$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft File: toNIsZBwY8BERWnOsijqUkbQLxk.mft (raw, json) Hash identifier: JFgw8/5jjItjG3stdQRSxuYNw+HSYeBw1TdX2/GPBSA= Subject key identifier: FF:07:03:C8:FD:B9:84:DF:B9:9C:38:91:B5:1F:E5:9C:62:85:B5:DB Authority key identifier: B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 Certificate issuer: /CN=A91B3CB5/serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft Manifest number: 88 Signing time: Sun 26 Jul 2026 18:28:16 +0000 Manifest this update: Sun 26 Jul 2026 18:28:15 +0000 Manifest next update: Sun 02 Aug 2026 18:28:15 +0000 Files and hashes: 1: toNIsZBwY8BERWnOsijqUkbQLxk.crl (hash: fuB4XkezVTj4jrcTPhm752y6bSp2NpInflgUaeOQD8E=) 2: 3AF6CDE4CE7E11F0BDD3E452C4F9AE02.roa (hash: 0wi2dknpR06NzdVHMhDQvzTD3ZFfo6Ir3jbrCyXBQX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CB5, serialNumber=B68348B1907063C0444569CEB228EA5246D02F19 Validity Not Before: Jul 26 18:28:15 2026 GMT Not After : Aug 2 18:28:15 2026 GMT Subject: CN=6a6651c0-4909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:20:71:d0:a8:32:31:6f:e3:6f:14:83:d0:34: 92:e7:4c:10:d4:1c:ca:a3:37:7e:71:79:2a:30:b7: 58:6c:ff:9a:20:7c:cb:08:62:af:ed:37:08:c1:14: fc:73:8b:27:f4:91:5c:a9:b3:c7:51:a8:dc:29:b8: 8c:87:64:ee:b2:c6:e8:26:ce:96:82:d4:55:c7:77: 0e:43:a5:71:b8:0e:50:4b:92:b1:76:74:e8:75:ee: 56:11:47:b4:7d:82:05:a7:5d:a4:2d:47:d4:ee:2e: 1b:af:76:d5:c1:6c:b1:5a:fd:e6:15:4d:1b:c5:62: e5:f4:c5:31:57:14:b8:b7:07:7a:d2:5d:24:95:b8: 63:ef:24:34:f5:4b:52:d8:9d:09:6f:dc:51:10:50: a7:6e:2f:c8:fa:f9:21:4d:1d:99:83:cb:aa:f2:7b: de:d2:90:62:91:fd:db:7f:83:63:12:20:e5:b9:8a: 09:da:2d:79:04:93:89:d4:91:5d:a1:3d:ed:a0:35: b3:da:5e:57:16:26:9d:58:1f:26:31:18:3a:d2:ce: 88:48:ac:b5:c4:98:06:45:f1:a2:6c:44:f1:3c:74: 3b:23:12:98:d0:c8:15:e8:83:f4:c7:aa:55:51:c7: b3:9b:0b:50:36:4a:d4:aa:94:f1:6c:f6:44:0a:44: c4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:07:03:C8:FD:B9:84:DF:B9:9C:38:91:B5:1F:E5:9C:62:85:B5:DB X509v3 Authority Key Identifier: keyid:B6:83:48:B1:90:70:63:C0:44:45:69:CE:B2:28:EA:52:46:D0:2F:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/toNIsZBwY8BERWnOsijqUkbQLxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CB5/ED225532C43411F0A827A57DC4F9AE02/toNIsZBwY8BERWnOsijqUkbQLxk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:37:7b:2c:4c:ef:8c:d4:b6:d8:fd:13:37:93:1c:c3:58:a9: