$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft File: j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft (raw, json) Hash identifier: S8RlEcqR7ZTR/Gg0T8Xnz6newTT4nu9UDNsyw5/PW5o= Subject key identifier: 1B:65:96:3B:85:C2:6A:F7:1D:DE:B0:BB:F8:71:A4:08:AC:32:6B:51 Authority key identifier: 8F:AC:C1:C3:B4:35:CC:89:64:E4:D0:E9:56:E8:99:17:3D:9E:F6:B8 Certificate issuer: /CN=A91F9F3A/serialNumber=8FACC1C3B435CC8964E4D0E956E899173D9EF6B8 Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft Manifest number: 23 Signing time: Mon 27 Jul 2026 11:13:23 +0000 Manifest this update: Mon 27 Jul 2026 11:13:23 +0000 Manifest next update: Mon 03 Aug 2026 11:13:23 +0000 Files and hashes: 1: j6zBw7Q1zIlk5NDpVuiZFz2e9rg.crl (hash: ckCv2+pOVFzVB2SQlEgZRid0j1yCoElruCXeT5T7ZCY=) 2: 606CBF12542411F18D5724329A833773.roa (hash: E5DSsr7ls+2R5IV+XJJedGkiZxXXiluiB3q0yuIQn0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.crl rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F3A, serialNumber=8FACC1C3B435CC8964E4D0E956E899173D9EF6B8 Validity Not Before: Jul 27 11:13:23 2026 GMT Not After : Aug 3 11:13:23 2026 GMT Subject: CN=6a673d53-7b70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:1c:b7:35:2e:84:97:b0:e4:86:c0:f5:97: 9f:46:be:2a:af:9a:43:11:61:89:55:62:84:ca:f2: 68:07:3e:8d:87:89:a9:52:0b:a9:c7:7e:89:1c:2e: 43:00:8a:5d:75:5b:10:22:d8:d6:79:06:fd:8c:cd: 1d:fc:6a:c8:0e:17:d6:28:20:4d:7e:d1:94:2a:08: 84:f3:99:c7:78:22:5e:ae:2b:46:5b:fe:30:ba:fe: a2:d7:e7:f3:10:54:85:aa:08:35:b2:c7:15:3e:06: b7:86:0d:f3:e0:f7:a8:08:87:27:1b:05:d1:10:b1: e5:ee:2b:fe:7c:3e:a1:b1:c2:85:88:e1:da:40:47: bd:a2:14:61:d2:8b:31:08:68:4d:59:b7:9e:48:e3: 59:9a:e4:a7:69:3b:b4:2d:16:ea:78:1e:a7:3a:e1: d4:95:c1:22:a0:9f:f4:5f:2d:3f:92:f7:52:a9:fa: ea:45:a2:74:1a:7b:c9:ee:3a:f8:c9:cf:51:13:e1: 5a:1c:f7:6e:1d:61:ff:6f:28:ad:5d:43:1c:2b:be: a3:68:04:9e:c6:78:bd:37:1d:f3:bd:34:59:80:dc: a3:49:30:21:c8:f9:5d:0a:ad:0c:b9:0e:e5:9a:2c: a8:42:b7:46:4c:ec:16:86:02:c7:6d:95:96:45:a2: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:65:96:3B:85:C2:6A:F7:1D:DE:B0:BB:F8:71:A4:08:AC:32:6B:51 X509v3 Authority Key Identifier: keyid:8F:AC:C1:C3:B4:35:CC:89:64:E4:D0:E9:56:E8:99:17:3D:9E:F6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F3A/E967E46E542311F1BBF03D8499833773/j6zBw7Q1zIlk5NDpVuiZFz2e9rg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:10:4a:fa:cb:75:9b:39:b5:3e:a7:83:dd:7f:1c:38:e6:11: