$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft File: N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft (raw, json) Hash identifier: yHct+nvntl/ww2BJN1D1pgtIDH1j+zzcCinCtIQlFXQ= Subject key identifier: 0F:38:1B:08:3A:67:64:00:22:B8:50:7B:AA:69:32:E7:4D:CB:59:EE Authority key identifier: 37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB Certificate issuer: /CN=A91F3256/serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft Manifest number: 78 Signing time: Mon 27 Jul 2026 10:04:46 +0000 Manifest this update: Mon 27 Jul 2026 10:04:46 +0000 Manifest next update: Mon 03 Aug 2026 10:04:46 +0000 Files and hashes: 1: N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl (hash: FebdiY8WUbf/0ijZFqYfa6gElplULj8f43g5c78/Uqc=) 2: BED8B2621D1B11F1B6F055AB103D8C67.roa (hash: TZiFnlQe5aFCTw3TXlx3VBuv8nDQSF0KBsx60QraJQ8=) 3: 33EB881ED9A011F08EC1CA9167D3641D.roa (hash: PsNugEmxb0VqmOUe342oKhYJR77dyuxdQVuRbBuOR54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3256, serialNumber=37CD9BB086EF0AF5A32BD885474686806D9096FB Validity Not Before: Jul 27 10:04:46 2026 GMT Not After : Aug 3 10:04:46 2026 GMT Subject: CN=6a672d3e-a9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:8c:74:b8:4a:b6:a4:1e:dd:cc:0b:cd:a8: 94:52:1a:a7:28:d8:24:33:63:59:98:b0:40:84:78: 68:18:7c:a4:1b:36:32:b5:41:e2:54:51:8d:b1:35: 86:fd:03:37:39:0e:dd:da:d6:89:13:c6:b0:4b:b8: d1:c6:8d:e9:fe:8f:e4:c9:13:90:69:e5:77:4f:9d: e7:3a:d8:04:66:1e:42:b9:17:67:de:a1:d8:f1:c1: 94:4d:3f:78:53:fd:0f:18:e8:3e:64:b6:29:7d:42: 3a:d6:8f:a0:44:8a:d9:e5:29:f4:06:e0:a5:b2:44: d8:10:2d:bd:1a:e2:d5:ee:a3:0d:4e:39:3e:59:da: 0b:5b:c1:eb:36:93:78:0f:49:38:ec:89:ed:61:b1: 23:c5:ab:ce:c6:22:df:f8:8c:d7:f5:0b:e7:53:a9: 25:a8:ed:4a:f7:7c:46:b8:d0:41:8e:67:2c:f0:44: 34:b1:2c:41:c3:40:35:eb:d7:57:96:07:3e:b9:3f: 17:a4:79:6d:53:8b:8b:49:ae:65:2d:23:ff:26:ba: 7a:49:16:dd:b2:b6:24:4c:85:d0:ce:7f:c8:9d:e0: c6:37:02:21:ee:6b:23:59:a2:65:a2:bf:a2:0a:9c: 60:41:9f:9e:3d:5e:4b:8b:32:45:36:c4:17:77:f6: ba:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:38:1B:08:3A:67:64:00:22:B8:50:7B:AA:69:32:E7:4D:CB:59:EE X509v3 Authority Key Identifier: keyid:37:CD:9B:B0:86:EF:0A:F5:A3:2B:D8:85:47:46:86:80:6D:90:96:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N82bsIbvCvWjK9iFR0aGgG2Qlvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3256/1B55D738D99F11F097EFBEF966D3641D/N82bsIbvCvWjK9iFR0aGgG2Qlvs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:31:7d:1a:27:9a:29:45:6b:cd:f2:39:3b:28:54:28:33:6c: