$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: GAG7AmEPsEJeuvENuXLoPalVyr1kNxYnd8h5aT5f7cI= Subject key identifier: E1:7A:5B:D7:66:43:BF:68:6E:C2:4B:0D:3C:95:02:C7:E3:6E:6A:FF Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 3264 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 323B Signing time: Tue 28 Jul 2026 15:29:55 +0000 Manifest this update: Tue 28 Jul 2026 15:29:54 +0000 Manifest next update: Tue 04 Aug 2026 15:29:54 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: /HpYUHZ5CqO6xoJ4PLtOo2F9ydvSdnsfej68D4dQmUw=) 2: 8114E7825FE911F191A047CF7947A888.roa (hash: Gni6cz7amnYCQMsrNAKYs/EoGduCypBTZLbYZs8lgnU=) 3: 4BEF9ED0F78411F08F54609B4C6F56BC.roa (hash: yPWBySfPVekzCZl7CkHBPHrMQBoFazZW/jnbhHVrf34=) 4: 4B7CAC36F78411F08F54609B4C6F56BC.roa (hash: WmsDBlyhST/b5bX+D6J5AC3D6tVJPhXha9WGq62ba4c=) 5: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: zAJ8EflHvlk8cQS30bxOAjOnY5H30jOLYKCISbgWDzQ=) 6: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: l4FF/86A72/pQWVDtqFOaJrDc/AFvwdU+PSOUvI8AEQ=) 7: 4B019258F78411F08F54609B4C6F56BC.roa (hash: CpOzi8FiEufrBV1/AwwSQPXIljCTOvAWGD5jCmfLyKE=) 8: 858F2428399511F18707CD8AA2833773.roa (hash: cUr0clqCyCkiUIq/VycqLhOHK0HYu8G+EZ7N59Y9lRQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12900 (0x3264) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Jul 28 15:29:54 2026 GMT Not After : Aug 4 15:29:54 2026 GMT Subject: CN=6a68caf3-c455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b0:3f:8a:e6:ed:1a:35:4f:74:5a:88:79:02: 09:54:23:cf:9d:a6:10:cc:31:52:e6:87:d4:62:e0: b8:62:1a:46:b1:d3:eb:94:41:96:3b:88:e8:23:16: 7e:5c:26:bd:87:10:4f:c5:f6:d4:a3:70:70:2d:50: 26:ba:27:37:a0:23:1a:e4:32:a3:83:19:82:a4:49: 52:e3:e7:8b:d9:97:d3:70:90:2c:42:a6:09:b9:6e: 57:92:f1:cc:94:4f:69:9b:d8:08:d0:85:a0:7d:6b: 67:93:9a:65:67:d1:04:e0:1b:2f:d7:ed:25:b7:07: 79:75:2c:1c:e6:e0:47:05:86:a6:bc:ff:07:93:dd: 39:75:c9:72:d4:d6:83:e4:1b:2e:d9:ce:7d:71:fe: 02:fc:ef:51:91:84:05:90:9b:70:e9:22:50:73:cb: 4e:1d:3d:1a:40:1e:65:69:4a:e7:3d:87:78:19:bd: c8:38:0a:4b:98:8b:8c:66:e0:59:7f:a4:f3:16:d6: b2:8f:4c:6c:98:12:6f:81:04:81:2f:f0:0d:25:34: e1:95:cd:56:61:3a:3e:1a:f8:97:34:51:d0:c9:d8: ea:56:6a:4e:d5:04:cd:56:dc:3d:37:57:a9:52:55: e3:38:72:00:30:40:2e:a6:1b:56:8c:db:3f:cb:69: 25:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7A:5B:D7:66:43:BF:68:6E:C2:4B:0D:3C:95:02:C7:E3:6E:6A:FF X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:7c:35:e8:80:cc:7a:26:3e:d6:ce:45:0f:cc:d0:8e:e0:79: 8d:36:49:35:87:95:f2:7e:04:7f:54:30:d9:c5:ae:f5:d7:19: 6b:5f:95:9f:fa:b5:77:20:89:16:98:92:a5:dc:3f:61:32:6b: a5:07:0d:cf:2b:cb:e3:d2:74:c3:98:f6:b9:b9:1f:02:75:10: 6f:34:9d:20:e8:c6:c2:ef:de:93:e5:d4:ae:33:5b:3e:9e:a3: e4:23:d5:f7:8d:3a:b8:93:7a:1d:07:5e:f9:04:24:f6:36:7e: 50:1d:e1:c7:53:13:6a:6d:47:86:fc:dc:c5:03:ae:72:9a:02: 63:44:73:3d:c0:64:8c:b9:3b:8f:e2:86:cc:cf:9b:05:58:4e: 0b:21:5a:43:8f:e7:f1:99:3e:82:30:bd:1e:da:84:f8:6e:86: 07:4e:a3:5e:e9:d3:28:a3:d2:f4:79:31:75:01:27:d3:48:f2: de:30:0e:ef:f8:23:57:b1:41:00:c3:38:f7:83:dd:cb:d7:a1: 34:47:ee:83:dc:3c:fa:de:2f:3b:81:d0:6a:13:47:26:b0:4b: 86:99:24:27:37:4e:87:cc:c0:4d:0e:14:17:53:6c:c9:e5:df: 6e:04:79:44:bc:0b:d0:7e:39:44:b6:75:15:49:09:57:e4:c9: 31:cc:ab:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMmQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjYwNzI4MTUyOTU0WhcNMjYwODA0MTUyOTU0WjAYMRYwFAYD VQQDEw02YTY4Y2FmMy1jNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkLA/iubtGjVPdFqIeQIJVCPPnaYQzDFS5ofUYuC4YhpGsdPrlEGWO4joIxZ+ XCa9hxBPxfbUo3BwLVAmuic3oCMa5DKjgxmCpElS4+eL2ZfTcJAsQqYJuW5XkvHM lE9pm9gI0IWgfWtnk5plZ9EE4Bsv1+0ltwd5dSwc5uBHBYamvP8Hk905dcly1NaD 5Bsu2c59cf4C/O9RkYQFkJtw6SJQc8tOHT0aQB5laUrnPYd4Gb3IOApLmIuMZuBZ f6TzFtayj0xsmBJvgQSBL/ANJTThlc1WYTo+GviXNFHQydjqVmpO1QTNVtw9N1ep UlXjOHIAMEAuphtWjNs/y2kl3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOF6W9dm Q79obsJLDTyVAsfjbmr/MB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlXw16IDMeiY+1s5FD8zQjuB5jTZJNYeV8n4Ef1Qw2cWu9dcZa1+Vn/q1dyCJ FpiSpdw/YTJrpQcNzyvL49J0w5j2ubkfAnUQbzSdIOjGwu/ek+XUrjNbPp6j5CPV 9406uJN6HQde+QQk9jZ+UB3hx1MTam1HhvzcxQOucpoCY0RzPcBkjLk7j+KGzM+b BVhOCyFaQ4/n8Zk+gjC9HtqE+G6GB06jXunTKKPS9HkxdQEn00jy3jAO7/gjV7FB AMM494Pdy9ehNEfug9w8+t4vO4HQahNHJrBLhpkkJzdOh8zATQ4UF1NsyeXfbgR5 RLwL0H45RLZ1FUkJV+TJMcyreA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:19:00 2026 by rpki-client