f1:0f:ef:87:81:11:ab:4c:4d:13:40:15:e0:45:cf:30:99:11: e7:ad:74:93:bd:bb:a8:b4:fa:4b:13:aa:23:b0:f3:7f:41:d5: 92:4d:c2:0d:2d:2a:ad:f3:00:18:58:f6:ab:64:b8:42:b1:3e: bb:8a:32:31:e7:bc:d0:3a:f1:c7:94:5a:3c:1a:0b:88:46:45: 8a:c6:bf:6e:45:fc:3b:40:b5:b0:97:e1:51:ec:fa:b9:29:35: a7:ea:a5:aa:b7:f8:1a:42:ef:5c:7d:e4:7a:75:9a:a3:00:25: 0c:25:98:d7:a2:b2:5e:4f:c0:13:59:ed:4c:c0:a7:02:ad:7a: d5:ad:de:65:2c:19:05:5e:4a:bc:11:5c:ea:9b:6d:e8:62:24: ee:34:8e:f4:26:a6:eb:fa:a2:5e:1d:d4:db:18:b8:4e:4e:73: 15:b8:33:08:44:37:56:fc:c4:2b:7f:94:82:f8:73:a4:1f:18: f0:ce:dd:53:f4:d2:b9:14:a7:ee:c8:c7:b3:98:56:49:6a:8f: c9:09:d0:bb:d9:39:a6:fe:ab:73:74:57:98:93:d7:5a:a4:98: 3c:55:8e:ab:3f:83:36:a3:f3:c2:39:34:e6:d0:83:2b:fb:85: 85:bb:77:c4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUYzQTExMC8GA1UEBRMoOEZBQ0MxQzNCNDM1Q0M4OTY0RTREMEU5NTZFODk5MTcz RDlFRjZCODAeFw0yNjA3MjcxMTEzMjNaFw0yNjA4MDMxMTEzMjNaMBgxFjAUBgNV BAMTDTZhNjczZDUzLTdiNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/Gxy3NS6El7DkhsD1l59GviqvmkMRYYlVYoTK8mgHPo2HialSC6nHfokcLkMA il11WxAi2NZ5Bv2MzR38asgOF9YoIE1+0ZQqCITzmcd4Il6uK0Zb/jC6/qLX5/MQ VIWqCDWyxxU+BreGDfPg96gIhycbBdEQseXuK/58PqGxwoWI4dpAR72iFGHSizEI aE1Zt55I41ma5KdpO7QtFup4Hqc64dSVwSKgn/RfLT+S91Kp+upFonQae8nuOvjJ z1ET4Voc924dYf9vKK1dQxwrvqNoBJ7GeL03HfO9NFmA3KNJMCHI+V0KrQy5DuWa LKhCt0ZM7BaGAsdtlZZFoiilAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUG2WWO4XC avcd3rC7+HGkCKwya1EwHwYDVR0jBBgwFoAUj6zBw7Q1zIlk5NDpVuiZFz2e9rgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5RjNBL0U5NjdFNDZFNTQy MzExRjFCQkYwM0Q4NDk5ODMzNzczL2o2ekJ3N1ExeklsazVORHBWdWlaRnoyZTly Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvajZ6Qnc3UTF6SWxrNU5EcFZ1aVpGejJlOXJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 RjNBL0U5NjdFNDZFNTQyMzExRjFCQkYwM0Q4NDk5ODMzNzczL2o2ekJ3N1Exekls azVORHBWdWlaRnoyZTlyZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBnEEr6y3WbObU+p4Pdfxw45hHxD++HgRGrTE0TQBXgRc8wmRHnrXSTvbuotPpL E6ojsPN/QdWSTcINLSqt8wAYWParZLhCsT67ijIx57zQOvHHlFo8GguIRkWKxr9u Rfw7QLWwl+FR7Pq5KTWn6qWqt/gaQu9cfeR6dZqjACUMJZjXorJeT8ATWe1MwKcC rXrVrd5lLBkFXkq8EVzqm23oYiTuNI70Jqbr+qJeHdTbGLhOTnMVuDMIRDdW/MQr f5SC+HOkHxjwzt1T9NK5FKfuyMezmFZJao/JCdC72Tmm/qtzdFeYk9dapJg8VY6r P4M2o/PCOTTm0IMr+4WFu3fE -----END CERTIFICATE-----Generated at Tue Jul 28 22:03:49 2026 by rpki-client