$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft File: bRscXsmpziDouF2j9sHjzdQu-Dk.mft (raw, json) Hash identifier: 2vdNNJ6uDZbEgYZ2q84gTZq3+gQ4X5Ijb9NP7zQJoIw= Subject key identifier: FC:66:2A:3F:26:C5:B0:13:CC:A8:03:4E:8F:D2:12:AC:71:0D:D1:AE Authority key identifier: 6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 Certificate issuer: /CN=A91B4378/serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft Manifest number: 74 Signing time: Mon 27 Jul 2026 10:05:02 +0000 Manifest this update: Mon 27 Jul 2026 10:05:02 +0000 Manifest next update: Mon 03 Aug 2026 10:05:02 +0000 Files and hashes: 1: bRscXsmpziDouF2j9sHjzdQu-Dk.crl (hash: u7xo8kzAyk0VjmEuLaO0d9V0RTKl0DSvi8qcSpW2b5E=) 2: 21656302D9A211F09604B56168D3641D.roa (hash: J7YgpNqOcaYjOCo1OiB0WdtVs6cboNKClgYeNKdHnYI=) 3: D106F48C1D1911F19643AB4F103D8C67.roa (hash: Vnwa52V2rw4iQn/D3rDg54HehQEyfCOLvGurPGwR3Vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4378, serialNumber=6D1B1C5EC9A9CE20E8B85DA3F6C1E3CDD42EF839 Validity Not Before: Jul 27 10:05:02 2026 GMT Not After : Aug 3 10:05:02 2026 GMT Subject: CN=6a672d4e-efb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:1a:a9:f8:3e:3b:8d:1a:6e:85:f0:40:5d: 35:9f:76:70:e1:53:b5:94:5e:fd:bd:ac:bd:fd:13: d9:a8:e4:5b:f1:fa:5c:2b:7c:08:c1:ab:ae:f2:27: 61:31:fa:ae:07:82:b3:fc:5e:08:5a:14:6c:e7:1e: 67:e4:f7:d7:19:f0:d4:14:90:30:13:43:10:40:fa: 32:8b:5b:3c:1b:f3:d3:79:d2:1c:0c:3c:1f:38:2e: b1:6d:8b:8f:74:13:70:c7:25:50:77:54:8d:0d:8c: 79:28:b9:3c:6d:77:d8:1c:0c:df:e8:0d:7a:06:7b: 15:43:4c:47:13:d7:14:10:b6:f3:4d:d0:aa:eb:93: c8:d2:3a:b7:2b:94:a1:ba:fc:d8:35:63:2c:8f:16: e8:27:25:1f:6d:48:f4:e9:b1:bb:a6:f3:ab:4e:32: e6:14:ce:be:49:96:65:ea:bd:b4:a8:7f:3d:9e:c1: 21:11:ff:0d:6e:e3:de:65:58:0f:d5:f7:00:96:e0: ad:13:b1:cb:53:92:fc:d2:9e:6a:45:d7:ae:bb:f7: 26:16:ac:8f:75:8f:40:30:13:07:cc:a9:34:f4:ce: 98:35:5f:9d:1c:b7:d5:83:6f:1e:4f:86:e7:0c:f0: 8a:fd:69:73:ac:4a:56:1b:42:83:a7:9d:db:03:b4: 0d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:66:2A:3F:26:C5:B0:13:CC:A8:03:4E:8F:D2:12:AC:71:0D:D1:AE X509v3 Authority Key Identifier: keyid:6D:1B:1C:5E:C9:A9:CE:20:E8:B8:5D:A3:F6:C1:E3:CD:D4:2E:F8:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bRscXsmpziDouF2j9sHjzdQu-Dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4378/F629148CD9A011F09A0FB01768D3641D/bRscXsmpziDouF2j9sHjzdQu-Dk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:76:5e:e4:ab:96:a5:5b:7a:79:ff:07:0c:a9:1c:3f:3f:bd: