$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json) Hash identifier: sxoRaJnbWLpJGuZXQvsrPn8Yo7sik1xQ33zOVIi4NnU= Subject key identifier: FC:A2:E5:54:65:7D:70:8E:8B:B6:9F:55:BF:5A:43:55:0F:3F:D7:55 Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Certificate serial: 35DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft Manifest number: 3587 Signing time: Tue 28 Jul 2026 14:52:57 +0000 Manifest this update: Tue 28 Jul 2026 14:52:56 +0000 Manifest next update: Tue 04 Aug 2026 14:52:56 +0000 Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: FOyLKq608tO19UnFfPP6090FlQAN4bNU417iKK+AWI4=) 2: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: l9+xBEny0RtitxX+horpYy85rL+QwU54sl8n7bTIiQE=) 3: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: Q4GRmFRI4ONgbTnKmbxTEpLs75sW5Sq4FWea39SXv98=) 4: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: rP4EBcoYjp/fb5drtfKj/6SrPS0+St4OmibSJgW68j8=) 5: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: D7Y0D/y/CKTIEfmEtpoWEBzYAJ2qa9qCceCAIRlHBxE=) 6: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: 6uLGUsAxDCCetxCSvWggNZXKnXx2TcJW5ybw8uE9+E8=) 7: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: NLs+1lW2c+XRSot8ioe6j0/P90GPYhhRdikdITCoGOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13791 (0x35df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Validity Not Before: Jul 28 14:52:56 2026 GMT Not After : Aug 4 14:52:56 2026 GMT Subject: CN=6a68c248-3ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:c2:ee:62:da:ea:50:b9:c5:95:5b:2b:a4: 0d:c9:5b:55:62:11:da:4a:51:54:3f:5e:d1:2e:b2: c1:43:b2:3a:e1:1a:e5:ac:bc:32:dc:8a:d7:f5:69: f5:b7:66:45:10:91:6e:29:c1:27:ab:2a:d4:78:78: 34:45:18:c5:44:ab:0b:d2:bf:be:1c:33:d5:4f:2b: 15:23:67:7e:bf:1d:48:8c:af:b1:c4:06:ca:3f:c2: 07:d9:3e:f0:25:1e:48:d3:38:1b:42:fb:fa:65:d3: 7f:ec:fe:60:87:45:af:8c:e5:60:89:4f:47:4f:02: 53:3a:43:98:f7:8d:fe:fe:54:f7:a6:b7:34:43:0b: 4e:b7:5a:7e:33:ad:d4:c7:23:d7:73:e2:7f:23:6c: b4:f3:7c:ed:7a:e2:8b:3c:72:42:a2:f2:a0:cd:fa: db:6c:f2:c4:83:8f:7f:f0:a2:00:b8:d0:57:8f:23: c8:ff:bb:84:08:79:35:99:3c:6a:f3:71:ca:a4:57: ec:f8:52:d9:93:16:f4:e5:01:cc:38:c5:9f:da:d5: c6:bd:6b:38:e7:c1:c4:ea:a3:9e:54:f6:f7:07:23: 9e:dc:f4:c0:89:9e:af:42:7a:37:9a:80:28:2e:15: 05:f1:37:49:9a:99:2d:fb:d1:34:61:47:4d:cd:98: e5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:A2:E5:54:65:7D:70:8E:8B:B6:9F:55:BF:5A:43:55:0F:3F:D7:55 X509v3 Authority Key Identifier: keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:64:d9:2e:db:88:30:74:eb:ff:83:88:ab:03:03:e7:4b:e7: 69:52:fa:76:19:6d:ae:4c:80:c2:03:b0:c8:d1:53:19:2b:5b: 2a:45:36:ef:58:1f:46:c9:6b:55:79:db:01:2d:40:d1:2b:a5: 70:2e:69:26:72:a7:e2:22:13:8b:b4:51:f5:d7:1e:cd:fc:40: 8e:bc:f7:ea:a6:6a:26:c6:01:5a:40:04:cc:ca:89:83:ac:6c: db:83:83:1f:38:62:57:92:e1:f2:7a:64:05:dd:e4:19:6b:bd: 6e:09:08:b7:3d:ff:14:4b:fa:26:07:f1:2c:dd:c5:d9:67:84: d0:71:49:55:cf:83:18:e7:e9:b0:a6:39:31:27:55:1f:09:ce: 95:c5:dd:45:75:a3:81:72:8d:e7:eb:7f:0e:4e:f1:73:8e:89: d1:8c:50:fd:39:12:ee:93:41:7d:ef:38:48:37:14:1a:88:76: f6:40:3d:a9:06:fe:94:f7:a6:78:fe:53:68:28:00:98:a4:36: 83:0e:74:cb:b9:9b:80:96:fb:58:56:43:d2:e5:ad:75:3f:da: 25:67:41:96:1f:65:d5:c6:c2:7c:83:c0:dd:da:19:88:91:80: 43:1b:ab:b4:d3:b2:a9:9a:bb:63:1d:cb:03:2d:8b:1a:6c:d8: 42:41:b9:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5 MkE1MkExN0MwHhcNMjYwNzI4MTQ1MjU2WhcNMjYwODA0MTQ1MjU2WjAYMRYwFAYD VQQDEw02YTY4YzI0OC0zZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXvC7mLa6lC5xZVbK6QNyVtVYhHaSlFUP17RLrLBQ7I64RrlrLwy3IrX9Wn1 t2ZFEJFuKcEnqyrUeHg0RRjFRKsL0r++HDPVTysVI2d+vx1IjK+xxAbKP8IH2T7w JR5I0zgbQvv6ZdN/7P5gh0WvjOVgiU9HTwJTOkOY943+/lT3prc0QwtOt1p+M63U xyPXc+J/I2y083zteuKLPHJCovKgzfrbbPLEg49/8KIAuNBXjyPI/7uECHk1mTxq 83HKpFfs+FLZkxb05QHMOMWf2tXGvWs458HE6qOeVPb3ByOe3PTAiZ6vQno3moAo LhUF8TdJmpkt+9E0YUdNzZjlDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPyi5VRl fXCOi7afVb9aQ1UPP9dVMB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk1Qy9CQjM0MTdDMDFEOTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlD a3p2TEFxVzIxMENTcFNvWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACGTZLtuIMHTr/4OIqwMD50vnaVL6dhltrkyAwgOwyNFTGStbKkU271gfRslr VXnbAS1A0SulcC5pJnKn4iITi7RR9dcezfxAjrz36qZqJsYBWkAEzMqJg6xs24OD HzhiV5Lh8npkBd3kGWu9bgkItz3/FEv6JgfxLN3F2WeE0HFJVc+DGOfpsKY5MSdV HwnOlcXdRXWjgXKN5+t/Dk7xc46J0YxQ/TkS7pNBfe84SDcUGoh29kA9qQb+lPem eP5TaCgAmKQ2gw50y7mbgJb7WFZD0uWtdT/aJWdBlh9l1cbCfIPA3doZiJGAQxur tNOyqZq7Yx3LAy2LGmzYQkG5Wg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:45 2026 by rpki-client