$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft File: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft (raw, json) Hash identifier: ky1sG46ODhnqUdg0kkMdSErPtLNTQ27K2XR7DVqaV4s= Subject key identifier: 2B:6A:F5:A5:78:09:B9:4F:77:8A:AD:C6:CC:18:BA:E9:1A:AC:F1:18 Authority key identifier: 0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 Certificate issuer: /CN=A91EDFAF/serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Certificate serial: 0167 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft Manifest number: 0153 Signing time: Mon 27 Jul 2026 07:08:28 +0000 Manifest this update: Mon 27 Jul 2026 07:08:28 +0000 Manifest next update: Mon 03 Aug 2026 07:08:28 +0000 Files and hashes: 1: DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl (hash: 4MSplRyUTk8CYlyFQXW3yskYvtQCuQf2efzI6JIpcC4=) 2: 5E89A9888CBD11EFBA479615C4F9AE02.roa (hash: feWCSr9eRlRlJ3Q0tbYJyvoDzByu6lr0VTjjRj/M/Xo=) 3: 5D58A6368CBD11EFBA479615C4F9AE02.roa (hash: am92Gr0MD4Jd5/4EoBAS/UqJDGiw/kv6GtuALWW7PUU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 359 (0x167) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDFAF, serialNumber=0E663CB4900EF4D822F99ABDE27FA403AB9F4C40 Validity Not Before: Jul 27 07:08:28 2026 GMT Not After : Aug 3 07:08:28 2026 GMT Subject: CN=6a6703ec-b75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6f:2e:dc:5b:7a:57:b6:1b:45:4d:f2:58:da: 28:6b:f4:f6:4f:46:ee:74:44:df:ff:41:1c:cc:f2: 9c:0a:f1:9c:71:1b:76:7a:fd:19:03:d1:30:a9:5b: c3:db:76:dc:8c:0b:b0:1a:7a:bf:4b:8a:f4:bd:bd: a3:c7:99:b7:22:f0:41:f6:e2:61:84:9c:69:06:75: bc:0c:45:6c:0f:44:28:e9:76:9b:bb:23:78:2f:6c: c0:9e:fb:80:8f:01:07:e2:dc:a7:7d:fe:71:e2:fb: 7e:95:cd:73:d1:f1:90:e6:f0:12:1e:00:55:5d:c6: 3c:20:c3:ca:96:31:21:2a:3f:b4:d1:47:7f:f8:28: 07:eb:98:ed:73:53:ca:f7:62:ad:dd:ae:17:1b:05: ac:54:22:72:a3:c2:b0:2a:35:17:39:28:03:c9:7b: b7:f3:3b:fc:80:76:56:a4:31:4c:96:56:86:fe:21: 4e:9b:42:d6:1e:64:a1:cc:5c:f4:c0:83:3c:ec:e3: bd:6a:12:43:bc:a7:75:72:aa:eb:9c:53:d2:dc:6a: 00:59:6e:5f:6a:c3:0d:70:7b:01:f3:7a:c1:8e:e8: 70:9b:8b:0d:bf:e2:1a:c6:4c:55:53:31:a6:b5:47: dd:1c:e6:e4:d2:f4:bd:cc:3f:77:b1:b5:2d:7a:f0: e9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6A:F5:A5:78:09:B9:4F:77:8A:AD:C6:CC:18:BA:E9:1A:AC:F1:18 X509v3 Authority Key Identifier: keyid:0E:66:3C:B4:90:0E:F4:D8:22:F9:9A:BD:E2:7F:A4:03:AB:9F:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDFAF/97BE930E8CBC11EFBF220012C4F9AE02/DmY8tJAO9Ngi-Zq94n-kA6ufTEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:7c:06:7e:0e:90:e9:ec:cf:7f:33:cb:68:f4:9e:a4:7a:be: