$ rpki-client -vvf rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft File: d4fx5T6beBMt6aeHEQiDFt1gVbM.mft (raw, json) Hash identifier: MAAOKK2PWodTWF84ClJAdDsXTrfFbLISXguhqv2K6Lc= Subject key identifier: 42:6F:6E:7D:F9:AB:42:D3:26:B3:03:58:A4:29:C8:4D:68:58:20:0A Authority key identifier: 77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 Certificate issuer: /CN=A91A60A9/serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Certificate serial: 3596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft Manifest number: 356F Signing time: Fri 24 Jul 2026 01:11:13 +0000 Manifest this update: Fri 24 Jul 2026 01:11:13 +0000 Manifest next update: Fri 31 Jul 2026 01:11:13 +0000 Files and hashes: 1: d4fx5T6beBMt6aeHEQiDFt1gVbM.crl (hash: 45lRcWmh0qZSQ7HCXSM9d/9THFgb4rfkYJzoMtZlz9k=) 2: 8CF6539E86FC11F194514C90ABEE528E.roa (hash: 4EONKVRgRQ2Go5fxovVPn9tWmBAdwnNdr7oDHnDjYAc=) 3: C3C5C43A0A2011EC8B517885C4F9AE02.roa (hash: wACutP1f1rqOkMuUfI0y6o4RkmpusyPFR7IEkRsm+4E=) 4: 8F368BEEF9C411EB9F9E645DC4F9AE02.roa (hash: hu4/Lak7f/lOdT0sej4Iilh6Wr2QTf9+LdnHpbx9BwY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 01:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13718 (0x3596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A60A9, serialNumber=7787F1E53E9B78132DE9A78711088316DD6055B3 Validity Not Before: Jul 24 01:11:13 2026 GMT Not After : Jul 31 01:11:13 2026 GMT Subject: CN=6a62bbb1-5181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ac:e6:95:51:03:d1:be:c8:b1:fd:17:08:5f: 15:7d:38:66:fb:74:16:ee:7a:d6:21:84:d7:b0:d2: 57:dd:83:17:79:43:05:6b:4f:a5:4b:d3:9a:83:4f: 0f:77:6d:23:95:d8:7d:d1:eb:31:f2:a2:75:85:ff: bc:f2:4d:d5:ce:e5:53:45:35:78:84:a2:c2:8d:60: b7:0c:72:f1:46:e5:77:7a:51:c6:49:4a:1c:d7:36: ff:0f:ed:0e:e2:01:99:8a:b0:c1:f9:c2:43:57:d2: ed:a9:1b:0b:ec:4d:b6:0d:e1:3a:d9:af:82:2b:84: 87:d4:0e:71:82:8e:a9:81:3a:66:2f:57:f4:ba:1b: cf:9b:84:c3:53:0b:95:2b:4a:39:0f:7a:63:0f:dd: b3:9d:7a:46:84:11:92:c2:45:08:9d:9b:8c:4f:b6: b2:fb:49:6e:10:77:9b:0f:c4:64:85:a5:4e:55:22: c2:88:b9:f2:90:4b:b3:d8:6f:be:f8:c6:4f:69:be: 5e:b0:63:3c:8d:60:b1:f0:e4:fa:64:87:34:0d:cf: 23:75:8b:67:95:fe:31:54:f2:10:4c:de:6e:b6:47: 3e:78:18:c3:9c:3e:ad:bb:99:d7:61:31:64:61:68: c3:00:73:13:ab:19:f7:90:44:40:67:63:cb:0a:82: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:6E:7D:F9:AB:42:D3:26:B3:03:58:A4:29:C8:4D:68:58:20:0A X509v3 Authority Key Identifier: