$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft File: tY0p97gQfxWFtf_nDFAsbI9dMwI.mft (raw, json) Hash identifier: jUDERwDjCCJUdIOPGMh1hze/DF51nHIPkaO4BbLu++0= Subject key identifier: DD:BD:C2:BA:05:63:4A:94:53:EA:42:D5:66:B8:3B:93:32:47:D1:B8 Authority key identifier: B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 Certificate issuer: /CN=A91B3CA4/serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Certificate serial: 093E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft Manifest number: 091E Signing time: Wed 22 Jul 2026 20:43:51 +0000 Manifest this update: Wed 22 Jul 2026 20:43:50 +0000 Manifest next update: Wed 29 Jul 2026 20:43:50 +0000 Files and hashes: 1: tY0p97gQfxWFtf_nDFAsbI9dMwI.crl (hash: k/yksABdYJ8o7C9HeF93yIlgjxjfu7pS5bYJB2JftHY=) 2: C33EB0EC7C4211EB933D233EC4F9AE02.roa (hash: gl38JCfINuQj5r+ArpGOl2htLCM9Mgwqo9xw/lh130Q=) 3: 3C3F21BAD6F011EE9B38B67DC4F9AE02.roa (hash: Vl3ljhabWGTlG6GqBHRNZlqYXeuSFP4BoWLikf0UCmo=) 4: F6F5BCCE53E711F084348F87C4F9AE02.roa (hash: 30DNpUpUJwy2It5xAnDm6pl6G00ZZjWgrPOcvF+5H9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2366 (0x93e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3CA4, serialNumber=B58D29F7B8107F1585B5FFE70C502C6C8F5D3302 Validity Not Before: Jul 22 20:43:50 2026 GMT Not After : Jul 29 20:43:50 2026 GMT Subject: CN=6a612b86-a254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:66:70:54:84:07:d6:5b:0d:6c:68:d8:26:6e: 30:8a:43:0f:c5:e5:8d:25:47:6d:35:f8:da:4c:f4: 06:75:2a:c2:ef:f7:7f:ae:e7:98:82:26:0a:e7:df: c5:e2:6e:f1:cb:e9:f3:d3:f4:ae:26:40:28:29:89: 66:70:e5:f9:b0:63:ca:a1:32:ac:7d:df:bd:ad:63: 7d:5c:93:dd:43:9e:af:d1:37:91:fd:9f:97:97:af: a0:9f:cb:27:f9:ac:03:8b:66:30:29:93:99:11:be: cf:80:9d:b4:2e:b5:8f:c5:0f:1f:53:70:87:d3:1a: fc:7f:a1:44:af:73:10:4f:73:09:e7:91:51:e2:ef: 9a:30:9c:6f:9e:01:65:c3:c0:c8:44:7a:98:df:a3: 5b:99:b5:88:8b:67:b6:c4:0d:17:01:82:fa:07:28: 57:86:2c:b8:a1:66:67:e6:88:52:a6:47:ae:0f:e3: d8:80:58:8d:86:f4:4c:5e:e0:42:d3:b1:20:b3:cc: 72:c8:7a:65:20:4c:c1:39:22:e7:66:9c:ac:91:fc: 56:88:f3:4d:5d:18:bf:c3:7a:e0:f2:14:3c:8b:13: 83:0d:60:67:18:95:24:1a:68:17:3d:06:9f:e9:98: 74:db:65:ec:8e:68:28:8a:d3:f0:88:51:35:00:5a: 99:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BD:C2:BA:05:63:4A:94:53:EA:42:D5:66:B8:3B:93:32:47:D1:B8 X509v3 Authority Key Identifier: