$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: EHKmdVbp7T/1MAfe5HsZ08kuvlHRff5GolKfnI1bWnc= Subject key identifier: F4:63:82:76:8B:48:CA:B4:6D:A0:62:BD:CF:34:22:7A:BB:79:3E:2D Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0A4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0A2F Signing time: Tue 28 Jul 2026 20:04:33 +0000 Manifest this update: Tue 28 Jul 2026 20:04:32 +0000 Manifest next update: Tue 04 Aug 2026 20:04:32 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: djSxLTNMHZajJoGAj3MHoDG5wsV2h9Or8HnhdMdH6B4=) 2: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: 5herfVtiX3Vkwm/8fsoSk+EzMfC6vIVDvWWZDlnOkKU=) 3: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 8dSZPcTAakCu9QFROWtp0AtwoX7QWCqBkxw8aYFakak=) 4: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: icEGC8iWrZAuCb+Toy7ITwaY5wPDLr4xdAi9iPNhR7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2637 (0xa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Jul 28 20:04:32 2026 GMT Not After : Aug 4 20:04:32 2026 GMT Subject: CN=6a690b51-3d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2b:7d:1c:b5:84:01:79:d8:76:67:ce:a8:9e: 21:63:fe:f5:3c:6f:14:11:db:7f:20:0a:ad:28:59: 40:a0:b4:c4:96:28:b6:a2:bd:05:ba:94:4b:31:b0: e8:02:60:02:78:9b:15:c3:d3:5e:cd:5c:be:9c:71: f6:f4:1e:2e:4c:4e:e7:64:93:38:44:5b:38:43:11: 03:09:e0:06:d7:00:2a:eb:be:2c:66:b9:9a:ce:80: 4f:30:3a:e4:c7:88:88:ab:6e:1e:de:77:f6:0c:00: a3:e6:df:cc:69:4e:07:80:31:79:5d:f2:e8:70:51: ba:f5:5a:8f:07:be:62:2b:d4:44:e3:6e:d2:c0:20: f8:00:6e:56:01:b6:32:67:58:f2:17:0a:71:08:3f: 1d:e3:87:72:f5:8d:6a:c0:55:9b:a8:de:9c:55:6d: f3:f3:69:c1:27:56:a8:2b:1f:a5:3a:1c:27:b8:ed: 7e:8d:d9:3c:a2:2f:9e:1b:15:48:db:61:00:3f:25: f9:ad:3f:92:12:de:b9:00:fa:ac:23:b2:c1:b5:04: d0:eb:10:eb:31:83:1d:7f:1b:ad:78:81:19:a2:10: e6:95:cd:b9:66:dc:ac:e6:6b:0b:64:5e:79:21:88: d1:b3:24:78:2c:ac:1c:aa:cb:d3:fa:be:34:8b:ec: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:63:82:76:8B:48:CA:B4:6D:A0:62:BD:CF:34:22:7A:BB:79:3E:2D X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:d3:3d:ab:d4:93:48:5f:68:b9:94:26:f8:ca:2a:5c:aa:f5: 47:76:d6:41:ab:98:5b:51:75:42:d4:98:4a:1f:d5:ec:67:53: c9:f2:1b:d2:66:30:11:a3:a0:32:01:5f:99:2d:cf:c4:c1:d0: aa:30:6c:a9:bd:81:9d:df:c0:3e:e2:c6:b8:ad:d1:09:3f:03: c9:0b:82:28:2e:c9:51:f3:67:a5:12:85:09:2b:26:8a:93:6b: f4:47:f1:15:21:fc:2d:38:a3:3b:ea:08:81:78:5b:ec:1d:9f: 20:eb:b7:52:51:58:ce:38:8a:88:bf:aa:17:c2:2a:70:a0:60: 65:d1:9a:9b:a7:69:45:6e:26:67:20:d7:ec:08:e1:bc:ba:3c: bf:f1:2a:ae:f0:5c:b9:0f:42:73:89:4a:30:d3:ff:81:96:1a: 3b:10:4f:19:b5:9e:79:7b:65:9e:05:50:20:31:b8:8b:9e:92: 5f:a5:2f:09:be:d7:cd:7a:88:e4:de:44:84:02:05:b4:c7:92: 81:7b:20:10:93:46:8c:22:01:e0:f9:83:be:c0:1c:fb:fc:5d: 76:61:ad:3d:bd:a3:93:e7:c0:0a:70:72:3b:4e:9a:dd:c4:9c: dd:d8:2a:83:05:f2:ed:07:ec:c6:ac:a2:e4:7a:36:b3:a4:0b: 26:13:65:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjYwNzI4MjAwNDMyWhcNMjYwODA0MjAwNDMyWjAYMRYwFAYD VQQDEw02YTY5MGI1MS0zZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlCt9HLWEAXnYdmfOqJ4hY/71PG8UEdt/IAqtKFlAoLTElii2or0FupRLMbDo AmACeJsVw9NezVy+nHH29B4uTE7nZJM4RFs4QxEDCeAG1wAq674sZrmazoBPMDrk x4iIq24e3nf2DACj5t/MaU4HgDF5XfLocFG69VqPB75iK9RE427SwCD4AG5WAbYy Z1jyFwpxCD8d44dy9Y1qwFWbqN6cVW3z82nBJ1aoKx+lOhwnuO1+jdk8oi+eGxVI 22EAPyX5rT+SEt65APqsI7LBtQTQ6xDrMYMdfxuteIEZohDmlc25Ztys5msLZF55 IYjRsyR4LKwcqsvT+r40i+yHNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPRjgnaL SMq0baBivc80Inq7eT4tMB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlNM9q9STSF9ouZQm+MoqXKr1R3bWQauYW1F1QtSYSh/V7GdTyfIb0mYwEaOg MgFfmS3PxMHQqjBsqb2Bnd/APuLGuK3RCT8DyQuCKC7JUfNnpRKFCSsmipNr9Efx FSH8LTijO+oIgXhb7B2fIOu3UlFYzjiKiL+qF8IqcKBgZdGam6dpRW4mZyDX7Ajh vLo8v/EqrvBcuQ9Cc4lKMNP/gZYaOxBPGbWeeXtlngVQIDG4i56SX6UvCb7XzXqI 5N5EhAIFtMeSgXsgEJNGjCIB4PmDvsAc+/xddmGtPb2jk+fACnByO06a3cSc3dgq gwXy7Qfsxqyi5Ho2s6QLJhNlAA== -----END CERTIFICATE-----Generated at Wed Jul 29 05:29:05 2026 by rpki-client