keyid:77:87:F1:E5:3E:9B:78:13:2D:E9:A7:87:11:08:83:16:DD:60:55:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4fx5T6beBMt6aeHEQiDFt1gVbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A60A9/6BA8061A1D8411E2B3A54FDA08B02CD2/d4fx5T6beBMt6aeHEQiDFt1gVbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:aa:0e:f9:7c:32:24:cc:88:50:3d:ad:97:ab:b3:9c:06:6b: 6e:7d:01:8b:08:6f:a4:c1:77:ee:f0:f0:a5:c7:7e:70:4a:1d: 77:72:bb:e9:37:8d:74:94:fa:be:5e:f1:be:3f:a5:d3:56:af: a4:9d:59:35:e5:04:ca:08:87:97:d9:dd:d4:f2:72:15:fd:4d: 0e:78:a0:9b:8a:e7:e0:1d:4b:35:dd:a3:dc:24:ed:45:dc:af: ee:55:b8:12:0f:25:84:e7:32:e8:fe:29:26:78:71:6b:5d:51: c5:64:7d:d0:9d:63:63:a3:84:dc:fc:ac:df:8e:52:07:44:61: 08:f2:c3:59:69:50:59:8c:a7:35:86:56:41:0e:98:89:f6:10: 43:fa:9e:73:d9:3e:30:d5:26:9a:87:6b:f7:e7:45:16:8d:c5: 51:e9:55:a0:1d:81:33:ce:c0:fb:52:42:df:22:9a:c9:a4:b4: 9f:06:3d:cf:e8:3e:e7:23:67:ff:da:f5:fa:36:ab:62:a8:84: cc:f3:fb:ff:db:c1:8d:bd:b0:23:67:e8:59:1e:51:e3:e4:ae: da:13:13:7f:04:8b:9e:80:07:c1:ef:b5:a3:b3:ca:a1:43:72: 69:70:04:1e:3f:06:2e:18:4d:9f:a8:02:c5:ff:09:d6:fe:69: d7:f6:be:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTYwQTkxMTAvBgNVBAUTKDc3ODdGMUU1M0U5Qjc4MTMyREU5QTc4NzExMDg4MzE2 REQ2MDU1QjMwHhcNMjYwNzI0MDExMTEzWhcNMjYwNzMxMDExMTEzWjAYMRYwFAYD VQQDEw02YTYyYmJiMS01MTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6zmlVED0b7Isf0XCF8VfThm+3QW7nrWIYTXsNJX3YMXeUMFa0+lS9Oag08P d20jldh90esx8qJ1hf+88k3VzuVTRTV4hKLCjWC3DHLxRuV3elHGSUoc1zb/D+0O 4gGZirDB+cJDV9LtqRsL7E22DeE62a+CK4SH1A5xgo6pgTpmL1f0uhvPm4TDUwuV K0o5D3pjD92znXpGhBGSwkUInZuMT7ay+0luEHebD8RkhaVOVSLCiLnykEuz2G++ +MZPab5esGM8jWCx8OT6ZIc0Dc8jdYtnlf4xVPIQTN5utkc+eBjDnD6tu5nXYTFk YWjDAHMTqxn3kERAZ2PLCoL6TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEJvbn35 q0LTJrMDWKQpyE1oWCAKMB8GA1UdIwQYMBaAFHeH8eU+m3gTLemnhxEIgxbdYFWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjBBOS82QkE4MDYxQTFE ODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVCTXQ2YWVIRVFpREZ0MWdW Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q0Zng1VDZiZUJNdDZhZUhFUWlERnQxZ1ZiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjBBOS82QkE4MDYxQTFEODQxMUUyQjNBNTRGREEwOEIwMkNEMi9kNGZ4NVQ2YmVC TXQ2YWVIRVFpREZ0MWdWYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU6oO+XwyJMyIUD2tl6uznAZrbn0BiwhvpMF37vDwpcd+cEodd3K76TeNdJT6 vl7xvj+l01avpJ1ZNeUEygiHl9nd1PJyFf1NDnigm4rn4B1LNd2j3CTtRdyv7lW4 Eg8lhOcy6P4pJnhxa11RxWR90J1jY6OE3Pys345SB0RhCPLDWWlQWYynNYZWQQ6Y ifYQQ/qec9k+MNUmmodr9+dFFo3FUelVoB2BM87A+1JC3yKayaS0nwY9z+g+5yNn /9r1+jarYqiEzPP7/9vBjb2wI2foWR5R4+Su2hMTfwSLnoAHwe+1o7PKoUNyaXAE Hj8GLhhNn6gCxf8J1v5p1/a+Gw== -----END CERTIFICATE-----Generated at Fri Jul 24 05:36:05 2026 by rpki-client