$ rpki-client -vvf rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft File: DfoUcOPJ6yHxewN7BM9O1UJO88k.mft (raw, json) Hash identifier: w8xzLYM2GpznoO4rBMewvHz9tOgU8uRjwur0eQWTGaQ= Subject key identifier: 69:BE:1F:6C:5C:5E:33:7C:69:3E:C6:78:7C:8F:74:07:FD:37:3E:C3 Authority key identifier: 0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 Certificate issuer: /CN=A91B588F/serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Certificate serial: 1E10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft Manifest number: 1DFB Signing time: Tue 28 Jul 2026 16:10:57 +0000 Manifest this update: Tue 28 Jul 2026 16:10:57 +0000 Manifest next update: Tue 04 Aug 2026 16:10:57 +0000 Files and hashes: 1: DfoUcOPJ6yHxewN7BM9O1UJO88k.crl (hash: Xv8zyYnwd6VljKWIP7AX1uh0VSUSiFwvmiAMM6Uz6+8=) 2: 234A77E28D2111ECB33BB01AC4F9AE02.roa (hash: rD0K63hEtFRbmUFMwp16mvboZk+CtCmdJfPRvsaFveU=) 3: 09DBF798B76311E6AF11523EC4F9AE02.roa (hash: y589PiSSMhNrGOrnncCafxxVdSHTLvTbZSYrRDFCPDk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7696 (0x1e10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B588F, serialNumber=0DFA1470E3C9EB21F17B037B04CF4ED5424EF3C9 Validity Not Before: Jul 28 16:10:57 2026 GMT Not After : Aug 4 16:10:57 2026 GMT Subject: CN=6a68d491-41a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6a:63:8f:0a:4e:2b:fb:b7:68:80:2a:cf:e0: 1c:26:cd:c4:18:b7:b3:93:8f:b0:fb:1f:77:c1:0c: 8b:09:3b:3f:72:b0:77:dc:2d:71:f9:f1:b0:a9:c2: 0b:b9:85:aa:c8:8a:24:c3:44:59:75:a5:f1:7f:8b: 48:ad:27:eb:31:a8:1b:86:c8:3d:1e:1d:2b:38:c4: fd:4c:d4:4a:67:25:1a:08:05:81:5d:19:08:36:66: 80:69:a0:b4:fc:86:b8:05:a6:39:0f:1c:12:ff:5d: 21:3f:92:34:c6:8a:49:a4:f7:28:13:46:e8:ba:8b: 13:f1:48:c9:fe:24:b1:2d:3a:82:56:32:33:da:21: 2b:d2:a7:68:1c:96:b5:b5:fb:69:d0:da:67:49:e1: b5:4f:e0:ac:ff:8d:fb:78:3f:7d:15:d7:ba:87:2a: 5c:32:80:56:d6:45:b4:9f:26:76:d5:ab:31:be:af: df:c5:09:78:0a:57:13:3b:ec:91:2d:17:89:bd:a1: 82:3c:3f:d4:71:82:0b:8b:66:9a:26:74:76:88:63: a8:38:b9:91:47:33:98:09:56:17:21:ae:22:47:65: 1c:ed:e1:05:43:a0:2b:6d:2c:99:55:2c:fb:b3:5a: 66:48:7f:20:10:7e:fd:fa:99:d1:ee:0e:63:9e:dd: f9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:BE:1F:6C:5C:5E:33:7C:69:3E:C6:78:7C:8F:74:07:FD:37:3E:C3 X509v3 Authority Key Identifier: keyid:0D:FA:14:70:E3:C9:EB:21:F1:7B:03:7B:04:CF:4E:D5:42:4E:F3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DfoUcOPJ6yHxewN7BM9O1UJO88k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B588F/784D94B8B76111E6B1175A3CC4F9AE02/DfoUcOPJ6yHxewN7BM9O1UJO88k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:0d:26:4e:89:88:f7:bd:90:12:a9:60:57:bb:d1:3e:db:a8: