$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft File: _thOn-AVmpk3ohk6C326I7bCZbg.mft (raw, json) Hash identifier: 5i6hZILYL4tY+XO0AU3xbYDRT9hGbMGi3j9gttp6fw8= Subject key identifier: DC:39:A8:88:B7:9C:C9:44:DB:D8:A8:74:DB:2E:5E:4F:81:2E:E1:CB Authority key identifier: FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8 Certificate issuer: /CN=A91EDBB0/serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8 Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft Manifest number: 0101 Signing time: Mon 27 Jul 2026 08:18:08 +0000 Manifest this update: Mon 27 Jul 2026 08:18:07 +0000 Manifest next update: Mon 03 Aug 2026 08:18:07 +0000 Files and hashes: 1: _thOn-AVmpk3ohk6C326I7bCZbg.crl (hash: +UksQtBc1BbBi6qmdd0znTJi/2A9fdL9D+pvq1etg1c=) 2: 18317928083911F0A2909A72C4F9AE02.roa (hash: aWC9Z9bpEAKz9IJhY7xU/+8CcFBubkzB7CX939nqCu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDBB0, serialNumber=FED84E9FE0159A9937A2193A0B7DBA23B6C265B8 Validity Not Before: Jul 27 08:18:07 2026 GMT Not After : Aug 3 08:18:07 2026 GMT Subject: CN=6a671440-c3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:e3:6d:1f:c5:bb:b8:e4:20:05:a7:ac:75: 0c:6d:ff:8b:3a:51:72:6f:46:fa:77:3f:56:4c:df: 23:45:c3:7c:65:bc:8a:c9:8e:26:5c:30:01:d8:2a: 74:ee:86:70:d1:63:6c:ab:30:4d:1f:a1:f0:25:62: 2e:a6:85:0f:f3:f4:33:63:fa:41:ea:9b:01:14:1a: 98:c2:c3:35:b2:cf:80:2c:eb:09:4c:99:3c:e3:af: d8:6b:6a:03:7d:ca:4e:e5:9d:5e:b0:0b:9f:b9:e1: ea:79:00:6e:3f:ae:aa:7f:b6:05:60:f3:fe:aa:49: b1:1e:7d:fa:d3:26:e3:da:e4:eb:28:68:d0:57:16: a7:25:c7:33:89:73:7b:e6:92:a9:20:0a:60:de:a5: 53:13:e0:81:b7:1e:e9:7e:be:bc:d5:25:f0:fd:22: cd:fc:b6:f5:d9:48:e1:25:cb:27:8f:f6:f7:d0:06: 1f:53:99:c7:f6:b7:4c:2e:bd:e2:fe:65:75:b1:cf: 7d:7b:2e:e6:90:df:12:16:22:47:7b:c0:0f:66:00: 0e:d2:29:59:07:0d:79:9d:cb:1f:41:c3:ff:c3:99: d7:85:60:38:c1:ce:b8:9c:4b:ac:c7:fe:2a:3d:23: b5:3c:7c:f5:48:ad:16:55:d2:dd:4b:3b:41:47:23: 2a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:39:A8:88:B7:9C:C9:44:DB:D8:A8:74:DB:2E:5E:4F:81:2E:E1:CB X509v3 Authority Key Identifier: keyid:FE:D8:4E:9F:E0:15:9A:99:37:A2:19:3A:0B:7D:BA:23:B6:C2:65:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_thOn-AVmpk3ohk6C326I7bCZbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDBB0/E653E51207ED11F0B0A68764C4F9AE02/_thOn-AVmpk3ohk6C326I7bCZbg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:2b:d6:05:b0:a0:fb:4d:a0:d7:dc:d6:93:2a:eb:70:f0:32: 