$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft File: MoQzhPrmr2wxduHfdOkIgdbZdZI.mft (raw, json) Hash identifier: 0FgOCreB0qv7r3S5hyAnFZp8dFR6fCkOb8LjESKNfjo= Subject key identifier: A3:77:D3:6C:A0:B2:2D:5B:7E:CF:10:82:E0:77:E5:84:A9:A1:22:AF Authority key identifier: 32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92 Certificate issuer: /CN=A91A8666/serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592 Certificate serial: 0AB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft Manifest number: 0A94 Signing time: Tue 28 Jul 2026 19:52:42 +0000 Manifest this update: Tue 28 Jul 2026 19:52:42 +0000 Manifest next update: Tue 04 Aug 2026 19:52:42 +0000 Files and hashes: 1: MoQzhPrmr2wxduHfdOkIgdbZdZI.crl (hash: Ih5i0RU8tU1LBr8Tu3tAlUmgEtpcd9k4XCosAWKYQjg=) 2: D02785608C0911EAAFF6CD27C4F9AE02.roa (hash: nPdlPveaGEn/o0RAhqipdNtydGVDIBxlaIUin+YvoPY=) 3: CF2E99C88C0911EAAFF6CD27C4F9AE02.roa (hash: 8uX/hlFjGe/V8LokTmcu8tEggMYCwiDilR7VyuWjQ5g=) 4: CE7DA91A8C0911EAAFF6CD27C4F9AE02.roa (hash: tAcZwWZwhXU4QpEPlt2t2XMLszlvvkM98qyIqRR6Ejk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2737 (0xab1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8666, serialNumber=32843384FAE6AF6C3176E1DF74E90881D6D97592 Validity Not Before: Jul 28 19:52:42 2026 GMT Not After : Aug 4 19:52:42 2026 GMT Subject: CN=6a69088a-674c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:29:4f:d0:35:4d:79:63:a8:24:e6:2d:6b:47: b6:e7:4e:e9:7d:d2:a3:20:f0:e0:ba:15:21:02:2a: 77:a7:ed:40:e4:bc:0b:ef:03:3f:d3:b5:e1:ae:d6: 36:9d:4f:9c:8a:e5:55:46:bb:36:c4:b2:51:5b:74: 33:46:f0:2a:df:97:f4:75:a3:cc:b3:e7:c9:44:67: 51:f3:87:b1:42:0e:d1:5f:e0:93:5d:da:0d:d4:67: 16:03:4d:2b:15:f0:0a:c0:70:3e:5e:16:82:06:be: d4:66:28:40:45:e4:01:2e:95:62:1d:b9:44:1b:7e: d2:48:8f:c5:a1:8d:30:c3:e6:81:e2:bd:64:77:9c: 18:fa:0a:a9:58:9a:58:ce:af:89:75:67:92:e2:8c: bf:a4:0b:5a:fc:20:25:b3:d1:4e:1c:9c:73:05:e3: 70:ce:4e:4f:00:16:20:da:df:ef:1b:6e:42:17:7e: 38:4b:6f:7c:20:fe:68:15:55:e1:e4:5c:76:7c:d8: 7c:5a:4a:83:87:29:89:61:73:a3:a2:ef:38:93:ea: 8f:3d:bd:bb:5f:a0:a3:cd:9a:bb:1b:cc:d2:6d:9b: 0e:47:60:2e:50:16:06:d1:8d:6c:68:c7:fb:98:8d: ca:4a:56:05:ff:9e:de:4d:4a:e8:3b:98:5c:1a:df: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:77:D3:6C:A0:B2:2D:5B:7E:CF:10:82:E0:77:E5:84:A9:A1:22:AF X509v3 Authority Key Identifier: