$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft File: 1RZ7lweHQQlX4l2fh1CFYPAFd24.mft (raw, json) Hash identifier: TRXt77bL1CprdcXx4udS4SxeKk0OSaOaotChmNVdBKM= Subject key identifier: 78:4C:A4:76:0E:1C:5D:31:18:48:3A:A3:9A:6B:70:9A:B6:14:09:D0 Authority key identifier: D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E Certificate issuer: /CN=A91B9011/serialNumber=D5167B970787410957E25D9F87508560F005776E Certificate serial: 0697 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft Manifest number: 0690 Signing time: Sun 26 Jul 2026 23:18:56 +0000 Manifest this update: Sun 26 Jul 2026 23:18:56 +0000 Manifest next update: Sun 02 Aug 2026 23:18:56 +0000 Files and hashes: 1: 1RZ7lweHQQlX4l2fh1CFYPAFd24.crl (hash: KwEh+1gVCWxZO7AYocGnTIfJan2sTfdPsGlHN31T770=) 2: 438893AC55BE11EDBDE51983C4F9AE02.roa (hash: gL7cp7BTVKF8NZn2TWA67vSTXMDPVWx2RqBEPS0dmPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9011, serialNumber=D5167B970787410957E25D9F87508560F005776E Validity Not Before: Jul 26 23:18:56 2026 GMT Not After : Aug 2 23:18:56 2026 GMT Subject: CN=6a6695e0-5e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:dc:77:78:89:66:c9:12:b3:16:e6:a2:72: 02:2e:36:d3:6b:4d:5d:da:af:dd:49:2c:e1:81:29: ef:14:a3:8c:a5:8e:7d:c4:d4:4e:bc:56:fc:40:54: a1:4b:a0:00:3d:f4:e9:77:f4:9d:da:89:ac:18:17: 9d:19:54:eb:fd:95:5f:aa:1b:7e:f6:84:35:85:42: 5a:00:00:11:13:d8:fe:cb:e4:ae:c4:c6:3c:19:f2: 5d:84:50:2e:05:ba:e8:c5:82:84:d2:2c:6d:ac:45: 01:5d:7e:5b:61:28:d8:cb:fb:01:15:bd:d8:a4:56: a9:55:13:a9:02:24:7e:3c:dc:58:4c:12:77:2a:0c: ba:6f:1a:5c:00:41:ad:6e:5b:d6:df:86:37:58:70: 9f:23:0f:49:4a:b1:66:8a:01:f0:e4:8d:81:87:a6: b6:4d:ed:8b:10:20:5a:a3:f3:45:20:4d:77:43:70: 36:d9:3e:ed:36:7d:76:43:a1:21:bc:ca:a5:29:3c: 67:52:70:4b:7e:f4:80:bb:7a:ca:10:4e:b9:f3:20: 8e:ff:27:96:33:4a:2a:b9:ac:9f:45:bb:a5:81:ea: fa:3a:ad:01:50:48:3e:1a:bc:f4:39:52:af:3b:a0: de:bc:f2:5b:35:4c:8a:08:7c:d3:93:db:01:3a:fa: a6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4C:A4:76:0E:1C:5D:31:18:48:3A:A3:9A:6B:70:9A:B6:14:09:D0 X509v3 Authority Key Identifier: keyid:D5:16:7B:97:07:87:41:09:57:E2:5D:9F:87:50:85:60:F0:05:77:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1RZ7lweHQQlX4l2fh1CFYPAFd24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9011/3888E0C4C73A11EB90075510C4F9AE02/1RZ7lweHQQlX4l2fh1CFYPAFd24.