$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft File: exrifTz1FJnFBW59qHNmXk5BUXk.mft (raw, json) Hash identifier: zlQRas9HmJ+t9jd+IdTTrK1Z1deLWHbLJUSvXOcUb2Q= Subject key identifier: 35:A1:A1:FD:FB:22:2A:32:A4:88:0D:46:42:49:B5:CD:27:E1:DD:07 Authority key identifier: 7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 Certificate issuer: /CN=A91AB193/serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Certificate serial: 01BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft Manifest number: 01B2 Signing time: Thu 23 Jul 2026 05:28:04 +0000 Manifest this update: Thu 23 Jul 2026 05:28:03 +0000 Manifest next update: Thu 30 Jul 2026 05:28:03 +0000 Files and hashes: 1: exrifTz1FJnFBW59qHNmXk5BUXk.crl (hash: 9o+OiZPjcD1iesz8rfJSnwTT6cl3nRpYPX5y6rt3Azk=) 2: AC82414A392511EF88F70D39C4F9AE02.roa (hash: hKQ2h489zBdCdDYcUOKChPL8Ijm3M758tY3uGhwDTqA=) 3: 0E3462143D2D11EFA4B90A1EC4F9AE02.roa (hash: FYJl6u4bIjvmb0ZcMvBiaR6Ed53PaPf6I85ZtXduzuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 447 (0x1bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB193, serialNumber=7B1AE27D3CF51499C5056E7DA873665E4E415179 Validity Not Before: Jul 23 05:28:03 2026 GMT Not After : Jul 30 05:28:03 2026 GMT Subject: CN=6a61a664-a394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:01:e1:e8:64:73:66:d3:49:14:50:04:1c: 00:b6:6d:8c:84:d1:9e:55:65:61:e9:c9:b2:b5:5f: 05:d7:80:5b:34:d5:8b:d6:de:1a:71:a9:0f:26:6b: a2:7d:54:55:4e:ea:98:29:ef:98:90:d5:2a:b7:40: a3:1b:bd:a0:a2:cf:1c:c4:be:88:82:e8:b4:38:8a: 30:4e:7a:16:af:0c:34:1b:31:f4:de:c3:19:7d:55: 0a:84:54:2a:7c:d1:64:3b:40:f9:61:8c:eb:30:1b: 2f:13:e6:03:65:80:5b:e3:13:5d:41:87:ba:86:7d: 62:2e:3d:46:86:ae:5f:94:61:fd:57:ec:77:4a:72: a8:4e:e8:e6:30:45:3e:ed:d5:06:bb:9c:fc:7f:b6: bb:11:cb:84:27:f1:9b:89:1e:b7:b1:4c:90:3d:26: 4c:73:de:fd:08:2e:f2:fb:bf:10:5b:cc:3d:5d:b2: d1:e5:bf:f7:7d:7d:94:b4:f2:7a:81:7b:08:17:11: 8e:db:fa:26:f4:a6:a2:22:63:be:7d:b3:2a:af:b2: b8:02:32:98:c3:50:48:49:0c:ee:65:85:4f:d3:23: fd:fb:ea:5d:b0:e6:e7:5a:c5:e1:34:77:71:9e:c1: 69:94:72:5d:dc:9c:06:88:61:3c:2c:28:e5:71:e6: 83:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A1:A1:FD:FB:22:2A:32:A4:88:0D:46:42:49:B5:CD:27:E1:DD:07 X509v3 Authority Key Identifier: keyid:7B:1A:E2:7D:3C:F5:14:99:C5:05:6E:7D:A8:73:66:5E:4E:41:51:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exrifTz1FJnFBW59qHNmXk5BUXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB193/93D4E490F63111EE9ACBE221C4F9AE02/exrifTz1FJnFBW59qHNmXk5BUXk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e9:76:54:91:6a:e7:9b:28:4e:aa:c5:97:94:1c:df:33:54: 