$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft File: Ddq78x7saHZu9mmvlzUkDDiZNFk.mft (raw, json) Hash identifier: yRBk3lMJ/3FIuXcXqC25mzZgaLLYvQaUyUENZaaFoMI= Subject key identifier: 85:0B:CE:8B:EC:41:BD:33:7B:01:65:28:64:6C:21:11:33:81:85:94 Authority key identifier: 0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 Certificate issuer: /CN=A91B3247/serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft Manifest number: C6 Signing time: Mon 27 Jul 2026 09:11:26 +0000 Manifest this update: Mon 27 Jul 2026 09:11:26 +0000 Manifest next update: Mon 03 Aug 2026 09:11:26 +0000 Files and hashes: 1: Ddq78x7saHZu9mmvlzUkDDiZNFk.crl (hash: 9cl5v/0XraIQs3kzYCGEQ6BN+3kpaVuE13jIjgfP1Bs=) 2: 095B5200A5B111F09CCCE85FC4F9AE02.roa (hash: TNUwtV0t4ai+a9xbPAIji0Ma5LkcWxhYEVa6y6wNlPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3247, serialNumber=0DDABBF31EEC68766EF669AF9735240C38993459 Validity Not Before: Jul 27 09:11:26 2026 GMT Not After : Aug 3 09:11:26 2026 GMT Subject: CN=6a6720be-0989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:d4:4b:4d:66:9d:d5:d6:aa:57:7b:3e:c5: 04:b9:d1:58:96:25:d9:b1:f7:ff:b9:0b:d9:86:5a: 56:eb:6c:cc:58:0d:41:4f:1b:c3:c4:7e:c8:72:1f: f1:fa:ab:04:e3:ab:93:a9:58:cc:d9:db:2b:19:e8: 81:51:9b:e8:b8:b8:56:94:6a:0a:9f:43:02:d2:f0: dd:e8:f4:f7:53:77:e8:f3:f1:0f:36:2e:6d:6d:40: 30:e1:f1:29:f1:3c:39:86:e6:ed:97:e8:2e:c3:0e: a2:45:b2:21:c4:3e:6a:61:90:21:19:65:fa:06:83: f0:3a:ab:fb:d9:9e:88:8d:37:6c:15:c5:10:12:7e: 0c:10:8c:07:d7:ec:4c:ab:60:39:45:02:5e:56:5e: 0a:b5:52:e1:c2:52:e9:4b:76:6d:c5:4a:eb:49:66: 50:a3:38:89:37:6a:91:e5:05:bc:69:bb:6c:c1:ab: e6:37:8a:38:fd:5c:f8:b9:0a:da:58:96:29:f1:62: 51:67:0f:26:d6:ad:64:2c:f5:eb:30:4c:ce:e1:91: 1b:0b:5e:21:09:fd:f0:02:9d:cc:47:a5:5d:e3:30: 3f:60:c1:40:5a:0d:0f:17:bc:92:98:10:20:a0:6c: 44:37:0c:10:06:f4:bf:36:2f:78:00:37:9d:98:9e: 72:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0B:CE:8B:EC:41:BD:33:7B:01:65:28:64:6C:21:11:33:81:85:94 X509v3 Authority Key Identifier: keyid:0D:DA:BB:F3:1E:EC:68:76:6E:F6:69:AF:97:35:24:0C:38:99:34:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ddq78x7saHZu9mmvlzUkDDiZNFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3247/32044BFE71EE11F093C22E18C4F9AE02/Ddq78x7saHZu9mmvlzUkDDiZNFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b7:d2:7c:03:f3:8f:76:6c:d2:55:d0:18:81:42:8e:c9:c3: 