$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft File: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft (raw, json) Hash identifier: kr6jOP5C/Ya1P1qnZZ5qv0vmKzKZ6z937Ulk8QlucWo= Subject key identifier: DF:77:C0:2D:F4:B5:FC:4B:6E:F0:29:9B:F0:54:48:52:70:A5:CA:D4 Authority key identifier: 63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 Certificate issuer: /CN=A91B1461/serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Certificate serial: 3261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft Manifest number: 3238 Signing time: Wed 22 Jul 2026 15:29:20 +0000 Manifest this update: Wed 22 Jul 2026 15:29:20 +0000 Manifest next update: Wed 29 Jul 2026 15:29:20 +0000 Files and hashes: 1: Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl (hash: z30MXRDsArkVecKXqAkF8DrD/imqwIa4oAMlJwzFj1Y=) 2: 4B7CAC36F78411F08F54609B4C6F56BC.roa (hash: WmsDBlyhST/b5bX+D6J5AC3D6tVJPhXha9WGq62ba4c=) 3: 858F2428399511F18707CD8AA2833773.roa (hash: cUr0clqCyCkiUIq/VycqLhOHK0HYu8G+EZ7N59Y9lRQ=) 4: 31CCE602BCE311EA953FBB5EC4F9AE02.roa (hash: l4FF/86A72/pQWVDtqFOaJrDc/AFvwdU+PSOUvI8AEQ=) 5: 8114E7825FE911F191A047CF7947A888.roa (hash: Gni6cz7amnYCQMsrNAKYs/EoGduCypBTZLbYZs8lgnU=) 6: 4B019258F78411F08F54609B4C6F56BC.roa (hash: CpOzi8FiEufrBV1/AwwSQPXIljCTOvAWGD5jCmfLyKE=) 7: 32538B4EBCE311EA953FBB5EC4F9AE02.roa (hash: zAJ8EflHvlk8cQS30bxOAjOnY5H30jOLYKCISbgWDzQ=) 8: 4BEF9ED0F78411F08F54609B4C6F56BC.roa (hash: yPWBySfPVekzCZl7CkHBPHrMQBoFazZW/jnbhHVrf34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:29:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12897 (0x3261) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1461, serialNumber=637ED141FFE025FD0519945CED48E74F8BD0F5C9 Validity Not Before: Jul 22 15:29:20 2026 GMT Not After : Jul 29 15:29:20 2026 GMT Subject: CN=6a60e1d0-45f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:cd:81:f2:e0:8c:dd:1d:64:16:0d:81:82: 48:d3:ed:35:80:64:b8:8b:57:e2:fa:d7:cf:5f:b1: dc:75:70:8f:0b:3d:e8:b9:0c:76:df:62:6b:5c:1d: bc:39:4f:78:86:61:df:c5:da:14:64:bd:f3:77:39: 57:1c:38:a5:60:eb:71:8b:49:b6:4a:5d:b5:06:10: fc:ae:17:4b:5f:35:81:bf:32:77:bc:eb:a1:fa:a5: 44:06:cd:17:d2:e7:1f:6d:b6:0a:96:bd:a1:a7:aa: d3:90:c6:e0:8e:bf:7a:5d:93:c4:c8:6f:3d:1f:be: 87:83:b5:9d:fe:d2:17:96:5e:1a:6c:37:36:75:32: ac:cb:c3:5e:70:15:3a:3c:78:36:ad:25:31:5f:b8: 9c:05:75:c4:d0:24:db:d0:e6:17:7d:73:a2:9e:f6: 2d:48:44:c1:2b:c4:b6:9a:f3:92:04:ad:fd:a6:6a: ec:48:85:6d:82:f5:57:41:5b:2d:f7:07:3a:bd:31: 5e:33:6c:1e:83:c5:e5:c9:5f:5e:af:40:aa:e4:21: d6:60:58:f6:c6:93:fc:48:bf:d1:56:91:94:ba:9e: a0:aa:1f:e2:61:f9:68:75:81:c7:bc:26:d6:01:7b: b9:1e:49:fb:3d:b2:e7:3d:43:ca:fe:57:c7:1f:b4: 4f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:77:C0:2D:F4:B5:FC:4B:6E:F0:29:9B:F0:54:48:52:70:A5:CA:D4 X509v3 Authority Key Identifier: keyid:63:7E:D1:41:FF:E0:25:FD:05:19:94:5C:ED:48:E7:4F:8B:D0:F5:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1461/FCE9A680BDF511E28A904FB468865CEE/Y37RQf_gJf0FGZRc7UjnT4vQ9ck.