$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json) Hash identifier: l3YLqjpsvwmHgyT8uSvMs0Czsj63uWOpBVjre3pg1DI= Subject key identifier: 88:A2:78:CA:C5:C7:9F:F1:FC:9E:ED:41:C4:39:7F:C5:F1:8C:09:EA Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft Manifest number: 01AA Signing time: Thu 23 Jul 2026 05:32:50 +0000 Manifest this update: Thu 23 Jul 2026 05:32:50 +0000 Manifest next update: Thu 30 Jul 2026 05:32:50 +0000 Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: RWVpHTkgmxUr9Z21K8Q3ZPPUdpBCKnTrtfZDaUwBZJQ=) 2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: ShuWejN2dIhVPSYGiU/45kIcp67jd+NNHpFV+hRD9UQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:32:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Validity Not Before: Jul 23 05:32:50 2026 GMT Not After : Jul 30 05:32:50 2026 GMT Subject: CN=6a61a782-98f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:92:98:d8:c6:66:8b:57:06:b9:7d:3c:23: 1d:81:48:b9:60:e9:cb:05:34:9c:ec:17:7d:85:b7: 7f:a5:3b:ba:bc:b1:ae:ec:75:44:99:bc:5b:45:12: 43:cc:e4:74:79:84:cc:97:f4:b2:87:10:b9:e4:28: c0:9e:14:22:0d:89:d1:05:9c:e4:46:af:69:21:b4: bd:17:29:8d:a9:b4:33:8b:36:3e:57:73:0b:af:ea: ed:54:c7:70:ed:ad:e3:b5:b9:22:d6:6a:a7:02:b2: 08:39:90:b3:b1:13:2d:a5:f1:64:47:ff:ac:12:20: 1e:a4:e7:7f:c6:ae:e0:be:6d:60:0c:a6:a8:84:82: e4:27:a8:2c:d0:1f:37:5f:b2:07:2b:cd:a0:7a:b3: 11:85:61:67:29:a5:64:eb:83:8b:b9:f2:2e:1d:f9: 61:81:f3:03:e2:27:43:59:97:e4:71:5d:61:13:d2: 3c:2c:81:13:59:3c:a9:37:15:0a:4b:20:46:9d:96: 00:ab:86:8b:f8:bf:e6:d1:2a:e5:76:14:f3:e1:fc: 1f:9f:84:7f:a5:c1:dc:87:3e:47:24:a2:04:53:ac: cb:cf:db:5b:ab:f1:8e:46:7d:60:e1:3b:ba:27:3d: e0:79:03:6b:74:0e:40:94:d0:fd:75:a1:58:b6:c0: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A2:78:CA:C5:C7:9F:F1:FC:9E:ED:41:C4:39:7F:C5:F1:8C:09:EA X509v3 Authority Key Identifier: keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:81:b9:94:04:27:ef:8c:08:f7:d8:5b:4d:b0:fd:a4:ce:16: 28:82:5f:cb:b7:dd:c2:d1:49:9d:40:1d:bc:8e:1f:70:8f:e1: f9:cc:cd:04:be:f0:4d:89:fb:0c:20:5f:29:50:b8:bd:77:a9: 82:dc:85:7d:a5:bb:f2:0e:d2:98:ce:59:b6:bf:0f:3a:04:c7: fa:33:74:8e:3a:80:d2:14:aa:9d:26:92:65:8d:83:8b:00:fb: 57:88:4f:ba:29:18:34:f0:c0:96:c3:65:63:8c:1e:21:50:ab: 92:db:9b:53:14:f4:0d:f5:47:97:da:e7:2f:fb:63:e2:80:88: a1:68:25:77:c3:c4:ef:5a:3a:37:16:27:7e:32:e0:73:16:75: 51:ac:38:63:eb:6b:f6:3b:11:2e:64:3c:53:f3:d6:8b:c5:fd: 94:72:d9:55:e0:29:d4:1d:e1:e9:56:a6:94:be:87:ef:7d:6f: e7:77:19:76:4e:9e:00:3d:5e:7e:eb:dd:9a:d2:e8:73:89:f0: 96:ef:72:dd:7b:81:f3:7d:55:69:61:00:e9:c4:95:4f:e6:4d: 8c:bb:30:6c:19:00:de:ed:df:88:fd:1d:8b:96:10:b0:1f:6c: 4f:4d:0c:c2:60:41:44:01:5a:80:5f:1d:2e:c7:4a:8b:95:96: a4:ca:01:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw MzE0NUE0QTAwHhcNMjYwNzIzMDUzMjUwWhcNMjYwNzMwMDUzMjUwWjAYMRYwFAYD VQQDEw02YTYxYTc4Mi05OGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKSSmNjGZotXBrl9PCMdgUi5YOnLBTSc7Bd9hbd/pTu6vLGu7HVEmbxbRRJD zOR0eYTMl/SyhxC55CjAnhQiDYnRBZzkRq9pIbS9FymNqbQzizY+V3MLr+rtVMdw 7a3jtbki1mqnArIIOZCzsRMtpfFkR/+sEiAepOd/xq7gvm1gDKaohILkJ6gs0B83 X7IHK82gerMRhWFnKaVk64OLufIuHflhgfMD4idDWZfkcV1hE9I8LIETWTypNxUK SyBGnZYAq4aL+L/m0SrldhTz4fwfn4R/pcHchz5HJKIEU6zLz9tbq/GORn1g4Tu6 Jz3geQNrdA5AlND9daFYtsAn8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIiieMrF x5/x/J7tQcQ5f8XxjAnqMB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx blVBdmlFX05xWDRERkZwS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANYG5lAQn74wI99hbTbD9pM4WKIJfy7fdwtFJnUAdvI4fcI/h+czNBL7wTYn7 DCBfKVC4vXepgtyFfaW78g7SmM5Ztr8POgTH+jN0jjqA0hSqnSaSZY2DiwD7V4hP uikYNPDAlsNlY4weIVCrktubUxT0DfVHl9rnL/tj4oCIoWgld8PE71o6NxYnfjLg cxZ1Uaw4Y+tr9jsRLmQ8U/PWi8X9lHLZVeAp1B3h6VamlL6H731v53cZdk6eAD1e fuvdmtLoc4nwlu9y3XuB831VaWEA6cSVT+ZNjLswbBkA3u3fiP0di5YQsB9sT00M wmBBRAFagF8dLsdKi5WWpMoBzw== -----END CERTIFICATE-----Generated at Fri Jul 24 10:19:33 2026 by rpki-client