$ rpki-client -vvf rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft File: D-jKZIcKPWORHI0tZRuinKztDso.mft (raw, json) Hash identifier: Hd0aFQoVDHv0D6pKce8ZdKefmNLG8r9eA21UYz/sUN4= Subject key identifier: 32:AE:3C:8E:A7:DA:13:BB:D2:7F:1E:8D:94:28:07:F5:E7:9D:C8:90 Authority key identifier: 0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA Certificate issuer: /CN=A91B428B/serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Certificate serial: 0A98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft Manifest number: 0A8F Signing time: Wed 22 Jul 2026 19:57:25 +0000 Manifest this update: Wed 22 Jul 2026 19:57:24 +0000 Manifest next update: Wed 29 Jul 2026 19:57:24 +0000 Files and hashes: 1: D-jKZIcKPWORHI0tZRuinKztDso.crl (hash: rzCFHmeK7wRrSvzIDXuKbUzc52TdUjdYwPxe173P8BU=) 2: 319DF660847811EA8EE07E81C4F9AE02.roa (hash: ERhX+neEQpWaGHgDx788YR3fYNG7D/j2H84jmEv5law=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2712 (0xa98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B428B, serialNumber=0FE8CA64870A3D63911C8D2D651BA29CACED0ECA Validity Not Before: Jul 22 19:57:24 2026 GMT Not After : Jul 29 19:57:24 2026 GMT Subject: CN=6a6120a4-d493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:01:5b:62:ab:e1:90:b0:83:4e:22:a8:58: 94:bd:57:dc:77:1a:0b:08:1d:b8:88:5f:06:40:ae: 34:16:62:4b:8b:99:75:93:44:aa:b2:bd:e1:0b:cd: 0e:8d:0e:e1:9b:fb:28:37:67:19:1b:08:1f:6d:22: 63:c9:aa:da:a2:bd:b5:fc:81:1f:71:ae:08:46:e6: 1c:79:c7:98:12:7b:12:49:04:44:b9:85:1b:9b:27: 76:43:09:0d:d7:96:73:27:55:88:33:ed:55:c6:4e: b9:85:b3:20:ea:55:61:b8:11:d7:10:ac:76:3f:8b: 21:f1:af:8e:31:2a:17:21:c9:be:b5:7b:b7:b9:d2: ac:38:f4:06:87:67:8e:19:ee:e7:fb:c2:34:54:96: 64:f5:80:85:fc:42:bd:ee:52:13:b2:26:4c:8f:0f: d7:9b:22:9e:c0:0c:65:cc:1f:b9:fb:bb:be:56:0c: 29:f4:d0:c6:a7:01:ae:cd:f4:3f:4e:66:ac:9c:ad: aa:ed:82:6d:c7:30:5b:3f:87:d5:ae:f6:04:14:c1: a5:ed:1a:52:62:13:df:56:b1:1e:fe:aa:7e:aa:38: ca:47:a7:f4:80:f6:e7:65:0b:e9:cf:c3:54:66:c5: 49:26:39:a8:76:d6:07:f8:87:5a:d6:9d:4f:5e:6a: 9c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AE:3C:8E:A7:DA:13:BB:D2:7F:1E:8D:94:28:07:F5:E7:9D:C8:90 X509v3 Authority Key Identifier: keyid:0F:E8:CA:64:87:0A:3D:63:91:1C:8D:2D:65:1B:A2:9C:AC:ED:0E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-jKZIcKPWORHI0tZRuinKztDso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B428B/3A0B6C0C847711EAB3B43680C4F9AE02/D-jKZIcKPWORHI0tZRuinKztDso.