97:3b:d4:d6:6d:83:b5:28:cc:da:e1:76:38:09:2a:7e:9b:73: a3:1e:4b:f6:40:6a:5d:bb:7b:6f:9d:f1:f6:63:2a:3d:6a:16: 56:a7:89:00:16:dd:31:49:ed:e6:5e:9f:fd:2b:28:2d:b8:83: 6f:60:0e:6d:05:f5:ad:a8:b3:6b:76:34:cf:03:04:28:6e:c5: d4:0a:8a:e5:8c:fe:a4:ce:6a:11:b8:c3:de:62:5e:15:fb:16: 90:fe:c9:39:68:fb:fd:24:40:ca:96:b6:25:85:05:d1:f6:63: 43:26:c7:ab:6e:04:c5:74:b3:d1:e3:86:6f:d5:4f:39:aa:0e: 44:ea:8a:8f:9e:16:1f:2f:e7:37:93:04:b1:7c:a5:7e:38:e8: e4:96:d5:8c:1c:5e:b3:f6:a2:fb:91:01:85:b2:2d:44:b8:70: b3:b2:a4:53:db:83:67:01:61:8d:d9:27:38:39:33:ad:d1:9a: fe:ee:20:a3:52:d2:5f:94:0b:8e:87:1f:e5:f7:26:64:47:fc: 38:34:09:ca:8f:bb:c5:d2:ae:71:47:11:a2:ac:ac:57:38:03: 1c:3f:7e:3a:8d:92:38:1d:22:5b:d1:11:2e:89:1e:17:d7:21: cf:9a:26:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMyNDcxMTAvBgNVBAUTKDBEREFCQkYzMUVFQzY4NzY2RUY2NjlBRjk3MzUyNDBD Mzg5OTM0NTkwHhcNMjYwNzI3MDkxMTI2WhcNMjYwODAzMDkxMTI2WjAYMRYwFAYD VQQDEw02YTY3MjBiZS0wOTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPTUS01mndXWqld7PsUEudFYliXZsff/uQvZhlpW62zMWA1BTxvDxH7Ich/x +qsE46uTqVjM2dsrGeiBUZvouLhWlGoKn0MC0vDd6PT3U3fo8/EPNi5tbUAw4fEp 8Tw5hubtl+guww6iRbIhxD5qYZAhGWX6BoPwOqv72Z6IjTdsFcUQEn4MEIwH1+xM q2A5RQJeVl4KtVLhwlLpS3ZtxUrrSWZQoziJN2qR5QW8abtswavmN4o4/Vz4uQra WJYp8WJRZw8m1q1kLPXrMEzO4ZEbC14hCf3wAp3MR6Vd4zA/YMFAWg0PF7ySmBAg oGxENwwQBvS/Ni94ADedmJ5yawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIULzovs Qb0zewFlKGRsIREzgYWUMB8GA1UdIwQYMBaAFA3au/Me7Gh2bvZpr5c1JAw4mTRZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzI0Ny8zMjA0NEJGRTcx RUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FIWnU5bW12bHpVa0REaVpO RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RkcTc4eDdzYUhadTltbXZselVrRERpWk5Gay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzI0Ny8zMjA0NEJGRTcxRUUxMUYwOTNDMjJFMThDNEY5QUUwMi9EZHE3OHg3c2FI WnU5bW12bHpVa0REaVpORmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARrfSfAPzj3Zs0lXQGIFCjsnDlzvU1m2DtSjM2uF2OAkqfptzox5L9kBqXbt7 b53x9mMqPWoWVqeJABbdMUnt5l6f/SsoLbiDb2AObQX1raiza3Y0zwMEKG7F1AqK 5Yz+pM5qEbjD3mJeFfsWkP7JOWj7/SRAypa2JYUF0fZjQybHq24ExXSz0eOGb9VP OaoOROqKj54WHy/nN5MEsXylfjjo5JbVjBxes/ai+5EBhbItRLhws7KkU9uDZwFh jdknODkzrdGa/u4go1LSX5QLjocf5fcmZEf8ODQJyo+7xdKucUcRoqysVzgDHD9+ Oo2SOB0iW9ERLokeF9chz5omoA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:15:20 2026 by rpki-client