$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: zuawJ2FwDlcJyI1gpjPaS58A+yhWvfCkDHkMs9xKfo8= Subject key identifier: C3:29:80:0B:25:32:FE:A0:24:95:75:FD:C5:C4:35:35:C4:C3:04:72 Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: F7 Signing time: Thu 23 Jul 2026 08:06:59 +0000 Manifest this update: Thu 23 Jul 2026 08:06:58 +0000 Manifest next update: Thu 30 Jul 2026 08:06:58 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: GUA4VfneEfDLw2l9+ATSgjXOtpvVJVk4V4jsLPfw7zQ=) 2: 1C1628BE2D9E11F1B1FA5F5A88EE528E.roa (hash: AdqbKoLvsHyKD6HghcgCeYloGvI0ehL1LADbVK02jZo=) 3: 1DA281C82D9E11F1B1FA5F5A88EE528E.roa (hash: gMJWlgng2lgevvc5aZJ8BLiTHzTn0UTcScrCCSp3b7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Jul 23 08:06:58 2026 GMT Not After : Jul 30 08:06:58 2026 GMT Subject: CN=6a61cba3-a3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:1d:6d:ec:a0:8a:1d:25:95:cc:a2:d9:dd: 1c:fb:43:b9:b0:55:3b:a5:b9:88:21:3e:b7:b8:41: bb:27:b6:9d:2f:6c:01:3a:ec:c8:87:74:9c:12:e2: 56:b3:7e:34:f3:9c:88:4d:96:ef:13:ed:4b:50:0b: c7:0c:32:9e:c9:5d:40:af:74:39:37:e4:a7:b6:35: 16:fa:22:48:8e:64:0f:8c:11:1b:4d:35:35:4e:ee: 1f:ac:26:aa:f3:9d:64:d4:d2:42:b8:b2:ef:f9:34: 7b:90:ed:c0:63:05:d0:b2:6d:b5:b0:53:39:01:15: a0:1c:d8:6d:b2:c3:f6:f5:50:3e:88:e0:c7:aa:15: aa:a5:1d:d7:68:06:d7:1b:fb:65:eb:0e:b4:ad:38: bc:72:90:a3:f6:5a:ef:cd:1c:52:77:c8:e8:a5:be: 11:d6:37:6b:43:b4:97:c1:d4:28:83:95:75:28:79: 1e:79:19:89:2d:63:94:3d:3e:09:09:dd:09:63:46: 02:ca:1c:9d:f2:44:af:78:d9:15:2c:f7:b3:3b:91: 3f:59:76:35:33:13:d1:81:2a:ba:32:6a:36:fd:7d: 3b:60:ff:65:d8:f8:1c:fc:1e:6f:f2:27:b6:84:9c: 7c:b2:d0:b7:58:cb:2c:20:6a:b7:43:92:29:66:83: 74:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:29:80:0B:25:32:FE:A0:24:95:75:FD:C5:C4:35:35:C4:C3:04:72 X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:36:be:46:2c:d5:a6:0c:65:c9:73:a0:52:7d:2b:df:d9:fd: d5:32:f6:f4:e1:81:54:1e:38:1b:f5:65:bc:0a:92:62:9d:c4: e3:e6:45:6a:0e:37:d3:13:5e:8c:1d:31:e3:41:c9:2d:98:8d: a8:f1:d4:3a:cd:fa:53:35:dc:84:59:0d:93:db:5e:3b:ef:cd: df:bd:bf:99:ee:34:85:ac:1c:26:ed:5f:f0:e1:39:b2:5b:ba: 3b:35:e6:8b:3e:b2:d0:39:9c:36:c5:35:21:9b:09:71:34:8c: e0:80:77:a7:79:a8:9a:1e:62:a0:36:1a:01:bd:45:d8:33:46: 2e:ba:2a:b3:21:0c:a2:0d:d2:b0:a5:bf:f8:62:82:be:7e:d9: ed:3f:6e:5b:11:70:3f:0e:74:99:90:44:ce:6c:f5:88:a1:9e: 9e:aa:f4:09:54:ef:28:2f:cc:ee:06:6a:5a:d2:c8:81:71:5b: ad:fd:91:ac:bb:23:91:bf:01:72:ca:f6:1e:e9:83:8b:bb:89: e8:33:71:df:87:15:e5:cb:10:d6:09:76:26:97:5b:53:93:5d: 7b:a3:78:c8:36:a8:dc:d7:60:a1:34:a8:65:c2:72:3e:df:09: 43:67:05:1b:fc:e0:ca:9e:91:51:8b:79:75:03:76:12:7c:49: 24:fa:71:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlDQkIxMTAvBgNVBAUTKEZDMjRGNTM5MDc0Nzg3RUNFQUIwMEMyNDI2MDZDMkJE Njg4MTlBMEQwHhcNMjYwNzIzMDgwNjU4WhcNMjYwNzMwMDgwNjU4WjAYMRYwFAYD VQQDEw02YTYxY2JhMy1hM2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzMYdbeygih0llcyi2d0c+0O5sFU7pbmIIT63uEG7J7adL2wBOuzIh3ScEuJW s34085yITZbvE+1LUAvHDDKeyV1Ar3Q5N+SntjUW+iJIjmQPjBEbTTU1Tu4frCaq 851k1NJCuLLv+TR7kO3AYwXQsm21sFM5ARWgHNhtssP29VA+iODHqhWqpR3XaAbX G/tl6w60rTi8cpCj9lrvzRxSd8jopb4R1jdrQ7SXwdQog5V1KHkeeRmJLWOUPT4J Cd0JY0YCyhyd8kSveNkVLPezO5E/WXY1MxPRgSq6Mmo2/X07YP9l2Pgc/B5v8ie2 hJx8stC3WMssIGq3Q5IpZoN0wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMMpgAsl Mv6gJJV1/cXENTXEwwRyMB8GA1UdIwQYMBaAFPwk9TkHR4fs6rAMJCYGwr1ogZoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNCQi9ENTNCRDE0NjE1 QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgtenFzQXdrSmdiQ3ZXaUJt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUNCQi9ENTNCRDE0NjE1QjExMUYwQTI3NzRBMDlDNEY5QUUwMi9fQ1QxT1FkSGgt enFzQXdrSmdiQ3ZXaUJtZzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARTa+RizVpgxlyXOgUn0r39n91TL29OGBVB44G/VlvAqSYp3E4+ZFag430xNe jB0x40HJLZiNqPHUOs36UzXchFkNk9teO+/N372/me40hawcJu1f8OE5slu6OzXm iz6y0DmcNsU1IZsJcTSM4IB3p3momh5ioDYaAb1F2DNGLroqsyEMog3SsKW/+GKC vn7Z7T9uWxFwPw50mZBEzmz1iKGenqr0CVTvKC/M7gZqWtLIgXFbrf2RrLsjkb8B csr2HumDi7uJ6DNx34cV5csQ1gl2JpdbU5Nde6N4yDao3NdgoTSoZcJyPt8JQ2cF G/zgyp6RUYt5dQN2EnxJJPpxQw== -----END CERTIFICATE-----Generated at Fri Jul 24 11:39:51 2026 by rpki-client