keyid:32:84:33:84:FA:E6:AF:6C:31:76:E1:DF:74:E9:08:81:D6:D9:75:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MoQzhPrmr2wxduHfdOkIgdbZdZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8666/623CD6E484F311EAB1FBBB18C4F9AE02/MoQzhPrmr2wxduHfdOkIgdbZdZI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:cb:2e:66:75:cb:cd:e7:b6:56:4e:2b:9f:12:ec:90:43:62: e5:5d:01:a0:50:1b:a3:53:ce:18:67:80:ce:fd:c8:42:0c:e8: 0a:69:cd:69:92:9d:86:01:20:30:84:3b:66:0e:0d:6d:41:20: d7:37:fd:39:9c:90:d7:88:45:4b:6b:fe:d1:05:25:d7:3c:5e: be:45:0c:0d:11:a4:6d:61:bc:d1:c9:be:23:77:6b:c5:3c:ca: 47:ed:0a:02:f6:d5:23:22:bd:d9:99:0c:ec:a0:02:04:23:4f: ca:ca:62:27:72:e3:98:98:87:18:ca:ea:ec:36:97:ac:5d:94: 41:6c:7a:7c:ea:13:dc:b5:ac:d9:dd:a0:3e:50:ed:f6:e3:4e: d3:c6:b2:d0:86:3a:3b:64:6e:cb:6c:f6:d1:43:83:5c:49:68: c0:f6:cb:be:89:e7:d0:7e:25:3a:2c:a9:9a:1e:7f:da:ac:c5: b8:01:ab:5f:21:d8:8b:77:14:6d:a3:b6:5f:c1:49:8c:0c:53: 29:5f:d5:5c:a3:02:89:08:12:07:e3:5f:bc:17:c8:32:07:08: 71:8c:58:51:de:b1:9a:be:eb:4d:31:91:f3:6a:37:98:aa:89: 09:7c:62:af:90:32:d3:b3:d9:2f:8a:6c:c5:53:17:e6:aa:00: 5d:57:0e:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NjYxMTAvBgNVBAUTKDMyODQzMzg0RkFFNkFGNkMzMTc2RTFERjc0RTkwODgx RDZEOTc1OTIwHhcNMjYwNzI4MTk1MjQyWhcNMjYwODA0MTk1MjQyWjAYMRYwFAYD VQQDEw02YTY5MDg4YS02NzRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSlP0DVNeWOoJOYta0e2507pfdKjIPDguhUhAip3p+1A5LwL7wM/07XhrtY2 nU+ciuVVRrs2xLJRW3QzRvAq35f0daPMs+fJRGdR84exQg7RX+CTXdoN1GcWA00r FfAKwHA+XhaCBr7UZihAReQBLpViHblEG37SSI/FoY0ww+aB4r1kd5wY+gqpWJpY zq+JdWeS4oy/pAta/CAls9FOHJxzBeNwzk5PABYg2t/vG25CF344S298IP5oFVXh 5Fx2fNh8WkqDhymJYXOjou84k+qPPb27X6CjzZq7G8zSbZsOR2AuUBYG0Y1saMf7 mI3KSlYF/57eTUroO5hcGt+J8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKN302yg si1bfs8QguB35YSpoSKvMB8GA1UdIwQYMBaAFDKEM4T65q9sMXbh33TpCIHW2XWS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY2Ni82MjNDRDZFNDg0 RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIyd3hkdUhmZE9rSWdkYlpk WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01vUXpoUHJtcjJ3eGR1SGZkT2tJZ2RiWmRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY2Ni82MjNDRDZFNDg0RjMxMUVBQjFGQkJCMThDNEY5QUUwMi9Nb1F6aFBybXIy d3hkdUhmZE9rSWdkYlpkWkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEcsuZnXLzee2Vk4rnxLskENi5V0BoFAbo1POGGeAzv3IQgzoCmnNaZKdhgEg MIQ7Zg4NbUEg1zf9OZyQ14hFS2v+0QUl1zxevkUMDRGkbWG80cm+I3drxTzKR+0K AvbVIyK92ZkM7KACBCNPyspiJ3LjmJiHGMrq7DaXrF2UQWx6fOoT3LWs2d2gPlDt 9uNO08ay0IY6O2Ruy2z20UODXElowPbLvonn0H4lOiypmh5/2qzFuAGrXyHYi3cU baO2X8FJjAxTKV/VXKMCiQgSB+NfvBfIMgcIcYxYUd6xmr7rTTGR82o3mKqJCXxi r5Ay07PZL4psxVMX5qoAXVcOEA== -----END CERTIFICATE-----Generated at Wed Jul 29 01:44:37 2026 by rpki-client