$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft File: vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft (raw, json) Hash identifier: pXFg7Q+eD8n7QXrav6lhcTJITdhYoDsTdB3S1+9rBy0= Subject key identifier: 0B:AD:3F:DD:AA:0B:6C:19:28:4E:08:AD:AD:CA:B7:D5:33:60:73:0A Authority key identifier: BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F Certificate issuer: /CN=A91F4957/serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft Manifest number: 0240 Signing time: Mon 27 Jul 2026 03:58:57 +0000 Manifest this update: Mon 27 Jul 2026 03:58:56 +0000 Manifest next update: Mon 03 Aug 2026 03:58:56 +0000 Files and hashes: 1: vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl (hash: YeThQalOarLcZQfmCfScPIuIaPtn26+RJSTLICNvW/o=) 2: 60B707FA1AEA11EE92BEA24CC4F9AE02.roa (hash: bix+YU13i+NYX1fy3wJhfyH3DvlL1GPid8lFNptHhAQ=) 3: 4231A1AA1B1711EEA5566A23C4F9AE02.roa (hash: f29LIF15y9c4pRVyaia3pQoiL6xkSmloi7OnCo+ktB8=) 4: F0237E941B1911EE9DFF2942C4F9AE02.roa (hash: gVdmkqx6NMYmCIMvMpCuqPA5iFz+9mSl4sfjYVVq1bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4957, serialNumber=BF2D1B39D3C2E9AE0AA8FAB94BAC540CC526524F Validity Not Before: Jul 27 03:58:56 2026 GMT Not After : Aug 3 03:58:56 2026 GMT Subject: CN=6a66d780-b94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:01:d4:7b:5e:8b:08:c1:5f:07:6e:66:9a: 02:35:cc:b0:73:ef:d2:fb:a6:94:96:ce:66:fd:9f: 68:bc:ff:c6:d5:e2:19:cb:1f:a7:bb:fe:05:33:f1: f1:25:de:3c:44:c3:78:b7:88:70:fc:8c:a9:a9:1f: 74:5d:45:49:89:03:95:33:4a:33:19:8f:2c:ef:0b: f5:98:42:a1:e7:c2:5a:47:83:d4:00:25:87:f5:5e: 1f:e8:59:0b:22:1c:53:42:e1:d2:89:3b:f6:bc:e9: 00:75:fe:be:fb:43:cd:01:61:a7:04:55:1b:62:38: 89:99:83:86:60:dc:cf:13:81:2b:b7:da:da:3e:fa: 5c:83:ab:eb:28:bd:f0:f5:79:15:dc:f3:80:b7:f3: d5:53:7a:df:9c:95:8b:29:de:39:d1:c5:79:82:cf: a8:19:58:e3:d5:e1:76:6d:5a:0e:dd:aa:0c:b8:5d: c8:91:16:df:95:72:2c:05:f9:43:ee:88:98:6d:ac: cb:e9:68:6e:78:52:01:a5:94:0d:58:2a:c6:2f:fe: ec:59:34:f4:0d:11:64:18:aa:1a:46:8b:46:62:41: 7a:14:2b:18:dc:76:76:78:51:04:51:00:1b:cd:52: d7:70:10:44:21:6b:f0:44:83:47:ca:f8:c1:f0:09: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AD:3F:DD:AA:0B:6C:19:28:4E:08:AD:AD:CA:B7:D5:33:60:73:0A X509v3 Authority Key Identifier: keyid:BF:2D:1B:39:D3:C2:E9:AE:0A:A8:FA:B9:4B:AC:54:0C:C5:26:52:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vy0bOdPC6a4KqPq5S6xUDMUmUk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4957/571B22101AE711EE8DD4B949C4F9AE02/vy0bOdPC6a4KqPq5S6xUDMUmUk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:e5:ae:06:9c:d8:d7:7c:d5:eb:d2:dc:09:f5:cb:01:1c:bc: 