02:6e:d1:29:c7:fc:21:74:95:80:c8:04:78:0c:73:6d:46:2c: 70:4e:6f:28:41:31:b2:49:37:24:b8:0d:c0:88:49:dd:1f:41: 93:af:a1:40:aa:bc:f4:38:2c:b7:2a:f9:93:00:56:bc:f6:76: d4:e0:42:01:9c:43:4b:8d:dc:9f:1e:5f:61:e2:1a:cb:fc:fc: 89:d2:54:68:b5:97:d6:c1:ec:a3:72:4e:4e:9d:77:ba:35:35: 67:2e:93:08:8f:08:10:55:e4:56:4e:f3:16:1f:2f:7a:4a:41: 45:df:43:1b:ef:39:4f:29:78:42:94:d4:76:4f:10:c5:0b:2d: 5e:28:04:1b:c7:56:53:a5:b9:1f:23:db:80:31:c6:9c:fe:6d: b4:63:8f:b4:b2:34:01:39:d9:1f:cc:d5:e5:ca:35:6a:46:e9: d3:3a:6e:65:8e:2c:4b:0d:09:59:7a:3f:43:00:8d:3a:c0:a6: 9a:c3:75:f6:e8:65:03:29:94:5c:a0:60:de:25:44:c6:08:6a: 1c:a3:ec:92:75:f2:57:76:af:7d:28:10:c7:1d:42:7d:b1:7d: e0:7e:39:76:96:7f:f4:ba:ee:69:87:cd:33:26:1a:12:65:06: 19:0e:fa:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCQjAxMTAvBgNVBAUTKEZFRDg0RTlGRTAxNTlBOTkzN0EyMTkzQTBCN0RCQTIz QjZDMjY1QjgwHhcNMjYwNzI3MDgxODA3WhcNMjYwODAzMDgxODA3WjAYMRYwFAYD VQQDEw02YTY3MTQ0MC1jM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygbjbR/Fu7jkIAWnrHUMbf+LOlFyb0b6dz9WTN8jRcN8ZbyKyY4mXDAB2Cp0 7oZw0WNsqzBNH6HwJWIupoUP8/QzY/pB6psBFBqYwsM1ss+ALOsJTJk846/Ya2oD fcpO5Z1esAufueHqeQBuP66qf7YFYPP+qkmxHn360ybj2uTrKGjQVxanJccziXN7 5pKpIApg3qVTE+CBtx7pfr681SXw/SLN/Lb12UjhJcsnj/b30AYfU5nH9rdMLr3i /mV1sc99ey7mkN8SFiJHe8APZgAO0ilZBw15ncsfQcP/w5nXhWA4wc64nEusx/4q PSO1PHz1SK0WVdLdSztBRyMqDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNw5qIi3 nMlE29iodNsuXk+BLuHLMB8GA1UdIwQYMBaAFP7YTp/gFZqZN6IZOgt9uiO2wmW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREJCMC9FNjUzRTUxMjA3 RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1wazNvaGs2QzMyNkk3YkNa YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL190aE9uLUFWbXBrM29oazZDMzI2STdiQ1piZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REJCMC9FNjUzRTUxMjA3RUQxMUYwQjBBNjg3NjRDNEY5QUUwMi9fdGhPbi1BVm1w azNvaGs2QzMyNkk3YkNaYmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArCvWBbCg+02g19zWkyrrcPAyAm7RKcf8IXSVgMgEeAxzbUYscE5vKEExskk3 JLgNwIhJ3R9Bk6+hQKq89Dgstyr5kwBWvPZ21OBCAZxDS43cnx5fYeIay/z8idJU aLWX1sHso3JOTp13ujU1Zy6TCI8IEFXkVk7zFh8vekpBRd9DG+85Tyl4QpTUdk8Q xQstXigEG8dWU6W5HyPbgDHGnP5ttGOPtLI0ATnZH8zV5co1akbp0zpuZY4sSw0J WXo/QwCNOsCmmsN19uhlAymUXKBg3iVExghqHKPsknXyV3avfSgQxx1CfbF94H45 dpZ/9LruaYfNMyYaEmUGGQ76VA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:09:14 2026 by rpki-client