$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json) Hash identifier: sfvprw4lszJzPT3knulquPO3jRXEN/ujGa91A/4BnuM= Subject key identifier: 9E:43:AC:F8:0B:03:29:0B:AC:E3:9F:BD:62:FD:D7:20:CD:5A:6D:54 Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0D2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft Manifest number: 0D1F Signing time: Tue 28 Jul 2026 18:21:40 +0000 Manifest this update: Tue 28 Jul 2026 18:21:40 +0000 Manifest next update: Tue 04 Aug 2026 18:21:40 +0000 Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: EBPejQZklgiknE0QDW41ju498g8/f7uHpmFgztbVTZM=) 2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: 1fv3/pXl5lcDYoLzTz47KptyfQ/fj025AndBgH7ATRM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3375 (0xd2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: Jul 28 18:21:40 2026 GMT Not After : Aug 4 18:21:40 2026 GMT Subject: CN=6a68f334-2dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:90:82:19:99:96:86:21:cf:ff:79:38:73:6e: 23:32:a4:85:b3:5c:be:7d:6d:05:e0:23:38:7b:ab: f9:28:b2:2c:88:69:66:66:63:eb:14:ed:02:74:17: 5a:ab:98:f3:fa:d8:64:69:ee:31:3d:5e:6e:19:5c: f3:16:94:d8:a2:51:4f:92:03:c5:32:8b:99:de:24: cf:ab:0b:93:59:88:32:08:e8:b6:f5:ef:6f:83:80: fa:9b:23:11:b7:3c:36:db:f5:a3:cc:0d:e9:a0:3b: d2:49:7f:89:ef:c6:f6:07:3e:85:d1:fa:2b:5e:30: b5:1b:7b:0c:5f:27:53:6b:22:8e:08:f9:73:e6:0f: 83:d8:97:b4:f6:ec:26:49:0c:c9:95:ac:32:12:d3: d2:67:7b:fd:4a:28:5a:0a:10:23:3e:ea:9d:67:d1: e0:7e:71:2c:35:0b:e2:3b:75:ed:bd:cc:af:98:77: fa:c2:63:f3:71:b9:98:86:3f:fa:4f:18:ea:2a:b3: ec:43:fc:9d:df:c5:2c:23:e5:99:5e:86:69:9f:3c: 83:b1:ff:e7:a7:3f:33:30:d8:cd:86:c1:45:85:b3: 7d:62:ee:69:9d:92:b7:14:7e:6b:04:bc:32:f7:e4: e1:d1:3f:e4:57:c4:cd:9c:65:d5:63:e1:f6:8c:2e: ea:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:43:AC:F8:0B:03:29:0B:AC:E3:9F:BD:62:FD:D7:20:CD:5A:6D:54 X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c3:02:5d:dd:98:9c:e1:15:93:fb:14:6b:84:e9:9a:cb:f4: e9:03:85:15:89:0d:32:75:dc:ea:b2:65:70:e5:18:73:75:36: 9d:ac:09:09:d5:4d:77:76:0e:c7:26:21:1a:74:7a:5c:b2:bb: ed:3e:6e:15:d9:bd:5c:75:8d:ea:49:0d:70:cf:57:4f:19:0d: 3b:d1:84:38:cd:20:93:5d:d0:c2:0c:29:35:b8:8b:88:5a:b8: d4:8a:1c:35:ac:a2:6a:9a:88:24:0e:80:de:5d:2a:18:f6:da: 01:81:57:28:34:3e:e6:85:9f:65:fb:87:e4:39:ba:9a:a2:29: 6c:3b:c9:10:91:1a:42:00:b7:47:05:ee:a1:ad:09:4f:1d:5b: d5:c7:2d:cf:f0:52:a3:a0:e5:0b:c5:ac:34:b9:73:4d:bf:46: 0f:7e:85:37:51:95:8a:5d:de:4f:ef:66:12:0a:62:56:56:ba: c8:54:06:3f:e4:63:22:dc:55:53:16:c5:f7:44:0f:13:e2:34: e2:83:f1:5f:3d:d5:1d:f4:6b:ec:f3:e1:4e:b3:f3:5f:cf:4b: 1b:2b:fc:ea:76:36:da:27:2e:09:63:68:e5:01:ce:b0:5a:b9: 4d:86:f2:f8:35:66:52:20:b5:77:0b:45:35:de:53:a9:46:2f: 72:0a:dc:d8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjYwNzI4MTgyMTQwWhcNMjYwODA0MTgyMTQwWjAYMRYwFAYD VQQDEw02YTY4ZjMzNC0yZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2JCCGZmWhiHP/3k4c24jMqSFs1y+fW0F4CM4e6v5KLIsiGlmZmPrFO0CdBda q5jz+thkae4xPV5uGVzzFpTYolFPkgPFMouZ3iTPqwuTWYgyCOi29e9vg4D6myMR tzw22/WjzA3poDvSSX+J78b2Bz6F0forXjC1G3sMXydTayKOCPlz5g+D2Je09uwm SQzJlawyEtPSZ3v9SihaChAjPuqdZ9HgfnEsNQviO3XtvcyvmHf6wmPzcbmYhj/6 TxjqKrPsQ/yd38UsI+WZXoZpnzyDsf/npz8zMNjNhsFFhbN9Yu5pnZK3FH5rBLwy 9+Th0T/kV8TNnGXVY+H2jC7qwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ5DrPgL AykLrOOfvWL91yDNWm1UMB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pz dzhXQVlHbEpJdW4yZUlFZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAMMCXd2YnOEVk/sUa4Tpmsv06QOFFYkNMnXc6rJlcOUYc3U2nawJCdVNd3YO xyYhGnR6XLK77T5uFdm9XHWN6kkNcM9XTxkNO9GEOM0gk13QwgwpNbiLiFq41Ioc NayiapqIJA6A3l0qGPbaAYFXKDQ+5oWfZfuH5Dm6mqIpbDvJEJEaQgC3RwXuoa0J Tx1b1cctz/BSo6DlC8WsNLlzTb9GD36FN1GVil3eT+9mEgpiVla6yFQGP+RjItxV UxbF90QPE+I04oPxXz3VHfRr7PPhTrPzX89LGyv86nY22icuCWNo5QHOsFq5TYby +DVmUiC1dwtFNd5TqUYvcgrc2A== -----END CERTIFICATE-----Generated at Tue Jul 28 22:11:49 2026 by rpki-client