$ rpki-client -vvf rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft File: aMK1iNFoWlh0LYouGIhl2zEQPPc.mft (raw, json) Hash identifier: +5mGSDGbjuGsNBhnIGw/ayR4w3d4WaN6nTEacXTFMXM= Subject key identifier: 1E:F4:06:9D:2E:6B:E7:89:16:9C:3F:AB:E7:B4:22:8A:39:07:9B:0C Authority key identifier: 68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7 Certificate issuer: /CN=A91AADAF/serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft Manifest number: 0150 Signing time: Mon 27 Jul 2026 07:08:37 +0000 Manifest this update: Mon 27 Jul 2026 07:08:36 +0000 Manifest next update: Mon 03 Aug 2026 07:08:36 +0000 Files and hashes: 1: aMK1iNFoWlh0LYouGIhl2zEQPPc.crl (hash: W8d2rnUmD3ivnUuMARJN5j+OBHc63k/MerscikGPbjU=) 2: 01BA52A28CF411EFAE6F7F10C4F9AE02.roa (hash: EUtWxQAE1BFRn9M5BHJ1aea0TybMQyltaStUs+wgA48=) 3: B2D0D768766011F08F4AF05AC4F9AE02.roa (hash: AFwVZfcUHzwe9j0UrSqlyKnxLzWcBfDiYKBuQr8Nbjs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:08:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AADAF, serialNumber=68C2B588D1685A58742D8A2E188865DB31103CF7 Validity Not Before: Jul 27 07:08:36 2026 GMT Not After : Aug 3 07:08:36 2026 GMT Subject: CN=6a6703f4-da14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:50:3d:93:2a:1a:17:5f:c3:ef:52:4f:b5: a4:b4:80:bb:f8:aa:12:d3:f9:b9:c2:90:e1:ee:4d: 64:b7:17:7b:e5:8f:c4:29:f0:c0:2f:63:b8:a1:55: 9c:1e:d4:09:51:b0:0c:11:3a:7f:53:d9:bd:b4:79: 63:c6:aa:8a:06:bd:11:0c:e8:e6:07:50:12:97:36: 59:2c:eb:25:56:2d:cd:b2:d8:ed:97:3d:36:a9:fa: fc:3c:26:6a:f8:7c:e1:b3:95:b1:a4:b0:5a:cc:9c: da:84:a8:d7:5e:08:34:9e:e5:f9:76:53:2c:07:e7: 5c:2a:82:97:20:4f:f6:00:ef:22:ef:6a:24:14:af: 66:f6:4f:20:a2:48:87:f8:63:81:a8:9b:62:8b:f5: f5:61:ed:e0:4c:5e:67:f0:4e:ad:81:0a:86:1d:1d: 4c:71:d1:70:f7:93:c7:e7:b2:60:00:57:c0:13:b3: eb:05:5a:e7:1a:9a:fe:c0:a8:55:37:46:d3:05:62: 71:b1:e7:53:d7:35:d2:d5:64:7b:52:7e:76:a4:58: c4:0b:22:59:db:79:6c:ef:0d:27:0e:74:bb:92:05: a5:d1:b1:7f:13:ab:66:8e:25:10:14:91:b6:79:38: 98:41:0b:89:01:4b:8d:90:54:bd:c3:b9:cd:1e:3c: 39:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:06:9D:2E:6B:E7:89:16:9C:3F:AB:E7:B4:22:8A:39:07:9B:0C X509v3 Authority Key Identifier: keyid:68:C2:B5:88:D1:68:5A:58:74:2D:8A:2E:18:88:65:DB:31:10:3C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMK1iNFoWlh0LYouGIhl2zEQPPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AADAF/87159C968CF311EF9F3EA40FC4F9AE02/aMK1iNFoWlh0LYouGIhl2zEQPPc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:60:11:86:ec:83:24:57:55:9b:ce:eb:bd:70:69:bb:b5:71: 