$ rpki-client -vvf rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft File: 64sK0sB2YghSy8N4kOZK1Aa0ieg.mft (raw, json) Hash identifier: JBIykumHrRhy7ky9DELDEQuB6x/bt/PlSghktPhAxM4= Subject key identifier: 85:85:32:7F:4B:AF:C7:78:CE:13:BA:5B:CD:59:4C:DC:4B:96:9E:4E Authority key identifier: EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 Certificate issuer: /CN=A91C72B1/serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Certificate serial: 0DF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft Manifest number: 0DE8 Signing time: Tue 28 Jul 2026 17:59:55 +0000 Manifest this update: Tue 28 Jul 2026 17:59:55 +0000 Manifest next update: Tue 04 Aug 2026 17:59:55 +0000 Files and hashes: 1: 64sK0sB2YghSy8N4kOZK1Aa0ieg.crl (hash: 1kVivg/r9ieyFumMpaI+kubfwt/UjctPn8zW+GTobZ8=) 2: 6714424C3C9111EA9416CA78C4F9AE02.roa (hash: wM4jTVSXdRa49wS3QCPAkcV9PaMIwDAgOcfWtEI5Jsg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3573 (0xdf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C72B1, serialNumber=EB8B0AD2C076620852CBC37890E64AD406B489E8 Validity Not Before: Jul 28 17:59:55 2026 GMT Not After : Aug 4 17:59:55 2026 GMT Subject: CN=6a68ee1b-125d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d9:6a:94:61:16:37:a3:ba:c0:55:83:66:1b: e3:16:e9:fb:c6:f4:98:dc:08:94:00:1a:b9:da:9e: ae:89:b5:b0:75:22:58:a3:59:ba:56:c5:56:34:2c: bb:2e:16:da:ff:4c:1a:88:01:db:97:7d:a8:ed:d3: c3:7a:98:07:4b:7f:75:1a:34:b5:9f:93:47:29:78: 53:34:5c:b2:17:0f:f5:dc:87:30:87:05:72:75:35: 77:81:f1:8e:28:0b:4c:5f:cb:27:67:74:4a:91:c4: f0:43:1f:31:b2:16:54:47:84:53:7e:46:21:43:0d: a4:83:cf:1a:c3:71:6c:bc:d9:3a:6d:a5:41:03:ed: 02:5e:cb:93:14:a9:18:d8:41:2a:ad:0f:29:0a:44: 6c:48:58:1f:de:0f:e4:df:f8:99:96:71:31:85:79: a6:b9:3a:b6:9a:01:e8:63:c6:e6:09:8b:9c:12:68: c5:94:ce:b2:0e:cf:8f:54:e9:bc:a5:37:f8:14:30: 6a:8e:bf:b6:8d:2d:a0:72:64:13:20:0e:13:57:7f: b4:11:de:53:db:8a:11:d0:cd:2f:1b:de:50:62:a3: 3f:43:87:f1:6c:28:04:2d:96:1b:f5:42:2e:cf:82: 20:07:ff:e0:cf:35:ed:07:7a:f7:02:c2:7f:93:ea: 66:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:85:32:7F:4B:AF:C7:78:CE:13:BA:5B:CD:59:4C:DC:4B:96:9E:4E X509v3 Authority Key Identifier: keyid:EB:8B:0A:D2:C0:76:62:08:52:CB:C3:78:90:E6:4A:D4:06:B4:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64sK0sB2YghSy8N4kOZK1Aa0ieg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C72B1/2A45F980DEC911E9AAA7EC33C4F9AE02/64sK0sB2YghSy8N4kOZK1Aa0ieg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:de:2b:83:cc:ca:2f:79:eb:e5:e6:70:b3:df:11:53:68:41: 