$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft File: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft (raw, json) Hash identifier: sKIoI9lTBTr8xcgrCK87LpMK0Q8aMJuMdmrX447ACso= Subject key identifier: 1C:52:53:2F:5D:CC:9F:2D:0C:6B:15:D2:13:74:1B:3A:35:D1:73:E4 Authority key identifier: E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 Certificate issuer: /CN=A91C8790/serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft Manifest number: 0588 Signing time: Mon 27 Jul 2026 00:11:47 +0000 Manifest this update: Mon 27 Jul 2026 00:11:46 +0000 Manifest next update: Mon 03 Aug 2026 00:11:46 +0000 Files and hashes: 1: 5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl (hash: d4upaf2Nm0nQ3HICfh5jD7/lGZDMzGQFd7075IK6CDc=) 2: BA7E6B1A30B911EC974C3830C4F9AE02.roa (hash: xxqSemGox4kEl/WxL9eirDeCZylY2NkVCa0+GT9iexI=) 3: CA24F21C6DE711F180D709405CA30FBC.roa (hash: Oyiw752YkZ+aWMvYkiVvYpwM7PpYiOLSODbco0Yd+e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8790, serialNumber=E5A4D4F9560B5B5C5C5FE4D061B4B881C8D22352 Validity Not Before: Jul 27 00:11:46 2026 GMT Not After : Aug 3 00:11:46 2026 GMT Subject: CN=6a66a243-a0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:13:8a:c3:af:f6:cb:ff:c5:50:20:45:54:ee: bf:6e:3e:23:28:61:49:a6:2f:b8:4e:60:9e:53:24: 93:6c:90:da:5b:4f:2c:66:33:65:f5:71:bd:8d:ea: d4:34:4f:9c:20:b8:2d:1d:69:cb:30:c5:4e:fa:f7: 38:e6:94:8b:b0:20:77:8f:c3:41:33:69:5a:10:1d: 83:ad:f7:d9:6c:69:8a:8d:30:f7:76:40:c1:b8:23: 87:df:f4:9e:f5:42:e7:47:1b:44:af:83:3b:24:e3: ad:32:c4:8d:32:48:85:38:83:4b:a1:0c:06:84:e9: 47:1a:c3:7d:6e:3c:5c:0c:86:7a:7f:cd:05:98:34: a7:f8:43:c6:d3:7c:bc:4d:61:74:df:d8:6b:98:0b: 45:97:1f:cf:a4:78:2f:d4:38:38:66:1d:3b:d5:ad: 0b:01:88:00:a9:ba:0c:6a:88:43:4d:be:6e:36:6d: e8:79:09:74:d4:5f:c8:41:63:98:c7:b5:9c:22:a1: df:7e:76:f9:cf:b0:c3:94:3d:9f:ec:6e:a4:a2:38: 46:1d:7f:46:01:53:23:aa:de:4a:fb:dc:cc:40:60: 38:a6:52:e0:b2:c0:4c:a5:00:69:5f:c7:02:db:8e: 3e:62:0d:9e:2e:01:1d:bd:ae:e8:eb:e6:fe:87:82: 47:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:52:53:2F:5D:CC:9F:2D:0C:6B:15:D2:13:74:1B:3A:35:D1:73:E4 X509v3 Authority Key Identifier: keyid:E5:A4:D4:F9:56:0B:5B:5C:5C:5F:E4:D0:61:B4:B8:81:C8:D2:23:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5aTU-VYLW1xcX-TQYbS4gcjSI1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8790/33FE362630B711EC9B02942DC4F9AE02/5aTU-VYLW1xcX-TQYbS4gcjSI1I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:5d:76:14:d9:bb:87:3a:ee:78:e5:60:e1:26:0e:16:ff:60: 