$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json) Hash identifier: cajV6xhzXomPXMtkTvCsbnbiDh4ssaSrWiiICiALPJQ= Subject key identifier: 66:E5:88:74:94:9D:7D:2A:E1:CD:56:91:FD:A2:67:37:B7:DF:ED:98 Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft Manifest number: 015A Signing time: Mon 27 Jul 2026 02:01:54 +0000 Manifest this update: Mon 27 Jul 2026 02:01:54 +0000 Manifest next update: Mon 03 Aug 2026 02:01:54 +0000 Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: w6OqSGV1vVX9cWX4RAx7sKqWnijsVqFBuaO+USl8Nus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Validity Not Before: Jul 27 02:01:54 2026 GMT Not After : Aug 3 02:01:54 2026 GMT Subject: CN=6a66bc12-9d8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:53:e2:42:80:c3:73:f3:b1:af:18:39:69:b9: b5:ec:f6:48:b1:b7:51:c8:88:21:50:96:f1:a0:42: 31:18:ed:68:23:9c:ca:16:bf:18:f1:85:94:fd:36: a5:e0:d6:71:ae:f6:1d:28:4d:4a:42:9b:76:e1:15: 1a:56:5d:03:4c:9a:4a:55:35:f8:6d:94:02:09:62: d4:fe:dc:c5:72:45:4e:39:ed:dc:07:89:96:b6:98: e8:52:84:c8:ea:75:33:be:53:c8:cb:1e:1b:39:b0: 8d:a6:03:50:94:fa:4a:30:72:42:d5:f9:69:01:8f: e9:3e:22:0f:cf:6f:b1:c6:e6:58:97:ee:5c:c2:c2: f3:ce:6e:59:13:84:59:b5:e7:f8:96:9b:89:12:ee: e5:b8:e2:c7:0d:fc:17:ca:05:ae:d1:62:da:0d:1c: 49:88:21:a2:ab:06:70:ce:f3:c4:78:0c:b3:bb:9e: 7d:ae:39:16:da:ba:c3:d7:ea:e8:02:ae:c3:7c:0e: db:79:3d:ef:f3:d0:99:ac:ea:30:b3:6c:19:f7:83: 43:00:0a:55:cd:47:17:8a:3c:18:2c:da:9d:e1:ec: 73:ff:b3:fe:00:75:51:1d:9b:6a:fd:10:68:b6:d8: 0a:f4:8e:46:22:13:9a:f7:fe:ac:a9:b8:eb:10:09: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E5:88:74:94:9D:7D:2A:E1:CD:56:91:FD:A2:67:37:B7:DF:ED:98 X509v3 Authority Key Identifier: keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:85:fb:52:4e:63:9e:7d:96:a1:5d:bb:c1:b5:97:f0:b6:47: 22:81:d9:2e:4d:c7:56:af:36:94:47:72:ae:fc:3e:ad:50:61: d1:98:fc:d6:c5:3c:82:59:eb:bc:3a:20:29:15:9e:1d:e3:bb: 42:5b:57:fa:6a:b6:9e:1e:78:b2:16:d8:60:7d:1a:a7:1a:a3: ec:05:a9:e9:f6:c5:36:d6:1a:5c:a6:c8:70:c7:38:67:3e:e0: 42:8d:a2:73:f9:c6:80:fc:66:9d:8b:1c:45:07:42:91:6d:24: 4c:81:a6:58:c1:a1:dd:66:fd:57:a2:c9:4a:a6:f6:65:fe:55: 85:d0:93:a6:63:ec:a1:55:bd:cb:01:4a:7e:d8:8e:51:5c:a2: 41:be:e3:6b:91:22:01:f9:42:12:8b:ba:7f:a8:8f:2c:20:b2: 01:06:ba:5e:48:ad:ea:f6:f3:39:db:c0:ff:14:4d:34:c1:ad: 6a:ea:20:6d:33:1e:3d:30:58:62:8b:1d:36:38:96:f3:15:34: 67:d2:41:28:c3:05:5a:97:31:54:20:d0:44:4c:95:97:4c:e2: fe:dc:ae:e5:20:18:ad:7b:84:8b:24:75:6d:8b:d0:c5:23:25: 09:39:9d:30:8c:be:20:7b:ff:23:25:79:e7:2f:16:52:bc:f6: 0b:20:f3:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKEQzRDc4M0VFNEM2OUJCNTA2M0ZCNUNGNUIyNjI4QkM3 QkVDMzc0OEEwHhcNMjYwNzI3MDIwMTU0WhcNMjYwODAzMDIwMTU0WjAYMRYwFAYD VQQDEw02YTY2YmMxMi05ZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVPiQoDDc/Oxrxg5abm17PZIsbdRyIghUJbxoEIxGO1oI5zKFr8Y8YWU/Tal 4NZxrvYdKE1KQpt24RUaVl0DTJpKVTX4bZQCCWLU/tzFckVOOe3cB4mWtpjoUoTI 6nUzvlPIyx4bObCNpgNQlPpKMHJC1flpAY/pPiIPz2+xxuZYl+5cwsLzzm5ZE4RZ tef4lpuJEu7luOLHDfwXygWu0WLaDRxJiCGiqwZwzvPEeAyzu559rjkW2rrD1+ro Aq7DfA7beT3v89CZrOows2wZ94NDAApVzUcXijwYLNqd4exz/7P+AHVRHZtq/RBo ttgK9I5GIhOa9/6sqbjrEAn2+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGbliHSU nX0q4c1Wkf2iZze33+2YMB8GA1UdIwQYMBaAFNPXg+5MabtQY/tc9bJii8e+w3SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9BQjg1MzQ0MDdB M0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUxQmotMXoxc21LTHg3N0Rk SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA5ZUQ3a3hwdTFCai0xejFzbUtMeDc3RGRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9BQjg1MzQ0MDdBM0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUx QmotMXoxc21LTHg3N0RkSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUYX7Uk5jnn2WoV27wbWX8LZHIoHZLk3HVq82lEdyrvw+rVBh0Zj81sU8glnr vDogKRWeHeO7QltX+mq2nh54shbYYH0apxqj7AWp6fbFNtYaXKbIcMc4Zz7gQo2i c/nGgPxmnYscRQdCkW0kTIGmWMGh3Wb9V6LJSqb2Zf5VhdCTpmPsoVW9ywFKftiO UVyiQb7ja5EiAflCEou6f6iPLCCyAQa6Xkit6vbzOdvA/xRNNMGtauogbTMePTBY YosdNjiW8xU0Z9JBKMMFWpcxVCDQREyVl0zi/tyu5SAYrXuEiyR1bYvQxSMlCTmd MIy+IHv/IyV55y8WUrz2CyDzfg== -----END CERTIFICATE-----Generated at Tue Jul 28 17:20:33 2026 by rpki-client