$ rpki-client -vvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft File: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft (raw, json) Hash identifier: HvhVhjZeWdB+xm5I5uchI8px1OVg3bgRko4CLufGt54= Subject key identifier: 70:ED:A1:CF:2C:A1:FE:79:8D:0D:6E:3A:F2:91:9D:BC:46:30:F8:D8 Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft Manifest number: 028B Signing time: Thu 23 Jul 2026 02:59:02 +0000 Manifest this update: Thu 23 Jul 2026 02:59:01 +0000 Manifest next update: Thu 30 Jul 2026 02:59:01 +0000 Files and hashes: 1: 68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl (hash: m7yQ250wo842d1MM6+8Gct6bx9eWOzZjkDSHfQZp2ds=) 2: 98152E6C480111EFB2976238C4F9AE02.roa (hash: IKCcqa9PRpmxLis3qIFeDEu3OJpDaH1bF5IhwAN/3Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Validity Not Before: Jul 23 02:59:01 2026 GMT Not After : Jul 30 02:59:01 2026 GMT Subject: CN=6a618376-5158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e3:d1:0f:f1:ed:e2:04:3c:f6:a6:5c:69:d0: 1b:47:02:84:ab:f9:a5:b1:4e:1e:10:a4:05:a2:93: 87:8f:dd:a9:eb:47:a9:30:bf:b8:da:27:83:e5:ea: c2:19:2b:3e:3d:0d:05:6b:ff:87:0c:f4:6b:4e:bc: 2a:13:b3:16:0e:c3:79:70:16:66:69:32:46:7d:34: df:8d:7d:71:2d:d3:94:b4:f3:f0:a9:79:7c:45:a5: 04:45:ac:ce:a6:b0:ed:c9:95:24:a6:07:6e:94:ca: bc:34:b7:14:49:3a:40:e7:e1:33:69:0b:27:ce:dd: 80:b9:66:f5:bc:7c:e3:74:24:e6:d8:7e:1d:cf:db: f2:89:df:6e:e4:8f:92:fb:31:5b:d9:63:ea:8f:16: 0b:f8:e9:b5:7e:99:60:57:75:5f:39:0f:25:3a:b1: dc:89:04:13:49:ee:c8:93:49:db:21:71:63:ee:f8: 34:41:98:88:35:c8:eb:9e:13:b3:74:70:5c:d5:3f: 7f:c4:6a:99:8e:75:a7:0e:f6:a8:66:74:95:55:2a: 1d:31:33:08:1d:37:be:8f:13:66:2f:7d:83:a6:14: b5:70:8d:6f:e2:e5:98:0d:31:85:32:bc:54:d5:fe: df:5f:89:1a:34:69:b6:c9:ee:7f:2b:78:6e:08:96: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:ED:A1:CF:2C:A1:FE:79:8D:0D:6E:3A:F2:91:9D:BC:46:30:F8:D8 X509v3 Authority Key Identifier: keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:64:c5:bf:49:92:09:42:dc:ec:f6:d2:fc:af:05:62:a3:6f: 2d:46:5f:12:01:56:5f:00:8a:fe:fe:44:76:6c:3e:7d:37:44: 7a:bd:dd:74:88:03:86:d4:0b:fb:26:b0:34:a7:7d:41:66:dd: a0:88:97:79:4d:3f:4c:91:30:17:e1:72:88:30:ec:b8:be:c6: 5f:55:76:8c:61:dd:34:48:a1:2c:19:97:76:30:22:0a:51:8b: de:5e:c7:63:23:04:16:ef:df:00:ce:df:73:7f:33:51:c5:e2: 61:4d:4f:d4:15:2c:ac:1e:7c:0f:57:7c:a8:63:9a:53:69:ab: 80:a1:b9:81:f1:d6:ae:04:ad:0c:38:33:23:46:83:7f:47:73: 11:3e:e8:d4:73:c6:74:bf:a3:83:91:a9:c4:cb:2d:e0:71:8f: 40:d7:12:de:f9:5e:83:9a:9a:88:95:c0:64:a4:88:f4:0c:ce: 5e:96:5f:fc:b4:90:4e:b0:2b:09:43:54:84:87:0b:49:19:9a: af:2c:35:35:f0:5d:f0:03:07:7a:42:4f:22:fe:a4:8f:fe:e2: a1:1f:63:52:da:63:27:f6:d0:fe:d0:47:05:d1:3b:8b:f6:2e: d3:ea:0a:c3:ea:93:96:aa:00:87:ac:a5:28:76:10:65:d9:58: f2:62:66:a7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTkxMTAvBgNVBAUTKEVCQzNEN0ZDRkIxMzRGNTM4RkMxOUY5OEFEODk4QzBG M0YwNzRGMjAwHhcNMjYwNzIzMDI1OTAxWhcNMjYwNzMwMDI1OTAxWjAYMRYwFAYD VQQDEw02YTYxODM3Ni01MTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOPRD/Ht4gQ89qZcadAbRwKEq/mlsU4eEKQFopOHj92p60epML+42ieD5erC GSs+PQ0Fa/+HDPRrTrwqE7MWDsN5cBZmaTJGfTTfjX1xLdOUtPPwqXl8RaUERazO prDtyZUkpgdulMq8NLcUSTpA5+EzaQsnzt2AuWb1vHzjdCTm2H4dz9vyid9u5I+S +zFb2WPqjxYL+Om1fplgV3VfOQ8lOrHciQQTSe7Ik0nbIXFj7vg0QZiINcjrnhOz dHBc1T9/xGqZjnWnDvaoZnSVVSodMTMIHTe+jxNmL32DphS1cI1v4uWYDTGFMrxU 1f7fX4kaNGm2ye5/K3huCJYlmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDtoc8s of55jQ1uOvKRnbxGMPjYMB8GA1UdIwQYMBaAFOvD1/z7E09Tj8GfmK2JjA8/B08g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBOS8yNjE4ODQwRUIx NDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQxT1B3Wi1ZclltTUR6OEhU eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY4UFhfUHNUVDFPUHdaLVlyWW1NRHo4SFR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjVBOS8yNjE4ODQwRUIxNDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQx T1B3Wi1ZclltTUR6OEhUeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALGTFv0mSCULc7PbS/K8FYqNvLUZfEgFWXwCK/v5Edmw+fTdEer3ddIgDhtQL +yawNKd9QWbdoIiXeU0/TJEwF+FyiDDsuL7GX1V2jGHdNEihLBmXdjAiClGL3l7H YyMEFu/fAM7fc38zUcXiYU1P1BUsrB58D1d8qGOaU2mrgKG5gfHWrgStDDgzI0aD f0dzET7o1HPGdL+jg5GpxMst4HGPQNcS3vleg5qaiJXAZKSI9AzOXpZf/LSQTrAr CUNUhIcLSRmaryw1NfBd8AMHekJPIv6kj/7ioR9jUtpjJ/bQ/tBHBdE7i/Yu0+oK w+qTlqoAh6ylKHYQZdlY8mJmpw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:15:54 2026 by rpki-client