$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft File: y1McHsaSJfDcrkTOyl41mAzpwPI.mft (raw, json) Hash identifier: BwlEOyVDNdZttF1trPH2Yx0XTl5BRMvwgJ5hiEdXRjg= Subject key identifier: 7D:49:BF:6A:27:70:E3:80:32:AB:B1:87:61:07:EF:3E:A6:95:0B:7A Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 Certificate issuer: /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft Manifest number: DB Signing time: Mon 27 Jul 2026 08:46:59 +0000 Manifest this update: Mon 27 Jul 2026 08:46:58 +0000 Manifest next update: Mon 03 Aug 2026 08:46:58 +0000 Files and hashes: 1: y1McHsaSJfDcrkTOyl41mAzpwPI.crl (hash: jM8TH/Nn3pTL7zjtsltJY0iTGoQ6qVts6BCqghSdlSE=) 2: BB8F3118497B11F096DCA14EC4F9AE02.roa (hash: 54rNaHs3BHHyTMIFPvOgY9u0ai10wJmM8WXV532IDWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Validity Not Before: Jul 27 08:46:58 2026 GMT Not After : Aug 3 08:46:58 2026 GMT Subject: CN=6a671b03-8540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:cc:f1:a3:3b:8c:3d:91:a2:69:af:f2:31: 9b:6f:c8:ab:fe:47:bf:ef:1c:fd:df:ed:cd:18:fe: a7:e5:59:b0:fe:83:44:dd:bd:0f:83:8c:d2:09:e1: 57:f3:35:8e:1c:63:38:94:11:33:04:41:f1:41:40: 7c:24:45:3c:f7:d9:b4:8f:70:1f:27:58:b3:0d:ff: 35:09:13:1c:d2:3d:ef:a9:68:0b:5b:b5:25:d7:ec: 38:b5:b5:9d:25:97:76:1e:1d:d3:aa:2a:77:0c:80: 02:2b:dd:08:6e:2c:0e:7b:e4:90:6d:33:e0:dd:82: a4:c7:de:37:5c:4d:41:2b:e3:6b:5a:76:bc:c0:5b: 15:b4:8b:5d:e8:f8:f8:8a:81:9e:31:7f:0c:2e:11: c9:f6:94:cf:2f:05:4e:b9:21:93:9e:4e:75:b3:cc: bd:74:c2:72:33:e2:38:f9:7c:aa:62:84:4f:39:9e: 09:b7:07:79:3b:80:97:2b:75:a7:65:5f:ba:4b:fd: e9:96:11:33:99:cc:11:ef:95:5e:6e:7c:54:86:83: 4f:ac:2c:7d:8f:0d:d3:0a:b8:e9:b4:cb:67:12:a5: b6:5d:6e:91:b0:67:14:d6:b0:d3:2f:7b:bb:23:36: d9:89:de:25:33:da:79:6e:99:81:7f:67:10:04:88: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:49:BF:6A:27:70:E3:80:32:AB:B1:87:61:07:EF:3E:A6:95:0B:7A X509v3 Authority Key Identifier: keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5d:fa:48:fb:2e:80:76:67:de:b6:97:82:97:cd:94:52:85: 0e:36:bc:33:16:a1:10:d1:80:77:cb:b2:15:d0:4f:e4:cf:be: 64:7a:9f:01:de:72:21:81:42:35:78:bf:65:65:dc:49:33:51: 52:9e:e0:96:aa:3f:fa:47:fe:6e:d5:97:2b:fc:66:2c:7b:b7: 1d:1a:69:e8:e7:d2:0c:1a:37:5a:b5:95:ab:bb:b1:df:57:08: b2:74:71:2b:4f:fe:0f:61:a8:05:f4:5d:42:f8:b1:42:c3:4f: de:7f:1f:28:30:86:22:16:53:41:ea:a7:ca:be:d5:15:13:44: 37:2a:aa:ce:e4:44:f5:c4:8d:05:0b:f0:a2:0c:b9:81:98:4d: 61:8e:40:59:f2:07:af:4c:ab:c1:70:c1:ff:a6:23:7b:e2:7e: e3:48:1c:92:d9:25:b5:ab:04:bf:64:ff:c3:e5:93:58:35:78: f8:a8:36:93:a8:bc:53:6f:65:cf:f9:99:0a:d6:be:5c:b6:b6: 88:89:0f:0f:af:2c:61:d6:fa:e3:2a:52:35:10:22:68:52:12: 92:e2:56:a6:72:fa:22:7b:c6:f5:6e:5f:ae:83:34:fd:f4:76: b9:22:04:2e:84:6b:27:49:4c:02:37:1e:8a:26:8a:9b:65:17: 09:b6:ad:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKENCNTMxQzFFQzY5MjI1RjBEQ0FFNDRDRUNBNUUzNTk4 MENFOUMwRjIwHhcNMjYwNzI3MDg0NjU4WhcNMjYwODAzMDg0NjU4WjAYMRYwFAYD VQQDEw02YTY3MWIwMy04NTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuM3M8aM7jD2Rommv8jGbb8ir/ke/7xz93+3NGP6n5Vmw/oNE3b0Pg4zSCeFX 8zWOHGM4lBEzBEHxQUB8JEU899m0j3AfJ1izDf81CRMc0j3vqWgLW7Ul1+w4tbWd JZd2Hh3Tqip3DIACK90IbiwOe+SQbTPg3YKkx943XE1BK+NrWna8wFsVtItd6Pj4 ioGeMX8MLhHJ9pTPLwVOuSGTnk51s8y9dMJyM+I4+XyqYoRPOZ4Jtwd5O4CXK3Wn ZV+6S/3plhEzmcwR75VebnxUhoNPrCx9jw3TCrjptMtnEqW2XW6RsGcU1rDTL3u7 IzbZid4lM9p5bpmBf2cQBIi6YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1Jv2on cOOAMquxh2EH7z6mlQt6MB8GA1UdIwQYMBaAFMtTHB7GkiXw3K5EzspeNZgM6cDy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9GNURCN0ExNjQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi95MU1jSHNhU0pmRGNya1RPeWw0MW1BenB3 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxTWNIc2FTSmZEY3JrVE95bDQxbUF6cHdQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9GNURCN0ExNjQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi95MU1jSHNhU0pm RGNya1RPeWw0MW1BenB3UEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAe136SPsugHZn3raXgpfNlFKFDja8MxahENGAd8uyFdBP5M++ZHqfAd5yIYFC NXi/ZWXcSTNRUp7glqo/+kf+btWXK/xmLHu3HRpp6OfSDBo3WrWVq7ux31cIsnRx K0/+D2GoBfRdQvixQsNP3n8fKDCGIhZTQeqnyr7VFRNENyqqzuRE9cSNBQvwogy5 gZhNYY5AWfIHr0yrwXDB/6Yje+J+40gcktkltasEv2T/w+WTWDV4+Kg2k6i8U29l z/mZCta+XLa2iIkPD68sYdb64ypSNRAiaFISkuJWpnL6InvG9W5froM0/fR2uSIE LoRrJ0lMAjceiiaKm2UXCbatwA== -----END CERTIFICATE-----Generated at Tue Jul 28 19:26:02 2026 by rpki-client