$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: pvYhLB5fOIR25i4WSt2ioMQAh4ev2JvLGmkbuemUx9I= Subject key identifier: DC:5C:1B:54:E4:E8:AA:D1:56:20:CF:22:F5:8F:05:DE:6F:B7:58:19 Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 0A11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 09C5 Signing time: Tue 28 Jul 2026 20:22:03 +0000 Manifest this update: Tue 28 Jul 2026 20:22:02 +0000 Manifest next update: Tue 04 Aug 2026 20:22:02 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: 3rMOCgilR4Wgx1J6A8T5oUdXMGyLatoTzyZg77iBQOI=) 2: 88252000B55C11ECA9565039C4F9AE02.roa (hash: vpFh2/2Ww8n4gYMHhWBePvd1Fheir2EOHQAoooMfRBo=) 3: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: lyIUpVCXgqLP2olWGXoY8duGQEhruwus1GboROWSH00=) 4: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: NpbVQQRWWoFXTrGdsKM32fOCA5zAVZsblj+8rYIeUc4=) 5: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: HMcEW/S22FGTvhiPakps8LsqQxXUXp8fWhqX+TVm2Vw=) 6: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: 7GoPVvNzOxqz0b0bUBa7Sq4uOYDaYVX7ArTVXs9QZv4=) 7: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: xihXskffyMmX6uPdr43LH17SKnUp1mNtBqH6MhLI3sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2577 (0xa11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Jul 28 20:22:02 2026 GMT Not After : Aug 4 20:22:02 2026 GMT Subject: CN=6a690f6b-ce7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:93:c3:4c:ed:68:40:8c:ca:fd:2c:19:bd: 23:48:de:ae:62:ed:c5:b6:87:ce:d4:37:43:15:17: 73:ba:98:9b:ea:b6:dd:ca:67:0b:f0:34:64:4a:07: 33:54:b8:df:03:45:43:4d:db:2c:1f:ec:56:96:db: 86:33:3f:ab:30:a2:ca:11:14:36:3b:c8:08:1b:c1: 5e:4d:16:aa:9b:d2:91:73:da:23:66:87:ec:0f:c1: 07:a8:c3:64:34:cf:97:38:98:3f:06:18:8f:57:df: bd:84:99:75:a6:33:6d:d0:f3:60:7d:7e:5a:a0:e3: 12:3a:e1:b5:13:9f:95:32:f0:19:7c:2a:0e:46:09: 39:01:dd:92:8a:fb:d1:68:4a:c9:7f:ef:50:04:0d: 3e:00:71:37:67:70:a0:d2:67:7f:82:58:45:8c:12: d7:c2:4a:0b:a8:ba:4d:0f:9d:e4:df:7a:8f:f0:c9: 93:24:d0:0a:76:2f:fe:d6:1f:cc:38:c6:a2:81:6d: 46:8d:13:7e:c3:9a:3c:c3:c7:1d:fb:97:07:7b:db: 32:c0:26:89:8c:94:c2:cb:b4:e1:ac:cf:4e:2f:d0: 0e:13:95:fd:f2:61:78:bc:06:18:0b:a7:0f:e6:ac: 59:5d:3e:90:1f:09:2f:78:84:6f:e1:b6:be:b6:26: d8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:5C:1B:54:E4:E8:AA:D1:56:20:CF:22:F5:8F:05:DE:6F:B7:58:19 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:14:6c:66:ae:3f:04:ba:8c:2b:c0:44:fd:cc:e7:36:2e:8c: 7f:6c:f8:76:63:de:df:01:cc:fd:e6:89:5b:35:72:70:b0:c4: 08:48:07:92:3c:ea:b6:ab:ac:f9:39:2e:b5:c7:de:98:04:0c: b6:5c:f1:0c:5c:6d:5d:67:20:37:b6:24:0e:80:58:62:b6:7b: 51:12:45:37:67:a8:42:0b:17:62:00:a0:d4:a7:6d:28:59:bf: 56:b3:33:0e:e8:07:dd:51:1b:e6:d3:68:f8:f9:c1:75:4d:57: ed:07:16:4a:92:93:31:5e:2c:77:f1:0f:4d:b1:cd:5e:46:16: 3d:49:24:6e:3a:50:9b:d3:a6:49:9a:9c:96:ad:df:1c:46:fc: f2:c2:ed:d9:e2:a6:36:a0:a2:75:4a:f1:f8:cd:1c:9e:de:ed: cc:f3:93:34:64:80:09:48:82:cf:b7:7f:39:eb:65:64:c6:73: 09:17:ce:12:3e:95:a9:e6:6d:9c:de:25:15:87:ed:4c:e5:b0: 49:f2:6e:2e:81:99:ca:93:35:4e:5c:cb:e1:80:e0:58:fe:41: 2c:b5:e3:6b:e4:c9:d7:96:5c:d1:2d:ef:cc:fa:c8:cc:8e:8b: 67:81:eb:b8:26:93:e5:88:cc:56:01:5c:ac:54:7a:3c:3e:72: 1b:ba:61:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICChEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjYwNzI4MjAyMjAyWhcNMjYwODA0MjAyMjAyWjAYMRYwFAYD VQQDEw02YTY5MGY2Yi1jZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApvOTw0ztaECMyv0sGb0jSN6uYu3FtofO1DdDFRdzupib6rbdymcL8DRkSgcz VLjfA0VDTdssH+xWltuGMz+rMKLKERQ2O8gIG8FeTRaqm9KRc9ojZofsD8EHqMNk NM+XOJg/BhiPV9+9hJl1pjNt0PNgfX5aoOMSOuG1E5+VMvAZfCoORgk5Ad2SivvR aErJf+9QBA0+AHE3Z3Cg0md/glhFjBLXwkoLqLpND53k33qP8MmTJNAKdi/+1h/M OMaigW1GjRN+w5o8w8cd+5cHe9sywCaJjJTCy7ThrM9OL9AOE5X98mF4vAYYC6cP 5qxZXT6QHwkveIRv4ba+tibY0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNxcG1Tk 6KrRViDPIvWPBd5vt1gZMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKhRsZq4/BLqMK8BE/cznNi6Mf2z4dmPe3wHM/eaJWzVycLDECEgHkjzqtqus +TkutcfemAQMtlzxDFxtXWcgN7YkDoBYYrZ7URJFN2eoQgsXYgCg1KdtKFm/VrMz DugH3VEb5tNo+PnBdU1X7QcWSpKTMV4sd/EPTbHNXkYWPUkkbjpQm9OmSZqclq3f HEb88sLt2eKmNqCidUrx+M0cnt7tzPOTNGSACUiCz7d/OetlZMZzCRfOEj6VqeZt nN4lFYftTOWwSfJuLoGZypM1TlzL4YDgWP5BLLXja+TJ15Zc0S3vzPrIzI6LZ4Hr uCaT5YjMVgFcrFR6PD5yG7phWA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:07:39 2026 by rpki-client