93:7b:05:cc:34:34:13:a3:8c:c7:35:b2:f1:69:82:9d:28:a3: 35:15:70:32:7f:b9:84:1c:79:3c:24:29:a0:0d:8f:47:7f:c0: cd:e3:ab:99:a7:ff:e6:0b:33:4a:8b:a7:f4:0f:37:9a:96:71: 52:3c:c5:d1:49:bc:e6:16:bd:66:33:f7:2d:77:6e:08:07:70: 32:38:37:1f:36:49:06:0a:47:4d:70:7c:cf:0d:cd:b8:fc:6a: 58:f5:68:50:9b:0e:6c:64:19:7e:0f:89:40:36:ec:cd:18:17: e0:b9:28:d0:29:cd:df:e0:b0:a2:e1:5c:ef:61:65:3c:0b:18: fa:06:69:2e:81:b6:f6:11:1d:bc:24:57:a5:98:31:6b:5f:73: 7c:c7:c3:b7:be:bb:a3:55:f5:81:ad:75:35:cf:51:5b:78:f1: b6:58:5d:b2:8e:ee:08:e4:52:a3:f2:91:30:c6:30:c7:8e:06: e2:1d:e9:89:75:9a:04:0e:d5:00:6f:b5:de:f1:02:86:4b:2c: e0:ed:c6:80:cd:fa:82:84:18:91:cf:ba:20:79:56:16:13:bb: c6:56:27:a7:6e:aa:e6:d8:e0:2c:d9:9a:8c:14:af:75:b7:51: 9f:81:0a:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFEQUYxMTAvBgNVBAUTKDY4QzJCNTg4RDE2ODVBNTg3NDJEOEEyRTE4ODg2NURC MzExMDNDRjcwHhcNMjYwNzI3MDcwODM2WhcNMjYwODAzMDcwODM2WjAYMRYwFAYD VQQDEw02YTY3MDNmNC1kYTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOJQPZMqGhdfw+9ST7WktIC7+KoS0/m5wpDh7k1ktxd75Y/EKfDAL2O4oVWc HtQJUbAMETp/U9m9tHljxqqKBr0RDOjmB1ASlzZZLOslVi3Nstjtlz02qfr8PCZq +Hzhs5WxpLBazJzahKjXXgg0nuX5dlMsB+dcKoKXIE/2AO8i72okFK9m9k8gokiH +GOBqJtii/X1Ye3gTF5n8E6tgQqGHR1McdFw95PH57JgAFfAE7PrBVrnGpr+wKhV N0bTBWJxsedT1zXS1WR7Un52pFjECyJZ23ls7w0nDnS7kgWl0bF/E6tmjiUQFJG2 eTiYQQuJAUuNkFS9w7nNHjw5rwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB70Bp0u a+eJFpw/q+e0Ioo5B5sMMB8GA1UdIwQYMBaAFGjCtYjRaFpYdC2KLhiIZdsxEDz3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQURBRi84NzE1OUM5NjhD RjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1dsaDBMWW91R0lobDJ6RVFQ UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNSzFpTkZvV2xoMExZb3VHSWhsMnpFUVBQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QURBRi84NzE1OUM5NjhDRjMxMUVGOUYzRUE0MEZDNEY5QUUwMi9hTUsxaU5Gb1ds aDBMWW91R0lobDJ6RVFQUGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQmARhuyDJFdVm87rvXBpu7Vxk3sFzDQ0E6OMxzWy8WmCnSijNRVwMn+5hBx5 PCQpoA2PR3/AzeOrmaf/5gszSoun9A83mpZxUjzF0Um85ha9ZjP3LXduCAdwMjg3 HzZJBgpHTXB8zw3NuPxqWPVoUJsObGQZfg+JQDbszRgX4Lko0CnN3+CwouFc72Fl PAsY+gZpLoG29hEdvCRXpZgxa19zfMfDt767o1X1ga11Nc9RW3jxtlhdso7uCORS o/KRMMYwx44G4h3piXWaBA7VAG+13vEChkss4O3GgM36goQYkc+6IHlWFhO7xlYn p26q5tjgLNmajBSvdbdRn4EKXA== -----END CERTIFICATE-----Generated at Tue Jul 28 22:20:01 2026 by rpki-client