$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft File: -4BdU3nLB9UqQR7__QSRyjm3vyc.mft (raw, json) Hash identifier: ITISr6cgeGI6jpyN6+hhi5Nzd7EllWqrArRvWshwJyo= Subject key identifier: 95:10:7F:AF:35:6D:BC:19:C8:D9:3B:68:BF:F9:61:3D:A8:08:2D:69 Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 Certificate issuer: /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Certificate serial: 06C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft Manifest number: 06BB Signing time: Sun 26 Jul 2026 23:10:09 +0000 Manifest this update: Sun 26 Jul 2026 23:10:09 +0000 Manifest next update: Sun 02 Aug 2026 23:10:09 +0000 Files and hashes: 1: -4BdU3nLB9UqQR7__QSRyjm3vyc.crl (hash: E11MY7RsFIs5jTLvX7KmbIgf/Qq0W04GM5dUVV/eM+I=) 2: F78605D8778A11F08EDAFE28C4F9AE02.roa (hash: Px7VprCh9UfmuPzyDmxkU/m/2aL/ARCAJ3nDQ6rFgyY=) 3: F4740B2CB92711EBA6B43A86C4F9AE02.roa (hash: INJtLF8qaoeCDqTi9hekv0X3r1aZb5PkSaaKhdeU4+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:10:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27 Validity Not Before: Jul 26 23:10:09 2026 GMT Not After : Aug 2 23:10:09 2026 GMT Subject: CN=6a6693d1-b69b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:27:19:54:bb:7a:a1:44:56:b0:14:bd:f0: 5f:93:5e:a4:db:da:37:9f:a9:e7:9f:ee:59:4b:c4: 9c:0c:4f:b1:bc:19:af:19:26:61:1c:e3:af:c8:b3: 03:81:d3:71:c5:e6:83:74:79:47:67:3c:71:36:31: 1b:e7:71:df:7e:0a:2d:6d:12:36:17:26:73:25:f3: c4:15:bc:b7:7d:ca:10:e1:83:1b:34:8d:e5:a8:9b: 05:e6:6e:b1:56:18:35:33:d3:88:82:fb:09:2a:b0: 7f:c1:78:34:30:c9:5c:4c:af:9b:24:94:a5:24:2f: 18:ba:24:4c:30:95:fb:9b:b2:3a:48:55:5c:f9:cf: 73:d2:e5:47:ca:b7:f5:a9:6d:21:ee:7f:ea:f8:8a: bc:69:f1:ce:c1:bc:32:70:8f:f8:82:54:21:1b:46: d5:6e:31:6c:bc:01:b4:41:15:7e:65:db:a5:0f:1a: 2a:f6:1b:1a:f3:31:be:a6:fb:47:6f:bb:19:2b:45: 11:c0:2d:54:35:08:4a:9e:46:dc:72:31:07:e6:23: b3:d0:be:70:f4:84:84:17:7e:cc:ac:e1:3b:22:6b: 6f:00:b2:9e:30:68:05:8d:dd:c4:d1:24:4f:79:69: 09:59:a9:5b:23:06:20:7a:e6:97:c6:ec:b4:a0:f6: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:10:7F:AF:35:6D:BC:19:C8:D9:3B:68:BF:F9:61:3D:A8:08:2D:69 X509v3 Authority Key Identifier: keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:d5:93:18:d5:50:06:66:07:e1:79:af:d0:3c:29:6b:ab:94: 83:b6:1d:ed:ac:e1:17:19:b9:9a:a1:02:b4:80:71:bb:47:db: 13:87:06:48:c2:d7:49:9e:a1:f9:95:bf:48:f4:71:f4:48:10: fa:13:a3:9e:03:60:6e:51:7d:65:24:52:e9:e5:17:50:ff:aa: 95:4e:bf:64:f2:f7:85:a1:81:94:99:39:5a:79:8b:a3:96:33: 8d:dd:94:e1:ab:2d:69:f8:6a:f7:5d:00:bc:e6:28:ef:bf:0a: 4f:3c:83:ac:4d:1b:cc:ce:6b:db:e7:16:a5:f8:8d:11:c8:39: 8d:ed:d3:a3:da:80:b6:23:b3:73:cf:47:e7:c4:32:57:5c:44: 73:4f:2f:da:e1:43:4b:cb:63:9d:b8:41:ae:7c:c3:1c:78:6b: 0f:74:9d:52:04:c2:55:02:5a:1b:a2:7d:da:6b:be:bf:2a:12: 78:b9:89:6d:df:51:18:96:cb:e5:d8:84:f0:46:33:c7:fc:6e: ad:8c:fd:e3:92:83:5e:19:85:35:4a:fb:37:15:eb:2a:99:b8: 56:88:55:39:66:47:9f:69:df:5e:91:91:5d:67:ad:6b:bb:de: 9f:7e:1a:59:33:60:a7:42:a7:ef:be:19:4e:87:5e:5b:43:4a: 7b:cf:6a:42 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVFQ0ExMTAvBgNVBAUTKEZCODA1RDUzNzlDQjA3RDUyQTQxMUVGRkZEMDQ5MUNB MzlCN0JGMjcwHhcNMjYwNzI2MjMxMDA5WhcNMjYwODAyMjMxMDA5WjAYMRYwFAYD VQQDEw02YTY2OTNkMS1iNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbonGVS7eqFEVrAUvfBfk16k29o3n6nnn+5ZS8ScDE+xvBmvGSZhHOOvyLMD gdNxxeaDdHlHZzxxNjEb53HffgotbRI2FyZzJfPEFby3fcoQ4YMbNI3lqJsF5m6x Vhg1M9OIgvsJKrB/wXg0MMlcTK+bJJSlJC8YuiRMMJX7m7I6SFVc+c9z0uVHyrf1 qW0h7n/q+Iq8afHOwbwycI/4glQhG0bVbjFsvAG0QRV+ZdulDxoq9hsa8zG+pvtH b7sZK0URwC1UNQhKnkbccjEH5iOz0L5w9ISEF37MrOE7ImtvALKeMGgFjd3E0SRP eWkJWalbIwYgeuaXxuy0oPaiGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUQf681 bbwZyNk7aL/5YT2oCC1pMB8GA1UdIwQYMBaAFPuAXVN5ywfVKkEe//0Ekco5t78n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUVDQS9CRkQyMzIwNkI5 MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5VXFRUjdfX1FTUnlqbTN2 eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy00QmRVM25MQjlVcVFSN19fUVNSeWptM3Z5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUVDQS9CRkQyMzIwNkI5MjUxMUVCQjBFMkNCODJDNEY5QUUwMi8tNEJkVTNuTEI5 VXFRUjdfX1FTUnlqbTN2eWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2dWTGNVQBmYH4Xmv0Dwpa6uUg7Yd7azhFxm5mqECtIBxu0fbE4cGSMLXSZ6h +ZW/SPRx9EgQ+hOjngNgblF9ZSRS6eUXUP+qlU6/ZPL3haGBlJk5WnmLo5Yzjd2U 4astafhq910AvOYo778KTzyDrE0bzM5r2+cWpfiNEcg5je3To9qAtiOzc89H58Qy V1xEc08v2uFDS8tjnbhBrnzDHHhrD3SdUgTCVQJaG6J92mu+vyoSeLmJbd9RGJbL 5diE8EYzx/xurYz945KDXhmFNUr7NxXrKpm4VohVOWZHn2nfXpGRXWeta7ven34a WTNgp0Kn774ZTodeW0NKe89qQg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:56:21 2026 by rpki-client