dd:9f:74:e0:bf:5d:3e:50:00:d9:45:ec:41:94:69:2b:78:bf: 62:c3:1d:b6:08:8b:f0:ac:52:6b:40:77:d5:d4:3e:7a:77:c4: ba:32:f2:d7:88:c0:08:27:d7:01:68:2f:0b:0e:f3:bf:70:92: e6:d9:f7:a2:c1:fe:4c:15:47:29:02:0b:10:20:57:1a:ca:92: 27:bd:8d:a5:ab:e5:23:1e:52:12:79:24:1a:c4:89:87:5c:db: 16:32:91:33:d9:f1:14:d5:00:c8:b6:e8:04:37:7d:1d:b0:55: 6b:ae:fc:cc:27:49:e0:96:9b:d2:39:fb:75:3a:50:45:cc:1e: 63:d7:e8:5a:ea:b0:ce:c1:b8:7c:d5:4d:78:5a:0f:43:ad:0f: 3e:4b:75:0b:ae:75:f6:8d:8b:bc:f6:8d:f8:d1:17:39:87:28: 1f:9d:01:bd:85:80:4f:9e:f2:ef:95:67:dc:90:a1:b6:37:73: b0:a3:7d:65:de:34:89:24:82:6c:4e:72:a0:18:16:9b:f1:01: d6:ad:33:71:47:87:f1:a6:b0:89:ce:a7:b6:5b:66:fd:d6:b8: f6:6d:7e:7c:83:96:5e:8e:76:e5:b3:e6:02:97:95:d2:e0:69: de:73:37:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQjUxMTAvBgNVBAUTKEI2ODM0OEIxOTA3MDYzQzA0NDQ1NjlDRUIyMjhFQTUy NDZEMDJGMTkwHhcNMjYwNzI2MTgyODE1WhcNMjYwODAyMTgyODE1WjAYMRYwFAYD VQQDEw02YTY2NTFjMC00OTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSBx0KgyMW/jbxSD0DSS50wQ1BzKozd+cXkqMLdYbP+aIHzLCGKv7TcIwRT8 c4sn9JFcqbPHUajcKbiMh2TussboJs6WgtRVx3cOQ6VxuA5QS5KxdnTode5WEUe0 fYIFp12kLUfU7i4br3bVwWyxWv3mFU0bxWLl9MUxVxS4twd60l0klbhj7yQ09UtS 2J0Jb9xREFCnbi/I+vkhTR2Zg8uq8nve0pBikf3bf4NjEiDluYoJ2i15BJOJ1JFd oT3toDWz2l5XFiadWB8mMRg60s6ISKy1xJgGRfGibETxPHQ7IxKY0MgV6IP0x6pV UcezmwtQNkrUqpTxbPZECkTEoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8HA8j9 uYTfuZw4kbUf5ZxihbXbMB8GA1UdIwQYMBaAFLaDSLGQcGPAREVpzrIo6lJG0C8Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NCNS9FRDIyNTUzMkM0 MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi90b05Jc1pCd1k4QkVSV25Pc2lqcVVrYlFM eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RvTklzWkJ3WThCRVJXbk9zaWpxVWtiUUx4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NCNS9FRDIyNTUzMkM0MzQxMUYwQTgyN0E1N0RDNEY5QUUwMi90b05Jc1pCd1k4 QkVSV25Pc2lqcVVrYlFMeGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnzd7LEzvjNS22P0TN5Mcw1ip3Z904L9dPlAA2UXsQZRpK3i/YsMdtgiL8KxS a0B31dQ+enfEujLy14jACCfXAWgvCw7zv3CS5tn3osH+TBVHKQILECBXGsqSJ72N pavlIx5SEnkkGsSJh1zbFjKRM9nxFNUAyLboBDd9HbBVa678zCdJ4Jab0jn7dTpQ RcweY9foWuqwzsG4fNVNeFoPQ60PPkt1C6519o2LvPaN+NEXOYcoH50BvYWAT57y 75Vn3JChtjdzsKN9Zd40iSSCbE5yoBgWm/EB1q0zcUeH8aawic6ntltm/da49m1+ fIOWXo525bPmApeV0uBp3nM32Q== -----END CERTIFICATE-----Generated at Tue Jul 28 19:34:28 2026 by rpki-client