$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft File: u5dqWY5eywXjf6wApbeIjlf1HFI.mft (raw, json) Hash identifier: RRq6d9uFLZFjoqSm3Zv4syA9LENTC5jolgHOS9WHzDs= Subject key identifier: AD:58:65:BF:8A:27:74:02:88:E1:BE:0E:FA:D9:9A:DA:D6:6F:C1:CF Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 Certificate issuer: /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Certificate serial: 19DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft Manifest number: 19A1 Signing time: Wed 22 Jul 2026 16:30:51 +0000 Manifest this update: Wed 22 Jul 2026 16:30:50 +0000 Manifest next update: Wed 29 Jul 2026 16:30:50 +0000 Files and hashes: 1: u5dqWY5eywXjf6wApbeIjlf1HFI.crl (hash: 4QGzL5s71qvKYb4JG9PHrwJjDW2QON8zZwdgItXKYyg=) 2: 3BC16A0C5B4811F182614DE994833773.roa (hash: j1ZHgprZt5D6ye8dPtuzBjBeTD9Ha7NH8jbgaxgrm7s=) 3: 4D12993446CC11F08EB9471AC4F9AE02.roa (hash: kZ0uphZPyCd+wbYNkHA1SsHf26EQjAMAFcs0tjZEC/Q=) 4: 1295ACC8511811F0BC16C641C4F9AE02.roa (hash: sxrPqnbF6T43GAzl7GDJj3PzJSHlDC7K4T4ROo3CtKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6623 (0x19df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52 Validity Not Before: Jul 22 16:30:50 2026 GMT Not After : Jul 29 16:30:50 2026 GMT Subject: CN=6a60f03a-bb66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:74:e0:93:f1:86:ee:ad:56:a1:d6:25:c5:65: 7c:a4:4e:60:15:67:88:80:e9:15:7d:09:e5:f9:5f: 0b:63:a0:3b:88:f5:9b:da:d7:02:4b:7a:52:ec:b5: ff:cf:b2:7a:d5:ec:5b:34:2e:32:7d:7b:bf:eb:6d: e9:28:f3:29:06:e1:cd:42:dd:84:47:d8:d6:5f:d7: 27:57:5a:ea:8c:59:1a:d8:44:83:23:fc:e9:16:2a: ab:89:50:18:67:f1:7a:e4:e9:29:be:0e:ca:99:7b: e6:27:7e:14:0f:d1:66:89:04:18:ad:99:eb:75:58: 4e:af:c8:b0:c3:d7:fa:87:86:81:16:bd:79:61:1b: 0d:55:56:b6:61:d6:26:4e:f2:68:16:20:00:0e:ca: 19:1e:50:05:a7:74:2c:73:2d:57:25:94:c4:1c:38: 46:80:cb:e8:cf:d0:42:6f:a8:be:72:e8:fb:5c:48: 61:02:a4:d6:ee:b9:5f:8b:0c:ca:3e:f2:89:e7:ce: bc:32:97:d5:23:69:44:ed:c4:d4:a5:51:51:cc:03: 0e:86:af:02:00:10:24:15:14:48:ef:34:e6:bf:e1: 01:2f:aa:06:3c:ad:10:42:74:a5:7e:7f:e8:ce:9c: ed:ad:9b:63:1c:5a:ed:7f:53:d3:63:53:0a:7b:06: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:58:65:BF:8A:27:74:02:88:E1:BE:0E:FA:D9:9A:DA:D6:6F:C1:CF X509v3 Authority Key Identifier: keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:11:08:76:23:fa:a7:49:a9:22:1c:bc:59:c2:b8:de:c6:df: 