$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft File: dddb2lG8oAYPcIETI0xBReREQho.mft (raw, json) Hash identifier: vCdeS802ap0tdYfOg39gE46Njg6MRMpzMLUagokN6VQ= Subject key identifier: 03:24:27:A9:D0:5D:AE:15:80:90:E0:E5:A6:4F:9C:E0:0F:50:0C:40 Authority key identifier: 75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A Certificate issuer: /CN=A91CBB48/serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Certificate serial: 0932 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft Manifest number: 0925 Signing time: Tue 28 Jul 2026 20:35:33 +0000 Manifest this update: Tue 28 Jul 2026 20:35:32 +0000 Manifest next update: Tue 04 Aug 2026 20:35:32 +0000 Files and hashes: 1: dddb2lG8oAYPcIETI0xBReREQho.crl (hash: r6ZGVXtBACwXtQb4hEbvAGVscqO/Fq8XCym3RyKJvxE=) 2: 96AC80A2CBB411EA99BB9A4DC4F9AE02.roa (hash: 4jcjYW/0FMetLdx19LfkYx1V1hLHWxOLQGODOyvAQC0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2354 (0x932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBB48, serialNumber=75D75BDA51BCA0060F708113234C4145E444421A Validity Not Before: Jul 28 20:35:32 2026 GMT Not After : Aug 4 20:35:32 2026 GMT Subject: CN=6a691294-5399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:83:3f:86:a4:c7:93:2c:92:52:a4:0b:3f: c0:b6:29:b6:9e:be:75:56:be:71:8c:21:fb:46:db: 3f:39:2f:85:d2:aa:23:fc:30:d4:47:17:cc:23:db: ef:d3:74:a1:78:a9:cc:4a:70:a8:88:af:2e:4f:7f: b9:5e:79:1e:66:e4:29:d9:20:3f:9e:37:36:9e:de: 9d:bd:4a:77:e4:81:9c:4d:09:2e:d6:37:fc:9a:0e: 9a:e4:19:9e:ef:0a:42:a8:ff:4c:11:5f:21:f6:0e: 84:af:e6:ae:3f:be:44:31:f3:0a:d4:04:58:59:a7: aa:82:8d:fe:3c:0e:bb:c0:d1:30:d7:f3:f1:86:c8: 6d:85:b2:33:82:1d:54:c6:81:49:32:b4:05:e9:2d: 5d:2f:df:16:4e:1f:e8:1b:b0:70:9e:28:aa:7c:6e: 12:0a:75:ee:1c:7d:44:e9:8a:61:1c:fe:24:bb:b6: ac:bf:c2:bd:93:d1:b8:35:31:e4:95:ce:15:78:84: 35:48:47:42:a5:ca:0e:ad:52:27:da:6c:8b:1a:09: 53:57:a4:e5:47:93:c0:49:b4:b4:af:36:68:64:e4: 91:4c:62:48:e3:d6:3b:31:95:7c:dd:8b:bd:2a:23: f1:c6:e2:8a:39:5a:3c:1a:ca:ed:85:38:e0:65:e9: 84:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:24:27:A9:D0:5D:AE:15:80:90:E0:E5:A6:4F:9C:E0:0F:50:0C:40 X509v3 Authority Key Identifier: keyid:75:D7:5B:DA:51:BC:A0:06:0F:70:81:13:23:4C:41:45:E4:44:42:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dddb2lG8oAYPcIETI0xBReREQho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBB48/90C4791CCBB211EAA0CA6A4AC4F9AE02/dddb2lG8oAYPcIETI0xBReREQho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:cd:58:d8:44:1e:c4:53:41:dd:81:16:09:40:7b:b0:5a:97: