$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft File: _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json) Hash identifier: Sia03Bv01WwMdYbvBOUOTquNrv2MtLwWmcfYlLJms84= Subject key identifier: D8:E8:4C:BF:ED:04:CE:39:CA:04:F3:D9:02:B7:83:85:9D:61:EE:3B Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 Certificate issuer: /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Certificate serial: 35A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft Manifest number: 3587 Signing time: Tue 28 Jul 2026 14:31:17 +0000 Manifest this update: Tue 28 Jul 2026 14:31:16 +0000 Manifest next update: Tue 04 Aug 2026 14:31:16 +0000 Files and hashes: 1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: S2rpjybQOqQcC2E1IzOa90Wru1CZvYUUFHSZciJxJQ0=) 2: BFABA2D6BECE11F0B218C045C4F9AE02.roa (hash: /QkgzfATlH/sUZdlcC1kixai5w0E/QTcB6zQhhCEKdA=) 3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: vc754wKZ9fTuYsd5eWhSpeKuauP2yCgdWc//OMaJAOo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13735 (0x35a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635 Validity Not Before: Jul 28 14:31:16 2026 GMT Not After : Aug 4 14:31:16 2026 GMT Subject: CN=6a68bd35-40a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1f:98:5f:f2:2d:96:26:6d:e4:92:13:42:93: fe:af:a5:82:53:2e:a5:a5:3d:b0:56:cf:32:ba:5d: f5:cd:dd:30:bb:9b:73:70:3e:42:0e:db:03:b9:1e: 6e:28:97:b8:3b:9c:6f:79:21:65:43:6a:92:9f:1d: 43:5b:93:93:a1:d0:13:f3:bb:be:9e:13:88:4c:c8: f5:bc:ca:7c:a1:fb:fc:63:19:b0:a4:f0:7c:da:5d: 6b:68:7f:4c:bb:5f:31:fa:c0:f9:d3:2b:42:b4:09: 83:89:cd:95:aa:3d:9e:9f:82:29:c6:a9:da:5b:2d: 49:9d:c7:ef:ac:e9:36:73:4d:d1:65:9a:d7:5d:56: ec:71:39:49:70:db:da:2a:af:85:e3:a2:74:90:a8: 2a:e3:4f:9d:9a:af:0c:44:01:14:d8:9a:9e:01:71: 6a:2e:20:de:77:6d:f1:47:2f:a2:74:af:f1:f3:76: 6e:b9:38:6f:3a:23:1d:e5:09:62:a8:94:58:3e:a1: 32:27:98:cd:0f:62:9f:03:ac:de:87:97:ba:f1:a4: a4:e3:42:f8:1b:71:17:e9:98:f1:91:63:62:ef:b0: b9:9f:47:de:52:7e:0c:7b:a8:ee:a6:ba:da:4f:3b: aa:76:18:55:54:8c:81:7a:df:5d:ba:d2:08:8a:d5: cb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E8:4C:BF:ED:04:CE:39:CA:04:F3:D9:02:B7:83:85:9D:61:EE:3B X509v3 Authority Key Identifier: keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:1e:0d:71:85:7e:10:55:7c:30:92:63:fb:a5:9e:ae:bf:dc: fe:21:67:65:1e:63:d3:b0:d2:d6:f8:94:b2:9e:8c:6b:0a:9d: 71:a2:e4:e5:3c:6b:78:07:09:19:a3:7c:d8:1d:b1:62:2e:01: 81:cb:41:ad:b9:86:91:41:32:9f:4b:d5:21:74:41:29:bd:9e: 1a:fe:72:8d:ea:d7:f2:12:66:83:d3:8d:a7:7d:cf:0c:3c:ba: 93:01:31:31:54:23:25:02:46:76:ba:49:ee:2b:78:ea:3f:b8: a1:13:a5:83:d0:0f:9d:43:14:1b:bb:68:05:37:f7:02:32:93: 5c:17:70:01:21:f7:72:f5:b8:a3:7e:65:27:98:b7:e2:87:e1: c7:35:49:ee:89:3c:28:15:d1:a7:f4:70:e7:5a:ea:75:cb:ff: 59:e3:ac:8e:b4:97:96:e5:e2:c9:95:b3:10:8b:1d:30:f2:39: 87:7e:2c:1c:eb:22:1c:f5:b2:c1:c8:f1:04:d8:47:21:ce:55: 66:5d:62:7d:9b:56:40:aa:67:0d:f2:5d:2e:38:af:b8:73:0a: d5:15:b3:f4:95:94:39:ef:f3:41:52:2f:37:dc:01:67:d0:6c: 57:f2:dc:88:f7:76:fe:d3:52:b5:00:bc:68:09:bb:e9:35:fa: 0c:f5:5d:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNacwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF QjIwODI2MzUwHhcNMjYwNzI4MTQzMTE2WhcNMjYwODA0MTQzMTE2WjAYMRYwFAYD VQQDEw02YTY4YmQzNS00MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjR+YX/ItliZt5JITQpP+r6WCUy6lpT2wVs8yul31zd0wu5tzcD5CDtsDuR5u KJe4O5xveSFlQ2qSnx1DW5OTodAT87u+nhOITMj1vMp8ofv8YxmwpPB82l1raH9M u18x+sD50ytCtAmDic2Vqj2en4IpxqnaWy1JncfvrOk2c03RZZrXXVbscTlJcNva Kq+F46J0kKgq40+dmq8MRAEU2JqeAXFqLiDed23xRy+idK/x83ZuuThvOiMd5Qli qJRYPqEyJ5jND2KfA6zeh5e68aSk40L4G3EX6ZjxkWNi77C5n0feUn4Me6juprra TzuqdhhVVIyBet9dutIIitXLuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNjoTL/t BM45ygTz2QK3g4WdYe47MB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx MDdHWFJ4c0VFX0hySUlKalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFR4NcYV+EFV8MJJj+6Werr/c/iFnZR5j07DS1viUsp6MawqdcaLk5TxreAcJ GaN82B2xYi4BgctBrbmGkUEyn0vVIXRBKb2eGv5yjerX8hJmg9ONp33PDDy6kwEx MVQjJQJGdrpJ7it46j+4oROlg9APnUMUG7toBTf3AjKTXBdwASH3cvW4o35lJ5i3 4ofhxzVJ7ok8KBXRp/Rw51rqdcv/WeOsjrSXluXiyZWzEIsdMPI5h34sHOsiHPWy wcjxBNhHIc5VZl1ifZtWQKpnDfJdLjivuHMK1RWz9JWUOe/zQVIvN9wBZ9BsV/Lc iPd2/tNStQC8aAm76TX6DPVdDw== -----END CERTIFICATE-----Generated at Wed Jul 29 12:29:02 2026 by rpki-client