$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: NEesVRu0Qn46yONTrEsW4dy/kdPKfybculLXIvOGZxM= Subject key identifier: D9:E4:9A:2F:92:58:09:BA:C5:BB:FE:8D:DD:36:43:41:03:47:F8:41 Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 0A0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 09C2 Signing time: Wed 22 Jul 2026 20:27:48 +0000 Manifest this update: Wed 22 Jul 2026 20:27:47 +0000 Manifest next update: Wed 29 Jul 2026 20:27:47 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: 6MKe7Z9N43XbK6K93yOOCceS7G2iPmh7U+HrMXcsRjw=) 2: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: HMcEW/S22FGTvhiPakps8LsqQxXUXp8fWhqX+TVm2Vw=) 3: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: lyIUpVCXgqLP2olWGXoY8duGQEhruwus1GboROWSH00=) 4: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: 7GoPVvNzOxqz0b0bUBa7Sq4uOYDaYVX7ArTVXs9QZv4=) 5: 88252000B55C11ECA9565039C4F9AE02.roa (hash: vpFh2/2Ww8n4gYMHhWBePvd1Fheir2EOHQAoooMfRBo=) 6: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: xihXskffyMmX6uPdr43LH17SKnUp1mNtBqH6MhLI3sk=) 7: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: NpbVQQRWWoFXTrGdsKM32fOCA5zAVZsblj+8rYIeUc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2574 (0xa0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Jul 22 20:27:47 2026 GMT Not After : Jul 29 20:27:47 2026 GMT Subject: CN=6a6127c4-2bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0b:fd:85:dd:4b:b1:8a:04:7b:b9:cb:27:09: a0:09:15:69:55:7b:24:65:b1:16:ce:99:dc:18:5a: c9:7e:86:5b:52:dd:67:73:5c:a8:80:35:fe:3f:ce: c4:bc:e3:1b:7a:f9:d4:56:fe:81:c7:95:7b:ca:d2: ea:16:b6:c0:b1:cc:2c:e6:96:d5:8a:04:0f:d3:28: e9:3e:84:c6:e7:ea:87:c5:39:7e:33:bc:08:a5:db: da:bd:55:dc:dd:6e:bc:24:63:3a:55:b3:87:4d:fe: 5d:64:6d:54:93:81:a2:65:d7:06:32:6e:1a:02:61: 32:9e:71:e2:70:b0:1e:41:48:66:84:67:25:54:fd: 39:80:31:ae:67:30:42:99:ad:c6:e2:2d:d5:29:81: 06:a2:60:4a:f2:99:20:98:d0:93:ea:6f:0c:0a:2a: c7:73:13:c3:98:6e:64:84:58:b9:a0:27:dd:ad:3a: 70:dc:10:eb:46:2d:88:59:b7:b8:7e:b2:dc:99:93: ff:d2:8e:b6:cb:e0:51:8c:7c:43:3a:7e:cf:48:26: d6:5b:fc:64:16:fd:69:4c:2e:b7:a3:fb:94:d8:1d: 06:ff:11:23:05:d6:06:c9:ee:ff:c6:0a:70:69:f7: 21:14:7c:09:41:94:4d:6c:78:7d:68:86:6b:f1:8e: 6a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E4:9A:2F:92:58:09:BA:C5:BB:FE:8D:DD:36:43:41:03:47:F8:41 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e4:04:92:04:36:37:f0:48:7b:37:ee:73:e2:08:23:b0:9d: 2e:fa:0a:01:64:cf:07:18:50:55:8c:66:14:63:39:cf:66:db: 89:b2:bb:e2:80:7f:b6:9e:7f:76:f9:b1:6f:c3:56:aa:2b:e1: 97:6d:3c:4a:6c:d5:9e:19:d0:46:af:48:32:f6:e2:ed:a5:1d: 1e:4e:7d:c5:c9:9e:23:0e:17:e4:5f:15:fc:1a:6a:2c:d0:e3: 29:0b:dc:6e:bd:d7:be:c1:74:d3:08:68:c3:62:31:6f:a3:65: 6d:7f:ef:68:c9:9a:a6:d8:bc:4b:0c:2b:9e:1b:8b:2b:28:03: bc:e2:0f:6e:60:85:65:ad:95:b8:3c:f3:d9:2f:fa:49:09:ae: 40:35:65:ec:13:8b:66:ee:4f:5f:d3:13:e3:ec:e9:ca:ae:c0: a2:fe:43:de:db:a7:f3:2c:9b:9a:27:b1:87:16:29:ba:cb:41: 38:e7:17:23:46:66:69:e8:3a:3c:de:1a:69:95:9f:f4:d8:a7: ef:dc:4c:60:bb:96:d5:f3:19:82:e9:2c:93:1f:b4:d7:29:9e: 1d:32:c9:b8:fa:0e:09:95:01:b0:13:54:02:b0:bf:96:3c:af: b6:f2:01:56:12:f0:88:2b:59:9d:56:ee:40:51:cf:c8:79:f2: 3e:29:91:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjYwNzIyMjAyNzQ3WhcNMjYwNzI5MjAyNzQ3WjAYMRYwFAYD VQQDEw02YTYxMjdjNC0yYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQv9hd1LsYoEe7nLJwmgCRVpVXskZbEWzpncGFrJfoZbUt1nc1yogDX+P87E vOMbevnUVv6Bx5V7ytLqFrbAscws5pbVigQP0yjpPoTG5+qHxTl+M7wIpdvavVXc 3W68JGM6VbOHTf5dZG1Uk4GiZdcGMm4aAmEynnHicLAeQUhmhGclVP05gDGuZzBC ma3G4i3VKYEGomBK8pkgmNCT6m8MCirHcxPDmG5khFi5oCfdrTpw3BDrRi2IWbe4 frLcmZP/0o62y+BRjHxDOn7PSCbWW/xkFv1pTC63o/uU2B0G/xEjBdYGye7/xgpw afchFHwJQZRNbHh9aIZr8Y5qyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNnkmi+S WAm6xbv+jd02Q0EDR/hBMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQeQEkgQ2N/BIezfuc+III7CdLvoKAWTPBxhQVYxmFGM5z2bbibK74oB/tp5/ dvmxb8NWqivhl208SmzVnhnQRq9IMvbi7aUdHk59xcmeIw4X5F8V/BpqLNDjKQvc br3XvsF00whow2Ixb6NlbX/vaMmapti8SwwrnhuLKygDvOIPbmCFZa2VuDzz2S/6 SQmuQDVl7BOLZu5PX9MT4+zpyq7Aov5D3tun8yybmiexhxYpustBOOcXI0Zmaeg6 PN4aaZWf9Nin79xMYLuW1fMZgukskx+01ymeHTLJuPoOCZUBsBNUArC/ljyvtvIB VhLwiCtZnVbuQFHPyHnyPimRvg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:03:08 2026 by rpki-client