$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft File: U8lIF-sTZfHejDwrRAIjmIHBlD0.mft (raw, json) Hash identifier: UuqBSyo8brE80IXJEnCy/WJiEcLQhqvL4vfqdXvdIaI= Subject key identifier: C1:D9:04:9D:17:C3:FC:6F:5E:71:9D:D3:F5:6A:9F:F5:E9:DD:66:AA Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D Certificate issuer: /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Certificate serial: 0593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft Manifest number: 0572 Signing time: Mon 27 Jul 2026 00:22:09 +0000 Manifest this update: Mon 27 Jul 2026 00:22:08 +0000 Manifest next update: Mon 03 Aug 2026 00:22:08 +0000 Files and hashes: 1: U8lIF-sTZfHejDwrRAIjmIHBlD0.crl (hash: YVH+Re82UAhv0O+RlCbVsAgDctuURjRz5Xhn8d9Ob54=) 2: C9C70AEA696F11EFA4DA475FC4F9AE02.roa (hash: 593+o8elVRSxa1C/n0n+gLQTiowZqiqwRC7MRYiWVSc=) 3: C908B72A696F11EFA4DA475FC4F9AE02.roa (hash: W6dcDrB3RcselU+HE/a3UN93ZRWn0E/P0SOzXj78T2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1427 (0x593) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3307, serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Validity Not Before: Jul 27 00:22:08 2026 GMT Not After : Aug 3 00:22:08 2026 GMT Subject: CN=6a66a4b0-2105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:79:55:c1:0a:a2:48:da:aa:88:d9:e1:04: 8e:17:07:42:e0:10:07:f9:e5:20:6d:16:cc:60:a9: d7:95:5c:fc:ce:29:4f:ba:5d:40:8a:ab:ba:83:78: 0b:d6:05:17:1d:ce:5b:61:7a:04:1a:c6:9f:b5:62: 7e:83:bd:d8:8d:05:f4:71:1d:f0:d3:01:d5:d3:76: 76:35:23:ad:63:99:6b:93:f9:b9:ff:57:39:08:66: 98:e3:b6:d8:a7:6f:4c:af:92:2a:4d:0e:34:08:5e: 9d:d8:3c:de:a1:25:38:cd:89:9b:0e:c4:a8:7e:5b: ef:1d:bd:25:d1:b2:0f:05:90:3b:21:d7:8a:db:88: c3:6d:c1:bf:a5:75:ed:13:72:21:fe:42:fb:c4:01: 30:63:c7:45:3c:f8:34:44:49:4f:3c:79:cb:96:63: 85:6a:49:6c:3f:cc:53:5b:19:ad:36:39:f6:57:ad: 1f:9c:cf:32:72:eb:7b:45:43:11:5e:2e:28:fc:39: 00:a6:8a:b4:64:a6:b5:0e:12:ba:75:1d:b4:95:d5: d3:d4:2a:64:17:6b:e7:f7:82:40:12:4e:c7:e6:21: 65:7f:27:c3:31:68:30:1a:86:d4:1e:03:ae:6c:f7: 1d:a0:0b:61:c2:2c:e3:b2:d0:c5:1d:6a:b4:f2:b6: df:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D9:04:9D:17:C3:FC:6F:5E:71:9D:D3:F5:6A:9F:F5:E9:DD:66:AA X509v3 Authority Key Identifier: keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:97:0c:a1:f0:4f:31:ca:c1:54:59:d4:2c:eb:f5:19:3a:01: 61:95:3b:74:f9:05:99:a4:8d:3b:ee:85:48:7c:2c:39:f4:12: e7:e0:a8:63:7d:eb:48:ca:4e:39:b0:56:28:67:ad:2c:4d:3c: fb:16:cf:13:2e:5a:06:94:f1:4a:01:71:11:d6:1e:aa:a2:71: 20:31:23:70:5b:4b:08:24:82:99:73:30:56:b2:bd:52:6e:46: da:d1:dc:8a:16:56:a7:b8:44:ab:71:62:91:21:3d:7e:2f:81: 7c:75:0c:a0:b6:61:18:da:09:7c:e3:f0:f0:92:b2:40:ca:f3: bd:28:81:b4:dd:45:9b:c5:45:f2:93:ca:5b:dd:f9:56:86:82: f7:6b:e9:d9:3c:55:8b:23:49:3c:d8:e6:54:a1:b2:cf:6e:91: 99:ea:01:59:e2:53:85:0b:15:c4:78:90:ea:32:9e:d9:ca:bd: 2a:b7:ca:d0:2b:f7:43:8a:df:47:3d:83:41:b6:86:b7:37:0b: a4:fb:1a:70:25:5c:b9:da:e2:8a:8e:e7:f5:c6:2f:1e:d5:a5: 7d:fa:34:60:39:e3:e6:21:bf:42:f2:3c:80:01:50:2d:c7:14: f2:28:f8:b3:c6:79:7c:e6:72:1f:d4:26:62:87:8e:09:7a:4f: f2:a1:9f:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMzMDcxMTAvBgNVBAUTKDUzQzk0ODE3RUIxMzY1RjFERThDM0MyQjQ0MDIyMzk4 ODFDMTk0M0QwHhcNMjYwNzI3MDAyMjA4WhcNMjYwODAzMDAyMjA4WjAYMRYwFAYD VQQDEw02YTY2YTRiMC0yMTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtlp5VcEKokjaqojZ4QSOFwdC4BAH+eUgbRbMYKnXlVz8zilPul1Aiqu6g3gL 1gUXHc5bYXoEGsaftWJ+g73YjQX0cR3w0wHV03Z2NSOtY5lrk/m5/1c5CGaY47bY p29Mr5IqTQ40CF6d2DzeoSU4zYmbDsSoflvvHb0l0bIPBZA7IdeK24jDbcG/pXXt E3Ih/kL7xAEwY8dFPPg0RElPPHnLlmOFaklsP8xTWxmtNjn2V60fnM8ycut7RUMR Xi4o/DkApoq0ZKa1DhK6dR20ldXT1CpkF2vn94JAEk7H5iFlfyfDMWgwGobUHgOu bPcdoAthwizjstDFHWq08rbfyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMHZBJ0X w/xvXnGd0/Vqn/Xp3WaqMB8GA1UdIwQYMBaAFFPJSBfrE2Xx3ow8K0QCI5iBwZQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzMwNy8zNDJEODMyODQy Q0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpmSGVqRHdyUkFJam1JSEJs RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U4bElGLXNUWmZIZWpEd3JSQUlqbUlIQmxEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzMwNy8zNDJEODMyODQyQ0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpm SGVqRHdyUkFJam1JSEJsRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUZcMofBPMcrBVFnULOv1GToBYZU7dPkFmaSNO+6FSHwsOfQS5+CoY33rSMpO ObBWKGetLE08+xbPEy5aBpTxSgFxEdYeqqJxIDEjcFtLCCSCmXMwVrK9Um5G2tHc ihZWp7hEq3FikSE9fi+BfHUMoLZhGNoJfOPw8JKyQMrzvSiBtN1Fm8VF8pPKW935 VoaC92vp2TxViyNJPNjmVKGyz26RmeoBWeJThQsVxHiQ6jKe2cq9KrfK0Cv3Q4rf Rz2DQbaGtzcLpPsacCVcudriio7n9cYvHtWlffo0YDnj5iG/QvI8gAFQLccU8ij4 s8Z5fOZyH9QmYoeOCXpP8qGfgQ== -----END CERTIFICATE-----Generated at Tue Jul 28 22:01:04 2026 by rpki-client