$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft File: Y3kC4bqWiB1HLuyt-kW1V348HDE.mft (raw, json) Hash identifier: wf/FC9EfDMVK9hWa1R7aUfMVp9gLaaqzl1Nlb89BFvQ= Subject key identifier: 0F:C0:3A:C1:30:A7:F9:2A:C0:D5:D2:1D:19:0C:13:82:31:EB:9F:AE Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft Manifest number: 01F8 Signing time: Mon 27 Jul 2026 04:50:52 +0000 Manifest this update: Mon 27 Jul 2026 04:50:52 +0000 Manifest next update: Mon 03 Aug 2026 04:50:52 +0000 Files and hashes: 1: Y3kC4bqWiB1HLuyt-kW1V348HDE.crl (hash: KjqQFdaoc2nvQmgKuXo7dijDz/1LUzE1XvtAVVBWmxk=) 2: FF1FE402898011EEB3403779C4F9AE02.roa (hash: esJHSwP5qiLnITDA6HOx8pEFmC6BOBPZgF6kgLGLSk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Jul 27 04:50:52 2026 GMT Not After : Aug 3 04:50:52 2026 GMT Subject: CN=6a66e3ac-346d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:52:38:78:5e:1e:26:c3:84:fc:65:57:57: f6:9d:7c:f2:4c:09:8b:80:8e:2f:3b:f5:f5:1e:2c: eb:89:ee:45:8a:87:c5:f0:97:b6:f5:dc:b1:68:f7: fe:80:56:a1:80:95:1c:07:11:ff:ee:e5:37:66:96: ab:67:78:23:a1:0a:e2:28:46:db:84:b8:77:f0:e4: 5c:c9:57:4f:9e:42:09:5a:00:41:8e:95:ad:f9:23: 49:3f:45:06:0a:e0:a9:87:c1:7b:2c:e3:ac:6c:95: 2c:eb:59:61:3a:fe:64:ec:01:a2:1e:56:01:8a:06: 17:19:4d:50:99:d9:66:cd:ad:1b:a8:8a:e6:9d:01: 27:86:da:ea:de:f2:3f:57:03:32:e8:78:0c:56:1f: 29:c0:6b:76:85:2e:28:fb:42:38:65:90:3a:fd:15: 7d:8f:0b:26:f5:98:09:41:6d:d2:0a:cb:14:c5:14: 17:00:11:a4:a3:ca:f7:26:b8:e4:6e:14:32:3d:11: 7e:07:11:af:26:e4:c2:25:5f:b2:d6:e8:9f:51:85: aa:ce:1b:2e:cf:95:43:31:30:55:b9:b1:59:64:e9: 35:91:0f:bb:c6:4f:90:a2:29:e7:a5:4f:d2:6f:06: 70:eb:94:7d:5b:4b:92:10:d7:ab:69:a6:5d:46:2d: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C0:3A:C1:30:A7:F9:2A:C0:D5:D2:1D:19:0C:13:82:31:EB:9F:AE X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:99:83:d9:98:db:f2:e7:14:f6:ef:32:2a:85:3b:e7:73:59: eb:58:08:e3:39:4f:4b:58:68:06:15:6b:48:e8:f8:8f:01:65: 0a:01:34:35:9e:23:d2:f7:ab:b0:cf:29:02:50:76:0a:f4:15: a8:b5:46:07:4b:1e:17:2d:75:d0:9e:1f:9a:42:8d:d3:c3:15: 98:d5:e1:08:f4:7f:7a:05:e7:9e:4a:cc:88:dc:49:0a:50:89: a5:3d:3c:dd:5e:e6:59:07:51:76:9a:90:35:73:ac:1e:c9:f5: d0:ea:7d:8c:45:32:a9:c2:ff:00:47:29:c2:43:de:26:2b:7e: 16:b3:c1:d1:8c:30:39:fa:e6:94:df:8c:f1:38:f3:9a:c9:d9: f1:68:fa:12:c4:15:f7:c4:d6:0c:35:e3:67:9b:cb:74:1a:e9: d3:2d:c2:a5:32:23:88:68:02:55:e5:94:70:7f:f4:99:bf:ab: f8:26:fa:52:ac:b7:27:8e:a7:92:67:db:2f:62:e5:75:fc:81: 99:e0:a6:82:6c:57:f5:df:5a:f0:73:2e:a1:3b:d9:ab:c2:24: 6c:85:fa:aa:29:f7:ae:71:72:f0:03:0b:84:f0:ab:22:72:5d: 5e:1c:bc:dc:d0:a7:a5:34:74:ed:e9:b6:c9:28:82:1d:33:00: 21:0f:e3:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjYwNzI3MDQ1MDUyWhcNMjYwODAzMDQ1MDUyWjAYMRYwFAYD VQQDEw02YTY2ZTNhYy0zNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnyNSOHheHibDhPxlV1f2nXzyTAmLgI4vO/X1Hizrie5FiofF8Je29dyxaPf+ gFahgJUcBxH/7uU3ZparZ3gjoQriKEbbhLh38ORcyVdPnkIJWgBBjpWt+SNJP0UG CuCph8F7LOOsbJUs61lhOv5k7AGiHlYBigYXGU1Qmdlmza0bqIrmnQEnhtrq3vI/ VwMy6HgMVh8pwGt2hS4o+0I4ZZA6/RV9jwsm9ZgJQW3SCssUxRQXABGko8r3Jrjk bhQyPRF+BxGvJuTCJV+y1uifUYWqzhsuz5VDMTBVubFZZOk1kQ+7xk+QoinnpU/S bwZw65R9W0uSENeraaZdRi3pVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA/AOsEw p/kqwNXSHRkME4Ix65+uMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUyNC8wQzJDMkJENjg4QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lC MUhMdXl0LWtXMVYzNDhIREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiJmD2Zjb8ucU9u8yKoU753NZ61gI4zlPS1hoBhVrSOj4jwFlCgE0NZ4j0ver sM8pAlB2CvQVqLVGB0seFy110J4fmkKN08MVmNXhCPR/egXnnkrMiNxJClCJpT08 3V7mWQdRdpqQNXOsHsn10Op9jEUyqcL/AEcpwkPeJit+FrPB0YwwOfrmlN+M8Tjz msnZ8Wj6EsQV98TWDDXjZ5vLdBrp0y3CpTIjiGgCVeWUcH/0mb+r+Cb6Uqy3J46n kmfbL2LldfyBmeCmgmxX9d9a8HMuoTvZq8IkbIX6qin3rnFy8AMLhPCrInJdXhy8 3NCnpTR07em2ySiCHTMAIQ/jBw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:09:34 2026 by rpki-client