$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft File: PN9D1xf8WEnyOpTimncrKKXXAeM.mft (raw, json) Hash identifier: 9Y5zixO6hgxJSNgnxDgco8SkNfDiZDgNlQoKoi0P4+I= Subject key identifier: 9F:15:33:11:43:94:F5:97:D1:D8:12:A2:06:FD:1B:23:CA:50:02:7C Authority key identifier: 3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3 Certificate issuer: /CN=A91E3BB3/serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3 Certificate serial: 092F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft Manifest number: 0923 Signing time: Sun 26 Jul 2026 20:47:24 +0000 Manifest this update: Sun 26 Jul 2026 20:47:23 +0000 Manifest next update: Sun 02 Aug 2026 20:47:23 +0000 Files and hashes: 1: PN9D1xf8WEnyOpTimncrKKXXAeM.crl (hash: LRJ1dMWljiC0To39bSq83EmPLKRl/mLTYyns8QtNZqQ=) 2: D0CF108ED85111EF9DC0826CC4F9AE02.roa (hash: wbC8vyImx6v6ewZMr1D8zOdi43W+XjTwWRTdg25wKL8=) 3: 4HgjSuBlPABaHgROvDD8HEMkcvQ.asa (hash: R3jFLK1KPKNoasUTSWi6tG8j11b8DnXxyWlLxaUSpHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2351 (0x92f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3BB3, serialNumber=3CDF43D717FC5849F23A94E29A772B28A5D701E3 Validity Not Before: Jul 26 20:47:23 2026 GMT Not After : Aug 2 20:47:23 2026 GMT Subject: CN=6a66725c-082c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:bd:2d:0c:40:6e:87:90:68:96:f3:bf:0f: 9a:a2:47:7c:4c:19:fa:f1:6c:36:85:90:66:cd:16: 02:ca:6f:26:d8:87:59:7e:0b:28:d7:c8:6a:1a:ef: 0e:14:ae:92:c7:f8:e1:a3:e0:67:c9:30:a4:57:df: a9:6c:4f:29:18:dc:8d:7b:50:a4:b6:66:0d:76:9d: 45:2b:5c:fa:a7:e0:2f:ec:67:a7:2f:12:c5:ac:95: 43:91:86:02:74:8b:04:6e:4d:11:92:0a:2f:63:fa: 6a:3a:37:b8:72:4c:18:50:1d:f9:8c:88:bc:d3:4f: db:73:29:0f:9a:dd:9c:37:8c:93:93:25:a4:87:23: 07:bb:d7:65:b2:23:ec:a8:41:34:94:29:d3:c7:cc: a7:d2:51:08:63:f0:96:92:e2:fa:e0:a1:f7:52:51: 70:ae:af:8c:bf:90:a2:51:65:31:28:c5:43:4c:67: 28:32:b3:cb:27:68:9f:5c:c8:49:fd:cf:0e:7d:7b: cd:28:93:1d:59:8c:40:40:40:57:0c:7a:29:c7:59: fe:08:f7:74:8e:53:cb:a4:3e:98:a6:6f:84:05:64: ff:e8:8e:28:7d:4b:d4:08:a0:6e:51:3d:d2:be:92: 60:ea:df:fb:b1:bb:04:92:46:4b:2d:1a:b5:13:66: 3c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:15:33:11:43:94:F5:97:D1:D8:12:A2:06:FD:1B:23:CA:50:02:7C X509v3 Authority Key Identifier: keyid:3C:DF:43:D7:17:FC:58:49:F2:3A:94:E2:9A:77:2B:28:A5:D7:01:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN9D1xf8WEnyOpTimncrKKXXAeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3BB3/95AEA9E8CBE411EA806A4A75C4F9AE02/PN9D1xf8WEnyOpTimncrKKXXAeM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3f:df:47:31:98:e1:a7:ce:2f:0c:06:8f:17:69:60:f8:37: 