$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft File: YN1l7H9y62x9qLk3BuLTug8GW_w.mft (raw, json) Hash identifier: L4PrRfP57+9yHkdOeL7fu4D9uML2Q+GZ1cEZsELGWIc= Subject key identifier: C5:83:B1:C2:E1:DE:75:BD:ED:6A:AD:2A:A0:5D:EE:72:EF:21:36:92 Authority key identifier: 60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC Certificate issuer: /CN=A91A4264/serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Certificate serial: 1B45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft Manifest number: 1B32 Signing time: Wed 22 Jul 2026 16:22:09 +0000 Manifest this update: Wed 22 Jul 2026 16:22:08 +0000 Manifest next update: Wed 29 Jul 2026 16:22:08 +0000 Files and hashes: 1: YN1l7H9y62x9qLk3BuLTug8GW_w.crl (hash: 1juzetQGDX0gq4iP2cVW/G3+jsqwXXWniPLosp5MrF4=) 2: 91CB97905BD211EBA9178181C4F9AE02.roa (hash: qWp/XIY6bx5m6zPuPTYxt/QlRjZYjzeSmVqLyGiCJPQ=) 3: D75BE71A410511E7970A2A5FC4F9AE02.roa (hash: bVX95h5YGIEFl/nNsvVn6rJFnDmppDxCWRFjlU5VtvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6981 (0x1b45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4264, serialNumber=60DD65EC7F72EB6C7DA8B93706E2D3BA0F065BFC Validity Not Before: Jul 22 16:22:08 2026 GMT Not After : Jul 29 16:22:08 2026 GMT Subject: CN=6a60ee31-8dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:a6:f3:29:de:01:1b:f2:0f:7e:7d:8d:a8: 4e:5d:d9:8a:f9:ec:46:53:29:85:75:99:45:e0:a3: 1b:cc:f4:b9:13:c5:16:36:7e:a5:b6:80:93:96:c3: cc:01:95:9c:93:90:34:93:57:c9:ba:1e:64:c0:0c: da:a0:9d:19:43:a7:16:73:fc:59:48:a9:59:03:e4: a3:ca:ee:71:f7:17:9a:fd:40:da:f3:1a:54:6b:52: ad:8b:00:3a:5f:65:ed:b7:89:e7:dc:8a:32:94:c6: 2c:22:1b:1d:77:c3:9a:61:9b:6f:c7:5e:cb:e7:76: 7f:ca:49:2c:86:0e:58:0c:6f:19:df:87:6e:b5:39: 87:9e:61:78:f0:c0:d5:1d:36:03:b9:8c:7f:5a:96: 1c:e4:48:87:fa:49:0b:83:1b:a8:55:cc:75:26:aa: 0b:03:e2:67:b0:cd:97:a4:37:ab:70:e1:34:7a:7b: 0e:b3:ca:25:4e:63:ee:88:b5:85:78:48:c3:12:e8: f6:46:b6:17:36:15:d9:48:c6:99:7d:8c:f0:15:d1: c4:9c:6b:40:3a:70:34:67:f9:42:74:e5:b1:e4:c7: f9:e4:78:9c:a7:57:b2:d5:79:bb:9f:79:de:8b:fb: 52:08:da:fd:95:e6:b8:ba:69:5b:f2:24:e3:31:c0: 3f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:83:B1:C2:E1:DE:75:BD:ED:6A:AD:2A:A0:5D:EE:72:EF:21:36:92 X509v3 Authority Key Identifier: keyid:60:DD:65:EC:7F:72:EB:6C:7D:A8:B9:37:06:E2:D3:BA:0F:06:5B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YN1l7H9y62x9qLk3BuLTug8GW_w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4264/C58D6FFA410411E79EC0385DC4F9AE02/YN1l7H9y62x9qLk3BuLTug8GW_w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b1:bf:ef:8a:42:b1:97:2f:f5:6c:61:73:57:24:d5:fa:2c: 