$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: 7JQr5yWJsbQ4WvppLk2k+UjuBV/Wzs/o0oPV6mUgnZM= Subject key identifier: 32:C3:77:60:69:91:F2:59:18:AC:D1:71:68:F8:5D:32:18:E1:4A:DD Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 0239 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 0233 Signing time: Mon 27 Jul 2026 04:07:50 +0000 Manifest this update: Mon 27 Jul 2026 04:07:50 +0000 Manifest next update: Mon 03 Aug 2026 04:07:50 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: zr5aBZUTaekkYcFdKHApJOC7RiZ03pt761I7oqdIxlU=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: fjGpC/tzzFWbeBBortAKHNrafmR/+XWGojeVFa7vFyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Jul 27 04:07:50 2026 GMT Not After : Aug 3 04:07:50 2026 GMT Subject: CN=6a66d996-5e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d7:5e:3b:1f:51:4a:68:8d:b9:86:34:c0:9a: e2:2b:26:85:19:e3:3d:2b:f5:ca:b5:c7:9a:b9:57: 79:a5:03:62:60:d2:a9:ee:d2:8c:0a:dd:06:bd:67: 65:57:b1:15:98:f8:5b:39:2d:6b:c8:5c:ec:03:d2: 09:0b:68:20:fa:2a:a5:63:f9:ae:5d:7b:c2:53:09: 96:30:e8:5f:ae:b7:8e:86:f5:f0:cd:4d:0a:7f:63: f6:70:ec:4f:53:ba:d8:d4:29:6f:ab:98:59:6d:dc: 01:36:5c:9d:cf:e4:a3:25:65:ed:5c:fb:d1:59:d9: e0:3d:37:5b:04:7e:f0:f3:2f:b7:cc:93:11:03:82: dd:0b:fe:f9:c0:e0:cd:f8:13:87:72:67:50:6c:97: 2c:99:6b:00:d3:f6:34:7d:11:08:fe:dd:06:68:31: cc:55:f1:71:41:fe:a1:78:1e:cf:65:d6:c0:b5:d2: d7:c4:5c:f7:21:49:b8:53:72:7c:bf:48:8b:3e:2f: 20:b3:8b:df:2a:3e:0d:54:86:73:02:cb:47:fa:25: c1:20:02:b8:f6:25:9a:84:f1:c8:74:3c:de:2f:e0: 80:90:e6:78:7b:51:35:67:35:37:0f:4d:f6:9f:06: cc:f0:e8:7f:6e:86:c1:23:e7:b0:bd:b4:f1:3e:55: 7a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C3:77:60:69:91:F2:59:18:AC:D1:71:68:F8:5D:32:18:E1:4A:DD X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:23:96:f1:de:a2:e8:ba:5b:45:3a:74:63:c3:b7:0f:b1:1d: 1b:19:68:b7:22:84:20:af:83:bc:c7:cc:5d:15:af:06:64:17: ac:f6:3f:2f:cb:24:96:33:70:4b:ee:65:10:e3:6e:f0:1b:8d: 38:5d:fd:70:76:f8:21:03:f0:ed:2e:2f:bd:1f:29:bd:fa:ed: f1:dc:9b:9b:f2:11:4c:d8:48:a7:c2:8d:19:dd:e4:b6:a2:71: f6:d2:10:f4:e6:9e:65:66:12:62:b6:41:1a:ef:3e:da:ec:8f: fc:e1:f7:3c:4d:b1:ff:11:0d:d8:23:9b:9e:f2:30:d3:f0:85: 99:0b:98:84:35:7a:c8:5d:b1:97:fa:99:d5:57:ef:a3:45:3b: f8:fa:06:b1:c4:c9:f4:bf:11:23:c6:75:b7:e9:e2:98:11:e8: 5d:d1:53:0e:a2:52:82:61:c0:c9:50:f9:de:6c:40:fe:99:0a: 5a:ef:ba:c7:f0:81:4b:91:75:5a:88:2f:c0:49:47:35:58:a6: a2:f5:1f:3f:1b:e1:a9:4d:90:2b:f9:7a:2b:cc:f3:64:83:d5: c2:27:4c:2a:48:9d:ce:c7:cc:88:ac:13:b2:db:6f:9b:b5:60: 94:28:0e:d0:c3:93:a4:ba:3a:9c:37:c2:cf:27:7d:0b:85:d7: f5:2c:e5:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjYwNzI3MDQwNzUwWhcNMjYwODAzMDQwNzUwWjAYMRYwFAYD VQQDEw02YTY2ZDk5Ni01ZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztdeOx9RSmiNuYY0wJriKyaFGeM9K/XKtceauVd5pQNiYNKp7tKMCt0GvWdl V7EVmPhbOS1ryFzsA9IJC2gg+iqlY/muXXvCUwmWMOhfrreOhvXwzU0Kf2P2cOxP U7rY1Clvq5hZbdwBNlydz+SjJWXtXPvRWdngPTdbBH7w8y+3zJMRA4LdC/75wODN +BOHcmdQbJcsmWsA0/Y0fREI/t0GaDHMVfFxQf6heB7PZdbAtdLXxFz3IUm4U3J8 v0iLPi8gs4vfKj4NVIZzAstH+iXBIAK49iWahPHIdDzeL+CAkOZ4e1E1ZzU3D032 nwbM8Oh/bobBI+ewvbTxPlV6QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDLDd2Bp kfJZGKzRcWj4XTIY4UrdMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJyOW8d6i6LpbRTp0Y8O3D7EdGxlotyKEIK+DvMfMXRWvBmQXrPY/L8skljNw S+5lEONu8BuNOF39cHb4IQPw7S4vvR8pvfrt8dybm/IRTNhIp8KNGd3ktqJx9tIQ 9OaeZWYSYrZBGu8+2uyP/OH3PE2x/xEN2CObnvIw0/CFmQuYhDV6yF2xl/qZ1Vfv o0U7+PoGscTJ9L8RI8Z1t+nimBHoXdFTDqJSgmHAyVD53mxA/pkKWu+6x/CBS5F1 WogvwElHNVimovUfPxvhqU2QK/l6K8zzZIPVwidMKkidzsfMiKwTsttvm7VglCgO 0MOTpLo6nDfCzyd9C4XX9SzlHA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:32:26 2026 by rpki-client