$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft File: c1jmvCkIxoFAvzuKgV9pXcsqiks.mft (raw, json) Hash identifier: cvm6JCAgggwydEpWt+TmrZx8gnz6jH4a0zhoS9hmHgc= Subject key identifier: 3C:82:00:17:6D:DE:19:D4:E9:BE:4F:E9:2C:A8:1B:24:FC:C4:1A:CE Authority key identifier: 73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B Certificate issuer: /CN=A91BB227/serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft Manifest number: 0214 Signing time: Mon 27 Jul 2026 04:30:23 +0000 Manifest this update: Mon 27 Jul 2026 04:30:22 +0000 Manifest next update: Mon 03 Aug 2026 04:30:22 +0000 Files and hashes: 1: c1jmvCkIxoFAvzuKgV9pXcsqiks.crl (hash: pxY8300RWQ3MBS3XIcb99SeKFfdvj7BVR3ZyEOfZywg=) 2: C01378B2D87411EE85EACB5CC4F9AE02.roa (hash: Dn+JL4IFF8F6udJCXJBfFR0N/JW0riYqK/noh4aF+Rg=) 3: 71014290D87411EE97234F5CC4F9AE02.roa (hash: 6S2UbDPQhc0s/ttHg30hgcMezorQYndA+hy2IrwcJyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB227, serialNumber=7358E6BC2908C68140BF3B8A815F695DCB2A8A4B Validity Not Before: Jul 27 04:30:22 2026 GMT Not After : Aug 3 04:30:22 2026 GMT Subject: CN=6a66dedf-c936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d8:21:af:09:71:30:51:2a:3b:90:ec:56:8a: 8c:b2:45:d6:e5:80:3e:6a:52:c2:1a:25:95:7f:11: 8e:bb:73:85:2b:eb:90:b5:53:15:84:a3:fc:2d:2c: 5d:22:3a:c4:2d:cb:df:c6:c8:9c:83:76:f6:97:15: 3e:91:7c:0b:4b:62:58:cf:1b:24:d0:a7:bb:23:2a: 06:cf:a2:04:fc:3d:40:c2:82:12:97:60:59:c2:c2: 54:b5:46:6b:78:54:5e:3c:90:88:a1:88:aa:fa:4d: 98:04:d3:0d:37:57:4c:71:75:c1:66:65:0b:44:4a: a8:f6:da:bc:7d:c6:ca:18:c4:ab:7f:ee:d4:15:6a: c6:d2:73:5d:d9:0c:74:2e:19:b3:3d:25:8d:19:4f: a6:c3:ad:76:d6:45:72:d2:06:97:74:b4:df:14:86: 0b:83:6c:79:cb:ee:cb:9a:4d:f6:10:7c:24:d6:e3: d9:be:2e:05:1e:ce:bf:b7:05:ce:55:14:7a:f0:0d: 42:4d:3b:cf:8d:fa:31:4c:e2:75:d1:0f:14:c4:b5: 1e:e2:f5:1d:d5:87:b9:c8:f4:64:c7:e8:08:98:6a: 5b:1e:07:76:93:1b:fe:5d:b1:a2:69:e0:f6:15:f4: 84:4f:78:27:1e:e4:fe:97:3c:a0:c6:55:38:d1:a6: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:82:00:17:6D:DE:19:D4:E9:BE:4F:E9:2C:A8:1B:24:FC:C4:1A:CE X509v3 Authority Key Identifier: keyid:73:58:E6:BC:29:08:C6:81:40:BF:3B:8A:81:5F:69:5D:CB:2A:8A:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c1jmvCkIxoFAvzuKgV9pXcsqiks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB227/D5A553985D2D11EEA3E39F57C4F9AE02/c1jmvCkIxoFAvzuKgV9pXcsqiks.