c0:76:bf:e8:61:c9:e2:89:ca:18:72:d8:0c:9a:0d:d4:0e:21: 9b:ab:01:e8:3a:43:66:ed:e6:90:dd:91:d4:96:f1:5c:99:e5: 2f:05:ca:d3:57:35:cc:63:92:24:69:06:15:27:65:9e:64:3e: 4c:98:77:23:b9:9a:c5:ce:d7:a0:00:ee:5f:e8:0c:f7:29:91: a2:e4:27:8e:62:22:b5:d6:ab:b7:c7:66:f9:21:10:2f:47:f4: 1d:98:6b:b3:a4:87:06:99:f7:a6:02:ea:a0:71:5f:63:43:10: e5:a8:c0:94:9b:17:53:9c:89:70:06:82:be:a6:a1:9e:3e:fa: f4:da:2d:da:f7:11:20:5e:e7:ce:42:2d:2a:b0:6d:36:f0:6e: 68:f1:4a:8f:68:e0:a2:50:a7:5d:e6:6b:a3:be:17:a9:1d:89: 46:c9:f3:12:ab:7d:7c:c6:4d:6a:73:a2:fe:5a:b6:4a:0c:10: 0d:61:19:cb:c0:4c:90:dc:3e:99:24:0a:ff:65:00:be:0c:aa: 3c:7d:ff:f8:51:49:ac:dc:4b:0c:35:70:1e:4f:0b:af:43:96: 5d:e8:ef:62:ad:cf:49:50:8e:5c:48:73:c3:21:e8:6a:98:9f: 7e:52:7a:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JCNDgxMTAvBgNVBAUTKDc1RDc1QkRBNTFCQ0EwMDYwRjcwODExMzIzNEM0MTQ1 RTQ0NDQyMUEwHhcNMjYwNzI4MjAzNTMyWhcNMjYwODA0MjAzNTMyWjAYMRYwFAYD VQQDEw02YTY5MTI5NC01Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyCDP4akx5MsklKkCz/Atim2nr51Vr5xjCH7Rts/OS+F0qoj/DDURxfMI9vv 03SheKnMSnCoiK8uT3+5XnkeZuQp2SA/njc2nt6dvUp35IGcTQku1jf8mg6a5Bme 7wpCqP9MEV8h9g6Er+auP75EMfMK1ARYWaeqgo3+PA67wNEw1/PxhshthbIzgh1U xoFJMrQF6S1dL98WTh/oG7BwniiqfG4SCnXuHH1E6YphHP4ku7asv8K9k9G4NTHk lc4VeIQ1SEdCpcoOrVIn2myLGglTV6TlR5PASbS0rzZoZOSRTGJI49Y7MZV83Yu9 KiPxxuKKOVo8GsrthTjgZemExQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAMkJ6nQ Xa4VgJDg5aZPnOAPUAxAMB8GA1UdIwQYMBaAFHXXW9pRvKAGD3CBEyNMQUXkREIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkI0OC85MEM0NzkxQ0NC QjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9BWVBjSUVUSTB4QlJlUkVR aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RkZGIybEc4b0FZUGNJRVRJMHhCUmVSRVFoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkI0OC85MEM0NzkxQ0NCQjIxMUVBQTBDQTZBNEFDNEY5QUUwMi9kZGRiMmxHOG9B WVBjSUVUSTB4QlJlUkVRaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoM1Y2EQexFNB3YEWCUB7sFqXwHa/6GHJ4onKGHLYDJoN1A4hm6sB6DpDZu3m kN2R1JbxXJnlLwXK01c1zGOSJGkGFSdlnmQ+TJh3I7maxc7XoADuX+gM9ymRouQn jmIitdart8dm+SEQL0f0HZhrs6SHBpn3pgLqoHFfY0MQ5ajAlJsXU5yJcAaCvqah nj769Not2vcRIF7nzkItKrBtNvBuaPFKj2jgolCnXeZro74XqR2JRsnzEqt9fMZN anOi/lq2SgwQDWEZy8BMkNw+mSQK/2UAvgyqPH3/+FFJrNxLDDVwHk8Lr0OWXejv Yq3PSVCOXEhzwyHoapifflJ6PA== -----END CERTIFICATE-----Generated at Wed Jul 29 00:32:07 2026 by rpki-client