpM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 03:54:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: Jul 29 03:54:40 2026 GMT Not After : Aug 5 03:54:40 2026 GMT Subject: CN=6a697980-dd94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:c6:ab:24:1c:df:9d:43:4a:c9:45:5d:d1: 1a:35:c3:a2:44:46:c4:00:b8:90:b2:7a:de:3d:e4: 03:75:02:a3:23:9f:dd:26:63:21:12:d7:00:06:11: b9:27:e1:f3:56:e5:ae:f9:18:d1:6d:09:bf:66:08: 8d:75:48:d0:db:65:f5:52:f4:1a:5b:9c:ac:b2:0b: 9c:d0:33:28:1d:fd:90:16:64:68:07:fe:b7:99:9d: f2:d1:1d:24:89:64:2a:3d:16:fb:b8:fa:fd:ab:56: 29:e9:29:13:85:56:3b:ff:23:62:76:f1:14:9b:cd: 0a:0d:f9:7c:a9:88:59:3b:d4:cd:ea:d4:85:25:da: 37:9e:ae:ee:31:dd:0b:c7:6a:40:83:68:3c:5c:f7: 69:03:05:41:7b:4e:90:6b:3d:16:1f:d0:07:60:4c: 89:e6:4c:7d:e7:30:96:31:5b:1f:2a:1c:30:d1:8e: 4e:92:ae:d4:92:0a:ca:60:fe:f7:e0:0d:76:e0:22: 49:db:11:25:13:19:23:98:ba:c0:c6:ad:78:39:7f: 13:a8:d9:61:b6:bf:96:30:42:d4:09:75:b3:2f:db: f5:b3:19:89:27:1a:69:b3:83:af:06:4d:f3:e7:8c: eb:8f:9f:cd:b5:a4:57:b8:91:31:48:23:a3:f0:74: fd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:72:79:CE:C0:A3:BA:A4:EE:3C:79:89:D9:F3:9F:FA:4B:94:19:C5 X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:91:d7:5c:fb:d9:59:fb:68:ee:48:f7:c6:eb:54:64:59:2f: 6b:00:87:6f:6a:ce:2d:b2:fd:c4:c6:62:27:71:59:18:6c:cf: f4:a5:3a:cc:71:8f:dc:de:16:f5:9a:f0:cc:53:64:80:a3:16: cb:f0:a8:5d:d8:ac:fc:f4:4e:4b:bc:1b:73:3f:18:fc:be:7c: a6:65:79:16:4a:d9:ee:33:50:dd:52:b0:99:80:c9:f6:6d:77: f6:36:bf:80:17:58:16:04:70:b6:1a:ed:f6:27:25:4b:40:23: e6:0c:22:87:f5:c9:f9:5c:9b:c1:2f:5b:d9:8d:93:58:29:55: 7c:d3:80:ae:0c:33:80:4f:94:7c:90:46:ae:1d:15:78:7d:a2: 55:fc:3c:2e:91:9a:37:e8:62:56:b9:bb:28:59:dc:74:a9:cb: ad:b1:7a:02:3c:3a:6e:18:b7:78:c5:79:52:b4:8d:3b:d2:e3: 3e:2c:f3:45:c9:22:36:6f:6c:d3:11:e2:e3:79:fc:87:74:15: 22:63:5d:50:28:5d:0c:19:e4:1a:3a:b7:23:80:5e:e8:33:28: cf:38:ba:7c:97:4b:4b:16:b8:9f:7d:01:13:f9:e8:fd:d6:44: 60:29:43:02:16:43:f0:c0:f9:aa:39:98:37:7e:a8:db:72:ea: 82:6f:5e:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjYwNzI5MDM1NDQwWhcNMjYwODA1MDM1NDQwWjAYMRYwFAYD VQQDEw02YTY5Nzk4MC1kZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscnGqyQc351DSslFXdEaNcOiREbEALiQsnrePeQDdQKjI5/dJmMhEtcABhG5 J+HzVuWu+RjRbQm/ZgiNdUjQ22X1UvQaW5yssguc0DMoHf2QFmRoB/63mZ3y0R0k iWQqPRb7uPr9q1Yp6SkThVY7/yNidvEUm80KDfl8qYhZO9TN6tSFJdo3nq7uMd0L x2pAg2g8XPdpAwVBe06Qaz0WH9AHYEyJ5kx95zCWMVsfKhww0Y5Okq7UkgrKYP73 4A124CJJ2xElExkjmLrAxq14OX8TqNlhtr+WMELUCXWzL9v1sxmJJxpps4OvBk3z 54zrj5/NtaRXuJExSCOj8HT98QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDNyec7A o7qk7jx5idnzn/pLlBnFMB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABZHXXPvZWfto7kj3xutUZFkvawCHb2rOLbL9xMZiJ3FZGGzP9KU6zHGP3N4W 9ZrwzFNkgKMWy/CoXdis/PROS7wbcz8Y/L58pmV5FkrZ7jNQ3VKwmYDJ9m139ja/ gBdYFgRwthrt9iclS0Aj5gwih/XJ+VybwS9b2Y2TWClVfNOArgwzgE+UfJBGrh0V eH2iVfw8LpGaN+hiVrm7KFncdKnLrbF6Ajw6bhi3eMV5UrSNO9LjPizzRckiNm9s 0xHi43n8h3QVImNdUChdDBnkGjq3I4Be6DMozzi6fJdLSxa4n30BE/no/dZEYClD AhZD8MD5qjmYN36o23Lqgm9eIw== -----END CERTIFICATE-----Generated at Wed Jul 29 08:14:52 2026 by rpki-client