$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft File: jNGQoUOqLh5IcwOxPcBT7Re86x4.mft (raw, json) Hash identifier: rOSoiyujbYCt+Gl5oBUDhU239fRQYqzNknwaQFooyoM= Subject key identifier: 43:09:0C:2A:75:28:64:8F:FE:67:37:32:14:3E:95:FF:54:F8:6B:BB Authority key identifier: 8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E Certificate issuer: /CN=A91BDF2B/serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft Manifest number: D7 Signing time: Mon 27 Jul 2026 08:46:39 +0000 Manifest this update: Mon 27 Jul 2026 08:46:38 +0000 Manifest next update: Mon 03 Aug 2026 08:46:38 +0000 Files and hashes: 1: jNGQoUOqLh5IcwOxPcBT7Re86x4.crl (hash: 749pUTBFTYGWj8m8iQjwmvhL0HQ2w/7Fl52O10kHmwo=) 2: 653C22F441C311F0999A9935C4F9AE02.roa (hash: iIlQkxBmgXt47gVpNAYfQJLsTOog95JafpEPwLPUz/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDF2B, serialNumber=8CD190A143AA2E1E487303B13DC053ED17BCEB1E Validity Not Before: Jul 27 08:46:38 2026 GMT Not After : Aug 3 08:46:38 2026 GMT Subject: CN=6a671aee-694f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:1d:6c:c3:0d:16:03:d2:ed:cd:20:a1:a7: da:97:91:77:d9:d4:d0:2f:a7:eb:76:12:a2:17:52: e7:7c:b7:dd:91:ee:d0:c2:0e:e5:18:b7:37:5e:67: 0a:9b:b8:c2:ff:ea:9b:3d:39:3e:be:d0:17:27:c1: c7:bf:93:f8:f1:3f:55:04:35:e2:e3:7b:83:f1:95: fe:4d:b5:5a:f9:0d:e8:45:38:39:e5:e8:a0:f6:06: bf:f0:bd:18:4d:80:10:98:1e:04:47:3d:4a:76:3f: 33:59:36:1a:f1:70:2f:0f:39:10:88:72:e0:1e:4c: 28:71:d7:ac:e9:31:30:1a:9c:f7:9f:90:5c:d5:56: 8c:7a:9b:d8:96:41:99:cd:48:3d:3e:aa:18:d0:29: d2:b4:36:62:94:9a:26:90:fa:c9:ef:ce:8f:b2:2c: e8:d7:ec:07:21:2d:7e:52:bb:4f:8e:d7:1e:3c:23: 82:d6:3a:af:ca:ca:bf:91:2c:73:cf:3c:ce:16:11: e9:29:b2:62:9a:8e:09:f4:7f:ba:35:7c:e5:72:7f: 94:7b:28:fc:3b:c9:7d:59:24:45:b0:b2:ff:ea:43: f4:2d:c1:a9:02:f6:71:9b:c4:0f:9a:db:d4:dc:89: 72:aa:e1:28:c5:76:51:5f:30:64:57:86:ec:5b:04: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:09:0C:2A:75:28:64:8F:FE:67:37:32:14:3E:95:FF:54:F8:6B:BB X509v3 Authority Key Identifier: keyid:8C:D1:90:A1:43:AA:2E:1E:48:73:03:B1:3D:C0:53:ED:17:BC:EB:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNGQoUOqLh5IcwOxPcBT7Re86x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDF2B/6C2B7B1C41BB11F0B456D857C4F9AE02/jNGQoUOqLh5IcwOxPcBT7Re86x4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:3d:18:9d:0f:c3:4b:7f:4b:f4:7a:8a:85:ec:43:88:b7:8c: 