$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft File: uN9D7us1RpuyzAulIS0b_yaKe24.mft (raw, json) Hash identifier: tYwFsqEuuwtHa/ikI3Vs2gOkYVTb662jGf40ZESlX08= Subject key identifier: 14:5B:F5:22:24:27:15:A7:29:DD:D5:65:F2:54:13:07:72:70:34:B4 Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E Certificate issuer: /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft Manifest number: 02AF Signing time: Mon 27 Jul 2026 02:49:01 +0000 Manifest this update: Mon 27 Jul 2026 02:49:00 +0000 Manifest next update: Mon 03 Aug 2026 02:49:00 +0000 Files and hashes: 1: uN9D7us1RpuyzAulIS0b_yaKe24.crl (hash: Y8xUTqmy9Qx313oTvoi1ny3O9eAM8lTPT90lGB6V6f4=) 2: 90269D3A716611ED9D80F448C4F9AE02.roa (hash: ogU/j3OOcAMtUhqvFDXyTh+nM/5Ri8VmgPSxYiiE5to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F134A, serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E Validity Not Before: Jul 27 02:49:00 2026 GMT Not After : Aug 3 02:49:00 2026 GMT Subject: CN=6a66c71d-73fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c2:44:2c:77:ef:eb:3b:93:11:b1:4c:96:a8: 06:62:7d:9a:71:75:90:b3:32:69:cf:9a:a6:ff:32: a4:87:e0:db:45:ad:cd:ff:84:7b:95:13:b7:b3:7c: ad:0a:55:3c:14:ae:55:46:bf:7f:d4:db:c7:80:98: db:b7:99:71:67:17:48:b7:6a:e5:e0:01:77:b4:28: 2e:b9:9c:09:49:6b:5b:61:de:10:b6:b8:1f:9c:69: d0:d0:d0:5b:59:16:e7:2a:7b:fc:01:6c:9a:32:9a: 36:98:a0:65:85:ba:50:dd:1e:d7:49:1e:e5:40:a2: 35:97:fc:0e:7c:8f:39:3f:a0:89:4a:32:1a:c0:83: 9a:95:e2:ae:4e:af:9b:c1:a2:4b:52:0d:b6:7f:f0: b7:34:b8:31:29:97:64:0c:49:12:52:b1:8d:3c:f6: 26:b7:7f:7f:08:15:26:2c:ed:2f:2f:7d:c9:61:fa: 6c:c6:a2:09:31:94:02:7a:0e:93:07:18:2d:36:24: c6:f2:00:64:07:63:ec:47:1a:77:5f:1a:50:fa:59: 13:f4:69:a4:a1:ea:ea:e5:71:86:c8:81:9f:9e:5f: 04:73:7c:f7:85:85:f1:26:d7:bc:42:68:0d:f9:84: 95:7a:b7:d5:c6:b9:53:c0:9c:e1:9b:3d:76:13:99: 8a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5B:F5:22:24:27:15:A7:29:DD:D5:65:F2:54:13:07:72:70:34:B4 X509v3 Authority Key Identifier: keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:ed:67:4f:b4:be:61:a2:69:7f:53:1c:dd:1c:5f:12:21:86: 50:92:a1:76:07:b4:8b:2c:d6:69:2e:3f:0e:78:f6:91:df:c5: b5:3a:6a:d6:64:b6:c9:71:2c:f6:54:0e:65:62:61:0b:95:1b: 9c:dd:be:88:3f:8e:1f:79:13:2b:9f:f4:18:84:9f:76:ab:3e: 98:59:a6:84:06:0d:19:23:dd:58:2c:e9:06:0a:45:79:82:ab: bb:f2:cb:6d:cd:e2:df:98:c7:f4:7d:e5:de:e0:8b:4a:35:e0: c4:a9:2e:04:05:d8:63:22:03:e4:1f:9d:ed:4b:e9:d1:67:93: 76:38:96:00:f1:25:6e:e7:5d:1b:66:c4:f8:92:30:45:ac:b8: aa:ea:70:75:40:cd:80:2c:8c:c8:90:de:7f:54:1c:ff:68:95: ba:c7:9e:23:e6:8c:97:0a:ad:88:be:26:92:19:74:59:ad:8c: 70:45:5d:62:dd:61:cd:9c:d2:14:37:11:4c:9c:3a:ed:c2:47: c1:62:25:10:32:7a:90:5c:1f:8a:06:12:96:bf:c6:94:d1:44: bf:52:90:5e:15:4a:5e:87:2f:a6:1a:ab:24:9d:bb:ab:21:ae: 33:d6:c1:b8:f0:8b:79:c4:78:00:69:78:bc:dc:b9:63:68:f7: ff:6c:81:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzNEExMTAvBgNVBAUTKEI4REY0M0VFRUIzNTQ2OUJCMkNDMEJBNTIxMkQxQkZG MjY4QTdCNkUwHhcNMjYwNzI3MDI0OTAwWhcNMjYwODAzMDI0OTAwWjAYMRYwFAYD VQQDEw02YTY2YzcxZC03M2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj8JELHfv6zuTEbFMlqgGYn2acXWQszJpz5qm/zKkh+DbRa3N/4R7lRO3s3yt ClU8FK5VRr9/1NvHgJjbt5lxZxdIt2rl4AF3tCguuZwJSWtbYd4QtrgfnGnQ0NBb WRbnKnv8AWyaMpo2mKBlhbpQ3R7XSR7lQKI1l/wOfI85P6CJSjIawIOaleKuTq+b waJLUg22f/C3NLgxKZdkDEkSUrGNPPYmt39/CBUmLO0vL33JYfpsxqIJMZQCeg6T BxgtNiTG8gBkB2PsRxp3XxpQ+lkT9Gmkoerq5XGGyIGfnl8Ec3z3hYXxJte8QmgN +YSVerfVxrlTwJzhmz12E5mKtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRb9SIk JxWnKd3VZfJUEwdycDS0MB8GA1UdIwQYMBaAFLjfQ+7rNUabsswLpSEtG/8mintu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTM0QS9GOTc2QkZEQTcx NjIxMUVEODg5MzEzMzFDNEY5QUUwMi91TjlEN3VzMVJwdXl6QXVsSVMwYl95YUtl MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VOOUQ3dXMxUnB1eXpBdWxJUzBiX3lhS2UyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTM0QS9GOTc2QkZEQTcxNjIxMUVEODg5MzEzMzFDNEY5QUUwMi91TjlEN3VzMVJw dXl6QXVsSVMwYl95YUtlMjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAye1nT7S+YaJpf1Mc3RxfEiGGUJKhdge0iyzWaS4/Dnj2kd/FtTpq1mS2yXEs 9lQOZWJhC5UbnN2+iD+OH3kTK5/0GISfdqs+mFmmhAYNGSPdWCzpBgpFeYKru/LL bc3i35jH9H3l3uCLSjXgxKkuBAXYYyID5B+d7Uvp0WeTdjiWAPElbuddG2bE+JIw Ray4qupwdUDNgCyMyJDef1Qc/2iVuseeI+aMlwqtiL4mkhl0Wa2McEVdYt1hzZzS FDcRTJw67cJHwWIlEDJ6kFwfigYSlr/GlNFEv1KQXhVKXocvphqrJJ27qyGuM9bB uPCLecR4AGl4vNy5Y2j3/2yByw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:38:18 2026 by rpki-client