a9:a3:f7:0b:c4:e7:0d:ac:7b:cb:c3:c3:30:05:f2:15:87:9f: 43:03:e7:0c:a6:b8:6b:a0:36:0d:7e:fe:88:7e:cd:f7:8e:c0: e1:5a:f7:c2:ab:bd:bc:6b:ad:5e:ee:e6:d6:90:a7:d6:31:08: 8d:56:dd:8a:df:91:e5:a3:1f:39:d4:33:15:8b:90:d8:42:7a: 73:3c:67:4d:21:9f:c7:49:87:c3:76:8f:32:13:82:36:75:db: 97:72:f6:75:7c:9c:17:73:2f:3f:6e:a0:8f:89:0c:10:25:72: a7:4f:b3:1f:ea:d3:33:4d:c8:06:67:02:7f:4b:f4:51:f3:9a: 51:8f:59:30:24:5f:5e:c0:03:29:0e:a9:4d:18:6a:d8:9a:ff: ad:7f:5e:ef:08:e1:2e:93:60:69:86:03:ba:f4:be:e0:85:cc: ce:d6:98:cc:f2:53:e7:b4:43:eb:8b:51:68:1a:0b:a4:f7:05: d1:0a:0a:cc:dc:1e:a1:39:4f:cc:97:80:85:ab:8b:c7:05:60: 45:57:9a:29:39:d2:69:5e:f2:04:ec:5d:c3:31:b9:61:56:21: 6d:16:6c:12:17:57:05:29:c1:7b:01:85:cf:11:b7:d2:cc:bb: 2e:ad:b7:0e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzI1NjExMC8GA1UEBRMoMzdDRDlCQjA4NkVGMEFGNUEzMkJEODg1NDc0Njg2ODA2 RDkwOTZGQjAeFw0yNjA3MjcxMDA0NDZaFw0yNjA4MDMxMDA0NDZaMBgxFjAUBgNV BAMTDTZhNjcyZDNlLWE5YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg2Yx0uEq2pB7dzAvNqJRSGqco2CQzY1mYsECEeGgYfKQbNjK1QeJUUY2xNYb9 Azc5Dt3a1okTxrBLuNHGjen+j+TJE5Bp5XdPnec62ARmHkK5F2feodjxwZRNP3hT /Q8Y6D5ktil9QjrWj6BEitnlKfQG4KWyRNgQLb0a4tXuow1OOT5Z2gtbwes2k3gP STjsie1hsSPFq87GIt/4jNf1C+dTqSWo7Ur3fEa40EGOZyzwRDSxLEHDQDXr11eW Bz65PxekeW1Ti4tJrmUtI/8munpJFt2ytiRMhdDOf8id4MY3AiHuayNZomWiv6IK nGBBn549XkuLMkU2xBd39rrZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDzgbCDpn ZAAiuFB7qmky503LWe4wHwYDVR0jBBgwFoAUN82bsIbvCvWjK9iFR0aGgG2Qlvsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMjU2LzFCNTVENzM4RDk5 RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZXaks5aUZSMGFHZ0cyUWx2 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjgyYnNJYnZDdldqSzlpRlIwYUdnRzJRbHZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MjU2LzFCNTVENzM4RDk5RjExRjA5N0VGQkVGOTY2RDM2NDFEL044MmJzSWJ2Q3ZX aks5aUZSMGFHZ0cyUWx2cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAcMX0aJ5opRWvN8jk7KFQoM2ypo/cLxOcNrHvLw8MwBfIVh59DA+cMprhroDYN fv6Ifs33jsDhWvfCq728a61e7ubWkKfWMQiNVt2K35Hlox851DMVi5DYQnpzPGdN IZ/HSYfDdo8yE4I2dduXcvZ1fJwXcy8/bqCPiQwQJXKnT7Mf6tMzTcgGZwJ/S/RR 85pRj1kwJF9ewAMpDqlNGGrYmv+tf17vCOEuk2BphgO69L7ghczO1pjM8lPntEPr i1FoGguk9wXRCgrM3B6hOU/Ml4CFq4vHBWBFV5opOdJpXvIE7F3DMblhViFtFmwS F1cFKcF7AYXPEbfSzLsurbcO -----END CERTIFICATE-----Generated at Tue Jul 28 21:09:19 2026 by rpki-client