$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft File: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft (raw, json) Hash identifier: 5EvLJIFjyNjTbRhrbXuKsyHA+HyYuQDKiWh8kJ1K0mY= Subject key identifier: E9:92:0F:C7:8C:D1:AD:25:FC:AC:CF:59:66:FB:3D:B9:38:B0:C5:83 Authority key identifier: F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 Certificate issuer: /CN=A91FA5A2/serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft Manifest number: 01FE Signing time: Mon 27 Jul 2026 05:00:43 +0000 Manifest this update: Mon 27 Jul 2026 05:00:43 +0000 Manifest next update: Mon 03 Aug 2026 05:00:43 +0000 Files and hashes: 1: 9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl (hash: CV+GfJPeXUhfmvBQTnqwU2s4LxB6yOsAeci0SfQX/9U=) 2: 9FE80B2898F711EE87DF6E1FC4F9AE02.roa (hash: pHxXivDFEbvkF+NQAZkLY9uNgdyvvnZXrHsc10zFfQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA5A2, serialNumber=F5B117054AF509C2C33369DA961F446DDCAB8342 Validity Not Before: Jul 27 05:00:43 2026 GMT Not After : Aug 3 05:00:43 2026 GMT Subject: CN=6a66e5fb-f8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c0:6d:a6:a6:e1:21:eb:ec:45:e2:eb:8f:44: 69:ac:3c:35:69:7e:74:23:cc:00:ab:62:4f:a5:88: 3d:31:a0:5c:8e:c8:d9:c2:68:a8:07:45:ca:69:3a: 50:27:78:14:31:74:5d:b5:ae:91:76:b5:f7:d7:cc: 1a:f8:56:f2:05:85:55:22:1e:a9:92:ef:2a:71:37: 5d:63:f7:23:3c:cd:58:1b:04:21:9f:21:17:5c:3e: d6:f7:10:5f:a7:60:c5:72:cf:76:fe:70:40:f5:4b: 1a:15:b6:25:8b:6f:34:7e:6c:c0:fa:72:8a:d9:df: ca:1a:32:bf:e3:80:d8:8c:87:25:44:f7:12:54:17: 50:f9:30:45:0d:99:1d:e4:e6:92:60:c8:9a:3c:59: 06:ff:34:65:52:12:31:b7:f7:b7:87:1c:98:94:5b: 40:17:62:5c:a1:78:2d:26:73:fd:7a:78:f6:7b:6c: b7:3c:94:36:ee:f1:d7:93:c4:4d:8e:df:ac:03:a9: 84:57:02:7c:c5:45:67:3b:94:fa:56:77:53:75:28: 97:1c:10:2c:e7:e2:77:dd:8d:d6:de:7e:18:ea:33: 1b:a7:76:0f:14:4b:f5:8a:9b:5b:1a:67:62:cf:9d: 2c:17:14:45:0e:5e:4f:75:83:f1:52:83:e8:38:32: 14:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:92:0F:C7:8C:D1:AD:25:FC:AC:CF:59:66:FB:3D:B9:38:B0:C5:83 X509v3 Authority Key Identifier: keyid:F5:B1:17:05:4A:F5:09:C2:C3:33:69:DA:96:1F:44:6D:DC:AB:83:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9bEXBUr1CcLDM2nalh9Ebdyrg0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA5A2/4670EAAC98F611EEBBF1F417C4F9AE02/9bEXBUr1CcLDM2nalh9Ebdyrg0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:31:23:0c:b6:c3:69:74:c1:49:3b:e7:dc:78:3f:d3:d6:2e: 