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:66:a6:dc:e6:1e:4d:b3:fd:a3:a7:da:48:9a:6b:f8:44:85: 57:98:96:b2:51:d9:8b:b6:73:fc:24:27:e2:7c:65:83:8c:73: dc:b1:47:61:72:7b:5e:c0:ef:7e:44:c6:31:96:4c:c7:5b:90: bd:35:dc:bb:54:37:36:6e:92:b3:05:d4:a0:44:2f:ae:33:0e: aa:ea:8d:52:74:42:58:f4:5c:1f:db:0d:ee:26:3a:b5:7d:1b: fe:26:60:17:f6:1a:40:68:e4:df:97:7c:e1:fb:1b:93:77:6d: f2:ae:aa:d3:15:e7:ac:37:4f:65:69:3b:69:2b:52:c9:d5:ac: c7:bf:fb:41:32:79:52:2e:1f:b7:e8:5b:64:25:47:30:03:ce: bb:85:72:b4:5c:c1:3a:2d:e3:d6:d3:45:f8:d1:ae:5a:47:e8: 23:f9:25:e9:38:df:9e:6c:93:f6:c8:36:76:76:ba:2b:4d:fb: ca:71:3b:81:35:28:88:a3:82:8c:5b:86:c6:e0:fb:57:60:92: 2f:05:ab:90:34:e6:ea:69:19:98:f1:40:29:7a:ac:0d:b6:47: e3:01:2e:97:e4:56:0e:87:c9:f5:64:e0:aa:d4:fe:23:c7:2d: 1f:3f:59:1e:8b:38:6c:dc:4b:0d:70:25:b1:c3:eb:ea:dc:86: 94:6b:0a:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQyOEIxMTAvBgNVBAUTKDBGRThDQTY0ODcwQTNENjM5MTFDOEQyRDY1MUJBMjlD QUNFRDBFQ0EwHhcNMjYwNzIyMTk1NzI0WhcNMjYwNzI5MTk1NzI0WjAYMRYwFAYD VQQDEw02YTYxMjBhNC1kNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6YBW2Kr4ZCwg04iqFiUvVfcdxoLCB24iF8GQK40FmJLi5l1k0Sqsr3hC80O jQ7hm/soN2cZGwgfbSJjyaraor21/IEfca4IRuYceceYEnsSSQREuYUbmyd2QwkN 15ZzJ1WIM+1Vxk65hbMg6lVhuBHXEKx2P4sh8a+OMSoXIcm+tXu3udKsOPQGh2eO Ge7n+8I0VJZk9YCF/EK97lITsiZMjw/XmyKewAxlzB+5+7u+Vgwp9NDGpwGuzfQ/ TmasnK2q7YJtxzBbP4fVrvYEFMGl7RpSYhPfVrEe/qp+qjjKR6f0gPbnZQvpz8NU ZsVJJjmodtYH+Ida1p1PXmqcHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKuPI6n 2hO70n8ejZQoB/XnnciQMB8GA1UdIwQYMBaAFA/oymSHCj1jkRyNLWUbopys7Q7K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDI4Qi8zQTBCNkMwQzg0 NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BXT1JISTB0WlJ1aW5LenRE c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QtaktaSWNLUFdPUkhJMHRaUnVpbkt6dERzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDI4Qi8zQTBCNkMwQzg0NzcxMUVBQjNCNDM2ODBDNEY5QUUwMi9ELWpLWkljS1BX T1JISTB0WlJ1aW5LenREc28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb2am3OYeTbP9o6faSJpr+ESFV5iWslHZi7Zz/CQn4nxlg4xz3LFHYXJ7XsDv fkTGMZZMx1uQvTXcu1Q3Nm6SswXUoEQvrjMOquqNUnRCWPRcH9sN7iY6tX0b/iZg F/YaQGjk35d84fsbk3dt8q6q0xXnrDdPZWk7aStSydWsx7/7QTJ5Ui4ft+hbZCVH MAPOu4VytFzBOi3j1tNF+NGuWkfoI/kl6TjfnmyT9sg2dna6K037ynE7gTUoiKOC jFuGxuD7V2CSLwWrkDTm6mkZmPFAKXqsDbZH4wEul+RWDofJ9WTgqtT+I8ctHz9Z Hos4bNxLDXAlscPr6tyGlGsKRg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:22:47 2026 by rpki-client