c6:42:f4:43:e7:fb:98:ef:92:7d:f3:6d:1f:f3:75:b9:83:65: 77:3a:72:a1:2d:3e:92:5f:b4:f5:8c:3a:a8:25:a0:57:10:78: 08:d6:df:6e:36:b4:90:4c:15:29:17:81:e2:c3:be:e2:05:23: 38:34:09:07:73:6b:26:15:59:37:d2:9c:2d:e6:9e:b9:09:23: e0:dd:e0:77:10:18:c3:76:fb:23:f2:eb:88:b9:80:1e:ca:b2: 26:69:35:b4:7d:32:83:57:83:f0:27:74:b0:17:bd:33:8e:a1: 92:92:c2:5f:d4:a3:d2:07:36:55:74:db:67:89:4f:14:0f:60: dd:6f:08:a4:48:ca:21:9c:c7:48:e5:f7:f3:c0:db:83:e0:09: b9:75:70:51:2a:01:d8:0f:d6:3f:8c:57:49:fc:76:ee:ee:b9: f1:ab:21:a5:7a:fa:8d:c5:9a:56:09:8d:3c:cb:71:e8:1f:32: 61:2a:2c:e5:4c:b6:3e:96:d3:9a:eb:b1:d6:c7:94:a0:b7:7f: 6d:b6:78:40:f6:a3:72:bb:66:fb:c5:94:28:dd:2f:57:52:bc: 93:3a:e9:75:bd:07:51:ca:5b:31:e0:d1:2b:49:ad:65:c6:aa: 9a:9e:bd:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURGQUYxMTAvBgNVBAUTKDBFNjYzQ0I0OTAwRUY0RDgyMkY5OUFCREUyN0ZBNDAz QUI5RjRDNDAwHhcNMjYwNzI3MDcwODI4WhcNMjYwODAzMDcwODI4WjAYMRYwFAYD VQQDEw02YTY3MDNlYy1iNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG8u3Ft6V7YbRU3yWNooa/T2T0budETf/0EczPKcCvGccRt2ev0ZA9EwqVvD 23bcjAuwGnq/S4r0vb2jx5m3IvBB9uJhhJxpBnW8DEVsD0Qo6XabuyN4L2zAnvuA jwEH4tynff5x4vt+lc1z0fGQ5vASHgBVXcY8IMPKljEhKj+00Ud/+CgH65jtc1PK 92Kt3a4XGwWsVCJyo8KwKjUXOSgDyXu38zv8gHZWpDFMllaG/iFOm0LWHmShzFz0 wIM87OO9ahJDvKd1cqrrnFPS3GoAWW5fasMNcHsB83rBjuhwm4sNv+IaxkxVUzGm tUfdHObk0vS9zD93sbUtevDp4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCtq9aV4 CblPd4qtxswYuukarPEYMB8GA1UdIwQYMBaAFA5mPLSQDvTYIvmaveJ/pAOrn0xA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREZBRi85N0JFOTMwRThD QkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlOZ2ktWnE5NG4ta0E2dWZU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RtWTh0SkFPOU5naS1acTk0bi1rQTZ1ZlRFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF REZBRi85N0JFOTMwRThDQkMxMUVGQkYyMjAwMTJDNEY5QUUwMi9EbVk4dEpBTzlO Z2ktWnE5NG4ta0E2dWZURUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI3wGfg6Q6ezPfzPLaPSepHq+xkL0Q+f7mO+SffNtH/N1uYNldzpyoS0+kl+0 9Yw6qCWgVxB4CNbfbja0kEwVKReB4sO+4gUjODQJB3NrJhVZN9KcLeaeuQkj4N3g dxAYw3b7I/LriLmAHsqyJmk1tH0yg1eD8Cd0sBe9M46hkpLCX9Sj0gc2VXTbZ4lP FA9g3W8IpEjKIZzHSOX388Dbg+AJuXVwUSoB2A/WP4xXSfx27u658ashpXr6jcWa VgmNPMtx6B8yYSos5Uy2PpbTmuux1seUoLd/bbZ4QPajcrtm+8WUKN0vV1K8kzrp db0HUcpbMeDRK0mtZcaqmp69/w== -----END CERTIFICATE-----Generated at Tue Jul 28 23:15:06 2026 by rpki-client