$ rpki-client -vvf rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft File: FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft (raw, json) Hash identifier: B3ZLW07yfZBAfAj5v/dbeq2sXWmeLFd15QFv61ldo6g= Subject key identifier: 9A:5E:0D:C5:A7:8F:21:32:F4:9D:16:9D:BB:73:76:33:7B:CC:16:33 Authority key identifier: 15:7F:AE:07:B3:01:EC:B4:84:CB:B8:08:3B:68:23:71:92:05:6C:79 Certificate issuer: /CN=A91B539C/serialNumber=157FAE07B301ECB484CBB8083B68237192056C79 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft Manifest number: 14 Signing time: Thu 23 Jul 2026 11:07:05 +0000 Manifest this update: Thu 23 Jul 2026 11:07:04 +0000 Manifest next update: Thu 30 Jul 2026 11:07:04 +0000 Files and hashes: 1: FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl (hash: /1HuEewNUlIkZF/7rSLLF85UiMkdWP1tzHvxZd6v8sw=) 2: DA76ABD0688611F19B84FAD56C47A888.roa (hash: yWiFxFgKw6kCu5u2sZNHSYxj5QrnFeWSEHXikTWB910=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:07:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B539C, serialNumber=157FAE07B301ECB484CBB8083B68237192056C79 Validity Not Before: Jul 23 11:07:04 2026 GMT Not After : Jul 30 11:07:04 2026 GMT Subject: CN=6a61f5d9-eadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d6:a2:ac:1a:09:cb:44:03:15:3a:63:da:a8: 8e:68:71:39:72:c5:04:83:e3:a6:e7:99:79:61:a2: 4b:cb:19:55:5f:8e:da:58:8c:c9:9a:e3:05:8c:55: 0e:b2:b5:04:16:6a:23:f6:22:a8:be:b3:ff:9f:9e: 4e:1f:5d:40:78:1f:52:bb:23:ab:16:7d:a8:32:80: 2c:0b:30:b5:28:da:0a:df:58:49:dc:ae:65:20:91: 5c:8c:92:36:d3:16:95:18:07:88:8b:f6:51:c8:50: 60:99:bf:67:4e:cf:c3:20:e3:ca:12:67:55:3b:8a: 9e:c8:2a:ce:48:4d:a9:ac:14:d0:20:89:8a:8e:dd: e9:1e:a7:aa:93:d1:a4:3b:3e:a6:9f:b8:2e:39:a9: 0b:e2:e3:5d:f6:06:5f:04:11:7a:b1:28:67:02:7a: e7:41:0a:e7:95:29:a0:ec:66:21:5c:9a:d0:a7:bf: b8:be:74:ae:27:15:f0:8e:5b:32:bb:68:ff:fc:e2: 0e:63:df:e5:4a:d9:b7:6b:1b:14:e3:77:5b:1f:dd: 85:68:4d:38:73:1c:0f:2d:b1:fe:59:25:9f:43:b3: ad:86:ad:ac:24:ed:df:dc:e5:8f:cf:c7:b0:10:cf: 73:51:3f:f4:b9:93:fa:f4:af:de:68:6b:5d:97:2b: b1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:5E:0D:C5:A7:8F:21:32:F4:9D:16:9D:BB:73:76:33:7B:CC:16:33 X509v3 Authority Key Identifier: keyid:15:7F:AE:07:B3:01:EC:B4:84:CB:B8:08:3B:68:23:71:92:05:6C:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FX-uB7MB7LSEy7gIO2gjcZIFbHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B539C/58F6656E688611F1A9DD30CE6C47A888/FX-uB7MB7LSEy7gIO2gjcZIFbHk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:a9:2e:93:fd:dc:ef:72:65:90:ca:a6:a3:e3:74:54:8e:3b: 