$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft File: -WS28tsd8I3d2tR5U1OdnFk9CmY.mft (raw, json) Hash identifier: 1hnhWUwn/JKMjKgcjvpkgjzUuFo6n/ZAT/0bQuzYFCI= Subject key identifier: DA:C1:9A:53:F8:D4:6F:B3:F1:1F:31:27:32:4E:A5:BB:6C:35:0D:17 Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 Certificate issuer: /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft Manifest number: 02D1 Signing time: Mon 27 Jul 2026 02:32:05 +0000 Manifest this update: Mon 27 Jul 2026 02:32:04 +0000 Manifest next update: Mon 03 Aug 2026 02:32:04 +0000 Files and hashes: 1: -WS28tsd8I3d2tR5U1OdnFk9CmY.crl (hash: GFdTRN+hzftzGUB12baK7PvIzsvzUgVOASSa0oveoTo=) 2: 50AC0FBE329011EEB46D367FC4F9AE02.roa (hash: TRXYmyqIh38BJQpPjdJnxxRS6yMm2jbuDarUopXUSZc=) 3: 051D87824A9A11ED9B9F6E25C4F9AE02.roa (hash: 5RaPjFBnhiFZyA3PtlxXYhV1TZyEd5Mgtbgk5McoTSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:32:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66 Validity Not Before: Jul 27 02:32:04 2026 GMT Not After : Aug 3 02:32:04 2026 GMT Subject: CN=6a66c325-bd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:99:af:c7:2d:29:0c:f7:ab:d7:91:0d:0c: 6d:6a:e1:cc:09:b8:b7:42:59:2b:12:ea:ba:14:cf: 6e:a8:f3:10:5c:f4:c7:66:7b:36:cb:17:2c:be:e4: 65:21:ac:8b:34:64:a2:f3:45:da:e8:4b:47:54:58: 31:1b:6c:68:96:0a:f0:3c:a2:1b:e8:89:e2:93:53: cc:65:c9:3e:db:8a:a3:c4:84:29:7c:c8:04:6c:79: 88:0b:06:eb:4d:87:13:22:7d:1e:5c:be:aa:97:b6: 87:43:a6:48:16:93:2c:9c:8c:6e:19:b6:ba:07:6f: 3c:22:31:f8:14:a3:b1:5a:62:1c:57:54:4f:86:2b: 3b:6a:c9:79:75:f3:01:98:8e:65:e5:74:58:ba:d6: 0a:34:8e:59:4a:84:3c:88:79:bb:a1:54:53:7c:17: 51:a1:fc:66:3d:b2:a8:b2:08:49:43:04:96:bf:3f: fd:9b:b0:c8:2f:26:d7:81:52:da:20:15:d6:54:10: 65:b8:18:ee:10:a9:c4:94:c0:32:87:23:85:b7:43: 69:c3:b2:be:6a:b5:0e:da:67:6c:e2:a7:89:e2:f4: d3:64:a4:2e:7d:d5:0c:17:96:cf:c0:de:fd:8f:77: cb:8d:f8:f4:59:fd:43:d3:ec:f0:18:31:f2:fd:bb: 67:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C1:9A:53:F8:D4:6F:B3:F1:1F:31:27:32:4E:A5:BB:6C:35:0D:17 X509v3 Authority Key Identifier: keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:37:03:09:52:e0:78:e6:cf:a6:9e:6c:66:62:dc:85:2a:7e: b8:b1:95:82:6b:82:2e:c6:40:12:58:0d:bb:62:a4:68:d5:f7: 43:da:58:21:5d:a8:16:33:f4:4a:79:e1:88:fe:33:d7:1b:1e: 95:b7:00:f7:48:94:7c:d0:fc:32:a7:ad:f0:68:46:46:1d:ce: 5f:b7:6a:36:5b:23:4c:fb:7d:0a:4a:b7:ef:0c:4c:00:45:33: 15:8f:f8:5a:f3:5b:e7:22:f7:f4:42:73:29:1f:f3:aa:e4:e7: 13:c0:ff:c6:43:f3:19:95:0c:b4:12:b7:9b:c5:54:09:07:2d: 27:e4:bf:8c:ce:0e:ef:af:a9:8e:05:17:57:d2:87:47:38:cf: 6a:1e:6e:81:cd:11:4b:64:36:c7:df:76:f1:5d:f2:f0:50:a0: 93:cd:eb:93:09:9f:ca:cb:74:02:85:48:2d:c7:b9:c7:fd:04: ac:32:42:12:55:95:f8:d9:4e:a0:8f:14:d8:1d:4a:93:5b:f0: c0:04:fb:90:e2:08:8f:69:a2:e8:bc:32:17:4d:e2:2c:77:55: 9a:71:19:d8:24:1b:d5:2f:95:bc:b9:45:ca:b7:31:fc:1c:9c: 64:6e:27:fd:8d:f1:eb:f7:a2:35:06:90:6a:1f:e6:75:5d:65: f8:17:b7:f3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGNTMxMTAvBgNVBAUTKEY5NjRCNkYyREIxREYwOERERERBRDQ3OTUzNTM5RDlD NTkzRDBBNjYwHhcNMjYwNzI3MDIzMjA0WhcNMjYwODAzMDIzMjA0WjAYMRYwFAYD VQQDEw02YTY2YzMyNS1iZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniGZr8ctKQz3q9eRDQxtauHMCbi3QlkrEuq6FM9uqPMQXPTHZns2yxcsvuRl IayLNGSi80Xa6EtHVFgxG2xolgrwPKIb6Inik1PMZck+24qjxIQpfMgEbHmICwbr TYcTIn0eXL6ql7aHQ6ZIFpMsnIxuGba6B288IjH4FKOxWmIcV1RPhis7asl5dfMB mI5l5XRYutYKNI5ZSoQ8iHm7oVRTfBdRofxmPbKosghJQwSWvz/9m7DILybXgVLa IBXWVBBluBjuEKnElMAyhyOFt0Npw7K+arUO2mds4qeJ4vTTZKQufdUMF5bPwN79 j3fLjfj0Wf1D0+zwGDHy/btnWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNrBmlP4 1G+z8R8xJzJOpbtsNQ0XMB8GA1UdIwQYMBaAFPlktvLbHfCN3drUeVNTnZxZPQpm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEY1My9BMjIzNTJDMjRB OTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJM2QydFI1VTFPZG5GazlD bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1XUzI4dHNkOEkzZDJ0UjVVMU9kbkZrOUNtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEY1My9BMjIzNTJDMjRBOTYxMUVEOTg5MURDMThDNEY5QUUwMi8tV1MyOHRzZDhJ M2QydFI1VTFPZG5GazlDbVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKTcDCVLgeObPpp5sZmLchSp+uLGVgmuCLsZAElgNu2KkaNX3Q9pYIV2oFjP0 SnnhiP4z1xselbcA90iUfND8Mqet8GhGRh3OX7dqNlsjTPt9Ckq37wxMAEUzFY/4 WvNb5yL39EJzKR/zquTnE8D/xkPzGZUMtBK3m8VUCQctJ+S/jM4O76+pjgUXV9KH RzjPah5ugc0RS2Q2x9928V3y8FCgk83rkwmfyst0AoVILce5x/0ErDJCElWV+NlO oI8U2B1Kk1vwwAT7kOIIj2mi6LwyF03iLHdVmnEZ2CQb1S+VvLlFyrcx/BycZG4n /Y3x6/eiNQaQah/mdV1l+Be38w== -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:11 2026 by rpki-client