$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: XPBe+q7tl3/W7S40HMv8mem7/CIDdGGfVwj/6RYEC1U= Subject key identifier: DD:2F:20:AD:DB:3E:69:D6:2B:E1:85:CF:18:61:2F:E6:A1:88:D0:79 Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 0A52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 0A44 Signing time: Sun 26 Jul 2026 20:12:43 +0000 Manifest this update: Sun 26 Jul 2026 20:12:43 +0000 Manifest next update: Sun 02 Aug 2026 20:12:43 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: WwnL1/t6m+b/8pyySV4x6RUPUjYDa2esNa6ZV+us6iw=) 2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: 3miiShfbAVQgjfgsHWydnIy25OOtPgMw6QYye8n1zb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2642 (0xa52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: Jul 26 20:12:43 2026 GMT Not After : Aug 2 20:12:43 2026 GMT Subject: CN=6a666a3b-6e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:8a:44:43:2a:b3:e2:42:f9:ea:fa:93:9d: 8a:aa:41:45:94:11:09:94:3d:9e:fa:3b:c5:fd:fa: 8a:db:cf:bb:27:ba:17:84:47:61:b4:a3:0f:9f:a4: 6e:8f:bd:dd:41:ce:04:d6:84:05:85:ea:94:30:f1: ef:ee:1d:3c:f5:36:47:ed:1b:d8:55:b1:db:e4:46: 75:92:51:89:5c:09:8d:cc:e7:26:1d:86:dc:58:a2: 2a:07:b8:05:41:ef:99:bd:27:ca:a6:37:d1:ef:3b: 19:e9:c4:41:f6:97:79:73:66:ff:fa:59:c8:3c:53: e5:d5:b1:43:00:14:92:fd:9b:e5:f7:9c:ff:5b:52: 3b:08:61:f6:10:c9:a8:4d:1d:4f:4b:70:ee:7d:a1: d5:5e:5b:07:82:9e:4d:a4:e7:e8:5e:7e:8d:39:e4: 07:de:00:77:30:5a:2f:5f:40:54:d2:3b:7a:8e:f8: f7:70:f7:3c:4a:de:0d:38:8e:54:96:38:d7:1d:94: 34:11:f1:a5:62:77:85:c1:b9:59:b2:0f:d4:18:96: ba:0a:dc:bb:3c:ad:8e:1e:78:41:b5:af:94:48:e1: 7e:d6:6b:a0:d4:39:e6:21:41:32:a7:9e:32:a2:57: d5:4c:dc:3f:de:bc:90:c4:af:9c:1a:49:30:c1:c0: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2F:20:AD:DB:3E:69:D6:2B:E1:85:CF:18:61:2F:E6:A1:88:D0:79 X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:7b:23:7e:15:36:19:98:89:fd:11:4a:53:70:fe:e3:1e:aa: e3:60:d6:00:fb:2c:8d:0a:42:97:77:99:9d:28:d7:d0:e7:c9: f1:d6:b7:38:1a:21:e2:39:c4:a7:4a:6b:57:7b:4b:5e:4a:8c: d2:78:4d:3e:f6:4a:77:a3:04:cf:9d:b7:8e:8b:97:48:77:42: 2b:e9:88:a0:8f:bf:3e:0b:6e:f1:19:87:44:75:f2:7e:df:4f: 09:4f:c7:11:27:95:cb:6e:14:00:95:aa:2f:5e:52:92:68:cf: e7:b7:78:ab:df:4b:10:6a:66:8e:06:00:28:d5:fb:33:f2:a7: 75:8c:80:78:bc:9e:98:c4:b1:5f:52:7a:42:cd:bb:32:b4:19: 28:29:e7:4b:9d:48:77:4b:8e:4c:63:15:7a:a1:06:29:af:12: 76:93:4b:db:96:b8:16:11:96:d9:cf:58:00:69:87:9f:f8:a5: df:8a:44:68:c3:2d:eb:e9:a6:d0:51:06:19:33:bc:a7:97:13: 4f:90:87:5b:bd:03:34:0f:3b:91:ae:af:cd:00:6f:8b:12:bd: 51:0d:f5:74:9e:e9:d0:f4:23:07:18:b8:73:6f:81:cb:37:4b: cf:87:9d:b5:19:fb:6e:70:01:44:e4:87:5c:62:5f:b9:a9:de: c8:83:a8:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICClIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjYwNzI2MjAxMjQzWhcNMjYwODAyMjAxMjQzWjAYMRYwFAYD VQQDEw02YTY2NmEzYi02ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJKKREMqs+JC+er6k52KqkFFlBEJlD2e+jvF/fqK28+7J7oXhEdhtKMPn6Ru j73dQc4E1oQFheqUMPHv7h089TZH7RvYVbHb5EZ1klGJXAmNzOcmHYbcWKIqB7gF Qe+ZvSfKpjfR7zsZ6cRB9pd5c2b/+lnIPFPl1bFDABSS/Zvl95z/W1I7CGH2EMmo TR1PS3DufaHVXlsHgp5NpOfoXn6NOeQH3gB3MFovX0BU0jt6jvj3cPc8St4NOI5U ljjXHZQ0EfGlYneFwblZsg/UGJa6Cty7PK2OHnhBta+USOF+1mug1DnmIUEyp54y olfVTNw/3ryQxK+cGkkwwcDNowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN0vIK3b PmnWK+GFzxhhL+ahiNB5MB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJXsjfhU2GZiJ/RFKU3D+4x6q42DWAPssjQpCl3eZnSjX0OfJ8da3OBoh4jnE p0prV3tLXkqM0nhNPvZKd6MEz523jouXSHdCK+mIoI+/Pgtu8RmHRHXyft9PCU/H ESeVy24UAJWqL15SkmjP57d4q99LEGpmjgYAKNX7M/KndYyAeLyemMSxX1J6Qs27 MrQZKCnnS51Id0uOTGMVeqEGKa8SdpNL25a4FhGW2c9YAGmHn/il34pEaMMt6+mm 0FEGGTO8p5cTT5CHW70DNA87ka6vzQBvixK9UQ31dJ7p0PQjBxi4c2+ByzdLz4ed tRn7bnABROSHXGJfuaneyIOo1Q== -----END CERTIFICATE-----Generated at Tue Jul 28 20:45:03 2026 by rpki-client