88:2a:a4:a6:ab:1c:80:8b:d8:1a:6b:b3:2f:38:c3:9c:21:f7: ff:f8:6e:c3:b9:9d:24:91:8d:b5:dc:bc:42:24:d4:5c:f9:8c: 3b:18:d0:2f:ea:1b:bb:20:74:a7:73:3f:12:19:85:ad:1c:43: 11:d6:b1:3b:06:28:36:27:fe:48:1d:86:75:68:11:94:88:55: fc:d7:fc:21:a2:c3:0a:89:53:c5:95:fe:30:00:05:b7:c7:9d: 97:31:1d:f5:fb:12:82:91:0e:e1:ec:f9:d1:97:41:76:24:8d: 0e:c9:6a:48:5b:15:e7:58:db:c6:a6:f2:17:af:82:ae:90:b2: fc:a5:02:35:be:31:22:10:80:8a:3a:79:40:51:18:74:e2:1b: b0:1f:18:d3:38:d4:f2:21:b3:06:fe:54:ba:87:a0:29:54:b5: da:b8:c1:e6:5b:22:d5:c7:cb:be:0f:42:42:0f:a3:b5:7a:ee: 1c:3d:4a:28:03:79:65:ee:93:a8:c1:e4:00:81:78:22:2b:b8: d7:22:6a:2a:73:d6:5e:fe:03:75:73:11:c5:4d:0c:06:b6:c9: 3f:25:4d:8a:a5:63:94:6c:c2:08:b9:f9:45:72:2a:b0:d8:7b: 81:f3:f6:c3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NTM5QzExMC8GA1UEBRMoMTU3RkFFMDdCMzAxRUNCNDg0Q0JCODA4M0I2ODIzNzE5 MjA1NkM3OTAeFw0yNjA3MjMxMTA3MDRaFw0yNjA3MzAxMTA3MDRaMBgxFjAUBgNV BAMTDTZhNjFmNWQ5LWVhZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCW1qKsGgnLRAMVOmPaqI5ocTlyxQSD46bnmXlhokvLGVVfjtpYjMma4wWMVQ6y tQQWaiP2Iqi+s/+fnk4fXUB4H1K7I6sWfagygCwLMLUo2grfWEncrmUgkVyMkjbT FpUYB4iL9lHIUGCZv2dOz8Mg48oSZ1U7ip7IKs5ITamsFNAgiYqO3ekep6qT0aQ7 PqafuC45qQvi4132Bl8EEXqxKGcCeudBCueVKaDsZiFcmtCnv7i+dK4nFfCOWzK7 aP/84g5j3+VK2bdrGxTjd1sf3YVoTThzHA8tsf5ZJZ9Ds62Grawk7d/c5Y/Px7AQ z3NRP/S5k/r0r95oa12XK7FTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUml4NxaeP ITL0nRadu3N2M3vMFjMwHwYDVR0jBBgwFoAUFX+uB7MB7LSEy7gIO2gjcZIFbHkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1MzlDLzU4RjY2NTZFNjg4 NjExRjFBOUREMzBDRTZDNDdBODg4L0ZYLXVCN01CN0xTRXk3Z0lPMmdqY1pJRmJI ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRlgtdUI3TUI3TFNFeTdnSU8yZ2pjWklGYkhrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 MzlDLzU4RjY2NTZFNjg4NjExRjFBOUREMzBDRTZDNDdBODg4L0ZYLXVCN01CN0xT RXk3Z0lPMmdqY1pJRmJIay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBXqS6T/dzvcmWQyqaj43RUjjuIKqSmqxyAi9gaa7MvOMOcIff/+G7DuZ0kkY21 3LxCJNRc+Yw7GNAv6hu7IHSncz8SGYWtHEMR1rE7Big2J/5IHYZ1aBGUiFX81/wh osMKiVPFlf4wAAW3x52XMR31+xKCkQ7h7PnRl0F2JI0OyWpIWxXnWNvGpvIXr4Ku kLL8pQI1vjEiEICKOnlAURh04huwHxjTONTyIbMG/lS6h6ApVLXauMHmWyLVx8u+ D0JCD6O1eu4cPUooA3ll7pOoweQAgXgiK7jXImoqc9Ze/gN1cxHFTQwGtsk/JU2K pWOUbMIIuflFciqw2HuB8/bD -----END CERTIFICATE-----Generated at Thu Jul 23 21:35:33 2026 by rpki-client