$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: t57NggzyFLDKAxEhqs210giioz+0mcKKCt1Z3KwZIBs= Subject key identifier: EF:97:96:54:6E:24:C6:03:85:64:A8:04:63:87:C9:2D:B6:BC:9B:3C Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 0258 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 024A Signing time: Mon 27 Jul 2026 03:54:19 +0000 Manifest this update: Mon 27 Jul 2026 03:54:19 +0000 Manifest next update: Mon 03 Aug 2026 03:54:19 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: zK5xDccVnL2EZT0fOK/Yc7dZHaEPeZ+g0331SE8dhfg=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: ZuQdvo3O3mwgbl46FNxheRRrkq5c13FZ1QLKqfjZUX8=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: PPUG38GrYc1pSvAs42aCMPByXIt0IlvrGE9mP2N9xD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Jul 27 03:54:19 2026 GMT Not After : Aug 3 03:54:19 2026 GMT Subject: CN=6a66d66b-155e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:67:ae:71:dc:fb:e2:87:8c:b9:82:5c:3e:f4: 78:b1:c8:c9:a2:e7:91:ea:c6:23:b2:e8:92:a5:fa: b7:72:5e:92:3f:5d:92:eb:49:8f:d9:75:18:89:77: 2b:24:51:2d:ee:b6:58:41:9b:1e:fc:e9:6e:7c:ad: 38:d1:ae:4d:21:e1:32:56:f0:63:69:2a:d4:fa:3c: ee:5a:cb:65:c4:51:c0:3a:d7:44:85:d0:3c:95:25: 8b:80:12:4f:08:33:48:62:87:80:82:79:29:ba:2a: 17:5d:a8:2f:95:00:c0:59:60:05:a4:2a:1a:dd:ba: d6:52:c4:68:78:39:72:c7:4a:2b:b3:ef:c9:a1:db: c0:70:cf:1d:34:44:30:25:17:ab:30:53:4f:96:b3: 04:21:7c:83:d1:5f:f4:80:48:e6:43:d0:1d:74:bc: f6:a1:61:21:96:4e:6e:de:84:1f:f2:5d:52:68:8f: 8d:72:a5:fe:30:77:cc:46:2e:b5:09:c6:de:5f:b7: e3:00:c6:ea:fd:6c:cc:77:a6:93:89:f6:c0:e4:92: 3e:bf:b0:25:24:fa:c5:e9:df:02:79:3d:39:17:54: ca:3e:4e:07:e1:e3:a4:ba:4a:5e:f8:ad:80:35:97: ad:fb:34:ab:b6:2c:4e:b5:06:1d:bc:6b:66:db:30: a5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:97:96:54:6E:24:C6:03:85:64:A8:04:63:87:C9:2D:B6:BC:9B:3C X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:73:0a:71:75:cd:52:95:e9:f8:8c:77:29:74:e9:c2:2a:28: b0:c0:a6:9d:4a:12:4c:ea:47:6a:16:f8:97:7a:bc:8a:d6:4a: 24:d1:09:a2:72:42:88:71:eb:ce:21:9a:05:3d:7d:7b:a4:d6: 4b:84:eb:52:e4:b7:b0:ff:50:a4:b9:b9:b5:62:cc:bc:26:8c: a7:7e:99:67:44:c8:fe:1c:7e:f1:bc:9a:d2:52:30:b3:c5:17: 8d:11:00:94:45:ba:c4:24:2b:fb:a0:3e:19:ec:17:af:59:4e: 81:ad:0c:71:a3:52:83:a6:e8:91:db:aa:72:5a:87:4e:7d:23: 66:27:8e:bf:ce:54:95:e4:7b:fb:97:8f:f0:06:70:6d:c9:66: aa:87:8d:ca:73:50:19:18:b7:7d:aa:75:15:b8:d9:97:57:14: ba:5e:0f:67:4a:5f:67:e6:ba:b7:72:64:a3:8e:a5:83:d2:d4: 37:2a:90:73:00:72:e8:c4:df:23:36:52:14:a0:2a:83:bb:4c: 06:d1:35:e9:9f:fc:40:69:bf:f6:1f:24:7a:0e:41:41:e2:11: 49:93:b8:1f:02:c0:93:73:48:b3:ae:af:31:26:b4:97:b2:f0: 1b:39:ff:9e:c0:d8:d1:32:51:70:9d:ed:6d:12:9e:48:ec:39: fc:ee:2d:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjYwNzI3MDM1NDE5WhcNMjYwODAzMDM1NDE5WjAYMRYwFAYD VQQDEw02YTY2ZDY2Yi0xNTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWeucdz74oeMuYJcPvR4scjJoueR6sYjsuiSpfq3cl6SP12S60mP2XUYiXcr JFEt7rZYQZse/OlufK040a5NIeEyVvBjaSrU+jzuWstlxFHAOtdEhdA8lSWLgBJP CDNIYoeAgnkpuioXXagvlQDAWWAFpCoa3brWUsRoeDlyx0ors+/JodvAcM8dNEQw JRerMFNPlrMEIXyD0V/0gEjmQ9AddLz2oWEhlk5u3oQf8l1SaI+NcqX+MHfMRi61 CcbeX7fjAMbq/WzMd6aTifbA5JI+v7AlJPrF6d8CeT05F1TKPk4H4eOkukpe+K2A NZet+zSrtixOtQYdvGtm2zCl2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO+XllRu JMYDhWSoBGOHyS22vJs8MB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATXMKcXXNUpXp+Ix3KXTpwioosMCmnUoSTOpHahb4l3q8itZKJNEJonJCiHHr ziGaBT19e6TWS4TrUuS3sP9QpLm5tWLMvCaMp36ZZ0TI/hx+8bya0lIws8UXjREA lEW6xCQr+6A+GewXr1lOga0McaNSg6bokduqclqHTn0jZieOv85UleR7+5eP8AZw bclmqoeNynNQGRi3fap1FbjZl1cUul4PZ0pfZ+a6t3Jko46lg9LUNyqQcwBy6MTf IzZSFKAqg7tMBtE16Z/8QGm/9h8keg5BQeIRSZO4HwLAk3NIs66vMSa0l7LwGzn/ nsDY0TJRcJ3tbRKeSOw5/O4t9w== -----END CERTIFICATE-----Generated at Tue Jul 28 21:38:24 2026 by rpki-client