$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft File: x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json) Hash identifier: 5iuL8lS0wE/Z2x5T0x4RvipvAQg/BdfLCTimnxBeILQ= Subject key identifier: A1:25:3D:B6:59:11:97:49:9B:A2:5C:35:08:08:78:9C:F9:70:59:13 Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD Certificate issuer: /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft Manifest number: DA Signing time: Mon 27 Jul 2026 08:45:00 +0000 Manifest this update: Mon 27 Jul 2026 08:45:00 +0000 Manifest next update: Mon 03 Aug 2026 08:45:00 +0000 Files and hashes: 1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: vpcR4lyKxjQwqH+sH8UX4vRkjj9qtS98cxy3XjDQucM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Validity Not Before: Jul 27 08:45:00 2026 GMT Not After : Aug 3 08:45:00 2026 GMT Subject: CN=6a671a8c-882e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c8:df:88:a9:a9:e5:e3:49:ac:b4:d1:43:81: e0:e0:d1:8b:4b:8c:11:27:09:c8:38:1d:29:71:14: 1a:4b:a6:2a:e5:fe:88:2e:d6:e1:fb:54:df:64:16: d0:62:b2:95:15:8d:5d:67:36:09:80:5e:03:5b:16: 3f:2b:c0:11:ff:33:6f:0d:35:92:be:80:b1:8b:81: 29:d2:b7:78:34:07:c9:38:d8:b8:d5:93:ef:12:d9: e9:c1:a3:2a:99:77:ea:05:87:a1:33:e6:3d:e0:b1: 1e:8b:65:8a:5a:17:8a:5a:de:de:ce:7e:2d:e0:14: 8e:f0:e7:79:bd:15:fd:45:a0:f1:39:89:4c:28:6e: 95:ae:c8:76:3e:9f:27:e6:c2:dd:56:29:f2:87:8f: 93:c8:2b:e2:93:47:fc:e6:c3:d6:fe:6e:c7:0c:f0: 61:82:83:0c:30:d6:f4:f5:7d:99:12:f6:02:fd:14: 62:91:a0:63:44:b9:0c:f9:94:17:e1:65:3e:84:b1: 3d:d2:3f:dd:85:12:a4:d2:6b:51:38:39:10:92:c0: 89:84:22:42:8b:42:7f:17:07:37:cb:96:11:2c:c8: 96:d0:31:28:88:f1:7a:b3:3c:e2:d0:ad:23:63:68: 81:97:87:93:e2:8c:02:87:df:d6:87:46:5e:53:5e: c8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:25:3D:B6:59:11:97:49:9B:A2:5C:35:08:08:78:9C:F9:70:59:13 X509v3 Authority Key Identifier: keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:7f:c4:f1:f8:3e:da:b9:7e:da:8b:55:28:a1:52:a2:e4:cc: 8f:51:fc:5f:85:23:e1:f8:35:17:36:50:ae:a5:ba:bb:ab:04: bc:1f:15:fd:f8:fa:43:19:be:fe:53:6b:8a:51:46:e7:09:bf: 6f:53:86:ae:e5:bb:56:a7:56:8a:f3:95:f4:a9:58:d4:c1:90: d4:b6:09:d9:26:5d:6e:36:16:9b:59:88:4c:4b:23:32:cf:20: 92:1c:58:96:93:0d:5f:22:e0:13:0d:25:38:4e:f2:6a:0d:67: 15:9c:43:8f:15:f7:46:87:00:f5:4d:3c:68:3b:bc:51:fd:0d: 08:68:75:24:07:e3:c0:44:e4:12:b5:32:16:0e:05:7f:cf:97: 39:35:04:8e:26:15:f9:53:43:5a:81:b2:00:aa:c0:f2:7d:3f: 6e:91:0e:72:f9:d3:a5:1b:7a:e8:ff:e1:0b:6a:46:83:16:1e: d5:cd:c5:3c:0a:74:ce:04:49:de:11:ce:a6:a9:fd:d1:12:00: 51:a6:f9:90:a3:69:f5:a8:c4:55:9c:53:c3:f1:23:ed:dc:c7: 25:07:e4:1a:3d:ed:e4:f5:02:6d:d8:b5:70:d3:29:d0:44:8b: 6e:c3:e1:28:64:39:e6:f4:c3:0b:d1:69:20:b8:ca:68:fb:4e: 04:c7:9e:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCQjExMTAvBgNVBAUTKEM3RjAyODM3RDI0NUNCOEZBQkNENDc0MUNGQTJCNEE1 QTJGNzNFQUQwHhcNMjYwNzI3MDg0NTAwWhcNMjYwODAzMDg0NTAwWjAYMRYwFAYD VQQDEw02YTY3MWE4Yy04ODJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4cjfiKmp5eNJrLTRQ4Hg4NGLS4wRJwnIOB0pcRQaS6Yq5f6ILtbh+1TfZBbQ YrKVFY1dZzYJgF4DWxY/K8AR/zNvDTWSvoCxi4Ep0rd4NAfJONi41ZPvEtnpwaMq mXfqBYehM+Y94LEei2WKWheKWt7ezn4t4BSO8Od5vRX9RaDxOYlMKG6Vrsh2Pp8n 5sLdVinyh4+TyCvik0f85sPW/m7HDPBhgoMMMNb09X2ZEvYC/RRikaBjRLkM+ZQX 4WU+hLE90j/dhRKk0mtRODkQksCJhCJCi0J/Fwc3y5YRLMiW0DEoiPF6szzi0K0j Y2iBl4eT4owCh9/Wh0ZeU17IQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKElPbZZ EZdJm6JcNQgIeJz5cFkTMB8GA1UdIwQYMBaAFMfwKDfSRcuPq81HQc+itKWi9z6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEJCMS81QUQ3NjlCMDNE MjUxMUYwODBDNDg5NTVDNEY5QUUwMi94X0FvTjlKRnk0LXJ6VWRCejZLMHBhTDNQ cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hfQW9OOUpGeTQtcnpVZEJ6NkswcGFMM1BxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEJCMS81QUQ3NjlCMDNEMjUxMUYwODBDNDg5NTVDNEY5QUUwMi94X0FvTjlKRnk0 LXJ6VWRCejZLMHBhTDNQcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOn/E8fg+2rl+2otVKKFSouTMj1H8X4Uj4fg1FzZQrqW6u6sEvB8V/fj6Qxm+ /lNrilFG5wm/b1OGruW7VqdWivOV9KlY1MGQ1LYJ2SZdbjYWm1mITEsjMs8gkhxY lpMNXyLgEw0lOE7yag1nFZxDjxX3RocA9U08aDu8Uf0NCGh1JAfjwETkErUyFg4F f8+XOTUEjiYV+VNDWoGyAKrA8n0/bpEOcvnTpRt66P/hC2pGgxYe1c3FPAp0zgRJ 3hHOpqn90RIAUab5kKNp9ajEVZxTw/Ej7dzHJQfkGj3t5PUCbdi1cNMp0ESLbsPh KGQ55vTDC9FpILjKaPtOBMeecw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:41:51 2026 by rpki-client