$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: HceohrbpkYCO7llt2XW4U3wH535w48V5T0DScMIbo44= Subject key identifier: 5B:47:B6:5B:24:F7:9D:23:CB:49:7E:C9:A3:BD:24:46:E5:64:6F:92 Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 0552 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 050A Signing time: Mon 27 Jul 2026 00:44:47 +0000 Manifest this update: Mon 27 Jul 2026 00:44:46 +0000 Manifest next update: Mon 03 Aug 2026 00:44:46 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: UBNNeZLRBsk1SOWs6XwzYmvGAyGaSX5ZIhMO76daKuQ=) 2: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=) 3: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=) 4: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=) 5: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=) 6: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=) 7: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=) 8: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1362 (0x552) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Jul 27 00:44:46 2026 GMT Not After : Aug 3 00:44:46 2026 GMT Subject: CN=6a66a9ff-2e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:85:c3:bf:c6:1f:34:f4:e1:12:78:c3:4f:80: e1:45:ca:48:fc:1b:9e:f6:81:e7:63:83:c4:ea:62: a6:83:b7:9c:11:42:8f:2b:ca:e6:68:9a:93:39:93: 0b:7d:9b:7d:0c:13:25:33:11:a3:bd:87:c6:3d:f8: 44:be:07:75:c6:dd:b8:25:70:6e:02:6f:2a:bb:4f: 87:ef:ff:2d:1e:07:db:18:0d:40:02:30:02:f4:31: b2:4b:9f:90:33:a0:5d:b6:b5:18:cf:e8:e3:bb:d0: 78:be:75:cb:78:61:77:33:42:af:bb:c4:07:02:00: 51:37:67:0d:ea:0b:d1:fe:13:4b:27:29:75:ca:0f: 66:ac:e1:1a:46:6c:bd:9e:a6:f3:ab:38:0e:15:41: e2:2b:b3:b4:d5:41:cc:b5:e4:11:42:b6:4f:0d:27: f4:36:1b:24:47:a3:9e:e6:03:f2:d9:40:d2:75:bc: b1:e0:91:fd:ef:20:12:20:3c:25:13:8d:7f:fb:dd: 3e:39:7e:c7:c5:6c:d3:28:a0:fc:1c:22:ac:5b:97: 55:bf:57:48:98:e7:43:40:a1:81:1e:6d:89:99:a6: 54:1d:c5:62:72:dd:df:84:f6:0f:2f:a6:55:42:4b: 11:a1:0e:a9:bc:94:4b:37:e0:aa:ab:e3:09:e2:4a: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:47:B6:5B:24:F7:9D:23:CB:49:7E:C9:A3:BD:24:46:E5:64:6F:92 X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:bb:5a:af:f8:2d:d8:84:d7:a3:c8:16:65:88:f8:19:98:a9: f6:88:eb:8d:98:9e:2a:a9:d5:5d:c2:6d:cb:83:84:d5:9d:96: fe:43:e0:5a:e2:26:10:5b:58:81:59:c3:c6:98:5a:56:bc:6c: f5:f3:88:e0:bd:4a:7b:06:48:8f:c5:cd:17:a5:dd:cd:e0:73: 35:81:aa:c4:d8:56:03:2f:7d:4a:f6:f2:1f:d3:50:1d:94:44: 95:53:f9:dc:7c:10:c4:1c:27:aa:8d:f4:4b:60:92:3f:ca:99: fc:8f:b5:bc:f8:60:f6:89:96:1e:4d:9d:e7:73:af:1d:9f:7d: 9d:7f:45:96:cc:83:0d:3e:87:ef:4f:c2:03:66:5b:0c:c4:86: c9:c6:51:b5:67:67:6a:4e:56:f8:c5:9f:5e:34:2a:dd:e9:5b: 78:36:de:78:39:e6:d8:d5:b5:d8:83:be:a7:ef:a1:45:56:d4: 90:30:87:a0:94:4c:d9:de:45:fd:91:6b:6b:3c:70:e3:1d:b5: 6b:3e:86:44:52:0b:0c:7a:a4:43:7b:5f:18:ac:b5:df:17:c2: b5:b5:8e:90:8a:13:9b:09:67:15:a5:3c:00:01:92:55:ab:27: 36:f3:02:3e:34:11:a0:5f:d6:90:cb:5a:f5:0d:84:8d:50:13: d6:10:e5:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwNzI3MDA0NDQ2WhcNMjYwODAzMDA0NDQ2WjAYMRYwFAYD VQQDEw02YTY2YTlmZi0yZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYXDv8YfNPThEnjDT4DhRcpI/Bue9oHnY4PE6mKmg7ecEUKPK8rmaJqTOZML fZt9DBMlMxGjvYfGPfhEvgd1xt24JXBuAm8qu0+H7/8tHgfbGA1AAjAC9DGyS5+Q M6BdtrUYz+jju9B4vnXLeGF3M0Kvu8QHAgBRN2cN6gvR/hNLJyl1yg9mrOEaRmy9 nqbzqzgOFUHiK7O01UHMteQRQrZPDSf0NhskR6Oe5gPy2UDSdbyx4JH97yASIDwl E41/+90+OX7HxWzTKKD8HCKsW5dVv1dImOdDQKGBHm2JmaZUHcVict3fhPYPL6ZV QksRoQ6pvJRLN+Cqq+MJ4kpDZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFtHtlsk 950jy0l+yaO9JEblZG+SMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVbtar/gt2ITXo8gWZYj4GZip9ojrjZieKqnVXcJty4OE1Z2W/kPgWuImEFtY gVnDxphaVrxs9fOI4L1KewZIj8XNF6XdzeBzNYGqxNhWAy99SvbyH9NQHZRElVP5 3HwQxBwnqo30S2CSP8qZ/I+1vPhg9omWHk2d53OvHZ99nX9FlsyDDT6H70/CA2Zb DMSGycZRtWdnak5W+MWfXjQq3elbeDbeeDnm2NW12IO+p++hRVbUkDCHoJRM2d5F /ZFrazxw4x21az6GRFILDHqkQ3tfGKy13xfCtbWOkIoTmwlnFaU8AAGSVasnNvMC PjQRoF/WkMta9Q2EjVAT1hDlBg== -----END CERTIFICATE-----Generated at Tue Jul 28 22:57:33 2026 by rpki-client