$ rpki-client -vvf rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft File: iV5rynpcNtnzBEctDScTpILJ2yU.mft (raw, json) Hash identifier: 5ZN6mjsVlDZeQ9NbZtp53Jsq74zruOhOzeqPVYbNn2s= Subject key identifier: 0A:AB:99:99:64:CD:5F:DC:F3:F8:9A:03:D8:87:5E:A2:9A:F9:B9:78 Authority key identifier: 89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25 Certificate issuer: /CN=A91B829A/serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25 Certificate serial: 0D2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft Manifest number: 0D22 Signing time: Tue 28 Jul 2026 18:20:56 +0000 Manifest this update: Tue 28 Jul 2026 18:20:56 +0000 Manifest next update: Tue 04 Aug 2026 18:20:56 +0000 Files and hashes: 1: iV5rynpcNtnzBEctDScTpILJ2yU.crl (hash: BJEqLb4TceedxL7X0o/fKPsuv78e26m5LNQpx1/3XfA=) 2: 37759456617811ECBB095A62C4F9AE02.roa (hash: +R4LaSdSdI4rptj9gcyqC1YCWuipohsg4zPzzR0FvRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:20:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B829A, serialNumber=895E6BCA7A5C36D9F304472D0D2713A482C9DB25 Validity Not Before: Jul 28 18:20:56 2026 GMT Not After : Aug 4 18:20:56 2026 GMT Subject: CN=6a68f308-3df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d5:8d:7c:d0:7a:4b:fc:5d:ec:44:c0:ab:37: c2:70:f6:fe:8e:96:d3:f2:dd:6b:99:38:de:30:ff: 30:4d:e7:99:22:c9:82:b9:e3:21:9e:a3:b6:20:de: 58:b4:9f:34:da:b9:cd:57:33:ef:6c:c0:80:e6:52: ca:e5:6a:5b:ac:19:9f:98:4a:6e:64:a0:f2:a8:4c: 9d:fd:5d:e2:db:58:40:2b:2c:52:98:ef:cc:74:6f: 72:51:9a:c5:cb:14:07:9a:d2:f0:e7:dd:e8:e9:2b: 0d:c4:5e:f0:65:9f:95:60:d7:17:ea:88:57:9a:96: 3f:3a:89:d6:56:6c:3d:d7:74:75:12:01:3f:d2:c4: 2b:7a:98:15:a0:48:e7:d1:ae:3b:3a:15:05:95:c2: 15:93:fd:d5:81:02:18:c2:78:1f:7c:dd:37:0e:97: 98:46:01:cb:e0:d5:29:37:16:5e:9c:34:46:3a:3d: 43:96:97:01:c3:53:2a:f0:01:38:e0:db:cf:90:7d: b9:a5:6a:5e:2b:f0:cf:a3:bc:20:a0:84:3a:ec:d2: 64:ad:26:b7:40:21:57:83:9d:e7:b7:89:20:a4:bc: e4:04:6b:7c:d0:51:c7:ec:3c:62:28:9b:cd:67:61: f3:a7:07:4f:93:bf:32:c6:bc:45:fb:cf:ef:b6:d9: d3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AB:99:99:64:CD:5F:DC:F3:F8:9A:03:D8:87:5E:A2:9A:F9:B9:78 X509v3 Authority Key Identifier: keyid:89:5E:6B:CA:7A:5C:36:D9:F3:04:47:2D:0D:27:13:A4:82:C9:DB:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV5rynpcNtnzBEctDScTpILJ2yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B829A/1F23E058057F11EAA5516B3FC4F9AE02/iV5rynpcNtnzBEctDScTpILJ2yU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:16:f1:d8:b1:5d:c5:72:da:1a:a9:35:a2:5c:7f:99:71:b2: 