$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: j6BQbnu/Jl9GqK8uwcr2J3GLSG/+5HfiFwWTEx/bIlA= Subject key identifier: F5:C3:ED:68:42:43:DB:1A:6E:09:FB:95:07:9E:F3:21:6C:B9:D3:CD Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 050B Signing time: Wed 29 Jul 2026 00:26:05 +0000 Manifest this update: Wed 29 Jul 2026 00:26:05 +0000 Manifest next update: Wed 05 Aug 2026 00:26:05 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: dHPlNqdD5UurqCFkut+P1+gBnYn+9hDUwo8uaZnwwfU=) 2: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=) 4: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=) 5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=) 6: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=) 7: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=) 8: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Jul 29 00:26:05 2026 GMT Not After : Aug 5 00:26:05 2026 GMT Subject: CN=6a69489d-4c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7e:2c:b4:1c:f9:7a:6c:23:84:6a:ea:fc:9f: 1d:d7:86:eb:f9:ad:99:79:80:9f:bc:d8:56:bb:e5: f5:7e:a0:57:27:ac:48:ed:22:df:0d:3f:59:91:9f: 01:12:14:b1:84:4f:3f:dd:9c:dc:6a:6d:03:66:9b: 45:0d:a5:07:b4:9c:85:1f:bc:74:52:e7:c6:2b:82: 6f:f7:de:a8:5c:ec:42:13:10:e5:4d:0a:3f:54:0b: 1e:2d:23:6a:ce:f7:43:24:4e:4a:b1:a5:82:58:5f: 7d:fa:58:a3:4d:ff:7c:cb:53:10:0f:78:f1:2b:b4: 39:14:df:8b:84:0c:8d:e2:e1:91:bc:79:b2:90:55: 80:b0:24:02:8d:5d:1c:f9:26:69:e3:5d:18:64:9a: 12:1f:48:3b:53:b5:eb:08:84:da:6a:0c:3f:a6:8a: 7a:cd:cb:b6:f7:93:88:78:38:90:72:57:92:7b:bb: 5a:4f:66:0e:57:a5:5a:d9:36:c5:ad:df:10:17:be: 2b:14:5b:dd:0e:09:15:db:bd:a4:fb:18:97:86:d1: 9d:c5:5e:5a:01:aa:c7:ac:d4:66:30:ae:f9:b0:06: c3:b3:d4:17:b9:d7:ff:f1:a6:b8:e3:de:db:d6:2e: 40:7c:cb:ef:bf:11:a0:61:c6:e2:c1:ee:a0:b2:99: 79:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C3:ED:68:42:43:DB:1A:6E:09:FB:95:07:9E:F3:21:6C:B9:D3:CD X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8c:81:e3:29:4d:e0:bb:97:60:d7:5f:79:d1:fc:e6:7f:5a: 90:2a:fc:fb:c1:86:f9:57:e4:2a:f1:3c:c9:91:68:cb:4d:29: 98:a3:ec:d6:bf:22:e9:f7:53:06:fa:9f:8b:dd:cb:68:d5:70: de:ff:f2:4f:f8:66:e9:7e:77:db:c9:70:aa:47:65:24:30:af: dc:d0:9f:94:e1:f5:c8:78:5c:ab:5d:7f:e1:31:dd:7f:41:3a: 6d:0c:96:ae:a1:f4:f1:21:76:df:14:3c:a1:09:f4:e0:be:95: 1d:0f:65:ee:38:8b:a5:f5:4a:2e:1d:f7:bc:f3:f0:3e:9c:ed: b6:6c:1f:7f:5a:41:0d:bd:47:89:a3:23:2b:f1:95:4e:17:6e: f4:9e:28:09:48:89:2b:0f:0d:4a:11:d5:0d:74:59:80:c7:3a: 25:a8:1a:2c:5c:bb:b0:74:78:18:f2:02:e0:7a:dc:ac:fa:c1: 8b:85:ab:3a:a2:e3:e9:f9:ca:03:65:43:6f:10:60:65:b7:b1: 03:69:6f:75:30:2b:b2:67:aa:bb:85:dc:0c:60:86:5c:64:38: 71:5a:74:d8:db:47:be:7a:12:28:7a:e9:03:d5:9b:c6:f5:64: 89:88:2a:46:fd:19:d6:2e:dd:96:3a:7f:dd:18:4c:04:1d:e1: 63:25:38:ed -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwNzI5MDAyNjA1WhcNMjYwODA1MDAyNjA1WjAYMRYwFAYD VQQDEw02YTY5NDg5ZC00YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA234stBz5emwjhGrq/J8d14br+a2ZeYCfvNhWu+X1fqBXJ6xI7SLfDT9ZkZ8B EhSxhE8/3Zzcam0DZptFDaUHtJyFH7x0UufGK4Jv996oXOxCExDlTQo/VAseLSNq zvdDJE5KsaWCWF99+lijTf98y1MQD3jxK7Q5FN+LhAyN4uGRvHmykFWAsCQCjV0c +SZp410YZJoSH0g7U7XrCITaagw/pop6zcu295OIeDiQcleSe7taT2YOV6Va2TbF rd8QF74rFFvdDgkV272k+xiXhtGdxV5aAarHrNRmMK75sAbDs9QXudf/8aa4497b 1i5AfMvvvxGgYcbiwe6gspl50wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXD7WhC Q9sabgn7lQee8yFsudPNMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALYyB4ylN4LuXYNdfedH85n9akCr8+8GG+VfkKvE8yZFoy00pmKPs1r8i6fdT Bvqfi93LaNVw3v/yT/hm6X5328lwqkdlJDCv3NCflOH1yHhcq11/4THdf0E6bQyW rqH08SF23xQ8oQn04L6VHQ9l7jiLpfVKLh33vPPwPpzttmwff1pBDb1HiaMjK/GV Thdu9J4oCUiJKw8NShHVDXRZgMc6JagaLFy7sHR4GPIC4HrcrPrBi4WrOqLj6fnK A2VDbxBgZbexA2lvdTArsmequ4XcDGCGXGQ4cVp02NtHvnoSKHrpA9WbxvVkiYgq Rv0Z1i7dljp/3RhMBB3hYyU47Q== -----END CERTIFICATE-----Generated at Wed Jul 29 02:56:20 2026 by rpki-client