$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: je9u94nVMRV/pdq16NzBRU4pXgbWMP4E0D7YFBJOZ9A= Subject key identifier: DC:AB:0A:16:8A:C1:F3:93:3B:98:C5:D8:14:DF:33:AF:3F:40:9E:BC Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0E98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0E8D Signing time: Tue 28 Jul 2026 17:51:31 +0000 Manifest this update: Tue 28 Jul 2026 17:51:30 +0000 Manifest next update: Tue 04 Aug 2026 17:51:30 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: WPVPIEhkEfUsxW6Fh/faJk++7OLXwyBo6NNQQSc6O2A=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: o6Xw5xLS8YVW62CrGPTjvjmk2nm6Ne1ncHaH7pEqVM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:32:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3736 (0xe98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Jul 28 17:51:30 2026 GMT Not After : Aug 4 17:51:30 2026 GMT Subject: CN=6a68ec23-a434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:88:29:9c:ca:ad:83:23:ba:7e:87:a9:98:eb: df:17:00:72:66:ab:a3:02:40:e4:ae:ea:f9:c4:61: 5c:eb:6c:69:97:69:5a:15:5c:14:98:06:f0:af:90: 18:73:7b:23:4a:f6:65:10:c8:90:d3:a0:a1:19:7c: b4:41:93:3b:9c:52:94:f5:4c:6d:47:49:79:67:64: e9:e8:1f:92:9f:b6:c3:8a:76:c4:1d:4c:8c:14:03: ef:da:20:00:9f:43:fa:65:6e:c2:b5:bd:30:32:13: 6f:58:0e:1e:df:cf:be:24:de:fe:38:b4:ed:42:1e: ff:6f:8a:14:af:cf:fd:8e:e9:1a:c6:b9:09:e8:33: f2:a0:55:78:4b:10:4d:c4:83:97:51:1c:30:5a:b0: 69:69:d1:1f:e6:b7:e3:0d:e2:05:2a:e2:2c:bf:b1: 5b:a7:40:6a:fe:10:07:1d:1a:ef:af:cf:2f:4d:82: ba:a3:5d:f3:44:0b:e5:df:5a:f7:b5:db:65:10:e3: 1e:bb:59:76:ba:c4:ff:a7:6d:c5:bc:e5:a6:0c:74: 47:de:46:e3:0e:0e:b5:73:0e:32:13:f8:91:fe:76: 02:82:4b:35:10:63:75:01:a5:38:60:ca:6e:c8:47: 1a:a4:7c:89:eb:1d:fc:6a:00:7e:05:d7:65:9d:f0: dc:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AB:0A:16:8A:C1:F3:93:3B:98:C5:D8:14:DF:33:AF:3F:40:9E:BC X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:6a:68:00:38:d4:df:49:7e:53:c2:20:44:98:93:a7:82:8e: 7b:6a:e5:b4:31:56:3e:37:ec:b0:a4:a5:74:b2:c9:87:3c:1d: 64:b8:2d:93:98:8b:33:47:42:43:49:f3:cb:63:36:95:21:c7: 7b:08:c4:70:28:80:46:a4:74:0d:d1:76:ab:17:89:3e:65:51: df:00:2d:6d:2a:77:a0:fd:2a:62:6e:4f:59:fe:41:0e:51:00: 25:09:cc:ce:96:c2:80:e1:6b:14:37:30:9c:97:e7:9e:d7:f1: dc:3d:81:4e:32:9b:a6:0a:05:32:ad:f3:ac:0f:14:bd:a4:25: a2:83:5d:09:86:2c:52:aa:b0:61:52:2d:f1:b9:2d:99:49:58: 09:76:aa:76:68:db:8a:f3:82:ec:8f:24:ae:30:2a:51:57:c9: 56:19:b1:4e:05:62:3a:d1:bc:c0:a6:a3:15:65:61:49:a1:6a: 89:f1:ab:21:b4:10:2b:b8:27:8d:97:ce:d3:65:38:f1:7f:e0: 40:18:53:92:ee:0b:aa:ba:ff:1a:c6:56:68:c4:86:df:56:d3: df:64:4f:49:9f:64:0d:5c:1c:f1:78:b8:0b:0e:56:7f:c5:6f: 11:1f:9d:d0:4a:d8:75:65:74:7b:05:07:9b:39:2b:17:0c:cf: 5b:c9:ea:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjYwNzI4MTc1MTMwWhcNMjYwODA0MTc1MTMwWjAYMRYwFAYD VQQDEw02YTY4ZWMyMy1hNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04gpnMqtgyO6foepmOvfFwByZqujAkDkrur5xGFc62xpl2laFVwUmAbwr5AY c3sjSvZlEMiQ06ChGXy0QZM7nFKU9UxtR0l5Z2Tp6B+Sn7bDinbEHUyMFAPv2iAA n0P6ZW7Ctb0wMhNvWA4e38++JN7+OLTtQh7/b4oUr8/9jukaxrkJ6DPyoFV4SxBN xIOXURwwWrBpadEf5rfjDeIFKuIsv7Fbp0Bq/hAHHRrvr88vTYK6o13zRAvl31r3 tdtlEOMeu1l2usT/p23FvOWmDHRH3kbjDg61cw4yE/iR/nYCgks1EGN1AaU4YMpu yEcapHyJ6x38agB+BddlnfDclwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNyrChaK wfOTO5jF2BTfM68/QJ68MB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAa2poADjU30l+U8IgRJiTp4KOe2rltDFWPjfssKSldLLJhzwdZLgtk5iLM0dC Q0nzy2M2lSHHewjEcCiARqR0DdF2qxeJPmVR3wAtbSp3oP0qYm5PWf5BDlEAJQnM zpbCgOFrFDcwnJfnntfx3D2BTjKbpgoFMq3zrA8UvaQlooNdCYYsUqqwYVIt8bkt mUlYCXaqdmjbivOC7I8krjAqUVfJVhmxTgViOtG8wKajFWVhSaFqifGrIbQQK7gn jZfO02U48X/gQBhTku4Lqrr/GsZWaMSG31bT32RPSZ9kDVwc8Xi4Cw5Wf8VvER+d 0ErYdWV0ewUHmzkrFwzPW8nq+Q== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:12 2026 by rpki-client