$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft File: REhMnzpz9xlXK4vIoaH9nln6hPY.mft (raw, json) Hash identifier: 4yNlpPe+KlA0NZ78+iK056TZ/QL/oi5Gzs/kDMztwFg= Subject key identifier: 65:B2:4E:BF:88:63:80:8B:D4:ED:E3:5E:94:C9:5E:ED:17:4A:E4:31 Authority key identifier: 44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6 Certificate issuer: /CN=A91BD73B/serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6 Certificate serial: 3560 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft Manifest number: 3560 Signing time: Tue 28 Jul 2026 15:20:36 +0000 Manifest this update: Tue 28 Jul 2026 15:20:36 +0000 Manifest next update: Tue 04 Aug 2026 15:20:36 +0000 Files and hashes: 1: REhMnzpz9xlXK4vIoaH9nln6hPY.crl (hash: aBM+0d6wXUqjK75YsRxsumImSDDREeexYlhnl04Erqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13664 (0x3560) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD73B, serialNumber=44484C9F3A73F719572B8BC8A1A1FD9E59FA84F6 Validity Not Before: Jul 28 15:20:36 2026 GMT Not After : Aug 4 15:20:36 2026 GMT Subject: CN=6a68c8c4-6779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:72:79:d9:c2:01:50:d3:28:12:61:32:6d: d3:0f:e9:4e:32:7c:14:db:e1:1a:e3:46:75:88:2b: 98:59:6a:e0:bc:9b:4d:b9:52:94:c2:c0:22:99:6b: 92:55:e6:6a:0e:fb:e7:4a:f1:49:8f:73:37:39:03: 1f:09:cd:7d:90:d3:77:bc:07:ad:b8:d4:2a:54:c7: 35:da:16:79:bc:a0:d9:e6:6b:13:7a:11:15:52:4d: 84:b8:e0:5c:5e:be:da:b0:c8:d2:27:4a:6c:69:c8: 80:ac:07:15:24:72:5c:1d:40:7a:40:f2:f8:3a:b0: 11:c1:09:96:2e:22:5d:af:36:ee:a9:f8:df:a5:74: 29:cd:31:ae:a8:de:a1:b1:db:0c:89:17:7b:0d:25: 42:85:30:5e:b4:76:10:54:e8:a4:54:18:19:05:49: dd:83:99:42:e0:33:ba:f0:de:fb:39:1b:6a:c1:06: a3:09:ee:c2:7f:e7:ae:1a:42:68:83:33:56:80:e8: ec:cf:99:c5:33:0d:1b:60:81:7e:b9:68:04:7b:c2: bb:ce:e6:53:29:06:02:3d:8f:2a:62:32:d9:f4:6c: 26:7c:9f:51:82:b7:5f:13:cd:60:e5:8e:09:5d:34: 50:0d:f8:7a:a3:24:18:77:d8:47:05:34:73:98:f1: b9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B2:4E:BF:88:63:80:8B:D4:ED:E3:5E:94:C9:5E:ED:17:4A:E4:31 X509v3 Authority Key Identifier: keyid:44:48:4C:9F:3A:73:F7:19:57:2B:8B:C8:A1:A1:FD:9E:59:FA:84:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/REhMnzpz9xlXK4vIoaH9nln6hPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD73B/26BDF32C1DAA11E2BE25A6A508B02CD2/REhMnzpz9xlXK4vIoaH9nln6hPY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b5:5f:18:66:de:8d:3b:c0:a6:23:ef:e7:c1:f0:d8:ea:bc: 