$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft File: -D3DokbRIVGsh6dyzsoO3SFfhio.mft (raw, json) Hash identifier: OFeeedT0ZksVn+LgmFA1gBYTepHMGqcDC0lwxg14fPY= Subject key identifier: 06:F4:87:4F:32:95:BB:CD:37:B9:63:9D:33:EF:6B:B2:5C:23:6C:57 Authority key identifier: F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A Certificate issuer: /CN=A91DDFF2/serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft Manifest number: 01BC Signing time: Mon 27 Jul 2026 05:38:14 +0000 Manifest this update: Mon 27 Jul 2026 05:38:14 +0000 Manifest next update: Mon 03 Aug 2026 05:38:14 +0000 Files and hashes: 1: -D3DokbRIVGsh6dyzsoO3SFfhio.crl (hash: y1NCqeBJMvlTBc0MposI+RBZ5RLaWvfanFh/DywHNZ0=) 2: EC7311FEE5C311EEBF217685C4F9AE02.roa (hash: nCvz3RU6o2FWhURZ/L0SyrKbzGjsC9xVoGzwhNL9hs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDFF2, serialNumber=F83DC3A246D12151AC87A772CECA0EDD215F862A Validity Not Before: Jul 27 05:38:14 2026 GMT Not After : Aug 3 05:38:14 2026 GMT Subject: CN=6a66eec6-7c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c6:49:d1:c3:f6:2e:e3:e5:88:55:07:21:90: 16:fd:f3:82:7a:95:3b:b1:1c:8b:2d:c0:c2:8c:e4: da:62:12:31:b7:c5:dc:ae:c6:c3:99:6e:73:69:2a: 7f:72:f9:6f:df:3a:12:04:81:ef:5b:4e:50:d4:5d: 7a:d0:d5:b5:96:3c:13:95:06:15:27:21:ba:00:d0: 79:a3:79:88:b5:82:5c:11:80:a4:23:fb:73:59:67: 5a:0c:b5:3b:af:40:08:9c:e7:ab:96:e7:96:d9:38: 8c:71:19:c8:ae:e0:b2:d3:e7:bb:a1:ec:b2:f0:1e: 01:32:44:93:aa:ac:14:4c:33:03:a5:6b:0f:e8:ab: cc:e3:04:2e:a1:68:b2:8b:ec:fe:67:88:8e:99:a0: 36:f8:d8:c0:e5:31:69:39:78:13:7d:9c:b0:ee:d5: b9:3b:57:50:c4:f3:c9:6e:19:1d:59:17:31:56:6c: 35:6a:dc:03:93:9b:5d:49:c6:c4:6c:bb:bc:86:9b: 10:03:33:4c:a5:c8:2f:48:53:7a:07:00:96:3c:28: 73:c3:67:18:cf:60:7e:4b:5c:94:c7:3e:cd:de:cd: 38:dd:0d:68:1e:66:fa:8d:18:7b:2d:d8:99:c2:21: b3:64:21:08:73:e6:46:08:bc:2c:49:6f:ac:1b:5b: 06:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F4:87:4F:32:95:BB:CD:37:B9:63:9D:33:EF:6B:B2:5C:23:6C:57 X509v3 Authority Key Identifier: keyid:F8:3D:C3:A2:46:D1:21:51:AC:87:A7:72:CE:CA:0E:DD:21:5F:86:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-D3DokbRIVGsh6dyzsoO3SFfhio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDFF2/C9AF2934E5C111EE98DBE962C4F9AE02/-D3DokbRIVGsh6dyzsoO3SFfhio.