$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft File: Y35CcZzKBnZlOgprNKBujlSsBe8.mft (raw, json) Hash identifier: lWuMIsli+uU5uk5Rq2gYGRFaFAG9eMKcGlaZKHK7jlU= Subject key identifier: 9A:7B:0D:C7:6C:A7:C5:3D:22:3A:1B:A8:5F:98:2E:51:CA:47:10:A4 Authority key identifier: 63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF Certificate issuer: /CN=A91FECFD/serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Certificate serial: 09BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft Manifest number: 09B5 Signing time: Sun 26 Jul 2026 20:27:19 +0000 Manifest this update: Sun 26 Jul 2026 20:27:19 +0000 Manifest next update: Sun 02 Aug 2026 20:27:19 +0000 Files and hashes: 1: Y35CcZzKBnZlOgprNKBujlSsBe8.crl (hash: 2cGLvicR1LG/U04VIbCsnntk75dtTg5QJx4kkwDy12g=) 2: 995F3DCEAF7811EABCA9AC1DC4F9AE02.roa (hash: OzlAv6KjQltx6nWptS2CfrjVYRlijYIMI9XGPfT9vJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2493 (0x9bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FECFD, serialNumber=637E42719CCA0676653A0A6B34A06E8E54AC05EF Validity Not Before: Jul 26 20:27:19 2026 GMT Not After : Aug 2 20:27:19 2026 GMT Subject: CN=6a666da7-3b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e1:88:59:e9:6e:65:e6:bf:4e:7d:91:6d:90: 1e:9a:47:98:ac:14:79:38:e9:f9:eb:35:3f:10:24: c7:98:52:20:3c:7b:8a:27:3d:c2:cd:10:ec:b8:a4: 69:40:cd:22:30:b2:29:e3:cd:6c:1a:66:8f:1d:84: 1c:d4:55:8a:d1:e3:45:01:83:9f:06:fd:d5:a8:0a: a9:7e:67:88:99:3e:c8:6f:e8:0e:cb:53:6e:1e:59: 53:9e:9a:d3:b5:8f:cb:13:17:da:cd:b7:4d:85:5e: 67:ca:13:15:ff:52:24:d3:ac:46:a9:ba:e3:4d:76: 43:bd:6a:7e:89:82:c3:90:07:8a:74:19:37:bf:b3: 1c:3b:6e:5c:06:20:72:78:6c:6b:d5:f3:46:89:40: 73:dc:9b:57:1e:2d:d3:94:b1:a1:fe:ab:59:73:a0: 16:be:0a:7c:24:a1:15:3b:66:74:77:36:c7:0c:17: d7:4a:82:62:fa:f7:f1:1e:6c:01:e4:50:b0:54:90: 3c:b5:e2:78:d4:71:44:2b:de:19:b6:c4:92:84:90: 68:e1:3b:1e:2c:c5:13:db:f0:ef:5f:a8:32:4b:43: c7:fe:13:ce:f4:b7:9b:2c:79:fb:d6:61:84:0b:44: 75:29:1d:a2:c7:22:99:cd:05:5e:40:a8:0b:78:75: bb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:0D:C7:6C:A7:C5:3D:22:3A:1B:A8:5F:98:2E:51:CA:47:10:A4 X509v3 Authority Key Identifier: keyid:63:7E:42:71:9C:CA:06:76:65:3A:0A:6B:34:A0:6E:8E:54:AC:05:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y35CcZzKBnZlOgprNKBujlSsBe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECFD/37A04264AF7711EA8118311BC4F9AE02/Y35CcZzKBnZlOgprNKBujlSsBe8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:1a:c4:4e:a6:25:96:dc:08:29:1d:a3:aa:bb:34:5b:a8:60: b3:7d:18:6f:60:03:87:a1:d2:d9:01:11:76:fe:ee:8c:74:49: 62:1b:4e:c9:38:bb:cc:98:61:0c:e5:cd:9a:86:8e:b2:ae:48: 2c:b2:41:8f:9b:a4:f0:51:36:62:8f:bd:92:9d:c1:d8:b6:a0: 40:ec:19:2a:53:f5:76:aa:73:9f:6d:36:68:c9:f6:3f:b4:2c: 6e:d7:7a:f9:c8:a4:ae:cb:42:96:84:13:92:05:62:8a:8c:fd: 78:b7:ee:e0:a7:45:b7:9d:a9:2f:b0:b8:a4:4c:08:d7:6d:8a: 24:ff:b0:db:a0:01:0e:03:63:be:7b:6b:e7:51:f6:3d:fb:cc: c9:48:b7:87:be:26:63:3a:ff:d2:49:e9:48:a8:1a:0c:fc:4e: 54:27:38:7a:24:bf:69:d0:e8:d5:5d:f8:a3:3f:d0:c5:2a:38: bc:af:93:ea:e2:59:f2:c1:1d:03:97:b3:af:ff:70:fb:45:f6: 58:fa:d3:6e:f1:12:6b:d7:e1:17:d5:bd:06:e5:1e:9a:ef:ff: 6b:a8:01:c9:b9:05:a1:d1:85:36:34:dc:23:6b:02:20:1e:dd: 55:23:02:e5:19:6c:55:a8:81:a0:22:49:22:1b:94:14:b6:ba: a2:e2:4f:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVDRkQxMTAvBgNVBAUTKDYzN0U0MjcxOUNDQTA2NzY2NTNBMEE2QjM0QTA2RThF NTRBQzA1RUYwHhcNMjYwNzI2MjAyNzE5WhcNMjYwODAyMjAyNzE5WjAYMRYwFAYD VQQDEw02YTY2NmRhNy0zYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteGIWeluZea/Tn2RbZAemkeYrBR5OOn56zU/ECTHmFIgPHuKJz3CzRDsuKRp QM0iMLIp481sGmaPHYQc1FWK0eNFAYOfBv3VqAqpfmeImT7Ib+gOy1NuHllTnprT tY/LExfazbdNhV5nyhMV/1Ik06xGqbrjTXZDvWp+iYLDkAeKdBk3v7McO25cBiBy eGxr1fNGiUBz3JtXHi3TlLGh/qtZc6AWvgp8JKEVO2Z0dzbHDBfXSoJi+vfxHmwB 5FCwVJA8teJ41HFEK94ZtsSShJBo4TseLMUT2/DvX6gyS0PH/hPO9LebLHn71mGE C0R1KR2ixyKZzQVeQKgLeHW7CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJp7Dcds p8U9IjobqF+YLlHKRxCkMB8GA1UdIwQYMBaAFGN+QnGcygZ2ZToKazSgbo5UrAXv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNGRC8zN0EwNDI2NEFG NzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0JuWmxPZ3ByTktCdWpsU3NC ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzNUNjWnpLQm5abE9ncHJOS0J1amxTc0JlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUNGRC8zN0EwNDI2NEFGNzcxMUVBODExODMxMUJDNEY5QUUwMi9ZMzVDY1p6S0Ju WmxPZ3ByTktCdWpsU3NCZTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzhrETqYlltwIKR2jqrs0W6hgs30Yb2ADh6HS2QERdv7ujHRJYhtOyTi7zJhh DOXNmoaOsq5ILLJBj5uk8FE2Yo+9kp3B2LagQOwZKlP1dqpzn202aMn2P7Qsbtd6 +cikrstCloQTkgViioz9eLfu4KdFt52pL7C4pEwI122KJP+w26ABDgNjvntr51H2 PfvMyUi3h74mYzr/0knpSKgaDPxOVCc4eiS/adDo1V34oz/QxSo4vK+T6uJZ8sEd A5ezr/9w+0X2WPrTbvESa9fhF9W9BuUemu//a6gBybkFodGFNjTcI2sCIB7dVSMC 5RlsVaiBoCJJIhuUFLa6ouJP3Q== -----END CERTIFICATE-----Generated at Tue Jul 28 18:29:28 2026 by rpki-client