$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft File: tY0p97gQfxWFtf_nDFAsbI9dMwI.mft (raw, json) Hash identifier: LU0UgkWDDJjU8u+Np/R00TsFxlqwZOCao5EhDw0kL14= Subject key identifier: 00:97:C4:0D:C1:C3:11:07:37:29:51:CC:BD:E6:0B:4C:7D:B7:B5:E3 Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Certificate serial: 0941 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft Manifest number: 0921 Signing time: Tue 28 Jul 2026 20:37:44 +0000 Manifest this update: Tue 28 Jul 2026 20:37:43 +0000 Manifest next update: Tue 04 Aug 2026 20:37:43 +0000 Files and hashes: 1: tY0p97gQfxWFtf_nDFAsbI9dMwI.crl (hash: h1L62BB5/UTDN2YVdg5s4dC9BGl0HE63FH3YGplomuo=) 2: C33EB0EC7C4211EB933D233EC4F9AE02.roa (hash: gl38JCfINuQj5r+ArpGOl2htLCM9Mgwqo9xw/lh130Q=) 3: F6F5BCCE53E711F084348F87C4F9AE02.roa (hash: 30DNpUpUJwy2It5xAnDm6pl6G00ZZjWgrPOcvF+5H9w=) 4: 3C3F21BAD6F011EE9B38B67DC4F9AE02.roa (hash: Vl3ljhabWGTlG6GqBHRNZlqYXeuSFP4BoWLikf0UCmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2369 (0x941) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CA4, serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Validity Not Before: Jul 28 20:37:43 2026 GMT Not After : Aug 4 20:37:43 2026 GMT Subject: CN=6a691318-d849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:40:b3:a0:4d:68:f2:f2:e7:a5:66:ab:f3: 10:49:b7:5f:6c:87:32:d1:ce:eb:00:f7:5c:b2:59: ea:20:fd:c5:7d:f3:75:19:ab:f7:a9:31:55:76:89: 3f:61:7b:c4:9d:87:a5:39:7d:30:d6:fc:5e:24:ac: 5c:33:cd:2d:cc:34:9b:1f:98:f3:41:08:95:af:63: 31:bc:5e:38:46:cf:1e:ae:68:9f:f0:0c:0c:7f:f6: 2f:bd:18:08:46:ac:69:03:f9:27:f4:c3:85:ff:47: 2a:c4:5d:fb:48:9a:99:61:50:e1:b4:ac:5d:84:cb: 65:5c:14:c6:be:08:ea:df:2b:80:bf:d1:08:5e:ba: 14:1b:89:39:d4:c8:3e:65:60:25:58:38:fd:86:c6: 38:88:74:3c:74:47:84:0f:eb:9d:68:68:a1:60:27: 07:8f:a8:21:b1:db:7d:41:0b:fc:48:62:64:01:03: 33:60:8e:6c:8f:88:cf:08:91:9b:12:bd:aa:ab:5a: 8f:0c:f0:02:99:c7:e7:64:c4:47:84:76:fb:b9:03: 2d:c2:d8:50:a9:b7:8c:4a:7c:0c:68:4b:09:e7:8d: 07:86:1e:88:7c:e8:d8:f9:bf:e5:1b:24:48:ba:08: 78:c3:53:79:ee:12:09:be:05:3b:82:65:c7:25:2f: 83:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:97:C4:0D:C1:C3:11:07:37:29:51:CC:BD:E6:0B:4C:7D:B7:B5:E3 X509v3 Authority Key Identifier: keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:70:d8:cf:50:34:5b:22:83:83:90:6b:20:4a:05:93:6d:f2: