$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft File: b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json) Hash identifier: SAKmdl1L9WdEcXrPuvluSx+8j5aFYivQJ+N9ZWn7c9o= Subject key identifier: B5:64:41:03:E5:D1:AC:1D:FD:ED:8B:C3:1A:BF:3C:4D:29:47:86:40 Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft Manifest number: 01BD Signing time: Thu 23 Jul 2026 05:28:52 +0000 Manifest this update: Thu 23 Jul 2026 05:28:51 +0000 Manifest next update: Thu 30 Jul 2026 05:28:51 +0000 Files and hashes: 1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: M60aFwd76ZwBqJ5PCD6qSq4T9MfzMTXZxDK8f3G2TR0=) 2: 4034878C531411F0B5969F4DC4F9AE02.roa (hash: Z6ny3a79tk4mktg3oocnwafxfa8++GDa/6xXAsjURUM=) 3: 3F5C47A0531411F0B5969F4DC4F9AE02.roa (hash: B6GHxCjmOUjkON8CtKxdirAvWTVVdTX95da3FXP/DCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:28:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Jul 23 05:28:51 2026 GMT Not After : Jul 30 05:28:51 2026 GMT Subject: CN=6a61a693-339f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:8d:05:45:db:fc:c7:c3:c5:47:66:bc:d1: 89:08:22:2f:89:6c:7b:eb:30:bf:5c:cd:41:89:6d: 67:02:b9:a0:c5:cd:67:3c:35:7b:a2:ba:0d:5c:2f: d2:03:3f:46:d9:6e:c6:8e:19:6f:3f:a7:91:7d:3b: 23:8d:e9:6f:19:55:af:a0:76:dc:ed:14:73:c1:41: 73:68:ce:cc:e5:75:ea:84:9e:2c:6a:99:0a:98:ba: c4:b6:75:f1:d9:7e:c3:14:01:de:cc:2c:bb:cf:11: 90:30:f9:ab:8f:73:5f:5d:8e:4e:32:8c:47:af:f9: 0a:02:64:5f:c9:37:56:f3:1e:71:21:70:8b:85:49: 1f:41:43:24:7d:6b:53:b0:85:d0:8a:f5:bc:a3:01: b6:49:d3:9e:92:91:0f:9f:cf:90:3c:a3:63:a9:8d: a4:ba:64:53:d2:22:1e:f2:e7:6c:d5:30:75:cd:ca: c6:91:21:6e:94:17:3f:ce:cc:51:4c:63:35:2b:20: c1:14:83:5c:b6:22:c9:57:23:bb:85:3f:bf:b1:60: 96:c2:ce:ce:35:1e:61:9e:c7:72:ca:c9:19:9b:b0: c8:01:c3:ac:d4:2d:87:e3:0b:05:ed:f1:ba:27:47: 4d:19:f2:3a:d3:bc:3b:58:e5:a0:15:46:9f:7a:8f: 70:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:64:41:03:E5:D1:AC:1D:FD:ED:8B:C3:1A:BF:3C:4D:29:47:86:40 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7e:4b:47:fc:43:64:2c:d2:f0:c3:8d:c0:fa:db:0e:56:a3: f8:ac:e8:0a:81:5e:2f:d3:a3:b2:b3:3e:63:58:13:2c:ef:3d: c5:d3:dd:e4:e4:c6:d5:39:81:ab:45:8f:5f:26:a5:a9:26:d1: f1:99:f6:ed:51:74:27:ed:3b:bd:ab:a2:55:e7:87:1c:2b:51: d4:04:8d:83:1a:b3:a0:7a:82:17:07:3c:a9:b4:15:a0:fb:f7: 32:0c:80:d2:b4:a0:cd:27:9b:6c:3a:53:03:b4:d9:0a:c9:e2: 6e:fa:78:4b:78:95:d5:93:10:a7:7e:67:ae:04:af:3f:bd:b2: 6a:ae:bb:b5:84:3f:f2:11:3e:e8:67:38:b9:bd:4d:12:c3:d1: 62:0d:b9:3f:9f:d0:8a:bb:7b:af:17:47:a5:86:ce:eb:79:6c: 45:f6:8e:a7:cb:f1:2a:32:ce:be:0f:5f:00:04:f5:84:64:b0: 2b:a6:0e:4e:ca:a8:91:51:30:59:de:3c:96:3d:90:04:d0:22: 2e:f3:a0:fb:fe:df:d1:36:5d:56:9d:7f:20:f9:92:81:19:d2: 7c:ed:dd:7f:3b:45:d6:fb:26:95:a8:da:48:fd:3d:70:29:21: 18:49:5c:f1:ed:37:c9:ff:4e:7d:ef:fd:ed:f1:46:b2:43:9a: f0:2b:1d:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjYwNzIzMDUyODUxWhcNMjYwNzMwMDUyODUxWjAYMRYwFAYD VQQDEw02YTYxYTY5My0zMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjSNBUXb/MfDxUdmvNGJCCIviWx76zC/XM1BiW1nArmgxc1nPDV7oroNXC/S Az9G2W7GjhlvP6eRfTsjjelvGVWvoHbc7RRzwUFzaM7M5XXqhJ4sapkKmLrEtnXx 2X7DFAHezCy7zxGQMPmrj3NfXY5OMoxHr/kKAmRfyTdW8x5xIXCLhUkfQUMkfWtT sIXQivW8owG2SdOekpEPn8+QPKNjqY2kumRT0iIe8uds1TB1zcrGkSFulBc/zsxR TGM1KyDBFINctiLJVyO7hT+/sWCWws7ONR5hnsdyyskZm7DIAcOs1C2H4wsF7fG6 J0dNGfI607w7WOWgFUafeo9w9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLVkQQPl 0awd/e2Lwxq/PE0pR4ZAMB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG T1VVZ2taTXNSZi1rMkZjcmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW35LR/xDZCzS8MONwPrbDlaj+KzoCoFeL9OjsrM+Y1gTLO89xdPd5OTG1TmB q0WPXyalqSbR8Zn27VF0J+07vauiVeeHHCtR1ASNgxqzoHqCFwc8qbQVoPv3MgyA 0rSgzSebbDpTA7TZCsnibvp4S3iV1ZMQp35nrgSvP72yaq67tYQ/8hE+6Gc4ub1N EsPRYg25P5/Qirt7rxdHpYbO63lsRfaOp8vxKjLOvg9fAAT1hGSwK6YOTsqokVEw Wd48lj2QBNAiLvOg+/7f0TZdVp1/IPmSgRnSfO3dfztF1vsmlajaSP09cCkhGElc 8e03yf9Ofe/97fFGskOa8CsdKg== -----END CERTIFICATE-----Generated at Fri Jul 24 02:48:04 2026 by rpki-client