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8a:aa:01:0c:c2:31:b6:cf:06:36:74:db:fa:c0:24:fb:2e: d5:3c:20:85:e1:33:1b:b9:d6:31:d5:23:37:ac:14:79:5a:c4: 34:7a:29:c8:49:d1:55:56:eb:4b:2d:85:94:31:09:2c:5e:80: 45:0c:a8:64:21:d9:f4:58:78:ff:be:9c:04:6c:d5:c4:c0:2a: 49:35:6c:3a:64:d8:f9:39:13:69:4a:d2:fd:15:af:23:78:9d: f5:8e:d0:28:6d:f4:c4:2e:68:a7:01:77:35:fa:63:63:43:0f: 84:41:cf:81:ba:b4:f0:3e:d1:6a:02:8e:ff:60:23:23:b2:01: fc:a7:fc:07:47:7b:13:35:31:34:57:99:6b:bb:f9:2d:97:b5: 4a:c1:a6:8f:59:85:c0:8e:69:6f:9e:fb:33:a2:22:78:81:aa: 6f:48:9b:e3:42:63:51:4e:ec:f4:4a:85:58:52:25:c8:4c:7f: 66:0b:c2:b0:5e:f8:3a:b4:6e:2d:78:0f:f4:de:e7:1c:69:66: 73:30:51:f9:43:99:51:b3:be:17:8b:cb:a5:ee:cd:39:a8:d6: c4:2b:58:1c:71:25:8b:02:6a:a5:6f:51:82:91:02:91:0a:0b: 44:57:1e:64:05:80:90:ee:5d:5b:ea:49:08:40:26:c2:4b:34: fe:98:f5:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICMmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE0NjExMTAvBgNVBAUTKDYzN0VEMTQxRkZFMDI1RkQwNTE5OTQ1Q0VENDhFNzRG OEJEMEY1QzkwHhcNMjYwNzIyMTUyOTIwWhcNMjYwNzI5MTUyOTIwWjAYMRYwFAYD VQQDEw02YTYwZTFkMC00NWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArDDNgfLgjN0dZBYNgYJI0+01gGS4i1fi+tfPX7HcdXCPCz3ouQx232JrXB28 OU94hmHfxdoUZL3zdzlXHDilYOtxi0m2Sl21BhD8rhdLXzWBvzJ3vOuh+qVEBs0X 0ucfbbYKlr2hp6rTkMbgjr96XZPEyG89H76Hg7Wd/tIXll4abDc2dTKsy8NecBU6 PHg2rSUxX7icBXXE0CTb0OYXfXOinvYtSETBK8S2mvOSBK39pmrsSIVtgvVXQVst 9wc6vTFeM2weg8XlyV9er0Cq5CHWYFj2xpP8SL/RVpGUup6gqh/iYflodYHHvCbW AXu5Hkn7PbLnPUPK/lfHH7RPlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN93wC30 tfxLbvApm/BUSFJwpcrUMB8GA1UdIwQYMBaAFGN+0UH/4CX9BRmUXO1I50+L0PXJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTQ2MS9GQ0U5QTY4MEJE RjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pmMEZHWlJjN1VqblQ0dlE5 Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kzN1JRZl9nSmYwRkdaUmM3VWpuVDR2UTljay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTQ2MS9GQ0U5QTY4MEJERjUxMUUyOEE5MDRGQjQ2ODg2NUNFRS9ZMzdSUWZfZ0pm MEZHWlJjN1VqblQ0dlE5Y2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaoqqAQzCMbbPBjZ02/rAJPsu1TwgheEzG7nWMdUjN6wUeVrENHopyEnRVVbr Sy2FlDEJLF6ARQyoZCHZ9Fh4/76cBGzVxMAqSTVsOmTY+TkTaUrS/RWvI3id9Y7Q KG30xC5opwF3NfpjY0MPhEHPgbq08D7RagKO/2AjI7IB/Kf8B0d7EzUxNFeZa7v5 LZe1SsGmj1mFwI5pb577M6IieIGqb0ib40JjUU7s9EqFWFIlyEx/ZgvCsF74OrRu LXgP9N7nHGlmczBR+UOZUbO+F4vLpe7NOajWxCtYHHEliwJqpW9RgpECkQoLRFce ZAWAkO5dW+pJCEAmwks0/pj1ww== -----END CERTIFICATE-----Generated at Fri Jul 24 04:26:07 2026 by rpki-client