97:44:49:b9:0d:82:63:9d:11:a3:5e:4d:64:2d:d1:98:90:22: f9:d0:7c:2b:bd:3e:08:70:9d:b9:7a:49:19:93:b4:4b:b6:df: 2e:52:fc:47:1b:31:45:fa:1e:bd:ab:a6:3b:1c:4a:2f:58:51: d9:db:ab:2d:42:c5:d8:3f:f1:e3:7a:61:01:05:c0:ff:f3:7f: ba:89:ba:24:8b:a7:e3:ee:d1:c3:d0:51:07:e8:6f:a6:96:33: a3:6d:91:be:bb:29:7e:d6:a1:6f:7d:0c:40:4e:99:94:a6:11: aa:4c:a8:ad:c7:95:a6:b9:df:a9:11:ab:cc:56:18:58:c1:d3: 99:ba:6d:b3:a7:4b:70:bf:45:8b:c2:5b:07:d8:f5:d2:1a:54: 43:b7:17:e1:0f:19:43:b9:58:35:f6:63:1e:78:b4:f6:b7:47: 98:29:93:82:5d:39:5d:c9:5b:31:52:e0:76:33:cf:45:1b:b7: a0:d4:14:e0:7b:43:03:07:23:5a:54:89:b5:04:68:4a:1e:7e: ec:70:64:ce:6a:33:73:56:90:04:00:82:50:e2:d4:c0:f5:eb: ab:c7:53:cb:24:08:98:a0:b0:3c:68:eb:7f:07:fd:ef:b9:c5: 8a:5a:f8:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwRTMxMTAvBgNVBAUTKEJCOTc2QTU5OEU1RUNCMDVFMzdGQUMwMEE1Qjc4ODhF NTdGNTFDNTIwHhcNMjYwNzIyMTYzMDUwWhcNMjYwNzI5MTYzMDUwWjAYMRYwFAYD VQQDEw02YTYwZjAzYS1iYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA93Tgk/GG7q1WodYlxWV8pE5gFWeIgOkVfQnl+V8LY6A7iPWb2tcCS3pS7LX/ z7J61exbNC4yfXu/623pKPMpBuHNQt2ER9jWX9cnV1rqjFka2ESDI/zpFiqriVAY Z/F65Okpvg7KmXvmJ34UD9FmiQQYrZnrdVhOr8iww9f6h4aBFr15YRsNVVa2YdYm TvJoFiAADsoZHlAFp3Qscy1XJZTEHDhGgMvoz9BCb6i+cuj7XEhhAqTW7rlfiwzK PvKJ5868MpfVI2lE7cTUpVFRzAMOhq8CABAkFRRI7zTmv+EBL6oGPK0QQnSlfn/o zpztrZtjHFrtf1PTY1MKewb4FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1YZb+K J3QCiOG+DvrZmtrWb8HPMB8GA1UdIwQYMBaAFLuXalmOXssF43+sAKW3iI5X9RxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTBFMy9EQTE4QjE4NDlB NDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3WGpmNndBcGJlSWpsZjFI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U1ZHFXWTVleXdYamY2d0FwYmVJamxmMUhGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTBFMy9EQTE4QjE4NDlBNDkxMUU3OUE5RjMwMzBDNEY5QUUwMi91NWRxV1k1ZXl3 WGpmNndBcGJlSWpsZjFIRkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgREIdiP6p0mpIhy8WcK43sbfl0RJuQ2CY50Ro15NZC3RmJAi+dB8K70+CHCd uXpJGZO0S7bfLlL8RxsxRfoevaumOxxKL1hR2durLULF2D/x43phAQXA//N/uom6 JIun4+7Rw9BRB+hvppYzo22Rvrspftahb30MQE6ZlKYRqkyorceVprnfqRGrzFYY WMHTmbpts6dLcL9Fi8JbB9j10hpUQ7cX4Q8ZQ7lYNfZjHni09rdHmCmTgl05Xclb MVLgdjPPRRu3oNQU4HtDAwcjWlSJtQRoSh5+7HBkzmozc1aQBACCUOLUwPXrq8dT yyQImKCwPGjrfwf977nFilr4Mw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:12:56 2026 by rpki-client