08:c5:84:7b:a5:3d:a6:14:5c:c2:2a:6c:2d:ee:78:35:32:79: 4e:36:f3:89:ea:cc:85:df:03:39:bc:e4:08:a3:18:ec:01:b8: b8:08:b5:cb:d0:6c:62:2f:70:b9:2f:c5:d3:05:20:16:ae:2d: 68:b0:5a:24:3c:b5:29:de:4a:4a:5a:0a:07:77:5b:8d:3e:e0: 96:97:ce:06:9b:74:2f:54:9c:02:48:81:e3:f1:08:d7:a8:ba: c3:ce:ee:a6:43:95:31:6c:07:92:d5:04:e7:22:6e:c7:ce:46: d4:c4:60:f4:57:52:09:af:5b:9d:a1:f1:7b:f1:3c:ee:97:42: de:73:cb:2d:bb:af:f7:89:86:7e:5a:ec:57:31:7b:f6:fa:0f: 79:3d:1e:56:9c:30:db:33:bf:57:aa:b7:09:73:39:4a:e2:43: 22:be:07:e3:36:dd:0d:90:76:5f:c0:1c:2d:96:5c:2d:10:de: 8a:7c:cc:48:95:b7:ce:4b:54:cf:f0:f6:c4:55:b7:5e:a4:4e: 9b:7f:bc:0d:f3:b4:9b:ae:4c:33:ce:a1:0a:d1:86:4e:19:06: d6:51:e6:c2:e8:cc:d8:6f:17:d7:c7:a9:04:6a:19:07:4d:1a: 70:ff:8d:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNCQjMxMTAvBgNVBAUTKDNDREY0M0Q3MTdGQzU4NDlGMjNBOTRFMjlBNzcyQjI4 QTVENzAxRTMwHhcNMjYwNzI2MjA0NzIzWhcNMjYwODAyMjA0NzIzWjAYMRYwFAYD VQQDEw02YTY2NzI1Yy0wODJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtX29LQxAboeQaJbzvw+aokd8TBn68Ww2hZBmzRYCym8m2IdZfgso18hqGu8O FK6Sx/jho+BnyTCkV9+pbE8pGNyNe1CktmYNdp1FK1z6p+Av7GenLxLFrJVDkYYC dIsEbk0RkgovY/pqOje4ckwYUB35jIi800/bcykPmt2cN4yTkyWkhyMHu9dlsiPs qEE0lCnTx8yn0lEIY/CWkuL64KH3UlFwrq+Mv5CiUWUxKMVDTGcoMrPLJ2ifXMhJ /c8OfXvNKJMdWYxAQEBXDHopx1n+CPd0jlPLpD6Ypm+EBWT/6I4ofUvUCKBuUT3S vpJg6t/7sbsEkkZLLRq1E2Y8uwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ8VMxFD lPWX0dgSogb9GyPKUAJ8MB8GA1UdIwQYMBaAFDzfQ9cX/FhJ8jqU4pp3Kyil1wHj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0JCMy85NUFFQTlFOENC RTQxMUVBODA2QTRBNzVDNEY5QUUwMi9QTjlEMXhmOFdFbnlPcFRpbW5jcktLWFhB ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BOOUQxeGY4V0VueU9wVGltbmNyS0tYWEFlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0JCMy85NUFFQTlFOENCRTQxMUVBODA2QTRBNzVDNEY5QUUwMi9QTjlEMXhmOFdF bnlPcFRpbW5jcktLWFhBZU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfj/fRzGY4afOLwwGjxdpYPg3CMWEe6U9phRcwipsLe54NTJ5TjbzierMhd8D ObzkCKMY7AG4uAi1y9BsYi9wuS/F0wUgFq4taLBaJDy1Kd5KSloKB3dbjT7glpfO Bpt0L1ScAkiB4/EI16i6w87upkOVMWwHktUE5yJux85G1MRg9FdSCa9bnaHxe/E8 7pdC3nPLLbuv94mGflrsVzF79voPeT0eVpww2zO/V6q3CXM5SuJDIr4H4zbdDZB2 X8AcLZZcLRDeinzMSJW3zktUz/D2xFW3XqROm3+8DfO0m65MM86hCtGGThkG1lHm wujM2G8X18epBGoZB00acP+NBg== -----END CERTIFICATE-----Generated at Tue Jul 28 14:48:30 2026 by rpki-client