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ba:77:07:79:6a:24:77:af:e9:6b:1b:42:d4:46:d8:18:1c: 04:c4:6c:74:58:4a:cd:40:68:b6:15:6e:0a:0d:11:6c:22:fe: ff:fd:5f:75:b7:d9:e8:97:41:33:a2:e8:9d:35:0f:20:03:f5: 85:b2:2c:06:5b:90:ea:6d:15:1f:30:1c:95:b4:79:cf:93:6c: 4c:3e:f7:41:c3:f1:94:e3:bb:3e:d2:f4:41:82:e9:c9:01:73: 40:1f:59:08:84:65:9a:2b:42:8c:ff:83:dc:a0:cd:3b:05:ea: c8:02:78:18:64:46:26:dd:7e:8e:4e:b1:2e:98:3b:25:b9:5a: 29:d0:0a:44:05:6d:5f:d3:1c:c3:e1:51:33:70:ee:60:60:b8: 84:a5:65:16:bf:b1:ce:d7:80:bf:ff:4e:5f:57:dd:8b:64:e9: f7:65:06:6a:bf:1f:b3:5d:9a:4b:69:88:1a:19:7e:87:b1:32: 1d:a3:de:8f:48:ae:6b:79:1e:53:85:5d:9c:f4:77:7f:15:42: 94:53:9e:d8:e2:95:b6:93:cb:49:69:ec:18:eb:c2:05:ce:a4: b0:59:62:17:90:07:38:40:5d:2f:7e:d2:90:bb:ad:e8:69:3b: 30:c2:06:73:c2:50:b6:2a:f7:de:e2:b9:9c:1f:83:66:df:fa: 79:65:22:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERGRjIxMTAvBgNVBAUTKEY4M0RDM0EyNDZEMTIxNTFBQzg3QTc3MkNFQ0EwRURE MjE1Rjg2MkEwHhcNMjYwNzI3MDUzODE0WhcNMjYwODAzMDUzODE0WjAYMRYwFAYD VQQDEw02YTY2ZWVjNi03YzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAicZJ0cP2LuPliFUHIZAW/fOCepU7sRyLLcDCjOTaYhIxt8XcrsbDmW5zaSp/ cvlv3zoSBIHvW05Q1F160NW1ljwTlQYVJyG6ANB5o3mItYJcEYCkI/tzWWdaDLU7 r0AInOerlueW2TiMcRnIruCy0+e7oeyy8B4BMkSTqqwUTDMDpWsP6KvM4wQuoWiy i+z+Z4iOmaA2+NjA5TFpOXgTfZyw7tW5O1dQxPPJbhkdWRcxVmw1atwDk5tdScbE bLu8hpsQAzNMpcgvSFN6BwCWPChzw2cYz2B+S1yUxz7N3s043Q1oHmb6jRh7LdiZ wiGzZCEIc+ZGCLwsSW+sG1sGAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAb0h08y lbvNN7ljnTPva7JcI2xXMB8GA1UdIwQYMBaAFPg9w6JG0SFRrIencs7KDt0hX4Yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREZGMi9DOUFGMjkzNEU1 QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklWR3NoNmR5enNvTzNTRmZo aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1EM0Rva2JSSVZHc2g2ZHl6c29PM1NGZmhpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REZGMi9DOUFGMjkzNEU1QzExMUVFOThEQkU5NjJDNEY5QUUwMi8tRDNEb2tiUklW R3NoNmR5enNvTzNTRmZoaW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASLp3B3lqJHev6WsbQtRG2BgcBMRsdFhKzUBothVuCg0RbCL+//1fdbfZ6JdB M6LonTUPIAP1hbIsBluQ6m0VHzAclbR5z5NsTD73QcPxlOO7PtL0QYLpyQFzQB9Z CIRlmitCjP+D3KDNOwXqyAJ4GGRGJt1+jk6xLpg7JblaKdAKRAVtX9Mcw+FRM3Du YGC4hKVlFr+xzteAv/9OX1fdi2Tp92UGar8fs12aS2mIGhl+h7EyHaPej0iua3ke U4VdnPR3fxVClFOe2OKVtpPLSWnsGOvCBc6ksFliF5AHOEBdL37SkLut6Gk7MMIG c8JQtir33uK5nB+DZt/6eWUiSg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:25:37 2026 by rpki-client