$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json) Hash identifier: /DBUKtcxHSDs36vZ8faU5go6HCyd1YDdWKcCU8pKv3w= Subject key identifier: 8D:71:A5:BB:2E:1B:8C:CD:FF:FD:3E:58:F4:54:6E:ED:D0:40:F0:69 Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft Manifest number: 0868 Signing time: Sun 26 Jul 2026 21:27:53 +0000 Manifest this update: Sun 26 Jul 2026 21:27:52 +0000 Manifest next update: Sun 02 Aug 2026 21:27:52 +0000 Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: u7qfN3XUs51GYxPwGdk1o1IEcIvBp6qHSW+Nl2sXQHk=) 2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: e9Lu8flwsgrgepqCcx7rLX3W9le7mADkxpNTO2DEgOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Validity Not Before: Jul 26 21:27:52 2026 GMT Not After : Aug 2 21:27:52 2026 GMT Subject: CN=6a667bd8-a233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:11:48:74:9d:9f:22:31:7d:14:2f:06:34:65: c1:b7:4a:88:61:6b:3b:10:c1:1f:3c:73:0f:1b:2d: 0f:ec:83:2d:04:ec:fd:39:e5:ea:18:e3:28:fc:be: 56:2f:26:75:4e:dc:18:d6:8b:84:b6:78:bc:0d:18: 00:25:36:4d:13:f8:5f:cc:40:7f:0f:71:1d:bf:52: ba:04:f4:55:ee:89:7b:07:3a:3e:9f:9d:52:dd:09: 4e:56:e0:ac:98:7b:b3:46:0b:bd:5b:57:a0:da:73: 9f:f5:44:6e:ec:e0:06:00:23:09:3d:e1:a9:7b:3e: c4:79:1e:f7:9d:c2:93:c9:d4:54:26:6e:b0:57:18: fc:f6:e4:a7:99:07:44:0b:ab:0f:b6:ed:53:07:8a: 13:35:56:fc:67:86:03:81:3a:fd:a8:83:1c:e0:1e: 31:20:1f:65:60:97:0d:23:ac:c5:22:f4:63:53:b4: 54:7e:20:9c:45:4f:ef:e9:90:98:a8:16:d8:b2:9b: e9:cc:ce:42:5d:86:7e:28:ff:69:3f:28:4f:a9:3c: 2a:85:11:f7:ed:58:cf:73:c2:0d:42:3b:ef:c7:58: 3a:1c:14:5d:eb:d3:cf:4a:f4:ae:f0:56:6f:43:c3: be:3b:21:8c:29:1d:2b:7c:47:13:29:5c:0a:ec:36: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:71:A5:BB:2E:1B:8C:CD:FF:FD:3E:58:F4:54:6E:ED:D0:40:F0:69 X509v3 Authority Key Identifier: keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f2:0e:a6:76:fb:84:37:fd:58:07:72:51:5e:aa:3b:06:72: 14:56:6c:86:96:1c:35:51:53:20:a0:41:a9:70:90:94:e5:f0: a1:a1:f2:80:cf:06:ca:a5:b6:e9:40:51:94:70:04:bc:cf:1a: 62:eb:7e:a1:e2:69:ff:66:b8:f2:e0:0c:73:57:cb:83:94:61: 40:ce:86:1c:d0:bc:ee:5f:8d:93:ba:8a:33:d4:f6:82:fe:4c: 7c:1b:3f:2e:27:e5:26:8d:f3:d5:48:32:55:32:7d:d1:b1:a7: b4:16:1d:99:ed:dd:0a:0d:53:92:43:67:39:cf:0b:be:78:37: e5:72:48:7b:be:2d:c7:e5:d6:31:1d:a5:ee:c5:60:63:79:1c: 2b:36:51:aa:35:33:06:bc:c2:e6:4f:8e:91:1f:3e:e2:fa:77: 83:91:7f:e0:fc:fc:a3:a4:17:ef:f8:9a:48:61:37:b1:59:f4: d0:a2:b7:14:9e:9b:fa:15:21:54:77:fb:62:04:1f:03:bd:ae: c3:ef:4b:8f:32:8c:7c:95:96:db:94:f3:bb:64:9e:05:c9:8b: 9e:d3:05:79:02:d4:14:73:57:bb:5d:36:6a:06:00:5a:27:2e: 0a:4e:c7:36:0d:b1:93:29:d3:f0:7c:7f:ba:20:6d:cb:76:1b: 27:47:40:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJFNzYxMTAvBgNVBAUTKEQ0MTM3OEVGQ0NDRENBOEU2NTM3RTk1RjI3QUEzQjM1 Mzc1ODBBRjMwHhcNMjYwNzI2MjEyNzUyWhcNMjYwODAyMjEyNzUyWjAYMRYwFAYD VQQDEw02YTY2N2JkOC1hMjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRFIdJ2fIjF9FC8GNGXBt0qIYWs7EMEfPHMPGy0P7IMtBOz9OeXqGOMo/L5W LyZ1TtwY1ouEtni8DRgAJTZNE/hfzEB/D3Edv1K6BPRV7ol7Bzo+n51S3QlOVuCs mHuzRgu9W1eg2nOf9URu7OAGACMJPeGpez7EeR73ncKTydRUJm6wVxj89uSnmQdE C6sPtu1TB4oTNVb8Z4YDgTr9qIMc4B4xIB9lYJcNI6zFIvRjU7RUfiCcRU/v6ZCY qBbYspvpzM5CXYZ+KP9pPyhPqTwqhRH37VjPc8INQjvvx1g6HBRd69PPSvSu8FZv Q8O+OyGMKR0rfEcTKVwK7DZNKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI1xpbsu G4zN//0+WPRUbu3QQPBpMB8GA1UdIwQYMBaAFNQTeO/MzcqOZTfpXyeqOzU3WArz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkU3Ni84RjNDOUU2QTBE NzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6TnlvNWxOLWxmSjZvN05UZFlD dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCTjQ3OHpOeW81bE4tbGZKNm83TlRkWUN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkU3Ni84RjNDOUU2QTBENzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6Tnlv NWxOLWxmSjZvN05UZFlDdk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACvIOpnb7hDf9WAdyUV6qOwZyFFZshpYcNVFTIKBBqXCQlOXwoaHygM8GyqW2 6UBRlHAEvM8aYut+oeJp/2a48uAMc1fLg5RhQM6GHNC87l+Nk7qKM9T2gv5MfBs/ LiflJo3z1UgyVTJ90bGntBYdme3dCg1TkkNnOc8Lvng35XJIe74tx+XWMR2l7sVg Y3kcKzZRqjUzBrzC5k+OkR8+4vp3g5F/4Pz8o6QX7/iaSGE3sVn00KK3FJ6b+hUh VHf7YgQfA72uw+9LjzKMfJWW25Tzu2SeBcmLntMFeQLUFHNXu102agYAWicuCk7H Ng2xkynT8Hx/uiBty3YbJ0dANQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:37:08 2026 by rpki-client