$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json) Hash identifier: /IYgYnKiWRXopm44qNhdGzv6+sbF3M3yTK00ngwgb8M= Subject key identifier: 01:BE:7D:EB:D1:C9:B6:11:DD:15:9E:1D:C6:D9:26:A6:A5:51:EF:6C Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 0956 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft Manifest number: 0933 Signing time: Tue 28 Jul 2026 20:36:29 +0000 Manifest this update: Tue 28 Jul 2026 20:36:28 +0000 Manifest next update: Tue 04 Aug 2026 20:36:28 +0000 Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: M3CrQAltspE6KlGW8rkYWjNA/mBrIwQl5E7Ta39m9Bg=) 2: 43BCAA10601011F1B53A223F8947A888.roa (hash: UAOZoXUNlqRhbsm6Ye0JLiTSN1KyydXhLfW68ppQgWM=) 3: 1702453A7EAF11F1A86AC8B467A30FBC.roa (hash: kK9g04kyEiFnynqhVR38EeQ3FQu8/W3rZrXFesWAU4w=) 4: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: O+J9NJa3UAiRFIsaF/1cDe44mda6RPgxat0aYJVT3MQ=) 5: 1845D6647EAF11F1A86AC8B467A30FBC.roa (hash: hAU4qUdvHl3msSyOtoY08felpEvTOnOlkZDcpV81OCM=) 6: 17A584347EAF11F1A86AC8B467A30FBC.roa (hash: cWMVPdtFhLjtPumAhMJx7mxgsrChxX1MDuj/JICmZU8=) 7: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: fecuy51h04kA/93Fl9Jso7L2bJu10CuAwHp5PsU5FhA=) 8: 18C57F047EAF11F1A86AC8B467A30FBC.roa (hash: TwfuImduumf2E6CwFlSoq4jZU9n/ol3F3dOv5htetzY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2390 (0x956) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Jul 28 20:36:28 2026 GMT Not After : Aug 4 20:36:28 2026 GMT Subject: CN=6a6912cd-908a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:e5:75:82:45:92:1b:72:63:91:35:35:c1: 02:aa:44:8f:ca:e3:93:ca:98:6d:f7:df:a9:c6:ed: d6:46:47:97:c7:c4:ed:e7:99:9f:6b:ef:97:1a:e1: 67:c7:f3:31:48:a6:35:e0:e3:a6:4d:08:b3:52:59: bc:15:e3:11:5f:a3:51:2d:09:99:77:79:d3:de:28: 2d:4a:68:cc:2c:4f:61:7b:95:04:8b:f0:77:10:e2: 75:d0:c7:5e:f9:02:e4:8c:7e:a4:c2:b6:54:e1:91: e0:de:e1:10:06:19:d0:87:87:18:a6:93:02:14:e8: 7e:71:b3:79:f3:49:0e:a1:ac:9c:90:7e:33:a4:a9: 70:7a:e5:ec:13:5d:de:40:8a:e2:d0:ce:3b:e9:37: df:3e:35:d7:3d:c3:f1:17:1f:a9:ec:18:a0:24:c5: f1:50:bb:8e:e6:9f:0c:a9:6a:09:4b:91:a7:98:85: 22:98:25:4c:63:30:1a:1c:97:6a:cf:ed:63:c3:fb: b2:4a:fe:ca:d0:03:9b:68:35:7d:ca:ed:ba:bc:0b: c7:f9:81:52:bf:01:bf:07:71:d1:e8:f5:f6:c5:b1: 97:8c:7f:84:7f:db:45:6b:97:8a:31:8d:47:3f:d5: 6f:e3:53:50:cd:c5:a1:b1:b5:ae:7e:45:71:ed:5c: 8a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BE:7D:EB:D1:C9:B6:11:DD:15:9E:1D:C6:D9:26:A6:A5:51:EF:6C X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ab:1d:cd:8b:b5:d2:84:12:ae:7f:6b:fb:7c:ec:49:ee:27: 8f:67:21:dd:31:29:32:22:10:fd:de:ea:e5:55:82:cd:9c:86: 04:4e:88:c2:67:d0:0e:4f:67:68:75:60:f9:b8:7f:52:67:d8: 21:31:66:ab:69:b2:24:33:f8:c3:54:7d:d4:ce:0a:f7:34:a9: 4a:1b:75:6c:cb:81:63:74:76:96:16:63:d6:c4:cf:d2:1e:08: dc:84:19:0e:5f:f9:b7:d7:df:3b:66:cd:cc:43:f1:99:71:81: 8f:e3:57:1e:28:3e:5b:64:fe:26:e4:dd:dd:cd:1b:fd:f9:c0: b1:97:93:55:2b:50:ae:19:a9:0a:71:69:c7:fd:14:5e:09:a2: 2b:47:f1:aa:0b:a2:a3:82:af:26:c0:88:a3:58:38:6b:d0:ba: 3f:75:96:5b:b2:27:f2:55:5c:0f:fa:6a:8a:4e:dd:1e:aa:bd: 03:77:32:5a:83:78:8a:51:22:ba:0a:9c:ff:01:13:d6:6d:87: b4:ef:46:63:9c:c8:f6:a5:c0:a8:21:35:15:cf:58:1f:e1:e5: 22:5f:4e:60:67:19:7c:e9:ba:9a:d0:55:cb:34:d2:48:49:89: cb:4d:3d:8e:4d:a8:f8:1c:78:63:8a:d5:cf:bb:f7:dc:44:3f: 13:27:da:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjYwNzI4MjAzNjI4WhcNMjYwODA0MjAzNjI4WjAYMRYwFAYD VQQDEw02YTY5MTJjZC05MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/3ldYJFkhtyY5E1NcECqkSPyuOTypht99+pxu3WRkeXx8Tt55mfa++XGuFn x/MxSKY14OOmTQizUlm8FeMRX6NRLQmZd3nT3igtSmjMLE9he5UEi/B3EOJ10Mde +QLkjH6kwrZU4ZHg3uEQBhnQh4cYppMCFOh+cbN580kOoayckH4zpKlweuXsE13e QIri0M476TffPjXXPcPxFx+p7BigJMXxULuO5p8MqWoJS5GnmIUimCVMYzAaHJdq z+1jw/uySv7K0AObaDV9yu26vAvH+YFSvwG/B3HR6PX2xbGXjH+Ef9tFa5eKMY1H P9Vv41NQzcWhsbWufkVx7VyKlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAG+fevR ybYR3RWeHcbZJqalUe9sMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzNC81MUJFREZDNENDOEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4 anVHeW1XN3RTT0p3SU9FSU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANasdzYu10oQSrn9r+3zsSe4nj2ch3TEpMiIQ/d7q5VWCzZyGBE6IwmfQDk9n aHVg+bh/UmfYITFmq2myJDP4w1R91M4K9zSpSht1bMuBY3R2lhZj1sTP0h4I3IQZ Dl/5t9ffO2bNzEPxmXGBj+NXHig+W2T+JuTd3c0b/fnAsZeTVStQrhmpCnFpx/0U XgmiK0fxqguio4KvJsCIo1g4a9C6P3WWW7In8lVcD/pqik7dHqq9A3cyWoN4ilEi ugqc/wET1m2HtO9GY5zI9qXAqCE1Fc9YH+HlIl9OYGcZfOm6mtBVyzTSSEmJy009 jk2o+Bx4Y4rVz7v33EQ/EyfakA== -----END CERTIFICATE-----Generated at Wed Jul 29 02:54:27 2026 by rpki-client