24:29:ed:37:14:61:69:96:fd:bd:da:40:2f:c9:b2:ac:94:d6: 22:59:60:a2:c6:aa:f2:70:99:39:21:0e:77:64:94:b5:14:d5: 8c:81:cb:99:c6:88:9b:89:da:0b:59:c8:0f:7b:47:a5:bd:c2: b2:35:13:da:6c:ab:ba:17:05:c6:67:05:11:bb:9f:cb:04:04: 3e:6f:2e:f0:65:dd:74:f2:9d:38:54:30:78:4d:a0:34:bf:bb: c0:1d:7d:67:47:4c:3c:fa:d7:e4:2b:e8:48:f2:20:f7:df:31: c5:10:d1:94:90:ea:81:d7:45:ab:a6:c9:4d:4a:50:a1:cf:2d: 80:42:4e:d5:64:c6:85:dc:a9:54:65:07:de:f9:11:90:d4:4c: 31:ca:82:9a:ae:f1:8b:ee:59:d8:db:ba:a1:fa:1c:86:92:59: e2:68:89:97:f1:ad:0c:48:4a:c0:12:81:d7:d7:11:05:f5:1c: fa:8d:2b:58:2f:3d:54:b9:a9:0a:b8:c9:98:48:46:1e:51:95: 55:68:3c:6e:61:cb:81:f7:5b:a2:fb:0a:8b:8c:25:70:4b:e9: 71:21:8e:4d:27:26:f1:a0:4d:40:a8:54:08:a9:29:3d:17:56: 31:32:bc:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICG0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQyNjQxMTAvBgNVBAUTKDYwREQ2NUVDN0Y3MkVCNkM3REE4QjkzNzA2RTJEM0JB MEYwNjVCRkMwHhcNMjYwNzIyMTYyMjA4WhcNMjYwNzI5MTYyMjA4WjAYMRYwFAYD VQQDEw02YTYwZWUzMS04ZGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuACm8yneARvyD359jahOXdmK+exGUymFdZlF4KMbzPS5E8UWNn6ltoCTlsPM AZWck5A0k1fJuh5kwAzaoJ0ZQ6cWc/xZSKlZA+Sjyu5x9xea/UDa8xpUa1KtiwA6 X2Xtt4nn3IoylMYsIhsdd8OaYZtvx17L53Z/ykkshg5YDG8Z34dutTmHnmF48MDV HTYDuYx/WpYc5EiH+kkLgxuoVcx1JqoLA+JnsM2XpDercOE0ensOs8olTmPuiLWF eEjDEuj2RrYXNhXZSMaZfYzwFdHEnGtAOnA0Z/lCdOWx5Mf55Hicp1ey1Xm7n3ne i/tSCNr9lea4umlb8iTjMcA/NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWDscLh 3nW97WqtKqBd7nLvITaSMB8GA1UdIwQYMBaAFGDdZex/cutsfai5Nwbi07oPBlv8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDI2NC9DNThENkZGQTQx MDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYyeDlxTGszQnVMVHVnOEdX X3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lOMWw3SDl5NjJ4OXFMazNCdUxUdWc4R1dfdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDI2NC9DNThENkZGQTQxMDQxMUU3OUVDMDM4NURDNEY5QUUwMi9ZTjFsN0g5eTYy eDlxTGszQnVMVHVnOEdXX3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANrG/74pCsZcv9Wxhc1ck1fosJCntNxRhaZb9vdpAL8myrJTWIllgosaq8nCZ OSEOd2SUtRTVjIHLmcaIm4naC1nID3tHpb3CsjUT2myruhcFxmcFEbufywQEPm8u 8GXddPKdOFQweE2gNL+7wB19Z0dMPPrX5CvoSPIg998xxRDRlJDqgddFq6bJTUpQ oc8tgEJO1WTGhdypVGUH3vkRkNRMMcqCmq7xi+5Z2Nu6ofochpJZ4miJl/GtDEhK wBKB19cRBfUc+o0rWC89VLmpCrjJmEhGHlGVVWg8bmHLgfdbovsKi4wlcEvpcSGO TScm8aBNQKhUCKkpPRdWMTK8YQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:56:19 2026 by rpki-client