32:22:db:41:b6:8d:30:55:ee:68:e9:0a:31:99:1c:d7:f9:75: 16:24:86:0a:83:ff:e7:00:0f:1c:2b:0a:47:da:09:89:71:fb: 7f:98:5d:e9:13:33:1a:76:ed:69:e8:b9:7e:61:17:e6:49:28: 76:c2:6a:46:54:6a:fe:8a:bd:c8:28:35:d7:ed:5b:29:b1:7c: 81:ed:ed:e3:3f:f7:4e:ee:a8:90:ae:7e:05:16:8b:81:12:72: 52:a0:fc:2d:64:22:68:59:fd:e3:29:5e:27:c1:bf:9a:f2:dd: 0e:5c:4e:73:ea:9c:1c:0a:f5:aa:5f:d8:6b:97:2c:f3:3c:08: 24:0a:95:86:38:e3:c3:c3:88:8f:aa:94:fb:ab:9e:a4:91:d1: 1c:bb:14:2f:32:77:b6:93:62:9e:7e:ac:0e:a9:e9:8e:1b:ca: 73:b8:81:de:29:f9:9c:00:db:34:76:73:eb:1d:ba:82:6e:47: 28:10:fc:ec:13:6e:e1:dc:c9:78:66:67:55:c4:04:2e:5a:74: fc:28:81:67:a7:e3:55:1b:8b:c6:3f:6e:0a:78:7d:4c:a8:fe: 41:6c:75:2d:e1:48:82:81:65:8d:a3:04:1d:d3:26:88:16:d9: 13:87:f2:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ3M0IxMTAvBgNVBAUTKDQ0NDg0QzlGM0E3M0Y3MTk1NzJCOEJDOEExQTFGRDlF NTlGQTg0RjYwHhcNMjYwNzI4MTUyMDM2WhcNMjYwODA0MTUyMDM2WjAYMRYwFAYD VQQDEw02YTY4YzhjNC02Nzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgxyednCAVDTKBJhMm3TD+lOMnwU2+Ea40Z1iCuYWWrgvJtNuVKUwsAimWuS VeZqDvvnSvFJj3M3OQMfCc19kNN3vAetuNQqVMc12hZ5vKDZ5msTehEVUk2EuOBc Xr7asMjSJ0psaciArAcVJHJcHUB6QPL4OrARwQmWLiJdrzbuqfjfpXQpzTGuqN6h sdsMiRd7DSVChTBetHYQVOikVBgZBUndg5lC4DO68N77ORtqwQajCe7Cf+euGkJo gzNWgOjsz5nFMw0bYIF+uWgEe8K7zuZTKQYCPY8qYjLZ9GwmfJ9RgrdfE81g5Y4J XTRQDfh6oyQYd9hHBTRzmPG55wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGWyTr+I Y4CL1O3jXpTJXu0XSuQxMB8GA1UdIwQYMBaAFERITJ86c/cZVyuLyKGh/Z5Z+oT2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDczQi8yNkJERjMyQzFE QUExMUUyQkUyNUE2QTUwOEIwMkNEMi9SRWhNbnpwejl4bFhLNHZJb2FIOW5sbjZo UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JFaE1uenB6OXhsWEs0dklvYUg5bmxuNmhQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDczQi8yNkJERjMyQzFEQUExMUUyQkUyNUE2QTUwOEIwMkNEMi9SRWhNbnpwejl4 bFhLNHZJb2FIOW5sbjZoUFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcrVfGGbejTvApiPv58Hw2Oq8MiLbQbaNMFXuaOkKMZkc1/l1FiSGCoP/5wAP HCsKR9oJiXH7f5hd6RMzGnbtaei5fmEX5kkodsJqRlRq/oq9yCg11+1bKbF8ge3t 4z/3Tu6okK5+BRaLgRJyUqD8LWQiaFn94yleJ8G/mvLdDlxOc+qcHAr1ql/Ya5cs 8zwIJAqVhjjjw8OIj6qU+6uepJHRHLsULzJ3tpNinn6sDqnpjhvKc7iB3in5nADb NHZz6x26gm5HKBD87BNu4dzJeGZnVcQELlp0/CiBZ6fjVRuLxj9uCnh9TKj+QWx1 LeFIgoFljaMEHdMmiBbZE4fyDw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:57:19 2026 by rpki-client