$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft File: mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json) Hash identifier: yazgBvuXDAkf9mJUcZyEahMZ/p43E9IWp/I6WGv4LP8= Subject key identifier: 04:A5:33:8D:AD:80:8A:65:62:0B:1D:3C:AB:63:E7:75:DC:C6:6D:54 Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 Certificate issuer: /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Certificate serial: 2614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft Manifest number: A2B1 Signing time: Tue 28 Jul 2026 14:31:05 +0000 Manifest this update: Tue 28 Jul 2026 14:31:05 +0000 Manifest next update: Tue 04 Aug 2026 14:31:05 +0000 Files and hashes: 1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: Kh4Zmw5CSRsQf+p15Z8laUWbHyiIeTZbDCA86oDk8GM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9748 (0x2614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816 Validity Not Before: Jul 28 14:31:05 2026 GMT Not After : Aug 4 14:31:05 2026 GMT Subject: CN=6a68bd29-9b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:73:4e:e1:e4:92:87:1e:92:f5:b8:ef:ad:98: 2d:38:7b:0f:70:38:d7:13:c8:74:62:94:7e:bb:1e: a3:0d:ea:4d:25:46:8c:2e:87:94:3f:0d:d0:e5:2f: 51:9f:4a:3a:72:9f:71:e6:68:d1:04:30:fb:d3:5e: 75:ec:f6:6e:d0:ba:1e:44:99:0b:70:5d:ed:f5:88: 5c:5a:db:f6:db:a0:5b:05:5b:05:46:98:25:1d:2d: 1e:4c:5d:2d:44:f6:20:64:74:df:49:ea:37:65:d0: c5:29:72:93:ae:c4:42:d3:07:00:ca:8c:47:1c:be: 2f:c7:72:ad:b8:e3:a3:8a:38:ec:2d:05:5a:e1:3e: 36:e5:45:5f:41:33:76:b0:5b:83:b6:ac:8c:6c:b4: 6f:5f:cd:a9:d2:37:29:05:0d:32:5c:7f:3d:96:65: 0f:80:bd:58:04:d1:31:c5:38:f6:04:5c:4f:1b:41: b3:09:2e:6a:cf:be:7f:6a:a3:a4:e5:fd:ef:a0:ca: 5d:5e:1e:56:0b:57:39:08:18:ec:21:5b:35:e1:6c: dd:29:85:9a:23:bb:a4:3c:c9:96:84:c9:90:7f:13: 0f:75:24:db:c7:20:ad:02:d3:e1:b9:c5:c4:b0:ec: 3a:60:6d:17:50:32:90:8e:fd:60:1d:29:fe:76:b5: 25:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A5:33:8D:AD:80:8A:65:62:0B:1D:3C:AB:63:E7:75:DC:C6:6D:54 X509v3 Authority Key Identifier: keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:12:56:4f:74:ac:c0:76:1f:ef:43:86:d4:4d:45:93:b3:f8: e3:a5:e7:87:93:50:c4:95:5b:59:71:76:50:2b:06:8e:0f:93: f1:ca:5a:d9:47:09:28:3e:0b:3e:19:a5:07:b3:be:c3:e4:17: 3d:a9:da:fd:a0:2b:0c:f3:d0:b5:0e:bb:69:fb:1c:90:53:8c: 77:10:d5:76:a4:77:3d:f1:cb:50:d9:37:c6:b5:f9:b5:f0:f9: 88:69:48:54:d8:ce:f3:6c:66:c2:9c:42:0d:c9:36:d9:2d:30: 32:1c:37:4a:f7:d3:ea:21:77:30:8a:bb:05:d8:73:eb:16:0f: a3:58:50:23:24:72:55:04:7f:ba:1b:f6:04:72:ce:d0:8e:70: 78:7e:41:28:03:81:87:46:d5:21:55:7f:93:15:df:59:f9:7a: f6:8e:5a:a4:29:38:53:e2:5a:6f:a4:0c:20:7e:55:d1:20:d3: a3:c6:f2:3b:c8:81:91:ba:d4:48:87:79:71:0c:f7:5e:28:e1: bc:a2:6c:78:f0:36:6b:fc:b7:a0:db:06:06:c7:11:5f:03:fa: a6:65:9f:9c:9f:3f:1c:95:7a:d1:52:19:fc:fe:4f:fc:5d:89: 0b:c2:48:aa:70:5e:60:69:28:ab:ad:2d:bd:3b:96:0c:5b:e0: 97:ce:45:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZENUQxMTAvBgNVBAUTKDk4NUE2NjVBOUNGQjRGNUNBMDBFQ0E4QkZFQjgwNjMw QkY0RjQ4MTYwHhcNMjYwNzI4MTQzMTA1WhcNMjYwODA0MTQzMTA1WjAYMRYwFAYD VQQDEw02YTY4YmQyOS05YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA33NO4eSShx6S9bjvrZgtOHsPcDjXE8h0YpR+ux6jDepNJUaMLoeUPw3Q5S9R n0o6cp9x5mjRBDD701517PZu0LoeRJkLcF3t9YhcWtv226BbBVsFRpglHS0eTF0t RPYgZHTfSeo3ZdDFKXKTrsRC0wcAyoxHHL4vx3KtuOOjijjsLQVa4T425UVfQTN2 sFuDtqyMbLRvX82p0jcpBQ0yXH89lmUPgL1YBNExxTj2BFxPG0GzCS5qz75/aqOk 5f3voMpdXh5WC1c5CBjsIVs14WzdKYWaI7ukPMmWhMmQfxMPdSTbxyCtAtPhucXE sOw6YG0XUDKQjv1gHSn+drUlgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFASlM42t gIplYgsdPKtj53Xcxm1UMB8GA1UdIwQYMBaAFJhaZlqc+09coA7Ki/64BjC/T0gW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkQ1RC85RENCNjhFMDFE ODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1QxeWdEc3FMX3JnR01MOVBT QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21GcG1XcHo3VDF5Z0RzcUxfcmdHTUw5UFNCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkQ1RC85RENCNjhFMDFEODgxMUUyOTRCOTU1RTEwOEIwMkNEMi9tRnBtV3B6N1Qx eWdEc3FMX3JnR01MOVBTQlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASxJWT3SswHYf70OG1E1Fk7P446Xnh5NQxJVbWXF2UCsGjg+T8cpa2UcJKD4L PhmlB7O+w+QXPana/aArDPPQtQ67afsckFOMdxDVdqR3PfHLUNk3xrX5tfD5iGlI VNjO82xmwpxCDck22S0wMhw3SvfT6iF3MIq7Bdhz6xYPo1hQIyRyVQR/uhv2BHLO 0I5weH5BKAOBh0bVIVV/kxXfWfl69o5apCk4U+Jab6QMIH5V0SDTo8byO8iBkbrU SId5cQz3XijhvKJsePA2a/y3oNsGBscRXwP6pmWfnJ8/HJV60VIZ/P5P/F2JC8JI qnBeYGkoq60tvTuWDFvgl85FsQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:28:50 2026 by rpki-client