6d:c4:d1:f7:64:9e:e5:fb:e2:2e:d5:31:c3:26:3d:3b:61:0d: de:05:c3:1d:74:1e:e4:b7:5e:79:0e:9c:f8:51:32:e8:53:2e: 42:36:3e:21:86:34:40:4b:37:67:cb:b1:fa:66:3e:e8:d0:71: d1:90:e2:a7:d7:39:16:d6:60:f4:db:81:46:bc:cb:ad:3f:bf: 5c:b4:2b:65:a9:3a:23:e2:e7:48:84:ea:f1:f7:a6:07:a3:28: 67:9a:26:7a:7f:5d:f5:5b:f3:5d:f1:08:9b:20:8c:87:c1:1a: 1d:a7:9d:41:d6:22:25:86:b7:2a:60:5d:c8:dd:7f:47:d4:66: d5:92:7d:f3:8a:22:72:7f:8c:23:77:8b:5b:f3:2b:32:dd:79: 14:a8:36:b6:a8:be:55:42:b6:73:27:8f:23:e5:28:a7:2a:75: be:c1:fb:b9:80:43:62:14:cd:3f:aa:66:84:72:2b:4d:19:54: dd:e9:38:04:93:eb:2c:4e:8b:cd:cb:a5:24:fd:a3:bf:31:20: 91:bf:2d:1f:23:aa:6e:4f:6c:53:04:60:2c:cd:10:44:60:f5: a5:5c:29:97:d0:98:07:18:a0:ac:dd:c1:c4:ce:50:86:31:67: 85:ef:94:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxOTMxMTAvBgNVBAUTKDdCMUFFMjdEM0NGNTE0OTlDNTA1NkU3REE4NzM2NjVF NEU0MTUxNzkwHhcNMjYwNzIzMDUyODAzWhcNMjYwNzMwMDUyODAzWjAYMRYwFAYD VQQDEw02YTYxYTY2NC1hMzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJMB4ehkc2bTSRRQBBwAtm2MhNGeVWVh6cmytV8F14BbNNWL1t4acakPJmui fVRVTuqYKe+YkNUqt0CjG72gos8cxL6Igui0OIowTnoWrww0GzH03sMZfVUKhFQq fNFkO0D5YYzrMBsvE+YDZYBb4xNdQYe6hn1iLj1Ghq5flGH9V+x3SnKoTujmMEU+ 7dUGu5z8f7a7EcuEJ/GbiR63sUyQPSZMc979CC7y+78QW8w9XbLR5b/3fX2UtPJ6 gXsIFxGO2/om9KaiImO+fbMqr7K4AjKYw1BISQzuZYVP0yP9++pdsObnWsXhNHdx nsFplHJd3JwGiGE8LCjlceaD9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDWhof37 IioypIgNRkJJtc0n4d0HMB8GA1UdIwQYMBaAFHsa4n089RSZxQVufahzZl5OQVF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjE5My85M0Q0RTQ5MEY2 MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZKbkZCVzU5cUhObVhrNUJV WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4cmlmVHoxRkpuRkJXNTlxSE5tWGs1QlVYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjE5My85M0Q0RTQ5MEY2MzExMUVFOUFDQkUyMjFDNEY5QUUwMi9leHJpZlR6MUZK bkZCVzU5cUhObVhrNUJVWGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH+l2VJFq55soTqrFl5Qc3zNUbcTR92Se5fviLtUxwyY9O2EN3gXDHXQe5Lde eQ6c+FEy6FMuQjY+IYY0QEs3Z8ux+mY+6NBx0ZDip9c5FtZg9NuBRrzLrT+/XLQr Zak6I+LnSITq8femB6MoZ5omen9d9VvzXfEImyCMh8EaHaedQdYiJYa3KmBdyN1/ R9Rm1ZJ984oicn+MI3eLW/MrMt15FKg2tqi+VUK2cyePI+Uopyp1vsH7uYBDYhTN P6pmhHIrTRlU3ek4BJPrLE6LzculJP2jvzEgkb8tHyOqbk9sUwRgLM0QRGD1pVwp l9CYBxigrN3BxM5QhjFnhe+U8Q== -----END CERTIFICATE-----Generated at Fri Jul 24 10:53:33 2026 by rpki-client