00:05:b6:3c:b9:5c:3f:11:52:87:3c:05:05:8a:d7:95:46:dc: 9b:5a:31:06:ef:8a:bd:b8:0f:4f:0e:4f:8b:3f:64:44:87:72: ed:54:be:ac:bd:1b:3c:7a:af:ee:c3:95:17:8e:e8:06:87:12: 7d:d0:3c:88:33:fc:78:63:04:dd:5c:ec:96:06:31:de:23:4a: 0b:42:e4:a4:02:ad:9d:ef:ac:48:25:40:d2:ad:da:5f:36:b1: 55:7a:ec:70:8b:9a:b5:9c:bd:bf:82:c0:1c:e4:02:0c:0d:a8: d7:f1:7d:8e:24:11:f1:e4:a0:7d:35:c2:32:06:30:3a:97:dd: 4b:12:6d:bd:ea:02:c6:b7:fa:c7:81:5d:2d:2f:7a:07:82:ea: d4:ac:85:86:01:3c:49:06:65:1a:e9:b2:05:4b:8b:4f:fc:51: 38:6c:c0:f1:21:ef:2c:13:06:2f:b1:d3:98:3b:a7:10:e8:a2: 7b:7d:c6:87:d5:52:bb:f7:db:30:d4:7b:c8:f8:12:1b:08:45: 88:7e:11:21:45:03:e2:b2:97:65:f0:f7:ce:93:2d:15:ab:4d: 7b:58:fe:da:54:c8:3f:19:3e:30:68:89:62:5f:01:8d:29:7c: c1:95:53:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcyQjExMTAvBgNVBAUTKEVCOEIwQUQyQzA3NjYyMDg1MkNCQzM3ODkwRTY0QUQ0 MDZCNDg5RTgwHhcNMjYwNzI4MTc1OTU1WhcNMjYwODA0MTc1OTU1WjAYMRYwFAYD VQQDEw02YTY4ZWUxYi0xMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9lqlGEWN6O6wFWDZhvjFun7xvSY3AiUABq52p6uibWwdSJYo1m6VsVWNCy7 Lhba/0waiAHbl32o7dPDepgHS391GjS1n5NHKXhTNFyyFw/13IcwhwVydTV3gfGO KAtMX8snZ3RKkcTwQx8xshZUR4RTfkYhQw2kg88aw3FsvNk6baVBA+0CXsuTFKkY 2EEqrQ8pCkRsSFgf3g/k3/iZlnExhXmmuTq2mgHoY8bmCYucEmjFlM6yDs+PVOm8 pTf4FDBqjr+2jS2gcmQTIA4TV3+0Ed5T24oR0M0vG95QYqM/Q4fxbCgELZYb9UIu z4IgB//gzzXtB3r3AsJ/k+pmgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIWFMn9L r8d4zhO6W81ZTNxLlp5OMB8GA1UdIwQYMBaAFOuLCtLAdmIIUsvDeJDmStQGtIno MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzJCMS8yQTQ1Rjk4MERF QzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMllnaFN5OE40a09aSzFBYTBp ZWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0c0swc0IyWWdoU3k4TjRrT1pLMUFhMGllZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzJCMS8yQTQ1Rjk4MERFQzkxMUU5QUFBN0VDMzNDNEY5QUUwMi82NHNLMHNCMlln aFN5OE40a09aSzFBYTBpZWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKN4rg8zKL3nr5eZws98RU2hBAAW2PLlcPxFShzwFBYrXlUbcm1oxBu+KvbgP Tw5Piz9kRIdy7VS+rL0bPHqv7sOVF47oBocSfdA8iDP8eGME3VzslgYx3iNKC0Lk pAKtne+sSCVA0q3aXzaxVXrscIuatZy9v4LAHOQCDA2o1/F9jiQR8eSgfTXCMgYw OpfdSxJtveoCxrf6x4FdLS96B4Lq1KyFhgE8SQZlGumyBUuLT/xROGzA8SHvLBMG L7HTmDunEOiie33Gh9VSu/fbMNR7yPgSGwhFiH4RIUUD4rKXZfD3zpMtFatNe1j+ 2lTIPxk+MGiJYl8BjSl8wZVTUw== -----END CERTIFICATE-----Generated at Wed Jul 29 02:05:38 2026 by rpki-client