$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json) Hash identifier: uTm8IxOEnJ4o1pns+N9aJMKL2ExpnJvd9LfOxulbw9g= Subject key identifier: E3:98:2E:B9:F4:A3:AA:86:30:0F:76:BA:C7:C3:F0:69:78:B9:B3:22 Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Certificate serial: 0A9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft Manifest number: 0A92 Signing time: Tue 28 Jul 2026 19:52:15 +0000 Manifest this update: Tue 28 Jul 2026 19:52:15 +0000 Manifest next update: Tue 04 Aug 2026 19:52:15 +0000 Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: OgG5PmH6SOXnsp8BbgewmF2wlzWUm9Xp5pfUygdxSSM=) 2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ERhX+neEQpWaGHgDx788YR3fYNG7D/j2H84jmEv5law=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2715 (0xa9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Validity Not Before: Jul 28 19:52:15 2026 GMT Not After : Aug 4 19:52:15 2026 GMT Subject: CN=6a69086f-1b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:f2:05:9a:17:50:b0:8c:1b:22:87:29:6b: 53:a2:de:01:f5:28:38:f1:62:1f:2b:73:05:4c:2a: 37:46:9a:29:02:e5:7a:60:3d:95:c6:72:2d:83:9b: ef:51:23:de:dd:cf:08:f2:de:93:36:f2:81:f8:91: b4:40:d0:1d:37:e8:2b:e4:55:fd:b1:f6:fe:81:ca: d2:20:e8:42:01:91:7a:c1:af:f9:a5:91:9b:26:5f: d2:a2:dd:91:12:11:ad:c0:e1:9b:15:1d:d5:d1:99: a0:b6:82:6d:cd:21:d1:5e:8d:36:9b:55:84:25:60: 46:0e:1e:16:50:0b:fa:01:a2:36:aa:e3:7d:27:67: d8:83:f5:88:36:c6:b4:c3:17:06:ce:17:2c:7e:52: 14:27:bb:1f:2e:1f:f3:e0:f0:6f:96:6b:f7:c5:83: 18:59:f8:09:ba:e4:f1:d3:a6:49:ea:f9:bf:5b:0f: ca:c2:89:82:4c:55:f9:ee:12:26:df:2c:2d:4d:9b: 76:94:ee:5f:06:eb:b3:4f:fa:89:a1:d8:52:80:75: 4f:1b:ad:70:e4:8d:e2:4f:95:e7:22:6a:0b:89:d3: 25:0d:fe:92:f3:8e:e9:90:26:a2:f0:1c:2b:4a:a0: b3:69:47:ff:00:bd:84:84:19:42:12:10:1f:2e:9e: 9b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:2E:B9:F4:A3:AA:86:30:0F:76:BA:C7:C3:F0:69:78:B9:B3:22 X509v3 Authority Key Identifier: keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:77:1d:aa:73:09:7c:75:9f:67:dd:d3:89:f1:f7:47:89:0e: c9:18:b7:8c:24:62:30:18:1c:68:74:b5:77:4d:f4:54:fb:3b: 95:35:81:b4:b5:14:a6:1d:c2:78:4b:f8:ac:e7:93:20:fb:be: 08:d0:ea:95:d4:67:15:c3:2d:1d:5c:ac:ae:bb:a3:a5:94:98: 99:f0:3b:e9:2c:5c:9c:d2:ad:31:83:d8:f4:18:fb:57:29:5a: 9d:02:dc:9f:57:bd:4e:f2:a3:61:92:33:81:e4:12:10:a3:ec: 12:de:64:2b:b0:70:0e:ce:86:be:3f:c1:ae:ad:fc:52:d9:a5: 09:e3:97:c3:0e:36:32:47:ba:3b:a5:44:53:5e:40:f1:49:b2: 8c:38:31:df:fc:d7:b9:bc:ba:12:a8:eb:a3:82:31:c2:a7:a9: 3d:e8:f1:04:a9:4a:1b:f0:1f:5b:f9:f2:e8:11:c6:81:b4:70: 0f:4e:d0:0c:06:38:30:f4:d5:59:09:41:24:42:64:20:37:f1: 1e:6d:79:71:85:30:fd:38:ec:e3:22:b8:20:78:1c:ca:c4:13: 4a:a7:2a:20:fe:d8:05:1a:9c:7e:e9:cf:49:cb:c6:bf:ab:34: ba:0c:23:03:a7:eb:93:26:0f:69:9e:a9:92:36:ad:58:c3:bd: d4:b0:76:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyOEIxMTAvBgNVBAUTKDBGRThDQTY0ODcwQTNENjM5MTFDOEQyRDY1MUJBMjlD QUNFRDBFQ0EwHhcNMjYwNzI4MTk1MjE1WhcNMjYwODA0MTk1MjE1WjAYMRYwFAYD VQQDEw02YTY5MDg2Zi0xYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUryBZoXULCMGyKHKWtTot4B9Sg48WIfK3MFTCo3RpopAuV6YD2VxnItg5vv USPe3c8I8t6TNvKB+JG0QNAdN+gr5FX9sfb+gcrSIOhCAZF6wa/5pZGbJl/Sot2R EhGtwOGbFR3V0ZmgtoJtzSHRXo02m1WEJWBGDh4WUAv6AaI2quN9J2fYg/WINsa0 wxcGzhcsflIUJ7sfLh/z4PBvlmv3xYMYWfgJuuTx06ZJ6vm/Ww/KwomCTFX57hIm 3ywtTZt2lO5fBuuzT/qJodhSgHVPG61w5I3iT5XnImoLidMlDf6S847pkCai8Bwr SqCzaUf/AL2EhBlCEhAfLp6bOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOYLrn0 o6qGMA92usfD8Gl4ubMiMB8GA1UdIwQYMBaAFA/oymSHCj1jkRyNLWUbopys7Q7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Qi8zQTBCNkMwQzg0 NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BXT1JISTB0WlJ1aW5LenRE c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtaktaSWNLUFdPUkhJMHRaUnVpbkt6dERzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Qi8zQTBCNkMwQzg0NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BX T1JISTB0WlJ1aW5LenREc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn3cdqnMJfHWfZ93TifH3R4kOyRi3jCRiMBgcaHS1d030VPs7lTWBtLUUph3C eEv4rOeTIPu+CNDqldRnFcMtHVysrrujpZSYmfA76SxcnNKtMYPY9Bj7VylanQLc n1e9TvKjYZIzgeQSEKPsEt5kK7BwDs6Gvj/Brq38UtmlCeOXww42Mke6O6VEU15A 8UmyjDgx3/zXuby6Eqjro4IxwqepPejxBKlKG/AfW/ny6BHGgbRwD07QDAY4MPTV WQlBJEJkIDfxHm15cYUw/Tjs4yK4IHgcysQTSqcqIP7YBRqcfunPScvGv6s0ugwj A6frkyYPaZ6pkjatWMO91LB2Dg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:52:26 2026 by rpki-client