$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: d2Pmq5uPRQuA2bGGmuMD2lQYYo/QZPxM1w+ljFyv15o= Subject key identifier: 33:EC:34:BA:5C:2D:7D:C6:F1:76:FE:B3:53:C8:89:49:CA:3F:E7:1F Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 0132 Signing time: Thu 23 Jul 2026 07:22:13 +0000 Manifest this update: Thu 23 Jul 2026 07:22:13 +0000 Manifest next update: Thu 30 Jul 2026 07:22:13 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: IQAHUThk+4gciqTpPfzgQH8AoLKl83o0lUry2hJ8jdw=) 2: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: wpQZ9n5tOzLHw2Dp8uE1s9PaRxpgXwgFNni9J4wuW/Y=) 3: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: /AunwFrvROT949ER300con7tMv9t6hnrAMstakDSUnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Jul 23 07:22:13 2026 GMT Not After : Jul 30 07:22:13 2026 GMT Subject: CN=6a61c125-9f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:d5:e6:44:3e:17:38:f5:08:ec:43:a4:4e: 81:fc:f5:d2:12:6a:5d:d2:69:ab:b0:14:26:03:e0: ec:37:3f:59:94:fe:6a:1a:25:dc:cd:cc:bc:ba:ed: f0:c6:d3:f1:cf:91:44:00:08:14:a6:8e:15:0c:ad: e0:37:a1:e4:61:14:2e:b1:d1:4f:74:e6:88:a0:6c: 71:a2:38:6b:ba:9f:9b:d9:13:28:15:63:ff:fe:d4: 6d:12:98:f8:2c:84:e5:5e:ec:1e:7f:02:2b:d7:08: b0:a2:dd:aa:5b:7a:37:48:04:c6:ae:02:46:27:71: 55:e6:8b:e8:4b:5c:d6:b4:8c:85:01:ff:55:45:51: f9:60:2f:79:99:cf:b8:7b:aa:bf:dd:19:21:d4:02: 4f:7a:9c:bb:a7:bb:27:d4:07:81:09:5b:0f:84:4a: 7f:28:bb:8b:32:80:5f:b3:f2:6b:74:17:be:34:bf: 21:1a:cc:c3:2f:6c:7c:ee:9b:9c:f8:65:c5:9b:f2: cc:44:0a:9f:e0:2f:68:05:6d:d2:16:ee:74:28:13: 3c:91:99:6c:c5:77:c7:90:85:57:e2:7d:c5:c7:39: cf:80:6f:17:84:25:e8:06:94:e3:fd:cd:53:f7:b0: 21:cd:2a:09:1d:cc:a7:74:2f:a2:d3:98:17:3f:a8: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EC:34:BA:5C:2D:7D:C6:F1:76:FE:B3:53:C8:89:49:CA:3F:E7:1F X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:c2:4b:76:4f:cd:06:38:45:b7:03:72:01:f3:da:05:42:9d: 9e:86:2a:e8:5e:95:96:d0:63:d4:46:ed:e2:54:73:cd:04:8c: 19:32:28:e2:a1:df:6f:9c:74:fd:c6:7e:92:d4:91:a0:d4:39: f1:8f:cd:e0:46:0c:42:69:c1:c4:16:6a:54:5d:c2:44:32:9e: 14:3e:67:d5:0a:3c:a1:e6:dd:96:62:16:f7:0d:1c:4f:6c:1c: d1:59:58:d8:88:b7:b5:6e:49:87:78:4c:5a:ab:0d:f5:7f:8b: 20:4c:cb:23:74:5c:ce:cd:52:33:c4:43:ef:c1:d7:99:97:5a: e4:06:eb:3e:f7:f6:81:07:24:ce:43:32:49:19:27:20:c5:aa: 26:cc:6e:51:d5:63:a8:1b:8b:35:6f:28:ad:29:79:c4:9c:cb: 5d:c6:2a:6a:03:aa:e2:0c:2d:e8:3a:1a:cf:d7:d0:03:88:14: 75:7c:c3:50:a4:f7:36:ca:8c:2d:26:f7:67:13:9b:66:04:d9: 30:c7:3d:dd:2d:0c:a8:39:3d:88:39:53:3e:fb:f6:86:74:c6: 95:75:31:a2:0f:13:61:ef:0f:c0:bb:16:e4:25:a8:df:93:a7: fe:9c:53:9f:7d:87:77:ed:8c:43:36:bf:d9:93:8f:64:48:5f: b5:53:3d:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjYwNzIzMDcyMjEzWhcNMjYwNzMwMDcyMjEzWjAYMRYwFAYD VQQDEw02YTYxYzEyNS05ZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoVrV5kQ+Fzj1COxDpE6B/PXSEmpd0mmrsBQmA+DsNz9ZlP5qGiXczcy8uu3w xtPxz5FEAAgUpo4VDK3gN6HkYRQusdFPdOaIoGxxojhrup+b2RMoFWP//tRtEpj4 LITlXuwefwIr1wiwot2qW3o3SATGrgJGJ3FV5ovoS1zWtIyFAf9VRVH5YC95mc+4 e6q/3Rkh1AJPepy7p7sn1AeBCVsPhEp/KLuLMoBfs/JrdBe+NL8hGszDL2x87puc +GXFm/LMRAqf4C9oBW3SFu50KBM8kZlsxXfHkIVX4n3FxznPgG8XhCXoBpTj/c1T 97AhzSoJHcyndC+i05gXP6hNwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDPsNLpc LX3G8Xb+s1PIiUnKP+cfMB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIMJLdk/NBjhFtwNyAfPaBUKdnoYq6F6VltBj1Ebt4lRzzQSMGTIo4qHfb5x0 /cZ+ktSRoNQ58Y/N4EYMQmnBxBZqVF3CRDKeFD5n1Qo8oebdlmIW9w0cT2wc0VlY 2Ii3tW5Jh3hMWqsN9X+LIEzLI3Rczs1SM8RD78HXmZda5AbrPvf2gQckzkMySRkn IMWqJsxuUdVjqBuLNW8orSl5xJzLXcYqagOq4gwt6Doaz9fQA4gUdXzDUKT3NsqM LSb3ZxObZgTZMMc93S0MqDk9iDlTPvv2hnTGlXUxog8TYe8PwLsW5CWo35On/pxT n32Hd+2MQza/2ZOPZEhftVM9Ow== -----END CERTIFICATE-----Generated at Fri Jul 24 03:13:27 2026 by rpki-client