keyid:B5:8D:29:F7:B8:10:7F:15:85:B5:FF:E7:0C:50:2C:6C:8F:5D:33:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tY0p97gQfxWFtf_nDFAsbI9dMwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3CA4/15F68B5CCF1911EAAEF60B1EC4F9AE02/tY0p97gQfxWFtf_nDFAsbI9dMwI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:35:bb:33:5e:dd:b5:92:e8:64:68:c7:c6:21:57:3e:f3:41: 43:46:8c:85:a0:4c:ba:1f:0f:54:a9:4e:db:5c:a4:46:9e:c8: 07:73:f1:75:e3:55:26:41:f5:6f:ea:90:b7:a3:02:bf:08:48: e4:66:0b:0b:4d:1b:a3:79:76:0d:67:12:2c:ef:9e:01:fd:50: 21:48:88:39:d5:04:fa:82:89:f2:82:75:81:f4:16:08:53:6b: f0:bc:2b:a3:e7:94:75:0a:68:eb:4c:f6:4c:12:1b:f2:71:e5: 9d:37:83:b4:a5:48:55:f0:6e:b3:6d:4b:19:90:bf:c4:71:40: c9:ea:b8:f8:8b:8b:a8:67:07:1f:00:c0:e7:84:e3:53:0a:1d: c2:0f:ff:1d:e1:16:5b:9d:dd:54:01:65:e0:58:a1:2f:21:2a: a7:07:39:74:e4:79:fc:ca:ae:e8:f9:bd:2d:19:8d:48:4f:ca: d0:2b:7f:31:97:7a:0c:58:29:65:1e:1c:ac:5c:02:3b:b5:a3: bc:61:d4:38:0e:a1:5c:e6:16:8d:e1:ee:5c:49:69:14:0e:eb: 56:c7:d4:d9:c9:8f:0c:c7:9f:03:44:c2:1e:d0:8c:96:02:7a: c6:aa:b2:29:73:2d:09:21:2e:66:0e:dc:63:79:3a:d7:0c:27: d9:48:d6:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNDQTQxMTAvBgNVBAUTKEI1OEQyOUY3QjgxMDdGMTU4NUI1RkZFNzBDNTAyQzZD OEY1RDMzMDIwHhcNMjYwNzIyMjA0MzUwWhcNMjYwNzI5MjA0MzUwWjAYMRYwFAYD VQQDEw02YTYxMmI4Ni1hMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2ZwVIQH1lsNbGjYJm4wikMPxeWNJUdtNfjaTPQGdSrC7/d/rueYgiYK59/F 4m7xy+nz0/SuJkAoKYlmcOX5sGPKoTKsfd+9rWN9XJPdQ56v0TeR/Z+Xl6+gn8sn +awDi2YwKZOZEb7PgJ20LrWPxQ8fU3CH0xr8f6FEr3MQT3MJ55FR4u+aMJxvngFl w8DIRHqY36NbmbWIi2e2xA0XAYL6ByhXhiy4oWZn5ohSpkeuD+PYgFiNhvRMXuBC 07Egs8xyyHplIEzBOSLnZpyskfxWiPNNXRi/w3rg8hQ8ixODDWBnGJUkGmgXPQaf 6Zh022XsjmgoitPwiFE1AFqZ6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN29wroF Y0qUU+pC1Wa4O5MyR9G4MB8GA1UdIwQYMBaAFLWNKfe4EH8VhbX/5wxQLGyPXTMC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0NBNC8xNUY2OEI1Q0NG MTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4V0Z0Zl9uREZBc2JJOWRN d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RZMHA5N2dRZnhXRnRmX25ERkFzYkk5ZE13SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC M0NBNC8xNUY2OEI1Q0NGMTkxMUVBQUVGNjBCMUVDNEY5QUUwMi90WTBwOTdnUWZ4 V0Z0Zl9uREZBc2JJOWRNd0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAczW7M17dtZLoZGjHxiFXPvNBQ0aMhaBMuh8PVKlO21ykRp7IB3PxdeNVJkH1 b+qQt6MCvwhI5GYLC00bo3l2DWcSLO+eAf1QIUiIOdUE+oKJ8oJ1gfQWCFNr8Lwr o+eUdQpo60z2TBIb8nHlnTeDtKVIVfBus21LGZC/xHFAyeq4+IuLqGcHHwDA54Tj Uwodwg//HeEWW53dVAFl4FihLyEqpwc5dOR5/Mqu6Pm9LRmNSE/K0Ct/MZd6DFgp ZR4crFwCO7WjvGHUOA6hXOYWjeHuXElpFA7rVsfU2cmPDMefA0TCHtCMlgJ6xqqy KXMtCSEuZg7cY3k61wwn2UjWRw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:18:50 2026 by rpki-client