$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft File: g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json) Hash identifier: 7TRuhL0EHvcPDHeENUEePKywF65F8oFmppzyc1qi4dc= Subject key identifier: F6:BB:9D:1D:2B:E6:42:C5:64:23:7E:7E:60:E2:56:4A:A9:B2:ED:D3 Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Certificate serial: 08D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft Manifest number: 08BD Signing time: Sun 26 Jul 2026 21:07:32 +0000 Manifest this update: Sun 26 Jul 2026 21:07:31 +0000 Manifest next update: Sun 02 Aug 2026 21:07:31 +0000 Files and hashes: 1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: rPigKbwWIWY8JF8y7qefItUskxmTA5NzHzyu/sTqlJk=) 2: 1229795E652C11EB9B039023C4F9AE02.roa (hash: GJUGEPZQBd+of4IF8rrVMeNhftE2HSnPOO2CkzhhVYM=) 3: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: Agm1iHBSDHpN64vkTSxuS0Cc6JpxKn9+gu3qk14vA4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:07:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Validity Not Before: Jul 26 21:07:31 2026 GMT Not After : Aug 2 21:07:31 2026 GMT Subject: CN=6a667714-e987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ca:63:5d:08:db:7d:f0:24:90:ce:38:05:40: 3c:c8:83:24:e2:b0:29:6a:e2:df:d8:40:4e:10:23: 1b:69:6d:54:c4:c0:7e:a2:59:67:a0:5b:9c:4c:97: 89:e1:d8:60:9c:f9:14:10:fc:18:f9:12:ab:aa:b2: ca:91:20:5b:05:d1:ef:0a:1a:d3:3a:82:e0:a3:7b: b7:8c:c3:48:63:9c:1a:56:30:09:a2:a4:53:cb:ce: b7:ab:99:82:55:21:a2:47:72:43:63:77:47:73:94: 9f:c0:91:d8:16:78:ab:4d:9c:65:3f:24:33:1c:4e: ba:91:86:9d:6a:f7:7c:9b:ee:1e:78:0f:15:95:18: 3b:b3:cc:d5:d2:93:bf:ad:ac:ec:11:03:5b:16:37: 5e:d2:7e:df:5a:0e:bd:2a:72:e7:65:30:d1:23:fb: df:a3:23:29:ae:b1:8f:86:64:ee:d9:25:4f:c5:18: 81:c9:ce:da:30:15:07:01:33:76:d0:e8:14:ec:fa: b9:96:0c:ae:76:4f:33:9c:88:60:0c:2b:a8:e3:a3: 75:70:29:8c:3b:c1:b5:49:89:78:a8:20:5f:c7:a9: 9b:3a:4e:ab:98:5c:50:3e:26:53:7b:9a:1d:c1:fd: e0:97:2c:42:21:12:41:4d:6c:7d:99:5c:5b:d9:28: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BB:9D:1D:2B:E6:42:C5:64:23:7E:7E:60:E2:56:4A:A9:B2:ED:D3 X509v3 Authority Key Identifier: keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:06:a9:af:48:ef:5b:de:d3:b9:cf:71:a9:12:3f:80:a1:01: 18:c3:70:03:ec:88:74:b7:a0:bb:9a:00:a5:b6:8e:a0:bf:f2: e6:c0:18:61:e9:a5:49:ba:b4:8c:08:5c:69:93:c2:f5:d3:a3: 5b:e3:44:a7:35:1a:88:f0:13:d0:d5:3e:99:71:c3:94:e2:11: 4e:05:02:15:9b:74:3c:08:96:fe:14:d1:1a:31:bc:c5:65:ad: 33:b1:45:ef:41:3f:a9:81:bb:36:ce:53:d9:f1:3d:ce:fa:ff: 93:97:27:a6:4e:41:ee:08:b9:c8:d2:ac:06:07:09:ae:5a:3f: 0a:d7:b8:79:d6:e8:f2:c9:31:97:f8:44:cc:0c:a9:6a:73:4e: 9d:6f:dc:5a:81:70:b0:01:e0:33:8e:45:6a:f9:13:e2:b1:b2: 6f:0c:f9:c0:dd:c6:8f:2a:91:40:d6:15:a5:aa:dc:f6:35:03: 3a:b0:4d:53:d8:13:10:51:3b:4c:6e:cb:da:11:e2:6b:d4:78: 33:47:d2:61:0e:b1:52:c6:5a:42:b2:e8:49:0c:a0:84:7a:95: 6e:72:2f:d9:60:7c:20:39:b5:e0:11:fa:1e:24:78:3e:2a:b5: 5d:54:20:d6:3d:6d:9b:12:5b:02:f2:a9:bd:67:35:31:65:dd: 4a:af:8f:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKDgzQUVGOTMxNTJCMjUwOENCQzgwQTM2MjdFM0EyN0U4 N0JDRkRFQ0EwHhcNMjYwNzI2MjEwNzMxWhcNMjYwODAyMjEwNzMxWjAYMRYwFAYD VQQDEw02YTY2NzcxNC1lOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2spjXQjbffAkkM44BUA8yIMk4rApauLf2EBOECMbaW1UxMB+ollnoFucTJeJ 4dhgnPkUEPwY+RKrqrLKkSBbBdHvChrTOoLgo3u3jMNIY5waVjAJoqRTy863q5mC VSGiR3JDY3dHc5SfwJHYFnirTZxlPyQzHE66kYadavd8m+4eeA8VlRg7s8zV0pO/ razsEQNbFjde0n7fWg69KnLnZTDRI/vfoyMprrGPhmTu2SVPxRiByc7aMBUHATN2 0OgU7Pq5lgyudk8znIhgDCuo46N1cCmMO8G1SYl4qCBfx6mbOk6rmFxQPiZTe5od wf3glyxCIRJBTWx9mVxb2ShJKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPa7nR0r 5kLFZCN+fmDiVkqpsu3TMB8GA1UdIwQYMBaAFIOu+TFSslCMvICjYn46J+h7z97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8yQ0IxMUZDRUYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJeThnS05pZmpvbjZIdlAz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c2NzVNVkt5VUl5OGdLTmlmam9uNkh2UDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8yQ0IxMUZDRUYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJ eThnS05pZmpvbjZIdlAzc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPwapr0jvW97Tuc9xqRI/gKEBGMNwA+yIdLegu5oApbaOoL/y5sAYYemlSbq0 jAhcaZPC9dOjW+NEpzUaiPAT0NU+mXHDlOIRTgUCFZt0PAiW/hTRGjG8xWWtM7FF 70E/qYG7Ns5T2fE9zvr/k5cnpk5B7gi5yNKsBgcJrlo/Cte4edbo8skxl/hEzAyp anNOnW/cWoFwsAHgM45FavkT4rGybwz5wN3GjyqRQNYVparc9jUDOrBNU9gTEFE7 TG7L2hHia9R4M0fSYQ6xUsZaQrLoSQyghHqVbnIv2WB8IDm14BH6HiR4Piq1XVQg 1j1tmxJbAvKpvWc1MWXdSq+PtQ== -----END CERTIFICATE-----Generated at Tue Jul 28 18:24:51 2026 by rpki-client