30:1d:a0:1e:a9:4e:0c:4f:9b:fe:1e:6e:7d:e7:4c:24:ba:59: 87:af:62:a1:82:df:69:9c:a7:f2:51:7a:ae:67:33:82:c6:21: 46:3e:ad:2a:07:ca:47:ee:6b:93:1a:20:93:64:12:1d:36:e6: 93:a6:a9:09:0e:9f:0a:10:29:17:91:7f:f3:33:b8:2a:87:f4: 94:85:c1:7b:0e:67:47:24:bf:b2:be:2f:59:2c:53:df:a5:62: ac:6d:e4:8c:50:ac:be:f9:08:6d:02:09:bb:1a:c7:b8:49:c4: bd:8e:5d:49:c6:40:fd:36:e6:38:79:48:95:6a:15:17:6a:cb: b4:85:e2:4b:97:8f:66:39:0c:80:b5:dc:12:0e:f9:5d:15:db: 19:c3:04:d1:95:5c:26:d0:57:12:58:a2:20:1d:72:25:71:77: 47:25:b6:4b:83:29:9a:94:42:6b:a2:85:fa:b4:90:bc:78:ee: cf:2b:ae:cc:f4:fd:cb:c9:d0:60:12:dc:48:87:36:b2:77:27: fe:cd:29:35:53:5a:7f:0a:57:ec:5e:44:2b:4d:81:c0:a9:ad: 53:e8:9f:27:40:0d:24:e3:cf:65:99:5a:ba:dc:1b:e5:99:3d: b0:dd:d4:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ5NTcxMTAvBgNVBAUTKEJGMkQxQjM5RDNDMkU5QUUwQUE4RkFCOTRCQUM1NDBD QzUyNjUyNEYwHhcNMjYwNzI3MDM1ODU2WhcNMjYwODAzMDM1ODU2WjAYMRYwFAYD VQQDEw02YTY2ZDc4MC1iOTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi8B1HteiwjBXwduZpoCNcywc+/S+6aUls5m/Z9ovP/G1eIZyx+nu/4FM/Hx Jd48RMN4t4hw/IypqR90XUVJiQOVM0ozGY8s7wv1mEKh58JaR4PUACWH9V4f6FkL IhxTQuHSiTv2vOkAdf6++0PNAWGnBFUbYjiJmYOGYNzPE4Ert9raPvpcg6vrKL3w 9XkV3POAt/PVU3rfnJWLKd450cV5gs+oGVjj1eF2bVoO3aoMuF3IkRbflXIsBflD 7oiYbazL6WhueFIBpZQNWCrGL/7sWTT0DRFkGKoaRotGYkF6FCsY3HZ2eFEEUQAb zVLXcBBEIWvwRINHyvjB8AliBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAutP92q C2wZKE4Ira3Kt9UzYHMKMB8GA1UdIwQYMBaAFL8tGznTwumuCqj6uUusVAzFJlJP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDk1Ny81NzFCMjIxMDFB RTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZhNEtxUHE1UzZ4VURNVW1V azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Z5MGJPZFBDNmE0S3FQcTVTNnhVRE1VbVVrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDk1Ny81NzFCMjIxMDFBRTcxMUVFOERENEI5NDlDNEY5QUUwMi92eTBiT2RQQzZh NEtxUHE1UzZ4VURNVW1VazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsuWuBpzY13zV69LcCfXLARy8MB2gHqlODE+b/h5ufedMJLpZh69ioYLfaZyn 8lF6rmczgsYhRj6tKgfKR+5rkxogk2QSHTbmk6apCQ6fChApF5F/8zO4Kof0lIXB ew5nRyS/sr4vWSxT36VirG3kjFCsvvkIbQIJuxrHuEnEvY5dScZA/TbmOHlIlWoV F2rLtIXiS5ePZjkMgLXcEg75XRXbGcME0ZVcJtBXEliiIB1yJXF3RyW2S4MpmpRC a6KF+rSQvHjuzyuuzPT9y8nQYBLcSIc2sncn/s0pNVNafwpX7F5EK02BwKmtU+if J0ANJOPPZZlautwb5Zk9sN3UQQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:36:33 2026 by rpki-client