$ rpki-client -vvf rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft File: D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft (raw, json) Hash identifier: AJtUJL4hZBMShhLp3bv4Xxck8k3DtZY3AkJdM7R08kU= Subject key identifier: 0A:BE:08:39:F8:71:EE:C1:78:C3:D7:20:CB:46:B2:54:9E:9C:15:1E Authority key identifier: 0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 Certificate issuer: /CN=A91456CF/serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft Manifest number: E1 Signing time: Thu 23 Jul 2026 08:18:51 +0000 Manifest this update: Thu 23 Jul 2026 08:18:51 +0000 Manifest next update: Thu 30 Jul 2026 08:18:51 +0000 Files and hashes: 1: D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl (hash: vLWeyLR+3O8byrFM7fCyAZtSWSMVFYXsd8cWjHMX9cw=) 2: 6EBD9348315C11F0B4470733C4F9AE02.roa (hash: QDtioVWIhSQHKs0Tk+R/fmPWRMMOJ24+WyiTZJLSleU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91456CF, serialNumber=0FFF717982D9E1D96F4D7FC5311ED323236BA093 Validity Not Before: Jul 23 08:18:51 2026 GMT Not After : Jul 30 08:18:51 2026 GMT Subject: CN=6a61ce6b-d6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:de:8f:bc:f7:eb:79:ad:6b:76:20:ed:3c:80: bf:f2:6e:ad:c8:09:3a:3c:0c:25:93:5a:ce:71:1d: ff:57:c6:26:ad:65:db:43:04:e5:8d:45:f8:93:de: af:57:a9:ea:9b:a5:6b:3c:6a:a6:0f:e4:5b:ac:da: 29:bd:26:f5:f1:c9:b2:da:89:fe:1e:95:25:0e:6c: 50:0b:d8:d5:12:eb:2c:ec:75:fd:ea:37:8e:ef:7b: 52:57:cb:2b:07:99:0b:27:14:fb:02:d9:7a:ee:e0: 0d:f6:e8:7b:8b:28:a9:3c:02:91:40:2b:b1:bb:e1: a9:d5:37:2f:85:92:df:75:73:8d:88:fb:66:04:c2: 9e:6b:bf:62:29:28:d7:d3:6d:ab:42:96:a9:87:c0: e3:2c:d1:98:4e:72:41:b6:fe:c4:5b:3e:d9:e5:3c: 89:57:4a:ee:6c:dc:37:d9:95:75:f1:25:35:a7:0f: 0b:1c:ce:8c:ef:88:7c:e2:8b:8b:f0:76:ce:ef:94: 8f:f9:f2:5d:88:96:4c:2f:98:e6:e6:d8:e1:ae:e2: 80:48:94:db:a6:72:ab:a2:87:d7:69:78:23:4c:86: b9:c9:28:71:d4:16:f9:36:66:0d:a6:05:a2:fa:5d: 68:a8:b0:d1:7a:44:3e:57:21:e1:fd:09:55:ef:55: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BE:08:39:F8:71:EE:C1:78:C3:D7:20:CB:46:B2:54:9E:9C:15:1E X509v3 Authority Key Identifier: keyid:0F:FF:71:79:82:D9:E1:D9:6F:4D:7F:C5:31:1E:D3:23:23:6B:A0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D_9xeYLZ4dlvTX_FMR7TIyNroJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91456CF/01393496312D11F096CEEA5EC4F9AE02/D_9xeYLZ4dlvTX_FMR7TIyNroJM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:1e:00:49:de:ca:84:21:74:86:4e:5b:77:e6:73:d4:1c:d1: 