$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json) Hash identifier: hNifyR7cKjqtJngudzfwGc1WYCeQp0IkYrThzVaoSks= Subject key identifier: B1:C5:9D:C1:91:60:38:7C:9F:BF:45:9D:DB:84:86:00:21:9B:C7:3A Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1DF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft Manifest number: 1DE5 Signing time: Tue 28 Jul 2026 16:11:04 +0000 Manifest this update: Tue 28 Jul 2026 16:11:03 +0000 Manifest next update: Tue 04 Aug 2026 16:11:03 +0000 Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: OIy2Pp4TJqIPvFlZJiDrlONAIM8z/bd05hHs1W2jV9g=) 2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: bYaDtLZITXZD32x/G/ifQ4D5B/vhmcgFX9IrYx2NC+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7667 (0x1df3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Jul 28 16:11:03 2026 GMT Not After : Aug 4 16:11:03 2026 GMT Subject: CN=6a68d498-9f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:48:f2:39:6f:f7:e8:04:67:19:11:a8:67:45: 18:a0:b3:58:ae:57:b0:b8:2b:f7:7f:e1:ff:07:63: 7c:d5:62:f6:e4:68:f8:54:e2:f5:57:51:4d:55:80: 99:25:9e:59:5d:a7:b5:b5:cf:8c:83:2f:65:f9:50: 77:a0:4b:9b:e6:5e:d8:32:42:fe:fb:fe:b0:5a:4f: a4:a0:c9:af:44:b5:01:d4:f8:2c:4d:16:d8:3b:1f: 04:76:da:37:45:51:aa:4f:ae:af:4b:66:95:78:77: d3:66:dc:54:c3:35:79:7a:e6:25:f4:25:05:4e:7a: ae:bc:fb:67:d9:4e:96:4e:12:2a:63:70:90:77:2c: 0c:3a:3d:8f:d3:12:f0:51:ac:67:71:2a:ee:5b:01: b9:a1:63:e5:3d:cf:51:58:70:ba:af:db:72:32:55: c2:16:fb:53:2a:5d:91:ce:2b:ba:7e:e0:d9:fe:9f: 8a:98:df:8e:cf:f2:b8:d5:c4:e2:24:1d:36:ec:92: d1:20:b5:89:01:8f:e4:1a:8f:e3:92:4e:16:63:74: 0b:28:66:b3:57:f1:27:b4:17:63:81:67:18:ef:05: e8:db:fd:0f:96:5c:75:73:ef:04:2e:d2:34:b6:37: 4e:71:b2:0d:6f:c3:16:97:82:16:78:78:8e:7e:e3: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C5:9D:C1:91:60:38:7C:9F:BF:45:9D:DB:84:86:00:21:9B:C7:3A X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:99:e3:78:f6:fc:9e:18:31:c1:ca:5b:14:dd:00:55:dd:fb: f9:4f:04:6e:02:7e:32:93:5e:5c:25:ab:e5:7a:10:6e:e1:cc: 1b:f1:fd:9b:9d:63:c3:2d:ae:88:e3:66:ad:18:cd:74:5f:b1: 96:c5:8c:c5:64:0f:29:9f:49:df:c5:64:1f:9d:9e:36:09:0c: bb:18:16:30:49:67:d5:cf:f4:93:e8:6a:6e:dd:03:83:83:5a: 35:06:ee:6c:67:df:80:af:c6:15:0b:82:95:e8:7b:0e:f3:8f: b2:46:28:47:60:14:55:3b:3e:b0:86:e9:2f:58:5f:a3:97:e5: 16:66:41:b7:29:2a:55:7b:cd:a0:30:29:b7:ef:8d:0a:b0:06: ec:dc:47:04:44:3d:fd:ce:57:b0:87:87:84:d8:ad:43:f2:c9: c8:1b:22:63:65:6c:12:71:b8:d2:0f:24:c6:11:8f:22:df:92: 4e:10:96:2c:9b:d1:97:6c:6d:d8:c0:9a:4b:7b:59:a0:83:8c: 7b:7e:ef:62:b8:0b:ff:04:ac:75:3e:61:1c:25:33:04:ee:e6: de:7a:24:2d:c3:56:c3:b5:55:d9:10:e4:f3:c2:07:68:e4:5a: 4f:6f:f0:15:50:a2:68:e6:23:ff:7d:0d:b6:d2:f0:0a:f0:51: ec:ab:26:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjYwNzI4MTYxMTAzWhcNMjYwODA0MTYxMTAzWjAYMRYwFAYD VQQDEw02YTY4ZDQ5OC05ZjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArEjyOW/36ARnGRGoZ0UYoLNYrlewuCv3f+H/B2N81WL25Gj4VOL1V1FNVYCZ JZ5ZXae1tc+Mgy9l+VB3oEub5l7YMkL++/6wWk+koMmvRLUB1PgsTRbYOx8Edto3 RVGqT66vS2aVeHfTZtxUwzV5euYl9CUFTnquvPtn2U6WThIqY3CQdywMOj2P0xLw UaxncSruWwG5oWPlPc9RWHC6r9tyMlXCFvtTKl2Rziu6fuDZ/p+KmN+Oz/K41cTi JB027JLRILWJAY/kGo/jkk4WY3QLKGazV/EntBdjgWcY7wXo2/0Pllx1c+8ELtI0 tjdOcbINb8MWl4IWeHiOfuNWjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHFncGR YDh8n79FnduEhgAhm8c6MB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE a05ha1RtcnRWNmQxSW1OUkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYZnjePb8nhgxwcpbFN0AVd37+U8EbgJ+MpNeXCWr5XoQbuHMG/H9m51jwy2u iONmrRjNdF+xlsWMxWQPKZ9J38VkH52eNgkMuxgWMEln1c/0k+hqbt0Dg4NaNQbu bGffgK/GFQuCleh7DvOPskYoR2AUVTs+sIbpL1hfo5flFmZBtykqVXvNoDApt++N CrAG7NxHBEQ9/c5XsIeHhNitQ/LJyBsiY2VsEnG40g8kxhGPIt+SThCWLJvRl2xt 2MCaS3tZoIOMe37vYrgL/wSsdT5hHCUzBO7m3nokLcNWw7VV2RDk88IHaORaT2/w FVCiaOYj/30NttLwCvBR7KsmmA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:39:16 2026 by rpki-client