$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft File: C33smHxhdR0-2h2_PnwipzoV3u0.mft (raw, json) Hash identifier: tiIejkhKWIfwCz/hw/ulxmtfICIeoLeagucGRrWtFLQ= Subject key identifier: 39:40:42:6A:E3:9D:09:07:6E:33:E1:3E:6E:FC:8E:14:EC:FC:81:9E Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED Certificate issuer: /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED Certificate serial: 05B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft Manifest number: 05AF Signing time: Mon 27 Jul 2026 00:02:00 +0000 Manifest this update: Mon 27 Jul 2026 00:01:59 +0000 Manifest next update: Mon 03 Aug 2026 00:01:59 +0000 Files and hashes: 1: C33smHxhdR0-2h2_PnwipzoV3u0.crl (hash: mw8/LtF2K9tUgaQU1ldwAz0KfiDcC7qDHf2Y2zqtUW8=) 2: 60A8F48A25D211ECB2CCF633C4F9AE02.roa (hash: 1OTKEgqlZnaKGpmz6oNBNrSZubeFhZS/c5pM2HU9abQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1464 (0x5b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED Validity Not Before: Jul 27 00:01:59 2026 GMT Not After : Aug 3 00:01:59 2026 GMT Subject: CN=6a669ff8-05da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:69:cb:62:35:9e:56:be:89:00:dd:71:20:f9: 08:b7:f1:0c:10:c1:92:3e:fe:bd:1e:7e:90:72:ca: 1e:db:5b:1a:9c:a7:06:66:f2:ab:e3:5c:80:a0:09: c5:30:2e:c4:98:8d:8c:ff:b6:c5:7d:26:a2:e3:83: bd:53:07:91:5b:74:ca:dd:d9:2c:0d:ee:aa:85:03: 9e:f3:f8:fd:16:a3:36:56:49:4a:4f:49:de:17:2c: 56:50:64:7a:cf:81:45:cb:6f:7a:5f:17:d1:ff:8f: 79:05:8c:0c:47:dd:b2:36:ab:b5:ac:4e:e0:c5:89: 4a:42:01:bd:a0:48:e0:d1:c3:cc:8c:bf:bf:47:37: 13:78:90:86:69:e2:00:c7:22:32:31:f5:54:b3:f0: 8f:d9:61:34:65:19:e4:a7:28:21:ed:10:c1:b9:dc: b3:82:29:37:c0:1d:56:92:39:7d:d8:a6:a1:19:f7: ce:d9:27:d4:de:01:bb:5a:ce:e8:48:de:25:15:82: 75:fa:77:7f:29:59:5c:3d:84:fa:a0:c0:8d:03:da: c8:27:e7:17:5b:88:47:e3:32:bf:c3:a9:d3:d1:56: 72:0c:24:af:68:b7:c6:3a:61:f9:97:4b:2d:75:2a: de:7d:b9:87:72:17:7f:8e:73:b2:c4:1f:d3:ca:50: fd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:40:42:6A:E3:9D:09:07:6E:33:E1:3E:6E:FC:8E:14:EC:FC:81:9E X509v3 Authority Key Identifier: keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a3:c6:ad:5d:02:70:1d:5b:95:61:03:1a:50:de:06:2f:95: 05:68:15:be:0e:a1:98:92:0f:4a:9d:3d:8f:54:75:78:ff:e2: b4:ef:b3:51:51:03:71:77:f0:17:aa:a8:45:56:b7:7b:d6:7c: 15:e5:31:f5:c6:ef:56:0d:0b:6e:76:9b:ed:1e:6b:3f:41:13: 10:af:45:eb:63:74:82:7e:35:59:f3:e5:5a:7e:d1:5f:01:6e: dc:d4:a4:e3:b9:18:e0:76:80:72:9a:61:63:4b:62:7b:04:ff: 0b:9a:89:d4:84:59:14:c5:0f:e5:60:b5:10:98:2d:70:8b:41: 0c:b3:59:b9:de:55:53:f7:dc:a3:a8:5a:25:3b:40:da:18:f8: 0c:f0:42:75:be:b8:d9:e9:c6:ef:1f:41:b8:f4:d1:21:49:24: 9c:14:66:53:02:8e:e2:2a:98:ea:a7:5e:9c:f1:15:5f:ca:28: bd:af:66:07:43:9b:9c:40:91:e7:3a:f4:4c:d5:bc:b9:72:9d: 66:fd:d0:02:0e:54:56:f8:ef:d8:f4:ed:08:c8:ef:c7:8c:cf: 16:9b:18:38:91:d6:82:13:95:46:d6:21:8e:15:8b:d5:97:d7: 55:2e:7d:48:5c:4e:11:80:45:57:38:6f:a4:e7:92:43:91:94: 4a:aa:0e:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNTcxMTAvBgNVBAUTKDBCN0RFQzk4N0M2MTc1MUQzRURBMURCRjNFN0MyMkE3 M0ExNURFRUQwHhcNMjYwNzI3MDAwMTU5WhcNMjYwODAzMDAwMTU5WjAYMRYwFAYD VQQDEw02YTY2OWZmOC0wNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GnLYjWeVr6JAN1xIPkIt/EMEMGSPv69Hn6Qcsoe21sanKcGZvKr41yAoAnF MC7EmI2M/7bFfSai44O9UweRW3TK3dksDe6qhQOe8/j9FqM2VklKT0neFyxWUGR6 z4FFy296XxfR/495BYwMR92yNqu1rE7gxYlKQgG9oEjg0cPMjL+/RzcTeJCGaeIA xyIyMfVUs/CP2WE0ZRnkpygh7RDBudyzgik3wB1Wkjl92KahGffO2SfU3gG7Ws7o SN4lFYJ1+nd/KVlcPYT6oMCNA9rIJ+cXW4hH4zK/w6nT0VZyDCSvaLfGOmH5l0st dSrefbmHchd/jnOyxB/TylD9NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDlAQmrj nQkHbjPhPm78jhTs/IGeMB8GA1UdIwQYMBaAFAt97Jh8YXUdPtodvz58Iqc6Fd7t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1Ny9GQ0MxOEExNDIw NEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRSMC0yaDJfUG53aXB6b1Yz dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MzM3NtSHhoZFIwLTJoMl9QbndpcHpvVjN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1Ny9GQ0MxOEExNDIwNEUxMUVDQjEzRUUxN0FDNEY5QUUwMi9DMzNzbUh4aGRS MC0yaDJfUG53aXB6b1YzdTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM6PGrV0CcB1blWEDGlDeBi+VBWgVvg6hmJIPSp09j1R1eP/itO+zUVEDcXfw F6qoRVa3e9Z8FeUx9cbvVg0Lbnab7R5rP0ETEK9F62N0gn41WfPlWn7RXwFu3NSk 47kY4HaAcpphY0tiewT/C5qJ1IRZFMUP5WC1EJgtcItBDLNZud5VU/fco6haJTtA 2hj4DPBCdb642enG7x9BuPTRIUkknBRmUwKO4iqY6qdenPEVX8oova9mB0ObnECR 5zr0TNW8uXKdZv3QAg5UVvjv2PTtCMjvx4zPFpsYOJHWghOVRtYhjhWL1ZfXVS59 SFxOEYBFVzhvpOeSQ5GUSqoOBQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:53 2026 by rpki-client