$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: KmMr9AQP0u9WSNqsb/gfzo4Iq7/xu3J2l4dSDvPtlbI= Subject key identifier: 96:C4:B0:4A:7A:DB:E2:02:37:78:4F:E6:F8:9E:15:8B:91:A3:2F:2E Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: 0153 Signing time: Mon 27 Jul 2026 07:02:32 +0000 Manifest this update: Mon 27 Jul 2026 07:02:32 +0000 Manifest next update: Mon 03 Aug 2026 07:02:32 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: j+gj0ntJ12XXlRtpMow3dWtO7CNYpLJlUE5cGXlbVic=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: VOtKNjMmkgJqiloUEhTwsaTLIqFH0cNEwhb31cZXP9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Jul 27 07:02:32 2026 GMT Not After : Aug 3 07:02:32 2026 GMT Subject: CN=6a670288-2c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:37:c7:75:2c:26:13:74:1e:5a:3a:16:17:29: 74:39:cf:9a:57:b6:4d:3a:2a:05:a4:1a:e2:64:85: 94:1a:21:77:7e:b7:ea:ee:4b:d8:96:cb:95:cd:b0: a5:22:97:3b:27:a8:38:cb:e0:fd:40:10:4c:1f:e5: 3c:62:03:5f:8b:97:67:d6:b6:42:5a:1d:22:ee:05: e1:c4:38:b8:98:91:16:1e:8f:f1:f0:74:fc:5d:b9: 3b:ea:a3:8c:c6:fc:27:ad:8d:c9:5c:f5:3a:eb:28: e4:ad:9f:8c:28:b0:42:5f:57:1a:4f:c4:2a:23:ff: f5:cb:60:46:93:b8:72:ca:e8:2f:3c:4d:19:0c:0d: 74:68:7a:b5:8a:8b:90:e1:09:8c:89:d3:98:03:45: b7:d3:0c:f6:68:c9:b2:41:20:d8:ba:bd:00:7b:15: 28:f7:e9:18:a6:40:73:33:bf:fa:84:f6:65:d7:ac: e8:7e:e5:28:ad:b7:d2:19:ae:e6:e3:33:50:56:2f: 41:06:c4:fd:f4:c6:5e:a8:65:08:c5:68:aa:79:cc: 47:a6:0e:52:a1:ec:a0:ad:bb:98:3b:df:d2:f8:7c: ab:ce:0b:0e:95:2d:5e:d9:7c:c5:b2:d4:d3:0a:d3: d5:99:3b:ee:c2:16:f0:0d:26:5e:f7:6d:93:87:76: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C4:B0:4A:7A:DB:E2:02:37:78:4F:E6:F8:9E:15:8B:91:A3:2F:2E X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:42:4d:e3:ae:77:bc:91:b4:e1:d6:ba:f1:e4:d4:18:83:22: b4:e1:c1:18:02:68:a8:0e:34:1a:8d:b0:ec:86:37:c7:5f:9a: f1:18:e9:a9:fb:1a:04:d3:69:31:57:1e:ed:4d:83:8c:a2:c0: b6:de:88:b9:35:11:fc:0d:84:85:5f:80:dc:61:a2:f8:14:aa: dc:d9:7e:8c:69:cb:18:dc:90:70:06:4a:bf:72:64:b1:cc:12: 22:3f:29:4b:68:62:3a:63:0f:8f:94:e7:c6:82:b2:e2:f5:fe: 25:6b:f2:65:ed:58:9b:13:42:26:67:6d:c2:29:c1:c1:c0:6e: 8f:51:4e:9d:18:05:48:d0:c6:67:63:79:de:60:b1:ed:fa:2a: f0:22:02:70:76:ab:ea:bf:1e:62:28:55:4b:fa:48:43:c3:66: d7:05:d0:50:f7:bb:b9:a8:e3:14:bf:ba:58:4d:41:7e:22:22: 41:0a:09:0f:d5:28:e2:e8:17:4d:c0:2a:32:c9:ff:d2:df:f6: a3:b1:9e:2a:36:bc:74:65:ad:57:56:a8:36:85:39:39:3f:a7: a4:d5:5e:58:59:88:43:02:01:58:db:dd:38:04:a4:d9:23:1a: fe:53:8b:b2:98:d7:85:4c:94:f1:92:a0:41:15:05:a2:f7:0e: 43:89:11:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4QUQxMTAvBgNVBAUTKEU5RjJDRTQ4M0YxQjA2RDI5RDVFQTJBQkUzNzVCRDFE MjJBOUUxQzQwHhcNMjYwNzI3MDcwMjMyWhcNMjYwODAzMDcwMjMyWjAYMRYwFAYD VQQDEw02YTY3MDI4OC0yYzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+DfHdSwmE3QeWjoWFyl0Oc+aV7ZNOioFpBriZIWUGiF3frfq7kvYlsuVzbCl Ipc7J6g4y+D9QBBMH+U8YgNfi5dn1rZCWh0i7gXhxDi4mJEWHo/x8HT8Xbk76qOM xvwnrY3JXPU66yjkrZ+MKLBCX1caT8QqI//1y2BGk7hyyugvPE0ZDA10aHq1iouQ 4QmMidOYA0W30wz2aMmyQSDYur0AexUo9+kYpkBzM7/6hPZl16zofuUorbfSGa7m 4zNQVi9BBsT99MZeqGUIxWiqecxHpg5SoeygrbuYO9/S+HyrzgsOlS1e2XzFstTT CtPVmTvuwhbwDSZe922Th3apHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbEsEp6 2+ICN3hP5vieFYuRoy8uMB8GA1UdIwQYMBaAFOnyzkg/GwbSnV6iq+N1vR0iqeHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC80OURFRUU2NDg1 RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0S2RYcUtyNDNXOUhTS3A0 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjhBRC80OURFRUU2NDg1RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0 S2RYcUtyNDNXOUhTS3A0Y1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZkJN4653vJG04da68eTUGIMitOHBGAJoqA40Go2w7IY3x1+a8RjpqfsaBNNp MVce7U2DjKLAtt6IuTUR/A2EhV+A3GGi+BSq3Nl+jGnLGNyQcAZKv3JkscwSIj8p S2hiOmMPj5TnxoKy4vX+JWvyZe1YmxNCJmdtwinBwcBuj1FOnRgFSNDGZ2N53mCx 7foq8CICcHar6r8eYihVS/pIQ8Nm1wXQUPe7uajjFL+6WE1BfiIiQQoJD9Uo4ugX TcAqMsn/0t/2o7GeKja8dGWtV1aoNoU5OT+npNVeWFmIQwIBWNvdOASk2SMa/lOL spjXhUyU8ZKgQRUFovcOQ4kRng== -----END CERTIFICATE-----Generated at Tue Jul 28 22:07:33 2026 by rpki-client