$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json) Hash identifier: Av4CjV0USQvlC0OZ0LkRBGm6WWsAotT9lhBvaLUU8cQ= Subject key identifier: 80:32:24:65:E2:CD:61:4E:AD:59:9E:22:51:27:33:97:E2:82:AA:61 Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft Manifest number: 0FF1 Signing time: Tue 28 Jul 2026 17:49:01 +0000 Manifest this update: Tue 28 Jul 2026 17:49:00 +0000 Manifest next update: Tue 04 Aug 2026 17:49:00 +0000 Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: ipZCnl2UUfcjckXhlp7Bo2vUzPdiJE7eiaz8ZE/vUFA=) 2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: 8kaLAfVElFdAC99fHwGaunXXva1K/sV7AglDy8IxEuc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Validity Not Before: Jul 28 17:49:00 2026 GMT Not After : Aug 4 17:49:00 2026 GMT Subject: CN=6a68eb8d-cc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:73:18:6d:66:d1:a5:24:26:c0:29:21:75:cd: 57:37:31:ab:32:36:a8:4f:e2:b4:45:5a:ac:ae:de: a8:8a:b0:e4:ea:74:22:62:8b:70:b4:f4:dd:db:c2: 75:de:85:10:91:bf:b0:06:36:47:25:38:8c:87:0c: 84:8c:65:dd:17:3c:b1:c6:6c:ba:6d:35:9f:66:71: 3b:fd:26:52:f0:bd:2d:57:3e:22:49:49:9b:b6:13: e3:ab:01:50:6e:68:c9:88:d5:62:72:f5:07:3b:64: 08:0b:a6:86:86:e3:73:f8:f1:db:d6:01:51:35:c7: 1a:64:d3:9f:72:1c:a3:ea:93:30:df:4d:42:86:78: 50:83:e7:58:fa:d4:e5:42:a5:ce:9f:91:ae:41:2e: 05:20:77:40:21:01:f3:7f:1c:02:15:85:3e:60:51: 66:8c:6a:35:b4:df:76:65:ee:9e:70:79:f0:2d:5c: fe:8c:64:a3:92:1c:7e:ce:d0:5d:29:7a:2c:c4:c4: 2f:f5:d6:e3:47:b0:68:79:84:0d:93:ed:28:e2:54: c8:ef:b1:01:c7:13:a1:77:46:91:29:ff:e0:7c:c0: 2b:56:26:6f:f1:4a:ba:75:1d:13:30:c1:7a:3d:d8: 83:b8:82:eb:60:45:de:84:aa:36:ba:17:70:45:70: c5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:32:24:65:E2:CD:61:4E:AD:59:9E:22:51:27:33:97:E2:82:AA:61 X509v3 Authority Key Identifier: keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c2:0a:45:2f:17:c3:77:2a:14:79:24:d3:6b:f0:da:75:f9: 43:b7:b3:48:91:c0:7d:2f:31:50:94:01:2e:1b:d1:c2:58:c5: b0:49:f3:1d:98:fa:2f:76:ac:9f:06:48:cb:f4:2e:6c:da:92: 74:29:1a:d3:c1:c9:8d:ae:2f:27:1f:66:90:3f:16:79:aa:08: 7a:5c:ee:90:9a:09:90:86:22:9d:47:75:23:81:dc:b0:13:3d: 77:ae:b1:38:ad:3c:5b:6b:26:b0:2b:68:f0:bd:39:bd:c4:27: 40:be:48:ae:a9:bc:35:ad:4e:3a:96:1c:e6:de:9d:9e:03:99: 16:78:b8:8f:4f:85:c7:86:6c:07:54:3d:2f:26:7b:75:26:f7: 73:b2:c1:16:91:b1:fc:e9:b4:0a:da:64:ae:ff:58:e3:4f:ac: 8d:59:62:ff:59:51:fa:4e:9e:6c:1f:97:9d:5a:9d:c4:35:a6: eb:0b:17:d4:10:6c:ba:a6:07:91:78:5f:71:fc:16:16:d8:d0: d3:ae:dc:1d:46:67:e4:25:58:55:b3:17:20:67:04:50:86:cc: 4c:ff:23:99:77:7f:59:d6:fb:59:7d:b2:8a:77:bc:26:12:a3: 3a:2e:bb:d9:78:02:24:7c:1d:04:17:26:f4:e4:43:f0:ec:9b: 0d:dc:22:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKERCNzhEOUY5MzU4RTU2N0QzMDZFRTNCRDFFQUM3NDhF OTYwNkJGOEYwHhcNMjYwNzI4MTc0OTAwWhcNMjYwODA0MTc0OTAwWjAYMRYwFAYD VQQDEw02YTY4ZWI4ZC1jYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4nMYbWbRpSQmwCkhdc1XNzGrMjaoT+K0RVqsrt6oirDk6nQiYotwtPTd28J1 3oUQkb+wBjZHJTiMhwyEjGXdFzyxxmy6bTWfZnE7/SZS8L0tVz4iSUmbthPjqwFQ bmjJiNVicvUHO2QIC6aGhuNz+PHb1gFRNccaZNOfchyj6pMw301ChnhQg+dY+tTl QqXOn5GuQS4FIHdAIQHzfxwCFYU+YFFmjGo1tN92Ze6ecHnwLVz+jGSjkhx+ztBd KXosxMQv9dbjR7BoeYQNk+0o4lTI77EBxxOhd0aRKf/gfMArViZv8Uq6dR0TMMF6 PdiDuILrYEXehKo2uhdwRXDFgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAyJGXi zWFOrVmeIlEnM5figqphMB8GA1UdIwQYMBaAFNt42fk1jlZ9MG7jvR6sdI6WBr+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1ZuMHdidU85SHF4MGpwWUd2 NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzalotVFdPVm4wd2J1TzlIcXgwanBZR3Y0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1Zu MHdidU85SHF4MGpwWUd2NDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbsIKRS8Xw3cqFHkk02vw2nX5Q7ezSJHAfS8xUJQBLhvRwljFsEnzHZj6L3as nwZIy/QubNqSdCka08HJja4vJx9mkD8WeaoIelzukJoJkIYinUd1I4HcsBM9d66x OK08W2smsCto8L05vcQnQL5Irqm8Na1OOpYc5t6dngOZFni4j0+Fx4ZsB1Q9LyZ7 dSb3c7LBFpGx/Om0Ctpkrv9Y40+sjVli/1lR+k6ebB+XnVqdxDWm6wsX1BBsuqYH kXhfcfwWFtjQ067cHUZn5CVYVbMXIGcEUIbMTP8jmXd/Wdb7WX2yine8JhKjOi67 2XgCJHwdBBcm9ORD8OybDdwiLQ== -----END CERTIFICATE-----Generated at Wed Jul 29 10:38:23 2026 by rpki-client