a3:15:d7:98:5f:9a:2a:6b:88:17:32:00:b2:a8:dc:f8:72:53: 04:e6:b3:6e:8b:52:85:55:12:40:c9:8e:2b:6e:4d:45:18:83: b9:5c:93:fa:55:51:ab:78:42:49:20:ff:02:9a:81:96:6d:e3: 5f:70:a4:51:83:2c:89:82:c3:10:49:ef:a0:3e:9a:f9:15:24: f8:2c:d9:32:6a:35:be:8d:4f:2b:0a:72:94:c3:f2:5d:bf:26: 9f:5e:10:e2:1c:0a:b7:86:aa:34:a0:5c:c4:c4:ab:e0:67:c4: 52:2e:fc:0c:e2:6c:1a:4c:41:7a:3f:93:0f:7b:4d:58:30:78: c6:1f:db:a5:34:d1:cd:cc:b4:3a:86:59:e5:1e:2b:09:fc:78: 88:1f:78:3f:c0:54:be:35:a2:f3:7a:c8:af:c5:30:72:c9:6c: 89:8c:09:7a:af:b1:0b:24:f8:64:31:36:b6:7e:ee:f4:5b:ec: 3d:4d:dd:7e:1d:f9:44:d2:3f:d2:39:64:03:23:80:8a:7b:f0: f8:99:af:7c:c4:90:ac:51:ec:d6:3c:24:be:1e:46:61:28:4a: b9:69:ba:2e:13:8f:66:f3:1b:47:e9:0e:bd:b9:74:45:23:d3: 19:c4:d4:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU4OEYxMTAvBgNVBAUTKDBERkExNDcwRTNDOUVCMjFGMTdCMDM3QjA0Q0Y0RUQ1 NDI0RUYzQzkwHhcNMjYwNzI4MTYxMDU3WhcNMjYwODA0MTYxMDU3WjAYMRYwFAYD VQQDEw02YTY4ZDQ5MS00MWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA72pjjwpOK/u3aIAqz+AcJs3EGLezk4+w+x93wQyLCTs/crB33C1x+fGwqcIL uYWqyIokw0RZdaXxf4tIrSfrMagbhsg9Hh0rOMT9TNRKZyUaCAWBXRkINmaAaaC0 /Ia4BaY5DxwS/10hP5I0xopJpPcoE0bouosT8UjJ/iSxLTqCVjIz2iEr0qdoHJa1 tftp0NpnSeG1T+Cs/437eD99Fde6hypcMoBW1kW0nyZ21asxvq/fxQl4ClcTO+yR LReJvaGCPD/UcYILi2aaJnR2iGOoOLmRRzOYCVYXIa4iR2Uc7eEFQ6ArbSyZVSz7 s1pmSH8gEH79+pnR7g5jnt35qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGm+H2xc XjN8aT7GeHyPdAf9Nz7DMB8GA1UdIwQYMBaAFA36FHDjyesh8XsDewTPTtVCTvPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTg4Ri83ODREOTRCOEI3 NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5SHhld043Qk05TzFVSk84 OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Rmb1VjT1BKNnlIeGV3TjdCTTlPMVVKTzg4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTg4Ri83ODREOTRCOEI3NjExMUU2QjExNzVBM0NDNEY5QUUwMi9EZm9VY09QSjZ5 SHhld043Qk05TzFVSk84OGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsQ0mTomI972QEqlgV7vRPtuooxXXmF+aKmuIFzIAsqjc+HJTBOazbotShVUS QMmOK25NRRiDuVyT+lVRq3hCSSD/ApqBlm3jX3CkUYMsiYLDEEnvoD6a+RUk+CzZ Mmo1vo1PKwpylMPyXb8mn14Q4hwKt4aqNKBcxMSr4GfEUi78DOJsGkxBej+TD3tN WDB4xh/bpTTRzcy0OoZZ5R4rCfx4iB94P8BUvjWi83rIr8UwcslsiYwJeq+xCyT4 ZDE2tn7u9FvsPU3dfh35RNI/0jlkAyOAinvw+JmvfMSQrFHs1jwkvh5GYShKuWm6 LhOPZvMbR+kOvbl0RSPTGcTU7g== -----END CERTIFICATE-----Generated at Tue Jul 28 22:29:17 2026 by rpki-client