$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: RvgT7sbq8OhTO8hjl5UCoi/9Qys9wMCtHVpSG2G7BVg= Subject key identifier: 15:1B:75:E3:11:BA:CD:BA:FD:27:F9:AE:30:AC:E9:A4:51:D4:03:01 Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 01BA Signing time: Wed 29 Jul 2026 05:12:02 +0000 Manifest this update: Wed 29 Jul 2026 05:12:01 +0000 Manifest next update: Wed 05 Aug 2026 05:12:01 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: gd1T5CvekZDTZXDyfcNAPXDP0UVaGq315Bi/e42LdXA=) 2: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: tjSNlsLVDVemDbg8MkCxHj6lieTSIIDFdS4u4JZvSN0=) 3: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: tI8081Qes7Wl6iTmVmk2PhB8XaNxc++Td85vrFv3YGM=) 4: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G0wfXD8YdWR0Wc2toljzpi576bi3k/pJ5bJYPQ4s76s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 05:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Jul 29 05:12:01 2026 GMT Not After : Aug 5 05:12:01 2026 GMT Subject: CN=6a698ba2-2f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cf:96:37:4c:eb:0b:30:f3:51:b8:e1:e9:59: b9:60:bc:30:b6:6f:5e:d4:b8:96:c2:95:f4:34:e0: d6:96:ca:90:08:03:6a:4e:25:d1:0c:3d:90:2c:fe: f8:8b:71:00:f5:b8:fe:6c:10:ca:cf:84:ca:24:66: 7c:49:88:b5:9d:7f:b6:a2:a8:03:5b:50:2c:6d:3c: 9b:b4:b6:7c:d6:47:3b:d2:15:57:29:2a:33:cd:ab: e1:9a:28:f2:8c:7d:fd:31:0c:9b:2a:e7:a2:d3:18: ac:65:08:eb:c6:00:a8:29:8e:2d:32:a6:32:cb:b4: 39:3f:90:5e:d9:5f:3f:c0:07:f0:06:f1:46:5c:e6: a9:82:01:d1:67:30:8e:ee:64:e3:6c:3d:f8:b7:f2: d6:f1:df:76:f1:8e:81:8b:4e:64:8e:56:d4:3a:d3: f9:e0:33:76:e6:63:86:d9:24:81:aa:9c:b1:47:c3: 22:f5:8f:0d:69:c8:55:63:0e:2a:ba:0e:4d:57:e6: 8d:de:50:e3:3f:35:05:69:51:d0:2e:ca:47:70:65: 13:48:0c:e6:e8:fd:a0:7f:ad:f5:fc:d9:3b:e8:89: 45:d0:97:15:f2:81:f9:ca:38:8e:af:b7:e6:67:53: e3:9d:b3:d0:25:3d:e5:9e:fc:51:73:3b:d7:19:cf: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1B:75:E3:11:BA:CD:BA:FD:27:F9:AE:30:AC:E9:A4:51:D4:03:01 X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:15:c5:38:ed:26:02:6e:07:1c:4e:d5:da:b1:92:06:79:60: c5:63:9f:09:db:88:73:7a:94:f6:17:73:2e:b6:ff:ca:b2:dd: 92:c2:4d:c7:07:a4:55:ea:b3:94:32:0c:b4:a2:a4:16:0b:08: f8:12:76:65:93:33:d3:e8:9c:a1:38:1a:62:d7:cd:4e:ec:21: 6d:22:e0:e9:5a:52:1d:a8:2e:10:2e:f1:13:ed:f8:f4:04:62: 73:2c:a6:6c:5e:2b:c8:b0:b3:f2:bb:b1:a4:df:a3:1b:41:21: 8a:51:4b:5a:48:d3:20:66:3e:87:a1:76:12:a8:c7:af:1f:3b: ba:24:69:b8:56:20:e0:ce:72:3e:b6:d3:75:81:43:84:1e:d7: a8:81:a4:c4:32:ef:08:d8:b6:77:7b:04:bd:e7:63:2d:dd:94: 08:e3:89:f1:d7:2e:4d:e0:43:39:3b:21:bb:08:b3:84:6f:08: 70:e2:5e:84:5e:48:d4:c0:d4:2b:38:5e:26:5a:01:ac:25:97: f4:35:42:c9:4d:33:8b:f9:93:56:46:5b:00:ad:f8:7c:ed:f2: 21:fe:ee:2a:d0:52:98:b6:b4:41:fe:95:46:97:1d:f2:ac:13: 9f:75:34:66:21:e0:91:a8:9b:ad:a4:c8:a3:19:2e:9a:9f:78: 2d:95:2f:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjYwNzI5MDUxMjAxWhcNMjYwODA1MDUxMjAxWjAYMRYwFAYD VQQDEw02YTY5OGJhMi0yZjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnM+WN0zrCzDzUbjh6Vm5YLwwtm9e1LiWwpX0NODWlsqQCANqTiXRDD2QLP74 i3EA9bj+bBDKz4TKJGZ8SYi1nX+2oqgDW1AsbTybtLZ81kc70hVXKSozzavhmijy jH39MQybKuei0xisZQjrxgCoKY4tMqYyy7Q5P5Be2V8/wAfwBvFGXOapggHRZzCO 7mTjbD34t/LW8d928Y6Bi05kjlbUOtP54DN25mOG2SSBqpyxR8Mi9Y8NachVYw4q ug5NV+aN3lDjPzUFaVHQLspHcGUTSAzm6P2gf631/Nk76IlF0JcV8oH5yjiOr7fm Z1PjnbPQJT3lnvxRczvXGc+vHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBUbdeMR us26/Sf5rjCs6aRR1AMBMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdhXFOO0mAm4HHE7V2rGSBnlgxWOfCduIc3qU9hdzLrb/yrLdksJNxwekVeqz lDIMtKKkFgsI+BJ2ZZMz0+icoTgaYtfNTuwhbSLg6VpSHaguEC7xE+349ARicyym bF4ryLCz8ruxpN+jG0EhilFLWkjTIGY+h6F2EqjHrx87uiRpuFYg4M5yPrbTdYFD hB7XqIGkxDLvCNi2d3sEvedjLd2UCOOJ8dcuTeBDOTshuwizhG8IcOJehF5I1MDU KzheJloBrCWX9DVCyU0zi/mTVkZbAK34fO3yIf7uKtBSmLa0Qf6VRpcd8qwTn3U0 ZiHgkaibraTIoxkump94LZUviA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:57:41 2026 by rpki-client