$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft File: JfPSFoirk4Gqi5UrziZBKTVCp_I.mft (raw, json) Hash identifier: hUhOzoXYUokhxm/NZ7t6i5h8kzuS4aAqQyBFvDnoiL4= Subject key identifier: 07:27:9A:A2:0B:AB:C7:D0:3F:D2:8B:65:ED:5F:EA:EA:A4:6D:1A:11 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 0874 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft Manifest number: 084A Signing time: Sun 26 Jul 2026 21:44:26 +0000 Manifest this update: Sun 26 Jul 2026 21:44:25 +0000 Manifest next update: Sun 02 Aug 2026 21:44:25 +0000 Files and hashes: 1: JfPSFoirk4Gqi5UrziZBKTVCp_I.crl (hash: JfMabPHb0KGYucF4jlHe9+Ct/PCNW+Zw8xn+jaxCank=) 2: 27D76814848711EF8CFAA23AC4F9AE02.roa (hash: 9WsTqu+1S58PdgHzRyv83r6EckHxHEZwWgMoiXQIwXs=) 3: 73C6444A12FF11F195EAA2BD143D8C67.roa (hash: xBZ85olwrfzXLCOhjfMqnMRpD3SifUSCqGx8tZttr5c=) 4: 7C76080E08D611EE82522448C4F9AE02.roa (hash: RXzPjqfGnjMFGEe5IJDvXNa9x/aOyMwECSrglqs4E24=) 5: 2A67700A9B4411EFA1772153C4F9AE02.roa (hash: JDvNYbjYgzAUv5kVDBgi2KEkPnPhEG9d4dMtXb+ev6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:44:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Jul 26 21:44:25 2026 GMT Not After : Aug 2 21:44:25 2026 GMT Subject: CN=6a667fba-462b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:74:e9:a5:1d:79:92:6d:15:55:5c:52:d8: 1b:02:9e:f8:dd:b2:24:d7:8f:9b:b1:f1:5c:7a:8f: b1:0c:16:fc:ba:ff:61:e8:6c:fc:47:ca:0b:c0:af: 2e:f5:e5:40:ed:cb:a5:4a:83:85:e4:8a:8a:b2:68: 47:d2:00:07:9e:28:0c:27:a9:dd:b1:06:20:ad:82: 86:7d:19:cb:1c:3c:5e:cc:bb:51:52:70:5c:cf:c9: 58:3b:da:a4:62:25:31:63:26:62:1a:10:22:fa:72: 5c:32:53:07:24:5d:bd:e1:68:12:41:8c:53:88:24: 6f:fc:b4:12:a7:f1:68:fa:d7:ce:07:df:a7:4b:f7: 8e:7b:a2:d8:eb:2c:5c:49:99:c2:6e:01:86:61:9d: 77:b6:97:b5:16:c0:2b:43:d7:f3:5c:55:3e:6d:dc: c1:51:9b:3b:a8:02:f8:dc:b1:26:bf:f0:82:d1:fb: ed:f1:d9:3f:66:4b:f8:86:89:0f:8f:c9:af:f6:ca: 7f:50:4f:c5:40:e7:6a:ca:5c:60:aa:b2:6f:60:9d: 57:9d:6a:1f:e3:42:58:bf:14:89:53:82:0e:3e:1a: 70:16:b2:b5:3c:2d:ae:64:77:a6:8e:c9:96:e2:b0: a2:c3:7a:f7:60:c7:65:aa:30:1f:54:0c:1d:9e:0e: aa:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:27:9A:A2:0B:AB:C7:D0:3F:D2:8B:65:ED:5F:EA:EA:A4:6D:1A:11 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9b:45:8f:e7:0f:e6:24:d5:7e:af:5c:ca:ed:e8:77:27:39: f0:8c:42:75:60:8e:31:80:ed:d9:4d:ad:bb:5b:cc:e1:09:0c: 8d:1c:cb:a3:a2:56:53:3c:a6:b1:9c:86:6a:3a:99:f3:28:2b: 00:5e:1a:8a:6a:d8:78:1f:1b:46:4f:05:6f:94:93:c4:5b:fd: 74:a6:54:6f:95:34:81:2a:fe:fb:b2:00:68:c5:32:cb:bd:a8: 08:65:0a:4c:7f:98:55:a6:e4:6a:ba:06:ab:0b:3d:20:70:5d: b9:64:0e:9e:3c:95:c5:fe:e3:3e:94:09:34:ff:66:8a:a9:6f: dc:56:4d:e2:c2:7f:3c:7a:db:c8:5f:ad:69:d8:c7:06:60:7a: 21:4b:fa:24:99:74:18:75:fa:4d:4c:29:b6:71:08:8e:0e:fb: 96:99:69:2d:0e:bf:82:e8:49:b7:59:b8:75:d6:be:2a:ad:1e: b8:64:74:f1:bd:d3:75:9c:87:cf:53:f9:3b:9f:41:c6:22:81: dc:f7:ee:74:e1:57:6b:1d:ce:e4:ec:95:8c:48:1a:09:8c:f0: fd:1a:84:c5:f5:67:f4:23:45:68:c3:ed:a2:19:b7:a3:7e:3c: 4b:e4:8d:70:1b:f2:dc:f4:25:2c:b8:47:1a:74:e2:38:93:31: 22:80:4f:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjYwNzI2MjE0NDI1WhcNMjYwODAyMjE0NDI1WjAYMRYwFAYD VQQDEw02YTY2N2ZiYS00NjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfd06aUdeZJtFVVcUtgbAp743bIk14+bsfFceo+xDBb8uv9h6Gz8R8oLwK8u 9eVA7culSoOF5IqKsmhH0gAHnigMJ6ndsQYgrYKGfRnLHDxezLtRUnBcz8lYO9qk YiUxYyZiGhAi+nJcMlMHJF294WgSQYxTiCRv/LQSp/Fo+tfOB9+nS/eOe6LY6yxc SZnCbgGGYZ13tpe1FsArQ9fzXFU+bdzBUZs7qAL43LEmv/CC0fvt8dk/Zkv4hokP j8mv9sp/UE/FQOdqylxgqrJvYJ1XnWof40JYvxSJU4IOPhpwFrK1PC2uZHemjsmW 4rCiw3r3YMdlqjAfVAwdng6q3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcnmqIL q8fQP9KLZe1f6uqkbRoRMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkFGMS84NkRCMkNDQzI0OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0 R3FpNVVyemlaQktUVkNwX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcptFj+cP5iTVfq9cyu3odyc58IxCdWCOMYDt2U2tu1vM4QkMjRzLo6JWUzym sZyGajqZ8ygrAF4aimrYeB8bRk8Fb5STxFv9dKZUb5U0gSr++7IAaMUyy72oCGUK TH+YVabkaroGqws9IHBduWQOnjyVxf7jPpQJNP9miqlv3FZN4sJ/PHrbyF+tadjH BmB6IUv6JJl0GHX6TUwptnEIjg77lplpLQ6/guhJt1m4dda+Kq0euGR08b3TdZyH z1P5O59BxiKB3PfudOFXax3O5OyVjEgaCYzw/RqExfVn9CNFaMPtohm3o348S+SN cBvy3PQlLLhHGnTiOJMxIoBPEQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:28:43 2026 by rpki-client