6d:0b:eb:43:4b:3b:ba:08:13:c1:14:11:c7:e9:4a:cb:f7:9d: 19:ef:54:3b:9d:8a:75:b7:f9:4e:6a:fa:da:5d:e4:50:c8:3e: 46:60:84:be:9f:d6:a1:28:b4:86:99:5d:2e:78:8f:ae:43:c3: 2c:2a:ba:e1:74:1d:bc:c9:f6:eb:a6:85:05:9c:2d:04:32:e5: cd:2c:e5:c8:e5:4d:c5:3b:92:ab:ac:a5:3e:ed:b1:f8:fe:0d: fc:31:01:70:fb:14:2b:fe:6b:b3:83:06:d8:4e:f4:11:e2:6e: dd:34:a4:0f:f1:ff:a0:14:0d:f9:f3:3a:3e:eb:0d:5a:78:2e: 9f:8b:ac:f8:00:9a:a4:ff:b4:cb:f9:b1:1c:f1:2d:ca:e5:15: d5:09:e0:ae:bb:63:c2:61:c6:54:b6:a0:03:3b:a3:a1:7d:76: 1a:4a:47:26:92:81:b0:c8:e8:dc:87:6b:95:ba:99:6b:83:7a: 78:97:75:bd:1e:dd:54:07:07:a2:71:50:08:73:ee:da:3d:7c: e1:cb:48:84:c0:38:d3:61:ae:2a:b0:ec:4e:32:d7:35:21:a8: 58:4c:40:f7:61:06:1a:4e:24:f3:da:70:57:e0:98:70:ec:52: cb:c2:b4:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg3OTAxMTAvBgNVBAUTKEU1QTRENEY5NTYwQjVCNUM1QzVGRTREMDYxQjRCODgx QzhEMjIzNTIwHhcNMjYwNzI3MDAxMTQ2WhcNMjYwODAzMDAxMTQ2WjAYMRYwFAYD VQQDEw02YTY2YTI0My1hMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApROKw6/2y//FUCBFVO6/bj4jKGFJpi+4TmCeUySTbJDaW08sZjNl9XG9jerU NE+cILgtHWnLMMVO+vc45pSLsCB3j8NBM2laEB2DrffZbGmKjTD3dkDBuCOH3/Se 9ULnRxtEr4M7JOOtMsSNMkiFOINLoQwGhOlHGsN9bjxcDIZ6f80FmDSn+EPG03y8 TWF039hrmAtFlx/PpHgv1Dg4Zh071a0LAYgAqboMaohDTb5uNm3oeQl01F/IQWOY x7WcIqHffnb5z7DDlD2f7G6kojhGHX9GAVMjqt5K+9zMQGA4plLgssBMpQBpX8cC 244+Yg2eLgEdva7o6+b+h4JHOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxSUy9d zJ8tDGsV0hN0Gzo10XPkMB8GA1UdIwQYMBaAFOWk1PlWC1tcXF/k0GG0uIHI0iNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODc5MC8zM0ZFMzYyNjMw QjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcxeGNYLVRRWWJTNGdjalNJ MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVhVFUtVllMVzF4Y1gtVFFZYlM0Z2NqU0kxSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODc5MC8zM0ZFMzYyNjMwQjcxMUVDOUIwMjk0MkRDNEY5QUUwMi81YVRVLVZZTFcx eGNYLVRRWWJTNGdjalNJMUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxV12FNm7hzrueOVg4SYOFv9gbQvrQ0s7uggTwRQRx+lKy/edGe9UO52Kdbf5 Tmr62l3kUMg+RmCEvp/WoSi0hpldLniPrkPDLCq64XQdvMn266aFBZwtBDLlzSzl yOVNxTuSq6ylPu2x+P4N/DEBcPsUK/5rs4MG2E70EeJu3TSkD/H/oBQN+fM6PusN Wngun4us+ACapP+0y/mxHPEtyuUV1QngrrtjwmHGVLagAzujoX12GkpHJpKBsMjo 3IdrlbqZa4N6eJd1vR7dVAcHonFQCHPu2j184ctIhMA402GuKrDsTjLXNSGoWExA 92EGGk4k89pwV+CYcOxSy8K04w== -----END CERTIFICATE-----Generated at Wed Jul 29 01:17:49 2026 by rpki-client