c5:a8:23:5e:96:ca:c3:8a:f9:34:61:63:70:c8:1c:65:0d:75: 0d:4d:d6:ce:fb:03:c9:ce:ed:f7:8d:a6:02:32:d1:57:d0:93: 97:88:a0:fb:c6:ed:6d:49:f2:f4:31:84:8d:24:9d:fb:4e:75: 7b:78:1c:dd:1e:9c:62:43:3e:b6:d0:01:0b:f2:d6:85:b5:d5: 6f:06:87:db:b2:f1:44:04:b6:3f:ea:c6:ac:97:39:e1:13:65: b9:0a:d6:53:e0:07:70:a5:cf:50:9e:03:dd:de:30:8f:bb:a2: 3f:78:66:cc:79:5a:0a:dd:11:a8:c0:ac:eb:1b:fd:6d:f4:0a: 2e:ea:2d:7c:5b:d5:10:3c:d3:30:fb:79:01:3e:3d:30:a5:77: e8:c4:6c:43:fd:f3:d3:2d:66:96:a8:4a:4f:f1:32:fb:d2:34: 74:e9:3c:c7:61:b9:62:85:9c:10:90:46:83:a0:56:98:bc:dd: 87:9a:5e:de:89:33:e9:67:63:d7:4a:7e:b0:09:8c:08:37:07: fb:0e:e7:fa:0c:23:f4:a1:d8:9e:64:8a:7c:91:8b:c9:6b:5b: 76:b3:61:ad:c7:77:50:d7:59:05:a3:1f:8e:df:06:6b:88:2e: 9b:59:b6:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQTQxMTAvBgNVBAUTKEI1OEQyOUY3QjgxMDdGMTU4NUI1RkZFNzBDNTAyQzZD OEY1RDMzMDIwHhcNMjYwNzI4MjAzNzQzWhcNMjYwODA0MjAzNzQzWjAYMRYwFAYD VQQDEw02YTY5MTMxOC1kODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq81As6BNaPLy56Vmq/MQSbdfbIcy0c7rAPdcslnqIP3FffN1Gav3qTFVdok/ YXvEnYelOX0w1vxeJKxcM80tzDSbH5jzQQiVr2MxvF44Rs8ermif8AwMf/YvvRgI RqxpA/kn9MOF/0cqxF37SJqZYVDhtKxdhMtlXBTGvgjq3yuAv9EIXroUG4k51Mg+ ZWAlWDj9hsY4iHQ8dEeED+udaGihYCcHj6ghsdt9QQv8SGJkAQMzYI5sj4jPCJGb Er2qq1qPDPACmcfnZMRHhHb7uQMtwthQqbeMSnwMaEsJ540Hhh6IfOjY+b/lGyRI ugh4w1N57hIJvgU7gmXHJS+D+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFACXxA3B wxEHNylRzL3mC0x9t7XjMB8GA1UdIwQYMBaAFLWNKfe4EH8VhbX/5wxQLGyPXTMC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NBNC8xNUY2OEI1Q0NG MTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4V0Z0Zl9uREZBc2JJOWRN d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RZMHA5N2dRZnhXRnRmX25ERkFzYkk5ZE13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NBNC8xNUY2OEI1Q0NGMTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4 V0Z0Zl9uREZBc2JJOWRNd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAnDYz1A0WyKDg5BrIEoFk23yxagjXpbKw4r5NGFjcMgcZQ11DU3WzvsDyc7t 942mAjLRV9CTl4ig+8btbUny9DGEjSSd+051e3gc3R6cYkM+ttABC/LWhbXVbwaH 27LxRAS2P+rGrJc54RNluQrWU+AHcKXPUJ4D3d4wj7uiP3hmzHlaCt0RqMCs6xv9 bfQKLuotfFvVEDzTMPt5AT49MKV36MRsQ/3z0y1mlqhKT/Ey+9I0dOk8x2G5YoWc EJBGg6BWmLzdh5pe3okz6Wdj10p+sAmMCDcH+w7n+gwj9KHYnmSKfJGLyWtbdrNh rcd3UNdZBaMfjt8Ga4gum1m2lg== -----END CERTIFICATE-----Generated at Wed Jul 29 01:46:25 2026 by rpki-client