$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: DF3AewbCpPtC75g2YeY3/OTXssilbiepleMr9hfAZqI= Subject key identifier: 12:5F:EC:F1:C7:C3:0E:80:E3:33:79:AD:84:B9:89:2B:3F:46:FE:E3 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 08A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 0896 Signing time: Sun 26 Jul 2026 21:15:27 +0000 Manifest this update: Sun 26 Jul 2026 21:15:26 +0000 Manifest next update: Sun 02 Aug 2026 21:15:26 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: W89pOzMKVvbUORxvbd37SyZ8hP8njPNyIrZAR1Wr32M=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: amf5yXNl2Dgr3AOxZkSrfGo/rK5Q2TPmeviiMZD4ZqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2211 (0x8a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Jul 26 21:15:26 2026 GMT Not After : Aug 2 21:15:26 2026 GMT Subject: CN=6a6678ef-1320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:25:7a:f3:80:6f:fe:74:dc:95:93:17:f6:4c: 82:8d:6c:60:52:f7:d7:80:d9:fa:8a:4c:df:c5:f6: 0f:43:1d:98:0a:e1:b9:f2:73:32:ed:79:df:35:79: 46:0f:2c:e8:b1:b0:34:49:e6:cf:06:c6:ab:98:96: 64:29:40:5e:0b:66:46:2b:cf:12:35:e9:5e:77:82: fd:6b:23:4e:c5:a2:59:6c:0f:b3:2d:a2:4a:7f:7d: 75:04:05:a8:89:48:84:26:9d:68:db:cf:a3:89:9a: a7:85:0d:fa:a8:dc:99:10:9d:7a:d3:df:5f:fa:d0: 36:1d:c9:c9:7c:11:99:49:f0:06:48:03:0f:8d:aa: c9:72:72:0b:7b:29:1e:80:ca:5d:b6:9f:1c:15:74: 9c:59:52:f4:e8:90:14:bc:63:16:5d:7b:7f:a7:2a: a3:24:96:b7:ed:ce:96:81:74:ce:f2:0c:19:81:1a: b8:c6:f1:ce:a3:38:54:ce:f6:9c:89:3e:cb:82:37: 91:74:3c:11:2d:1e:48:32:53:f2:4e:df:08:e8:61: fd:01:51:72:d8:91:82:0a:c0:5b:10:fd:80:c0:96: e6:bf:f1:a0:2b:8f:4d:f5:8f:cb:ea:37:31:78:dc: f8:33:79:ef:e5:c9:06:bd:b0:ec:95:04:81:8b:0e: 83:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5F:EC:F1:C7:C3:0E:80:E3:33:79:AD:84:B9:89:2B:3F:46:FE:E3 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6d:d9:59:8a:ea:db:02:52:a7:54:fd:45:80:b2:86:b8:3d: 46:0f:70:71:d0:19:74:0f:51:9a:dc:bd:5e:8a:fe:37:1e:42: 6e:98:b6:9c:fd:3f:e7:76:fb:71:8a:ec:0c:ad:ad:46:aa:fb: fe:db:43:de:fc:f9:95:60:73:ce:7f:ec:f9:88:14:78:e5:cd: 16:ba:bd:a3:71:98:d4:40:ad:e0:58:94:d3:54:78:1d:8e:f1: 49:d6:58:9a:85:57:3c:dd:13:34:7b:93:d4:c3:84:40:f8:3c: 0b:df:40:d0:7e:f0:e1:d0:ba:51:0a:f0:a8:80:23:b9:95:ff: 2a:49:30:ed:9a:c4:46:4b:9c:4e:10:35:d5:95:8c:44:32:64: d5:36:aa:9f:7c:de:8a:b9:67:40:26:93:e0:5b:3f:af:27:4e: 02:fd:95:19:c2:8d:d7:94:7b:1b:d9:f2:0f:26:60:a3:2c:b7: d7:02:8d:dc:20:cd:f6:32:9e:5c:1e:9d:78:27:51:0d:f1:21: 2b:7b:11:fd:03:62:d2:e4:5a:80:36:db:70:ab:dc:9a:04:51: 4a:21:e8:7e:40:6e:9f:4c:f5:93:72:9e:8f:72:af:45:bf:04: 2a:a2:dc:93:27:5c:49:06:a8:2c:34:39:e4:ec:98:5b:d6:68: da:e2:f7:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjYwNzI2MjExNTI2WhcNMjYwODAyMjExNTI2WjAYMRYwFAYD VQQDEw02YTY2NzhlZi0xMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniV684Bv/nTclZMX9kyCjWxgUvfXgNn6ikzfxfYPQx2YCuG58nMy7XnfNXlG DyzosbA0SebPBsarmJZkKUBeC2ZGK88SNeled4L9ayNOxaJZbA+zLaJKf311BAWo iUiEJp1o28+jiZqnhQ36qNyZEJ16099f+tA2HcnJfBGZSfAGSAMPjarJcnILeyke gMpdtp8cFXScWVL06JAUvGMWXXt/pyqjJJa37c6WgXTO8gwZgRq4xvHOozhUzvac iT7LgjeRdDwRLR5IMlPyTt8I6GH9AVFy2JGCCsBbEP2AwJbmv/GgK49N9Y/L6jcx eNz4M3nv5ckGvbDslQSBiw6DgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJf7PHH ww6A4zN5rYS5iSs/Rv7jMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhm3ZWYrq2wJSp1T9RYCyhrg9Rg9wcdAZdA9Rmty9Xor+Nx5Cbpi2nP0/53b7 cYrsDK2tRqr7/ttD3vz5lWBzzn/s+YgUeOXNFrq9o3GY1ECt4FiU01R4HY7xSdZY moVXPN0TNHuT1MOEQPg8C99A0H7w4dC6UQrwqIAjuZX/Kkkw7ZrERkucThA11ZWM RDJk1Taqn3zeirlnQCaT4Fs/rydOAv2VGcKN15R7G9nyDyZgoyy31wKN3CDN9jKe XB6deCdRDfEhK3sR/QNi0uRagDbbcKvcmgRRSiHofkBun0z1k3Kej3KvRb8EKqLc kydcSQaoLDQ55OyYW9Zo2uL3tQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:22:47 2026 by rpki-client