7c:3b:79:64:81:dc:1d:09:cd:6d:c9:ac:b8:c5:93:e3:a0:6a: 03:d4:7e:c5:89:cb:d2:90:db:7b:1e:5e:ae:4f:39:3f:c8:4a: cd:09:f3:22:7c:7c:53:ac:eb:ca:eb:da:09:86:86:2d:b2:ed: 4b:6b:20:1b:ac:c5:74:cd:d5:c8:07:94:f3:4d:63:60:b7:1f: 3f:f2:11:90:0b:03:46:f3:26:44:f5:67:9d:5d:56:97:b2:6d: ab:1b:c1:67:b7:d1:ee:54:ea:9d:9c:8b:cc:8e:9e:8f:f1:bd: 81:8a:85:89:11:f4:de:8c:a3:cc:a0:e2:11:ea:6f:8e:e2:65: 8c:5a:4e:ad:db:82:e5:cb:f4:58:37:6e:6b:4b:75:48:87:03: b0:5d:68:34:fa:da:13:fe:01:47:12:8d:39:c4:35:f5:1b:f2: d5:73:1b:58:f1:d7:95:4e:5e:73:86:9f:96:c6:b9:ef:b3:97: cc:e3:59:c8:13:cc:4e:89:9d:21:16:7a:91:23:13:af:af:df: fb:41:14:db:25:95:4e:77:36:41:ac:ef:e9:a0:80:93:4f:20: 06:ac:35:13:7b:b9:5d:f6:f0:37:25:b8:1f:f9:74:fc:87:48: 86:c7:e4:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgyOUExMTAvBgNVBAUTKDg5NUU2QkNBN0E1QzM2RDlGMzA0NDcyRDBEMjcxM0E0 ODJDOURCMjUwHhcNMjYwNzI4MTgyMDU2WhcNMjYwODA0MTgyMDU2WjAYMRYwFAYD VQQDEw02YTY4ZjMwOC0zZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhtWNfNB6S/xd7ETAqzfCcPb+jpbT8t1rmTjeMP8wTeeZIsmCueMhnqO2IN5Y tJ802rnNVzPvbMCA5lLK5WpbrBmfmEpuZKDyqEyd/V3i21hAKyxSmO/MdG9yUZrF yxQHmtLw593o6SsNxF7wZZ+VYNcX6ohXmpY/OonWVmw913R1EgE/0sQrepgVoEjn 0a47OhUFlcIVk/3VgQIYwngffN03DpeYRgHL4NUpNxZenDRGOj1DlpcBw1Mq8AE4 4NvPkH25pWpeK/DPo7wgoIQ67NJkrSa3QCFXg53nt4kgpLzkBGt80FHH7DxiKJvN Z2HzpwdPk78yxrxF+8/vttnTNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqrmZlk zV/c8/iaA9iHXqKa+bl4MB8GA1UdIwQYMBaAFIlea8p6XDbZ8wRHLQ0nE6SCydsl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODI5QS8xRjIzRTA1ODA1 N0YxMUVBQTU1MTZCM0ZDNEY5QUUwMi9pVjVyeW5wY050bnpCRWN0RFNjVHBJTEoy eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lWNXJ5bnBjTnRuekJFY3REU2NUcElMSjJ5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODI5QS8xRjIzRTA1ODA1N0YxMUVBQTU1MTZCM0ZDNEY5QUUwMi9pVjVyeW5wY050 bnpCRWN0RFNjVHBJTEoyeVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApxbx2LFdxXLaGqk1olx/mXGyfDt5ZIHcHQnNbcmsuMWT46BqA9R+xYnL0pDb ex5erk85P8hKzQnzInx8U6zryuvaCYaGLbLtS2sgG6zFdM3VyAeU801jYLcfP/IR kAsDRvMmRPVnnV1Wl7JtqxvBZ7fR7lTqnZyLzI6ej/G9gYqFiRH03oyjzKDiEepv juJljFpOrduC5cv0WDdua0t1SIcDsF1oNPraE/4BRxKNOcQ19Rvy1XMbWPHXlU5e c4aflsa577OXzONZyBPMTomdIRZ6kSMTr6/f+0EU2yWVTnc2Qazv6aCAk08gBqw1 E3u5XfbwNyW4H/l0/IdIhsfksw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:38:53 2026 by rpki-client