$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft File: CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft (raw, json) Hash identifier: AnWTPUQLx2sjQmNVEazPKifYpzs3+uClT5nlU2sI+gY= Subject key identifier: 5F:4E:92:A4:71:9A:28:70:CC:62:D2:12:CF:4E:1F:2C:20:3E:E0:F3 Authority key identifier: 0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F Certificate issuer: /CN=A91FFE9F/serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Certificate serial: 102D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft Manifest number: 0FF5 Signing time: Tue 28 Jul 2026 17:35:52 +0000 Manifest this update: Tue 28 Jul 2026 17:35:52 +0000 Manifest next update: Tue 04 Aug 2026 17:35:52 +0000 Files and hashes: 1: CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl (hash: YV8ctZljyukCLlHtRBal1uf/bQmo2a/JkzBn3gwbGsg=) 2: 6153EE40A64911EEA2F9C24AC4F9AE02.roa (hash: xxh6NZnNYpflyBEdhUUFw/SOYfLeyMddymrrtghmKYo=) 3: D927A2DAA64A11EE8316D651C4F9AE02.roa (hash: LdvKEMxHF6LRdf8uDUGPZDjjr7RNd+qCPf5qkED55LI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4141 (0x102d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE9F, serialNumber=0B095236234E6935BAA341E3235A3DB473ACC67F Validity Not Before: Jul 28 17:35:52 2026 GMT Not After : Aug 4 17:35:52 2026 GMT Subject: CN=6a68e878-b991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:24:c7:b3:cc:66:4c:80:3b:08:c9:34:06: 76:d9:64:f9:fa:58:41:e5:4d:9a:b5:4f:1f:ee:1d: e1:99:35:90:07:6d:b4:ed:83:68:04:3f:8d:11:86: 0f:e7:d7:ac:f6:ef:15:82:f9:41:e1:18:52:87:49: df:0c:ff:29:80:62:4d:5b:e5:c4:76:c9:ef:cd:a3: ea:5f:72:cb:1d:af:2e:20:4f:29:5c:66:b1:ca:8c: ef:a9:59:00:b9:78:7a:d9:0c:98:f0:a6:80:8f:5c: 61:4b:7d:f0:2b:a7:63:76:df:b1:43:b9:57:6f:86: a8:0f:ca:20:ab:87:26:90:0c:4c:80:4c:db:12:9d: 2b:81:09:1c:ef:40:d8:75:6a:d8:39:e9:f1:2e:65: aa:48:c6:e4:56:c2:e2:69:e3:fe:c4:d9:c0:f7:81: 89:2c:b5:3e:fd:bd:8e:3e:04:89:f2:ae:15:a1:99: 2d:02:41:8a:08:24:45:85:2f:87:23:6c:e4:ce:ea: 7a:9b:5a:43:6b:b7:3f:3d:58:ad:1c:44:69:ea:b6: b4:84:05:c5:9e:f6:42:98:80:8b:e3:db:7f:9e:6f: fb:96:5a:a2:2f:da:68:5b:a1:56:59:28:65:24:45: e9:3f:83:77:fe:7b:3e:ad:ab:f4:fb:2a:5e:0b:03: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4E:92:A4:71:9A:28:70:CC:62:D2:12:CF:4E:1F:2C:20:3E:E0:F3 X509v3 Authority Key Identifier: keyid:0B:09:52:36:23:4E:69:35:BA:A3:41:E3:23:5A:3D:B4:73:AC:C6:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwlSNiNOaTW6o0HjI1o9tHOsxn8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFE9F/8BE063E07B1611E99949AC51C4F9AE02/CwlSNiNOaTW6o0HjI1o9tHOsxn8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:87:60:cb:8a:08:7a:41:54:84:49:24:d9:1c:4f:5f:26:4f: