$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft File: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft (raw, json) Hash identifier: mhMlfeq1upj3z4lssjKCoh1yHTiSLfdrH6GK8jTwty0= Subject key identifier: 8F:80:F0:0C:17:1B:F4:F7:EF:50:64:AD:C1:B4:F4:B8:6F:F3:68:69 Authority key identifier: F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 Certificate issuer: /CN=A91ED571/serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Certificate serial: 0E3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft Manifest number: 0E35 Signing time: Tue 28 Jul 2026 17:55:14 +0000 Manifest this update: Tue 28 Jul 2026 17:55:14 +0000 Manifest next update: Tue 04 Aug 2026 17:55:14 +0000 Files and hashes: 1: 9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl (hash: WvPk4zuDV7Bwa6eat9mzHPBBAkZC9zBcgJNed4TmNys=) 2: C9819022CE7011E98E86DD52C4F9AE02.roa (hash: qKnMxoYQzAYEoqtHJW7SDhxTwL61Wk1XcPGIb5rMW/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3647 (0xe3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED571, serialNumber=F4F15C675ED9A5C2D1995B27FB53FF60FF0249E0 Validity Not Before: Jul 28 17:55:14 2026 GMT Not After : Aug 4 17:55:14 2026 GMT Subject: CN=6a68ed02-8b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:ad:93:e9:d2:01:7d:c1:70:30:80:78:6a: 96:83:4d:51:36:43:e2:f8:c1:01:df:73:14:fd:41: 53:ec:49:61:9c:a4:2b:1d:d8:c2:8e:52:93:c6:85: 7e:01:69:76:d8:59:2e:a2:f1:2c:10:b7:82:de:56: 55:09:65:e0:78:02:51:75:c4:fe:0e:ba:bb:94:27: 2d:1f:46:b8:64:3b:06:33:21:3a:92:ab:f8:e8:b9: 94:ff:8e:d5:79:f5:80:90:61:59:76:56:65:45:65: 4d:b1:fc:51:5b:4e:97:21:a0:61:6c:7e:f7:2b:5d: 02:15:60:3a:05:a1:b4:47:5b:4e:20:6e:8b:ce:d1: 74:cf:2f:e8:bb:8f:5f:ed:dc:10:51:a0:2a:15:9b: 92:9f:2a:0e:eb:c8:49:24:b2:cc:89:42:50:4e:53: 59:e6:e9:a5:3b:52:45:0a:b5:42:e0:51:2a:d2:85: c1:eb:1b:c9:bd:98:79:28:ed:21:12:20:73:26:59: fc:67:56:90:d6:24:a4:f5:92:43:8d:11:ca:a5:e5: 16:4b:23:c0:18:83:68:2f:64:c2:dc:6f:d9:58:ab: fb:2d:be:19:01:04:91:05:7c:f6:df:b2:3d:c8:83: bb:44:0e:c8:f1:74:68:7e:d0:f3:a7:97:5c:4f:5e: 8c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:80:F0:0C:17:1B:F4:F7:EF:50:64:AD:C1:B4:F4:B8:6F:F3:68:69 X509v3 Authority Key Identifier: keyid:F4:F1:5C:67:5E:D9:A5:C2:D1:99:5B:27:FB:53:FF:60:FF:02:49:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED571/ECD2DF96CE6F11E9A0D86D51C4F9AE02/9PFcZ17ZpcLRmVsn-1P_YP8CSeA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:a8:f4:e7:29:70:d8:d5:3a:ba:f3:e3:0e:82:17:33:57:c1: ee:ba:16:d9:87:46:80:32:60:96:38:81:6f:c7:6d:8f:26:97: ee:40:9b:77:fb:4f:86:4a:74:9a:3a:6c:71:2d:93:17:5e:fe: 9d:e3:5c:26:b4:c2:63:10:f2:b9:cb:0a:ac:38:2c:84:04:68: ce:06:f9:2e:1e:db:19:41:ef:29:4f:be:ef:90:40:2d:42:9d: 5e:11:0c:f6:e3:c7:69:63:9f:89:0a:04:e2:f2:e5:4b:f3:a4: 1b:3b:78:b6:31:6c:96:d9:9d:43:65:75:11:bb:11:10:c3:35: 37:de:95:ae:d2:4d:ed:89:4a:67:1d:ff:c4:49:4d:eb:a1:4e: 84:5d:65:4b:69:99:c6:5e:93:97:55:56:06:cf:80:17:b4:59: e1:cc:51:85:3e:39:40:07:e6:42:a2:5e:89:ba:bc:c1:f3:04: b6:4c:8f:2b:2d:85:45:cc:2d:50:33:0f:04:05:08:cd:9b:c7: b8:4e:7d:4a:5b:2f:c4:32:f4:27:32:f2:98:c2:e4:f4:74:0c: f5:1d:87:7f:8f:48:4f:2f:e1:18:1f:91:b3:14:f4:56:f8:a5: 15:88:dc:5b:d7:3e:c3:0e:34:d7:78:01:75:23:6d:dd:9f:eb: ae:61:16:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1NzExMTAvBgNVBAUTKEY0RjE1QzY3NUVEOUE1QzJEMTk5NUIyN0ZCNTNGRjYw RkYwMjQ5RTAwHhcNMjYwNzI4MTc1NTE0WhcNMjYwODA0MTc1NTE0WjAYMRYwFAYD VQQDEw02YTY4ZWQwMi04YjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAskGtk+nSAX3BcDCAeGqWg01RNkPi+MEB33MU/UFT7ElhnKQrHdjCjlKTxoV+ AWl22FkuovEsELeC3lZVCWXgeAJRdcT+Drq7lCctH0a4ZDsGMyE6kqv46LmU/47V efWAkGFZdlZlRWVNsfxRW06XIaBhbH73K10CFWA6BaG0R1tOIG6LztF0zy/ou49f 7dwQUaAqFZuSnyoO68hJJLLMiUJQTlNZ5umlO1JFCrVC4FEq0oXB6xvJvZh5KO0h EiBzJln8Z1aQ1iSk9ZJDjRHKpeUWSyPAGINoL2TC3G/ZWKv7Lb4ZAQSRBXz237I9 yIO7RA7I8XRoftDzp5dcT16MqQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+A8AwX G/T371BkrcG09Lhv82hpMB8GA1UdIwQYMBaAFPTxXGde2aXC0ZlbJ/tT/2D/Akng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU3MS9FQ0QyREY5NkNF NkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBjTFJtVnNuLTFQX1lQOENT ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlQRmNaMTdacGNMUm1Wc24tMVBfWVA4Q1NlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU3MS9FQ0QyREY5NkNFNkYxMUU5QTBEODZENTFDNEY5QUUwMi85UEZjWjE3WnBj TFJtVnNuLTFQX1lQOENTZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoKj05ylw2NU6uvPjDoIXM1fB7roW2YdGgDJgljiBb8dtjyaX7kCbd/tPhkp0 mjpscS2TF17+neNcJrTCYxDyucsKrDgshARozgb5Lh7bGUHvKU++75BALUKdXhEM 9uPHaWOfiQoE4vLlS/OkGzt4tjFsltmdQ2V1EbsREMM1N96VrtJN7YlKZx3/xElN 66FOhF1lS2mZxl6Tl1VWBs+AF7RZ4cxRhT45QAfmQqJeibq8wfMEtkyPKy2FRcwt UDMPBAUIzZvHuE59SlsvxDL0JzLymMLk9HQM9R2Hf49ITy/hGB+RsxT0VvilFYjc W9c+ww4013gBdSNt3Z/rrmEWiw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:42:32 2026 by rpki-client