$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: GA9aN10l2/wJt6QmIUJz1RaJvDy9cDgX3QwSx9hZXnU= Subject key identifier: 86:23:E6:E0:90:43:C9:FE:AC:18:B0:B6:24:17:A5:33:77:D2:64:EA Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0267 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0253 Signing time: Mon 27 Jul 2026 03:45:01 +0000 Manifest this update: Mon 27 Jul 2026 03:45:00 +0000 Manifest next update: Mon 03 Aug 2026 03:45:00 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: jzdyl5GDSFkDDyiPUhpH7PfSLXUINxOmA/b8MytnBQ4=) 2: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: jxIjxLYPAa1qnB0jFN6nM/shPAzKUb5KsBQXc5gos7U=) 3: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: rm62Zobf+vSIv757GLuOQnassUi+6YwaOUBaAetb62A=) 4: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: DAgB41BSoNhh0yFXjuFcNCWHBOk0V20tJ49xk0mHkPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 615 (0x267) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Jul 27 03:45:00 2026 GMT Not After : Aug 3 03:45:00 2026 GMT Subject: CN=6a66d43c-6a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:20:0e:7e:fe:36:1d:b1:05:25:24:62:b7:4e: c8:10:8e:55:77:49:ae:c5:ae:56:34:94:4d:f7:a3: 95:47:ce:44:d7:09:51:71:e7:d8:4e:a7:0d:32:44: 03:8a:a7:bc:54:00:ff:75:25:0b:03:e8:85:c9:39: 5b:7e:d5:7e:d0:ac:bb:d9:38:31:48:ef:8f:55:86: bb:a4:e7:22:84:69:fa:6d:5f:01:e8:94:c7:b7:f9: a1:2d:23:88:b6:ae:f6:07:00:d6:c1:38:5a:63:92: 78:76:cf:37:61:c0:08:c5:ad:41:a9:1f:f7:2e:d3: 87:6f:a3:a2:a1:ea:12:4b:51:e8:b7:4a:06:5a:8f: 03:c5:73:8d:80:ee:03:cf:65:3f:99:fa:b3:99:76: 4c:c7:02:3f:5e:62:f3:0c:86:57:d1:e7:24:ec:2d: cf:37:7c:a2:63:20:55:da:d2:ff:aa:8c:1f:38:15: 4e:90:a9:eb:94:31:f9:2e:cd:91:7e:1c:5b:56:26: 2c:18:26:ac:2e:85:78:58:f1:a9:79:8d:d1:56:4f: af:41:23:3c:7b:96:80:ab:c3:bf:19:0e:0b:67:e5: cf:9e:a0:bf:24:cc:91:a0:6a:69:fe:20:55:0a:97: 3d:2e:b7:8b:b8:ef:be:22:11:99:b7:43:27:5c:23: 3e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:23:E6:E0:90:43:C9:FE:AC:18:B0:B6:24:17:A5:33:77:D2:64:EA X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:be:d2:81:2f:69:a6:4f:c6:b8:6b:54:53:54:85:f6:01:d7: 78:e6:f5:11:0f:2a:e8:75:8f:8d:49:b6:e6:a2:6f:a4:26:84: 00:b0:f4:45:84:3f:20:ce:09:4a:cf:0f:4c:b2:67:94:5b:43: fa:7f:08:36:58:47:f5:ea:17:b9:50:fa:77:c2:45:37:0f:c7: 56:ba:32:c7:94:88:fe:93:93:c7:e8:e5:5b:e4:ea:60:e9:81: 53:a6:57:66:f8:2c:80:b0:af:ac:23:34:96:c9:e3:7d:84:68: 5c:f9:f6:a2:ba:d0:15:47:6c:ae:07:db:e6:20:5f:42:85:76: a9:f3:d3:6f:60:0d:7f:05:6a:ce:e7:bd:18:3e:36:2d:aa:e2: 91:72:80:a0:27:1c:57:e1:b7:13:a5:45:d9:74:52:49:37:c5: 3e:ac:4e:92:87:0a:b6:18:48:46:6b:d9:97:9b:bf:d5:52:74: 53:28:db:b0:51:57:61:7e:09:e3:17:a7:08:bb:c8:8d:09:ac: 4e:cf:8e:62:fd:58:e6:51:2f:1a:c8:da:e4:f0:55:a0:f1:17: 7c:05:77:57:11:00:5b:f9:76:e3:5b:6a:a4:cc:ab:36:86:5e: 87:eb:78:63:bc:28:4d:d6:af:0c:70:60:d3:cc:89:fe:79:9f: 1f:3f:02:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwNzI3MDM0NTAwWhcNMjYwODAzMDM0NTAwWjAYMRYwFAYD VQQDEw02YTY2ZDQzYy02YTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqiAOfv42HbEFJSRit07IEI5Vd0muxa5WNJRN96OVR85E1wlRcefYTqcNMkQD iqe8VAD/dSULA+iFyTlbftV+0Ky72TgxSO+PVYa7pOcihGn6bV8B6JTHt/mhLSOI tq72BwDWwThaY5J4ds83YcAIxa1BqR/3LtOHb6OioeoSS1Hot0oGWo8DxXONgO4D z2U/mfqzmXZMxwI/XmLzDIZX0eck7C3PN3yiYyBV2tL/qowfOBVOkKnrlDH5Ls2R fhxbViYsGCasLoV4WPGpeY3RVk+vQSM8e5aAq8O/GQ4LZ+XPnqC/JMyRoGpp/iBV Cpc9LreLuO++IhGZt0MnXCM+zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIYj5uCQ Q8n+rBiwtiQXpTN30mTqMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHb7SgS9ppk/GuGtUU1SF9gHXeOb1EQ8q6HWPjUm25qJvpCaEALD0RYQ/IM4J Ss8PTLJnlFtD+n8INlhH9eoXuVD6d8JFNw/HVroyx5SI/pOTx+jlW+TqYOmBU6ZX ZvgsgLCvrCM0lsnjfYRoXPn2orrQFUdsrgfb5iBfQoV2qfPTb2ANfwVqzue9GD42 LarikXKAoCccV+G3E6VF2XRSSTfFPqxOkocKthhIRmvZl5u/1VJ0UyjbsFFXYX4J 4xenCLvIjQmsTs+OYv1Y5lEvGsja5PBVoPEXfAV3VxEAW/l241tqpMyrNoZeh+t4 Y7woTdavDHBg08yJ/nmfHz8CrA== -----END CERTIFICATE-----Generated at Wed Jul 29 02:45:15 2026 by rpki-client