$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: 4etojXW2z++rPg239bZCmmWt89YavJoI8bT4W+vqqgo= Subject key identifier: 83:1A:34:CD:E8:ED:BC:6A:29:90:CA:B0:43:13:61:D7:5D:35:CF:BD Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 01F5 Signing time: Mon 27 Jul 2026 05:30:00 +0000 Manifest this update: Mon 27 Jul 2026 05:29:59 +0000 Manifest next update: Mon 03 Aug 2026 05:29:59 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: ZkLTWFNkdGj9QnP786QB39921YRkdpiCSTK6OXkP+CY=) 2: B060FCD00E4311F1AA27A3801A3D8C67.roa (hash: /jHwnGcod93mkftOIXxHTA503k6CU3aAb5UZbSQZX9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Jul 27 05:29:59 2026 GMT Not After : Aug 3 05:29:59 2026 GMT Subject: CN=6a66ecd8-aa39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:2a:31:b0:61:d1:a8:a2:c3:6a:02:04:94: 7b:3a:ba:de:88:6e:bb:14:c9:93:48:f3:35:f3:e0: 0b:73:b8:0d:81:f7:8f:51:23:58:83:3d:73:aa:c8: 89:bf:1c:4f:4f:a5:7a:05:a6:9a:78:66:14:93:dd: 33:a7:e3:63:a2:74:29:3c:fe:0e:61:d2:fb:2c:05: a5:ee:c0:59:0a:6e:72:4a:46:94:e6:35:d8:2a:c6: bb:a3:0f:2a:5c:15:35:0e:2b:f5:74:78:8c:ce:00: 06:da:25:73:e6:95:50:ee:d5:be:9f:49:eb:ca:ec: 57:ca:cd:51:c4:76:73:9d:62:41:f0:fd:9d:ad:41: 06:2d:34:b1:97:35:e5:18:4b:54:76:31:4e:65:46: d1:75:94:ff:f4:f7:5f:b0:a8:88:0d:c0:aa:7c:fa: 9a:70:18:27:76:b2:fe:c0:c1:3b:d8:f9:e2:70:4a: cd:cc:42:12:9d:27:ca:15:9b:d7:33:ff:64:82:bd: e1:5a:4c:0a:38:30:e6:0e:02:29:18:23:46:f6:3d: fc:72:7c:25:63:c4:86:ac:d8:7a:dd:c0:1c:f5:b9: 38:a4:76:25:48:35:db:fe:a9:df:36:8b:58:f4:59: 29:4c:b7:42:49:0c:94:6b:18:1b:7e:79:da:84:98: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1A:34:CD:E8:ED:BC:6A:29:90:CA:B0:43:13:61:D7:5D:35:CF:BD X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f7:fb:c4:ae:92:62:1c:d5:8d:1f:0a:c8:7d:20:75:84:41: 1b:bd:8a:5e:cf:39:75:db:8a:fb:18:e8:d9:78:cf:a9:07:fb: cd:6a:9f:5d:bd:70:c8:07:e1:d4:62:8c:70:56:08:1a:9d:72: 35:57:76:aa:82:8d:87:1b:87:c7:b2:4e:23:76:c1:ee:d7:d1: 5b:53:f0:eb:e5:91:28:c1:71:5f:68:db:19:d6:98:d5:5b:df: 7d:ea:2b:8d:8b:67:bb:c6:ff:9f:e7:1f:3b:f4:9c:04:16:0c: 0e:42:6f:3f:8e:0f:be:82:6c:ee:47:2a:4b:af:89:34:41:84: 1d:0f:65:62:9e:56:5b:5e:b9:b6:46:0f:2c:77:68:11:8e:69: 52:96:23:c7:d2:9d:ab:b3:e4:0a:08:2a:a9:41:a2:ab:02:ae: 09:3c:8a:2c:7a:d0:bc:c6:82:a4:6a:db:10:82:54:91:a7:d3: 33:3d:1d:05:b3:6f:e7:14:a5:1d:70:b9:f1:ba:94:97:3e:7b: a7:70:2a:4f:84:65:28:71:8c:68:89:e2:0a:1d:39:74:ca:70: 28:14:be:ac:43:55:f3:08:33:0b:6e:1a:bb:cf:b4:ab:4e:11: eb:a3:48:d8:c6:d1:88:51:33:f5:06:2b:04:60:1c:f9:ef:14: 0c:3f:6e:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjYwNzI3MDUyOTU5WhcNMjYwODAzMDUyOTU5WjAYMRYwFAYD VQQDEw02YTY2ZWNkOC1hYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM8qMbBh0aiiw2oCBJR7OrreiG67FMmTSPM18+ALc7gNgfePUSNYgz1zqsiJ vxxPT6V6BaaaeGYUk90zp+NjonQpPP4OYdL7LAWl7sBZCm5ySkaU5jXYKsa7ow8q XBU1Div1dHiMzgAG2iVz5pVQ7tW+n0nryuxXys1RxHZznWJB8P2drUEGLTSxlzXl GEtUdjFOZUbRdZT/9PdfsKiIDcCqfPqacBgndrL+wME72PnicErNzEISnSfKFZvX M/9kgr3hWkwKODDmDgIpGCNG9j38cnwlY8SGrNh63cAc9bk4pHYlSDXb/qnfNotY 9FkpTLdCSQyUaxgbfnnahJhOdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIMaNM3o 7bxqKZDKsEMTYdddNc+9MB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcvf7xK6SYhzVjR8KyH0gdYRBG72KXs85dduK+xjo2XjPqQf7zWqfXb1wyAfh 1GKMcFYIGp1yNVd2qoKNhxuHx7JOI3bB7tfRW1Pw6+WRKMFxX2jbGdaY1Vvffeor jYtnu8b/n+cfO/ScBBYMDkJvP44PvoJs7kcqS6+JNEGEHQ9lYp5WW165tkYPLHdo EY5pUpYjx9Kdq7PkCggqqUGiqwKuCTyKLHrQvMaCpGrbEIJUkafTMz0dBbNv5xSl HXC58bqUlz57p3AqT4RlKHGMaIniCh05dMpwKBS+rENV8wgzC24au8+0q04R66NI 2MbRiFEz9QYrBGAc+e8UDD9ucA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:54:06 2026 by rpki-client