08:bb:c1:af:fc:3e:c2:55:f9:a3:09:ba:93:3b:2d:71:78:d7: 66:e1:bc:e5:c5:09:f6:f3:47:41:46:3a:c0:40:8d:4f:bf:ed: 82:17:3a:36:77:37:97:16:4c:ad:ad:1e:9c:cc:48:03:e5:59: f7:de:97:36:5b:59:ef:34:cf:02:de:5a:e8:3d:83:74:6e:bd: f7:ea:6d:62:47:18:43:31:a1:7a:21:64:f7:01:a7:6a:d5:bd: 35:04:d0:ba:29:ff:05:63:4e:c7:75:56:f2:e1:65:c9:63:23: c0:cf:a3:64:af:3a:d5:56:e1:82:4e:a6:ed:26:5e:d9:0b:96: 78:f5:54:90:25:92:04:82:d3:6e:0b:b7:35:28:dd:f8:2b:29: 00:38:4e:05:aa:33:13:71:04:09:26:bd:50:7d:3e:2b:cd:10: 5e:e2:4f:79:ec:a6:b5:49:68:56:a2:35:be:2c:ad:f2:de:26: 3d:f7:e2:f4:f2:93:9b:96:15:cc:1e:36:70:c0:c9:ad:3b:57: 28:27:0a:b8:f9:99:d9:69:a5:97:b9:b9:30:f6:0b:ae:8c:c9: dc:e0:87:e3:27:90:44:e7:84:6e:de:8c:64:83:c3:15:50:40: 1b:0b:dc:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE1QTIxMTAvBgNVBAUTKEY1QjExNzA1NEFGNTA5QzJDMzMzNjlEQTk2MUY0NDZE RENBQjgzNDIwHhcNMjYwNzI3MDUwMDQzWhcNMjYwODAzMDUwMDQzWjAYMRYwFAYD VQQDEw02YTY2ZTVmYi1mOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08BtpqbhIevsReLrj0RprDw1aX50I8wAq2JPpYg9MaBcjsjZwmioB0XKaTpQ J3gUMXRdta6RdrX318wa+FbyBYVVIh6pku8qcTddY/cjPM1YGwQhnyEXXD7W9xBf p2DFcs92/nBA9UsaFbYli280fmzA+nKK2d/KGjK/44DYjIclRPcSVBdQ+TBFDZkd 5OaSYMiaPFkG/zRlUhIxt/e3hxyYlFtAF2JcoXgtJnP9enj2e2y3PJQ27vHXk8RN jt+sA6mEVwJ8xUVnO5T6VndTdSiXHBAs5+J33Y3W3n4Y6jMbp3YPFEv1iptbGmdi z50sFxRFDl5PdYPxUoPoODIU6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOmSD8eM 0a0l/KzPWWb7Pbk4sMWDMB8GA1UdIwQYMBaAFPWxFwVK9QnCwzNp2pYfRG3cq4NC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTVBMi80NjcwRUFBQzk4 RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNjTERNMm5hbGg5RWJkeXJn MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzliRVhCVXIxQ2NMRE0ybmFsaDlFYmR5cmcwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTVBMi80NjcwRUFBQzk4RjYxMUVFQkJGMUY0MTdDNEY5QUUwMi85YkVYQlVyMUNj TERNMm5hbGg5RWJkeXJnMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtDEjDLbDaXTBSTvn3Hg/09YuCLvBr/w+wlX5owm6kzstcXjXZuG85cUJ9vNH QUY6wECNT7/tghc6Nnc3lxZMra0enMxIA+VZ996XNltZ7zTPAt5a6D2DdG699+pt YkcYQzGheiFk9wGnatW9NQTQuin/BWNOx3VW8uFlyWMjwM+jZK861Vbhgk6m7SZe 2QuWePVUkCWSBILTbgu3NSjd+CspADhOBaozE3EECSa9UH0+K80QXuJPeeymtUlo VqI1viyt8t4mPffi9PKTm5YVzB42cMDJrTtXKCcKuPmZ2Wmll7m5MPYLrozJ3OCH 4yeQROeEbt6MZIPDFVBAGwvcpw== -----END CERTIFICATE-----Generated at Wed Jul 29 00:51:29 2026 by rpki-client