c4:e6:a8:2e:ae:fb:a8:ed:4d:17:26:7f:04:e1:31:b6:1e:bb: 9a:8b:84:4f:48:09:a9:7d:22:1e:a3:e3:82:e8:c4:27:c3:97: cd:32:5f:90:7c:ba:7a:be:8f:3a:87:ce:f5:83:95:82:ca:f4: 85:73:b6:24:49:1c:93:b0:c4:45:1a:da:89:cc:98:0a:b7:a3: f2:46:fc:c4:e4:5b:af:be:f8:7e:36:75:4d:54:a8:e4:76:9b: df:0f:86:c8:cc:cd:41:6d:b7:45:b7:2b:2e:5a:02:d8:43:50: 11:b8:71:a0:59:6b:b1:6f:e4:11:74:fd:8e:34:8e:d3:0c:fe: c6:f7:b7:6f:35:7c:81:cd:84:74:f3:c9:22:9c:93:64:de:0a: 29:35:78:32:62:8d:4a:28:fe:3a:1a:c3:10:f0:ee:26:4c:18: 82:d0:e9:69:5f:77:dd:1c:b2:85:0d:5b:d9:67:e7:37:91:ee: c1:43:ba:c0:c0:98:b9:fb:ac:3e:ce:72:fa:dc:83:27:cd:9c: 44:4f:72:84:e2:79:ba:a5:08:84:cc:d7:a4:16:5c:e5:98:38: 5b:60:8f:39:27:09:af:01:18:50:e1:b0:3c:90:c9:26:d5:3b: 1a:ea:f8:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFOUYxMTAvBgNVBAUTKDBCMDk1MjM2MjM0RTY5MzVCQUEzNDFFMzIzNUEzREI0 NzNBQ0M2N0YwHhcNMjYwNzI4MTczNTUyWhcNMjYwODA0MTczNTUyWjAYMRYwFAYD VQQDEw02YTY4ZTg3OC1iOTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqkkx7PMZkyAOwjJNAZ22WT5+lhB5U2atU8f7h3hmTWQB2207YNoBD+NEYYP 59es9u8VgvlB4RhSh0nfDP8pgGJNW+XEdsnvzaPqX3LLHa8uIE8pXGaxyozvqVkA uXh62QyY8KaAj1xhS33wK6djdt+xQ7lXb4aoD8ogq4cmkAxMgEzbEp0rgQkc70DY dWrYOenxLmWqSMbkVsLiaeP+xNnA94GJLLU+/b2OPgSJ8q4VoZktAkGKCCRFhS+H I2zkzup6m1pDa7c/PVitHERp6ra0hAXFnvZCmICL49t/nm/7llqiL9poW6FWWShl JEXpP4N3/ns+rav0+ypeCwMo5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF9OkqRx mihwzGLSEs9OHywgPuDzMB8GA1UdIwQYMBaAFAsJUjYjTmk1uqNB4yNaPbRzrMZ/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkU5Ri84QkUwNjNFMDdC MTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FUVzZvMEhqSTFvOXRIT3N4 bjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3bFNOaU5PYVRXNm8wSGpJMW85dEhPc3huOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkU5Ri84QkUwNjNFMDdCMTYxMUU5OTk0OUFDNTFDNEY5QUUwMi9Dd2xTTmlOT2FU VzZvMEhqSTFvOXRIT3N4bjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA14dgy4oIekFUhEkk2RxPXyZPxOaoLq77qO1NFyZ/BOExth67mouET0gJqX0i HqPjgujEJ8OXzTJfkHy6er6POofO9YOVgsr0hXO2JEkck7DERRraicyYCrej8kb8 xORbr774fjZ1TVSo5Hab3w+GyMzNQW23RbcrLloC2ENQEbhxoFlrsW/kEXT9jjSO 0wz+xve3bzV8gc2EdPPJIpyTZN4KKTV4MmKNSij+OhrDEPDuJkwYgtDpaV933Ryy hQ1b2WfnN5HuwUO6wMCYufusPs5y+tyDJ82cRE9yhOJ5uqUIhMzXpBZc5Zg4W2CP OScJrwEYUOGwPJDJJtU7Gur4gg== -----END CERTIFICATE-----Generated at Wed Jul 29 11:26:59 2026 by rpki-client