$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft File: 33H2KoYwGsbTrKQJgyzDqdmcmhE.mft (raw, json) Hash identifier: 4fGYGm+N4nY1slvNk2L4uQwJxKR/d0J6tOTIPj5iwYw= Subject key identifier: B5:C8:8D:1D:9E:0A:5F:73:EF:2B:8F:C4:66:6F:99:FC:3A:EB:1C:1F Authority key identifier: DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 Certificate issuer: /CN=A91AE7C5/serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft Manifest number: 4A Signing time: Thu 23 Jul 2026 10:35:41 +0000 Manifest this update: Thu 23 Jul 2026 10:35:40 +0000 Manifest next update: Thu 30 Jul 2026 10:35:40 +0000 Files and hashes: 1: 33H2KoYwGsbTrKQJgyzDqdmcmhE.crl (hash: 2TDQyAqgYvxxWe1s/X80acCYN2zLTMasgJhVsFSVfis=) 2: 08A46B6A1B5111F18293DF0B253D8C67.roa (hash: paY1IgZglY+7jUPQLryJgAPBr5lC+wefahWE0iv9Cwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE7C5, serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Validity Not Before: Jul 23 10:35:40 2026 GMT Not After : Jul 30 10:35:40 2026 GMT Subject: CN=6a61ee7c-a6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:71:ae:48:54:4c:f6:1a:8b:65:0f:de:87:48: cf:77:80:66:c7:a0:01:70:9b:ef:f7:48:46:c8:92: 8e:f0:c3:ed:87:50:69:78:1c:05:d0:9c:2c:d6:15: 92:ef:ac:a9:1d:a4:e7:2a:d5:6c:0a:ce:69:31:a8: 39:59:36:a7:d8:3a:16:80:8a:69:73:fe:7f:7b:ae: 5e:1c:33:b9:ec:e6:5c:93:6c:40:a7:25:39:02:6b: 64:5e:ac:47:eb:03:0e:cf:f9:c1:3f:b4:a6:9d:09: b1:7f:85:31:93:00:ed:73:e6:f1:14:1c:6c:50:13: 7e:45:2a:c1:79:11:d7:a3:c7:40:4a:52:44:aa:98: 14:7f:df:e0:24:77:88:cc:90:b0:40:51:1c:0b:30: e3:d3:65:c8:ba:5d:00:00:36:ee:60:48:e8:d2:a6: a6:78:4a:df:39:72:3d:10:b5:e2:4d:b7:61:ec:f0: fc:b5:01:2f:68:f7:89:e9:ae:91:5a:ba:65:d7:57: 40:25:7b:32:5e:30:70:cf:2e:c2:cd:50:72:55:46: 41:ae:46:2b:2e:26:c5:ac:34:bf:93:a0:ab:aa:ff: b0:9b:e5:aa:88:54:41:22:35:cc:89:f9:04:e6:ce: aa:b1:96:f4:00:11:96:57:90:c4:a0:73:16:e4:2b: e1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C8:8D:1D:9E:0A:5F:73:EF:2B:8F:C4:66:6F:99:FC:3A:EB:1C:1F X509v3 Authority Key Identifier: keyid:DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:42:52:68:67:5c:96:4a:60:db:e9:c1:b6:30:ae:f3:b9:a9: e9:a3:e9:f5:a3:62:d1:a0:d9:ae:1b:cd:d0:f9:dd:7c:0c:49: 11:eb:66:ec:d9:01:3a:22:16:08:6b:49:11:30:14:15:a6:62: a5:97:8e:e3:bd:9d:68:f3:8a:e6:5f:2a:45:08:b8:21:f4:24: 9f:33:fa:3d:53:eb:78:b7:52:1b:3e:32:48:4a:fa:b0:2c:7b: 4a:a7:99:62:d5:10:13:1a:f7:59:ba:83:5a:74:0b:5c:b5:f2: 26:a4:1f:2c:26:01:28:7e:37:59:30:b9:62:72:92:87:77:4f: 46:cd:66:d4:58:75:21:ab:75:54:d3:a9:0e:87:53:9d:33:99: 2b:00:b3:e9:b7:39:bd:0a:25:56:39:7b:f7:7d:f4:25:85:2b: 94:5d:34:34:1b:ca:fb:c6:7d:34:9d:c0:ef:25:4a:0d:b4:4c: c4:d6:37:1d:2f:4f:20:d6:a6:6b:7b:20:8f:88:f0:ab:a4:0f: 01:02:8c:05:d7:8f:c0:8d:02:e2:3d:06:4a:4a:a7:b2:a8:b0: 9f:fb:f8:e0:12:13:1e:32:2d:06:a8:05:54:d5:a3:bd:fc:0d: 2d:7d:7d:3b:09:77:92:eb:45:bb:f4:73:97:5f:74:66:60:7a: 3b:bd:28:1c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTdDNTExMC8GA1UEBRMoREY3MUY2MkE4NjMwMUFDNkQzQUNBNDA5ODMyQ0MzQTlE OTlDOUExMTAeFw0yNjA3MjMxMDM1NDBaFw0yNjA3MzAxMDM1NDBaMBgxFjAUBgNV BAMTDTZhNjFlZTdjLWE2ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD8ca5IVEz2GotlD96HSM93gGbHoAFwm+/3SEbIko7ww+2HUGl4HAXQnCzWFZLv rKkdpOcq1WwKzmkxqDlZNqfYOhaAimlz/n97rl4cM7ns5lyTbECnJTkCa2RerEfr Aw7P+cE/tKadCbF/hTGTAO1z5vEUHGxQE35FKsF5Edejx0BKUkSqmBR/3+Akd4jM kLBAURwLMOPTZci6XQAANu5gSOjSpqZ4St85cj0QteJNt2Hs8Py1AS9o94nprpFa umXXV0AlezJeMHDPLsLNUHJVRkGuRisuJsWsNL+ToKuq/7Cb5aqIVEEiNcyJ+QTm zqqxlvQAEZZXkMSgcxbkK+FFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUtciNHZ4K X3PvK4/EZm+Z/DrrHB8wHwYDVR0jBBgwFoAU33H2KoYwGsbTrKQJgyzDqdmcmhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFN0M1LzMzMDc0OTQ2MUI1 MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3NiVHJLUUpneXpEcWRtY21o RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMzNIMktvWXdHc2JUcktRSmd5ekRxZG1jbWhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF N0M1LzMzMDc0OTQ2MUI1MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3Ni VHJLUUpneXpEcWRtY21oRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBsQlJoZ1yWSmDb6cG2MK7zuanpo+n1o2LRoNmuG83Q+d18DEkR62bs2QE6IhYI a0kRMBQVpmKll47jvZ1o84rmXypFCLgh9CSfM/o9U+t4t1IbPjJISvqwLHtKp5li 1RATGvdZuoNadAtctfImpB8sJgEofjdZMLlicpKHd09GzWbUWHUhq3VU06kOh1Od M5krALPptzm9CiVWOXv3ffQlhSuUXTQ0G8r7xn00ncDvJUoNtEzE1jcdL08g1qZr eyCPiPCrpA8BAowF14/AjQLiPQZKSqeyqLCf+/jgEhMeMi0GqAVU1aO9/A0tfX07 CXeS60W79HOXX3RmYHo7vSgc -----END CERTIFICATE-----Generated at Fri Jul 24 17:05:06 2026 by rpki-client