$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json) Hash identifier: tffkoBXQoscLvDsOp71cavHunS/XLqp7qlZX+YDkS7s= Subject key identifier: B8:CB:1C:15:9A:4B:35:55:42:7C:EE:74:6C:75:FE:9C:09:99:3B:93 Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft Manifest number: 029B Signing time: Mon 27 Jul 2026 03:09:33 +0000 Manifest this update: Mon 27 Jul 2026 03:09:32 +0000 Manifest next update: Mon 03 Aug 2026 03:09:32 +0000 Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: 8mdP3vxAtZbjtuvIxGcHz61hKT61oLhvRXbjhZ5L+XQ=) 2: D8D317ACE7CE11F0AC86B9F45C6F56BC.roa (hash: 1IF3HCjLUpn5Rqg27GBvL6hXv6iteBjvIyKUpAO7Dio=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:09:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: Jul 27 03:09:32 2026 GMT Not After : Aug 3 03:09:32 2026 GMT Subject: CN=6a66cbed-787b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:7f:0e:4d:1a:62:2b:d6:ec:1c:d9:b6:b3: d1:0a:15:d3:1c:ba:aa:aa:d9:76:2e:bb:27:93:57: 00:de:88:bc:26:a3:89:e2:95:33:b8:c1:da:57:23: e5:f8:e2:8f:be:ab:d9:16:d2:d3:d0:90:8b:8e:37: f6:d7:87:2d:06:e4:78:b5:27:79:48:9b:ff:93:88: 65:80:2f:3b:5d:40:20:49:6d:e8:ce:1e:7f:a8:a8: 7b:0a:5b:e8:34:cb:92:64:0a:4d:ca:dd:4d:66:16: 43:4b:5a:a8:7c:1d:6d:fe:cf:f2:95:80:8c:1c:e3: 89:4d:84:7a:55:44:67:26:0f:0e:3b:aa:a7:59:a0: 59:a1:41:c4:ed:dd:be:66:76:04:0f:38:67:b7:3c: b7:5a:88:8e:f6:07:d2:25:a8:b8:7d:99:7b:18:9e: 5b:4d:48:cb:dd:b8:0b:0c:27:d0:85:30:df:63:da: a5:43:70:5f:e6:da:ac:c0:18:e0:cf:95:b4:cd:b7: 48:59:e7:fe:67:dc:6b:e5:4b:00:e8:c5:33:d2:47: 05:58:e8:1b:b1:9f:ae:34:d2:f0:c1:04:83:b7:cd: 8d:14:93:92:4e:e1:e9:cd:f6:d3:22:c8:2d:09:41: b9:b9:0c:60:9c:86:b6:ea:41:1a:e9:ab:94:86:8e: eb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CB:1C:15:9A:4B:35:55:42:7C:EE:74:6C:75:FE:9C:09:99:3B:93 X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:81:08:34:9b:71:67:3f:b3:92:04:48:80:ee:76:09:b7:93: cc:a2:3e:8d:73:99:9b:b6:1f:d2:db:5c:da:22:03:c4:35:99: 0c:0c:2b:30:21:b6:96:e0:25:bb:e2:b2:18:40:20:64:b0:1c: 02:ca:5f:d4:47:f1:ce:af:94:bf:4d:21:7f:f6:08:2b:85:ec: 1b:bc:89:29:c0:bc:de:c8:6b:b2:15:f6:48:ec:9a:36:13:83: 20:8f:59:2b:4b:8d:20:99:4a:d0:6f:bf:00:ce:dd:83:a4:5f: d3:38:37:15:01:9f:38:a6:d8:79:79:53:6d:be:06:8d:48:e3: 64:a3:44:1b:da:68:6d:8a:c5:73:fb:a5:ab:39:8f:da:7d:56: 4d:32:92:37:34:19:24:49:f1:da:e4:e5:08:fc:59:6e:b2:a2: 18:90:83:d5:b6:a0:65:1f:66:b7:54:e0:30:d7:5f:52:4d:e9: e5:4a:a5:ed:d8:be:5f:a8:a0:e7:c7:ae:ed:40:13:8f:37:51: cc:03:d7:49:80:1d:cc:45:dd:98:2f:28:e5:51:a9:df:41:b0: e1:04:45:3a:57:ff:23:c5:07:07:a4:42:fe:e3:54:26:24:09: f0:95:38:b6:b2:45:10:cd:8f:1a:b8:d4:5b:ff:10:6a:2e:39: c1:62:ef:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjYwNzI3MDMwOTMyWhcNMjYwODAzMDMwOTMyWjAYMRYwFAYD VQQDEw02YTY2Y2JlZC03ODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnK1/Dk0aYivW7BzZtrPRChXTHLqqqtl2Lrsnk1cA3oi8JqOJ4pUzuMHaVyPl +OKPvqvZFtLT0JCLjjf214ctBuR4tSd5SJv/k4hlgC87XUAgSW3ozh5/qKh7Clvo NMuSZApNyt1NZhZDS1qofB1t/s/ylYCMHOOJTYR6VURnJg8OO6qnWaBZoUHE7d2+ ZnYEDzhntzy3WoiO9gfSJai4fZl7GJ5bTUjL3bgLDCfQhTDfY9qlQ3Bf5tqswBjg z5W0zbdIWef+Z9xr5UsA6MUz0kcFWOgbsZ+uNNLwwQSDt82NFJOSTuHpzfbTIsgt CUG5uQxgnIa26kEa6auUho7rLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjLHBWa SzVVQnzudGx1/pwJmTuTMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y NkxRa0htZFkxQ25hRF9MbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPYEINJtxZz+zkgRIgO52CbeTzKI+jXOZm7Yf0ttc2iIDxDWZDAwrMCG2luAl u+KyGEAgZLAcAspf1Efxzq+Uv00hf/YIK4XsG7yJKcC83shrshX2SOyaNhODII9Z K0uNIJlK0G+/AM7dg6Rf0zg3FQGfOKbYeXlTbb4GjUjjZKNEG9pobYrFc/ulqzmP 2n1WTTKSNzQZJEnx2uTlCPxZbrKiGJCD1bagZR9mt1TgMNdfUk3p5Uql7di+X6ig 58eu7UATjzdRzAPXSYAdzEXdmC8o5VGp30Gw4QRFOlf/I8UHB6RC/uNUJiQJ8JU4 trJFEM2PGrjUW/8Qai45wWLvUA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:29:18 2026 by rpki-client