ec:12:26:91:92:24:55:e6:81:f3:ad:47:4d:bc:94:56:fb:7b: 4a:fa:84:35:fe:91:a0:1e:23:f1:60:40:9f:cf:2a:ca:31:fe: 43:e1:a9:c0:04:f2:98:84:48:2e:a9:8c:b1:33:db:2f:f0:ab: 05:21:42:d0:e2:01:4b:cb:5b:41:cd:78:4d:07:51:41:f0:f4: ce:ff:dc:5d:4c:79:44:ce:e0:94:ce:62:64:c7:11:0b:96:f5: 6c:d4:d3:b2:b3:72:c4:86:4f:cc:9d:fe:eb:8e:ca:b0:2c:a6: 98:b2:d9:5e:e7:b0:3a:0f:94:6d:34:71:35:0d:fc:b2:06:e3: dc:f3:e9:08:d9:ce:ab:37:60:88:ba:35:9e:31:ff:d8:af:a5: 12:c7:2a:a5:a7:21:7e:e1:60:87:b8:87:8e:ee:f4:6f:92:e5: 22:fe:52:be:d8:94:e0:41:2f:58:9c:2c:e2:c7:a7:ca:03:ce: d9:43:80:6f:77:82:ea:2d:55:f9:32:2c:b3:96:1a:9a:ad:ce: c0:52:77:9b:c3:30:73:f3:ce:7b:8c:b5:09:eb:53:49:f0:4b: d1:c6:1f:c7:f7:99:5d:39:b0:05:e9:e3:9d:24:ff:02:46:9b: ac:f8:56:07 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NDM3ODExMC8GA1UEBRMoNkQxQjFDNUVDOUE5Q0UyMEU4Qjg1REEzRjZDMUUzQ0RE NDJFRjgzOTAeFw0yNjA3MjcxMDA1MDJaFw0yNjA4MDMxMDA1MDJaMBgxFjAUBgNV BAMTDTZhNjcyZDRlLWVmYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYsxqp+D47jRpuhfBAXTWfdnDhU7WUXv29rL39E9mo5Fvx+lwrfAjBq67yJ2Ex +q4HgrP8XghaFGznHmfk99cZ8NQUkDATQxBA+jKLWzwb89N50hwMPB84LrFti490 E3DHJVB3VI0NjHkouTxtd9gcDN/oDXoGexVDTEcT1xQQtvNN0Krrk8jSOrcrlKG6 /Ng1YyyPFugnJR9tSPTpsbum86tOMuYUzr5JlmXqvbSofz2ewSER/w1u495lWA/V 9wCW4K0TsctTkvzSnmpF16679yYWrI91j0AwEwfMqTT0zpg1X50ct9WDbx5PhucM 8Ir9aXOsSlYbQoOnndsDtA11AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU/GYqPybF sBPMqANOj9ISrHEN0a4wHwYDVR0jBBgwFoAUbRscXsmpziDouF2j9sHjzdQu+Dkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0Mzc4L0Y2MjkxNDhDRDlB MDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlEb3VGMmo5c0hqemRRdS1E ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlJzY1hzbXB6aURvdUYyajlzSGp6ZFF1LURrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0 Mzc4L0Y2MjkxNDhDRDlBMDExRjA5QTBGQjAxNzY4RDM2NDFEL2JSc2NYc21wemlE b3VGMmo5c0hqemRRdS1Eay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBidl7kq5alW3p5/wcMqRw/P73sEiaRkiRV5oHzrUdNvJRW+3tK+oQ1/pGgHiPx YECfzyrKMf5D4anABPKYhEguqYyxM9sv8KsFIULQ4gFLy1tBzXhNB1FB8PTO/9xd THlEzuCUzmJkxxELlvVs1NOys3LEhk/Mnf7rjsqwLKaYstle57A6D5RtNHE1Dfyy BuPc8+kI2c6rN2CIujWeMf/Yr6USxyqlpyF+4WCHuIeO7vRvkuUi/lK+2JTgQS9Y nCzix6fKA87ZQ4Bvd4LqLVX5Miyzlhqarc7AUnebwzBz8857jLUJ61NJ8EvRxh/H 95ldObAF6eOdJP8CRpus+FYH -----END CERTIFICATE-----Generated at Tue Jul 28 20:56:27 2026 by rpki-client