18:16:e4:70:ac:29:d7:aa:f8:1e:3d:45:9d:1f:30:fc:bd:c8: e3:7b:e5:f9:e1:7a:22:61:45:c8:a1:c4:c8:9b:bb:f6:c5:60: 9e:8f:69:6d:02:16:ce:2f:35:14:58:5e:80:19:1c:e6:2d:9d: a2:5a:b6:15:78:22:69:b5:2d:42:36:5b:8a:68:2a:ad:77:f9: 9f:46:fa:9d:48:1a:8f:9e:35:f1:23:88:49:01:83:2a:c5:7e: ea:e4:2c:63:76:a5:53:f4:4b:04:e0:e0:35:6e:e6:94:45:56: b8:12:b9:17:82:78:d8:83:03:d2:13:27:e8:1e:9d:48:b3:40: 07:7d:f2:00:7b:d8:c5:07:04:eb:54:76:8f:7a:33:c1:44:c9: aa:bd:8c:ee:83:01:2e:23:07:78:9c:c9:53:ee:58:04:bb:b7: 02:45:85:34:0f:60:6a:69:29:fc:7f:68:2c:f1:d5:06:45:d5: 79:a4:25:bd:5c:4c:e6:fe:2c:2b:92:ef:ab:d3:88:7a:c7:a2: ba:0e:93:0c:f3:ca:18:d3:1b:ce:45:5f:fd:92:02:21:e5:9e: fc:32:fd:4a:2e:4f:e8:87:6f:3d:4c:3b:d0:f6:1a:43:54:28: 9d:f4:58:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRGMkIxMTAvBgNVBAUTKDhDRDE5MEExNDNBQTJFMUU0ODczMDNCMTNEQzA1M0VE MTdCQ0VCMUUwHhcNMjYwNzI3MDg0NjM4WhcNMjYwODAzMDg0NjM4WjAYMRYwFAYD VQQDEw02YTY3MWFlZS02OTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzsdbMMNFgPS7c0goafal5F32dTQL6frdhKiF1LnfLfdke7Qwg7lGLc3XmcK m7jC/+qbPTk+vtAXJ8HHv5P48T9VBDXi43uD8ZX+TbVa+Q3oRTg55eig9ga/8L0Y TYAQmB4ERz1Kdj8zWTYa8XAvDzkQiHLgHkwocdes6TEwGpz3n5Bc1VaMepvYlkGZ zUg9PqoY0CnStDZilJomkPrJ786Psizo1+wHIS1+UrtPjtcePCOC1jqvysq/kSxz zzzOFhHpKbJimo4J9H+6NXzlcn+Ueyj8O8l9WSRFsLL/6kP0LcGpAvZxm8QPmtvU 3IlyquEoxXZRXzBkV4bsWwTnVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMJDCp1 KGSP/mc3MhQ+lf9U+Gu7MB8GA1UdIwQYMBaAFIzRkKFDqi4eSHMDsT3AU+0XvOse MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREYyQi82QzJCN0IxQzQx QkIxMUYwQjQ1NkQ4NTdDNEY5QUUwMi9qTkdRb1VPcUxoNUljd094UGNCVDdSZTg2 eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pOR1FvVU9xTGg1SWN3T3hQY0JUN1JlODZ4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REYyQi82QzJCN0IxQzQxQkIxMUYwQjQ1NkQ4NTdDNEY5QUUwMi9qTkdRb1VPcUxo NUljd094UGNCVDdSZTg2eDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiD0YnQ/DS39L9HqKhexDiLeMGBbkcKwp16r4Hj1FnR8w/L3I43vl+eF6ImFF yKHEyJu79sVgno9pbQIWzi81FFhegBkc5i2dolq2FXgiabUtQjZbimgqrXf5n0b6 nUgaj5418SOISQGDKsV+6uQsY3alU/RLBODgNW7mlEVWuBK5F4J42IMD0hMn6B6d SLNAB33yAHvYxQcE61R2j3ozwUTJqr2M7oMBLiMHeJzJU+5YBLu3AkWFNA9gamkp /H9oLPHVBkXVeaQlvVxM5v4sK5Lvq9OIeseiug6TDPPKGNMbzkVf/ZICIeWe/DL9 Si5P6IdvPUw70PYaQ1QonfRYVA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:18 2026 by rpki-client