6c:ba:af:e8:98:c3:12:12:17:73:39:65:9e:e2:e8:2d:67:94: 4f:1b:93:00:f5:37:16:89:13:66:0e:94:33:02:18:8d:10:e5: 1c:71:36:84:53:97:88:42:79:aa:cb:11:62:e8:c6:00:7c:9f: d8:08:c8:55:d2:8e:25:9c:4b:88:3a:8d:30:67:76:81:7a:07: 98:a8:d9:47:52:c7:97:4a:8d:bd:75:4a:18:89:32:c0:ec:22: 8b:26:75:27:88:78:54:b8:7a:a9:cc:93:ec:58:bb:b7:25:cc: 63:63:21:6c:92:be:56:67:4b:64:0f:13:d6:f1:64:5a:42:7a: 36:97:8b:0d:27:7f:79:b9:b3:61:71:8d:5d:81:29:8f:b4:bc: 55:f3:66:27:c7:71:e7:e6:71:bd:d7:26:2d:b2:2c:79:f6:94: 74:6e:f0:43:27:d9:26:eb:fe:be:ef:54:76:3e:f1:40:43:1b: 8b:ce:e9:a4:17:2d:c5:26:d7:71:12:66:0c:29:c0:b2:36:a7: ce:65:80:8f:7c:86:b0:65:39:c0:b1:f8:e9:b7:c3:53:e1:68: b6:db:be:f3:90:c5:91:bf:88:d4:b7:cd:b3:34:70:67:1e:2c: 27:ba:46:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU2Q0YxMTAvBgNVBAUTKDBGRkY3MTc5ODJEOUUxRDk2RjREN0ZDNTMxMUVEMzIz MjM2QkEwOTMwHhcNMjYwNzIzMDgxODUxWhcNMjYwNzMwMDgxODUxWjAYMRYwFAYD VQQDEw02YTYxY2U2Yi1kNmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5t6PvPfrea1rdiDtPIC/8m6tyAk6PAwlk1rOcR3/V8YmrWXbQwTljUX4k96v V6nqm6VrPGqmD+RbrNopvSb18cmy2on+HpUlDmxQC9jVEuss7HX96jeO73tSV8sr B5kLJxT7Atl67uAN9uh7iyipPAKRQCuxu+Gp1TcvhZLfdXONiPtmBMKea79iKSjX 022rQpaph8DjLNGYTnJBtv7EWz7Z5TyJV0rubNw32ZV18SU1pw8LHM6M74h84ouL 8HbO75SP+fJdiJZML5jm5tjhruKASJTbpnKroofXaXgjTIa5yShx1Bb5NmYNpgWi +l1oqLDRekQ+VyHh/QlV71UnzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAq+CDn4 ce7BeMPXIMtGslSenBUeMB8GA1UdIwQYMBaAFA//cXmC2eHZb01/xTEe0yMja6CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTZDRi8wMTM5MzQ5NjMx MkQxMUYwOTZDRUVBNUVDNEY5QUUwMi9EXzl4ZVlMWjRkbHZUWF9GTVI3VEl5TnJv Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RfOXhlWUxaNGRsdlRYX0ZNUjdUSXlOcm9KTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTZDRi8wMTM5MzQ5NjMxMkQxMUYwOTZDRUVBNUVDNEY5QUUwMi9EXzl4ZVlMWjRk bHZUWF9GTVI3VEl5TnJvSk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPx4ASd7KhCF0hk5bd+Zz1BzRbLqv6JjDEhIXczllnuLoLWeUTxuTAPU3FokT Zg6UMwIYjRDlHHE2hFOXiEJ5qssRYujGAHyf2AjIVdKOJZxLiDqNMGd2gXoHmKjZ R1LHl0qNvXVKGIkywOwiiyZ1J4h4VLh6qcyT7Fi7tyXMY2MhbJK+VmdLZA8T1vFk WkJ6NpeLDSd/ebmzYXGNXYEpj7S8VfNmJ8dx5+ZxvdcmLbIsefaUdG7wQyfZJuv+ vu9Udj7xQEMbi87ppBctxSbXcRJmDCnAsjanzmWAj3yGsGU5wLH46bfDU+Fottu+ 85DFkb+I1LfNszRwZx4sJ7pG9g== -----END CERTIFICATE-----Generated at Fri Jul 24 08:53:46 2026 by rpki-client