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:47:62:63:d0:ad:a4:ab:59:8c:88:cb:4c:16:48:3b:61:9a: 06:82:9f:7d:76:3f:23:b4:f2:42:14:6c:0e:3e:ef:67:02:ba: 23:a4:23:a7:c6:23:8b:de:8e:d8:98:bd:f2:d1:5e:77:6f:1a: d3:dc:1e:88:d9:7b:98:f9:c5:49:ca:d9:09:69:cf:2f:d2:db: 35:5d:87:62:35:5e:32:4c:45:80:d0:dd:94:c2:eb:9b:7d:75: db:40:4f:47:e5:66:be:9a:f1:98:c1:af:df:28:a8:6a:fe:64: 4d:30:0e:e2:54:c0:08:9a:c6:17:df:ee:e1:ca:03:bf:f1:52: c5:9a:f9:7e:e5:f4:0d:93:4f:07:ad:f3:f6:35:3e:77:27:79: 79:fc:51:6c:cf:e7:32:6d:41:7b:c6:66:c1:6e:72:af:61:04: 7b:ad:1d:7d:e3:4a:00:fc:c6:1e:c8:10:2e:9f:a6:88:10:f5: b7:dc:52:e5:69:c9:ff:99:46:d7:18:5e:ce:6f:40:8b:fa:87: 92:48:2b:f8:72:da:26:61:35:9d:4b:71:02:76:04:ff:96:d2: e1:4e:90:d6:41:fa:eb:29:b6:3f:16:59:56:d5:c5:52:13:17: 74:45:8a:e9:ec:00:34:76:49:ca:a0:fc:48:8b:19:0d:62:68: 6d:cd:0c:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMTExMTAvBgNVBAUTKEQ1MTY3Qjk3MDc4NzQxMDk1N0UyNUQ5Rjg3NTA4NTYw RjAwNTc3NkUwHhcNMjYwNzI2MjMxODU2WhcNMjYwODAyMjMxODU2WjAYMRYwFAYD VQQDEw02YTY2OTVlMC01ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUPcd3iJZskSsxbmonICLjbTa01d2q/dSSzhgSnvFKOMpY59xNROvFb8QFSh S6AAPfTpd/Sd2omsGBedGVTr/ZVfqht+9oQ1hUJaAAARE9j+y+SuxMY8GfJdhFAu BbroxYKE0ixtrEUBXX5bYSjYy/sBFb3YpFapVROpAiR+PNxYTBJ3Kgy6bxpcAEGt blvW34Y3WHCfIw9JSrFmigHw5I2Bh6a2Te2LECBao/NFIE13Q3A22T7tNn12Q6Eh vMqlKTxnUnBLfvSAu3rKEE658yCO/yeWM0oquayfRbulger6Oq0BUEg+Grz0OVKv O6DevPJbNUyKCHzTk9sBOvqmjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhMpHYO HF0xGEg6o5prcJq2FAnQMB8GA1UdIwQYMBaAFNUWe5cHh0EJV+Jdn4dQhWDwBXdu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAxMS8zODg4RTBDNEM3 M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFRbFg0bDJmaDFDRllQQUZk MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFSWjdsd2VIUVFsWDRsMmZoMUNGWVBBRmQyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAxMS8zODg4RTBDNEM3M0ExMUVCOTAwNzU1MTBDNEY5QUUwMi8xUlo3bHdlSFFR bFg0bDJmaDFDRllQQUZkMjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA0kdiY9CtpKtZjIjLTBZIO2GaBoKffXY/I7TyQhRsDj7vZwK6I6Qjp8Yji96O 2Ji98tFed28a09weiNl7mPnFScrZCWnPL9LbNV2HYjVeMkxFgNDdlMLrm31120BP R+VmvprxmMGv3yioav5kTTAO4lTACJrGF9/u4coDv/FSxZr5fuX0DZNPB63z9jU+ dyd5efxRbM/nMm1Be8ZmwW5yr2EEe60dfeNKAPzGHsgQLp+miBD1t9xS5WnJ/5lG 1xhezm9Ai/qHkkgr+HLaJmE1nUtxAnYE/5bS4U6Q1kH66ym2PxZZVtXFUhMXdEWK 6ewANHZJyqD8SIsZDWJobc0MzQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:30:55 2026 by rpki-client