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3e:5b:ec:03:15:8d:9d:9b:17:58:0a:24:7d:08:d4:e9:9b: d2:77:cd:f5:70:ac:82:c9:3c:fa:5d:df:f1:dd:b9:5e:a6:fb: ba:0e:72:d7:63:cf:fe:33:ce:f1:29:33:85:26:9b:55:d6:f6: 3d:04:46:f9:c1:38:38:d9:b3:53:7c:8e:02:be:b1:a9:95:bb: 44:83:08:f6:2c:44:9e:5c:fb:55:be:67:ff:1d:f3:0a:60:9f: da:35:ef:39:68:f5:ba:96:e8:5c:f5:9e:6e:8e:fa:92:ed:be: 76:8a:5b:6d:c7:e0:8c:ad:98:cc:bb:b0:0b:a1:8d:67:bd:4d: 4c:48:c3:c7:e9:f6:c1:d7:db:03:e4:1e:cc:52:66:8c:8b:50: 8e:36:ce:ef:98:ae:68:35:a0:5c:8b:e2:00:46:37:57:c9:65: 13:18:19:28:86:a1:96:39:c9:19:aa:0f:3b:d4:95:d8:d8:cb: 1a:d6:31:e7:e7:1f:44:8b:fb:2b:ad:eb:a2:85:a4:22:ca:1c: 22:f9:b9:b9:e5:b6:b7:07:e9:04:fb:e0:7b:d3:e0:5a:be:dd: 93:2b:6c:1d:85:38:67:45:30:d0:b0:d2:e2:8f:97:db:0a:59: 95:3b:e2:9d:b6:d7:0f:ae:c4:c4:59:9f:9c:a6:1e:c7:7f:1c: 1d:8c:b9:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkIyMjcxMTAvBgNVBAUTKDczNThFNkJDMjkwOEM2ODE0MEJGM0I4QTgxNUY2OTVE Q0IyQThBNEIwHhcNMjYwNzI3MDQzMDIyWhcNMjYwODAzMDQzMDIyWjAYMRYwFAYD VQQDEw02YTY2ZGVkZi1jOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtghrwlxMFEqO5DsVoqMskXW5YA+alLCGiWVfxGOu3OFK+uQtVMVhKP8LSxd IjrELcvfxsicg3b2lxU+kXwLS2JYzxsk0Ke7IyoGz6IE/D1AwoISl2BZwsJUtUZr eFRePJCIoYiq+k2YBNMNN1dMcXXBZmULREqo9tq8fcbKGMSrf+7UFWrG0nNd2Qx0 LhmzPSWNGU+mw6121kVy0gaXdLTfFIYLg2x5y+7Lmk32EHwk1uPZvi4FHs6/twXO VRR68A1CTTvPjfoxTOJ10Q8UxLUe4vUd1Ye5yPRkx+gImGpbHgd2kxv+XbGiaeD2 FfSET3gnHuT+lzygxlU40aZ3lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyCABdt 3hnU6b5P6SyoGyT8xBrOMB8GA1UdIwQYMBaAFHNY5rwpCMaBQL87ioFfaV3LKopL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjIyNy9ENUE1NTM5ODVE MkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhvRkF2enVLZ1Y5cFhjc3Fp a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Mxam12Q2tJeG9GQXZ6dUtnVjlwWGNzcWlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjIyNy9ENUE1NTM5ODVEMkQxMUVFQTNFMzlGNTdDNEY5QUUwMi9jMWptdkNrSXhv RkF2enVLZ1Y5cFhjc3Fpa3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIj5b7AMVjZ2bF1gKJH0I1Omb0nfN9XCsgsk8+l3f8d25Xqb7ug5y12PP/jPO 8SkzhSabVdb2PQRG+cE4ONmzU3yOAr6xqZW7RIMI9ixEnlz7Vb5n/x3zCmCf2jXv OWj1upboXPWebo76ku2+dopbbcfgjK2YzLuwC6GNZ71NTEjDx+n2wdfbA+QezFJm jItQjjbO75iuaDWgXIviAEY3V8llExgZKIahljnJGaoPO9SV2NjLGtYx5+cfRIv7 K63rooWkIsocIvm5ueW2twfpBPvge9PgWr7dkytsHYU4Z0Uw0LDS4o+X2wpZlTvi nbbXD67ExFmfnKYex38cHYy5fw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:11:53 2026 by rpki-client