$ rpki-client -vvf rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft File: dnhyvdDvgmpkldgSahOfxASTgA8.mft (raw, json) Hash identifier: WQmRyYbzZHvewUgQk8ujpYbZ7Zsa4uObH8kimc6ieLU= Subject key identifier: 71:8A:BE:A9:53:66:2A:5A:A5:D0:8D:3D:1A:B3:11:96:1D:0C:8D:44 Authority key identifier: 76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F Certificate issuer: /CN=A91B67D1/serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Certificate serial: 1092 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft Manifest number: 1067 Signing time: Wed 22 Jul 2026 17:33:03 +0000 Manifest this update: Wed 22 Jul 2026 17:33:02 +0000 Manifest next update: Wed 29 Jul 2026 17:33:02 +0000 Files and hashes: 1: dnhyvdDvgmpkldgSahOfxASTgA8.crl (hash: RYt7JcqOScWk1DftQ/RJcSZHw6j8WkocIIWrb4LUt8Y=) 2: 5CCDCD7C9BEA11EFBCB36227C4F9AE02.roa (hash: lEGaA4sdvdJB9ZdOckx6GXw78zY9nH89g3CEg6GczLQ=) 3: 5B3CBC209BEA11EFBCB36227C4F9AE02.roa (hash: URL1ReTticLSrWgLn6MiNA2clbnttkHn48DN8d9RREQ=) 4: 5C1DBC489BEA11EFBCB36227C4F9AE02.roa (hash: v5H4fJJFXDpxvnkvndLnuywB0eTLMDeUHDuPRNGLC1o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4242 (0x1092) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B67D1, serialNumber=767872BDD0EF826A6495D8126A139FC40493800F Validity Not Before: Jul 22 17:33:02 2026 GMT Not After : Jul 29 17:33:02 2026 GMT Subject: CN=6a60fece-9311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6c:bb:69:a4:f2:d9:c9:96:cc:c9:59:4b:ef: ae:ed:f3:a5:46:23:2a:00:8f:0f:5c:a3:05:31:ad: f3:06:05:75:b7:0e:37:ed:d5:4d:7d:90:c3:21:1d: f3:ab:4c:2f:6d:8d:30:b7:a9:a1:40:57:09:1f:b9: 99:93:80:9a:99:0c:47:0c:cc:ee:b4:a7:e3:9d:fa: 48:ae:d2:54:3c:9e:dd:f8:02:94:80:2d:7f:90:ed: 8b:62:8a:ff:d6:45:14:03:c0:62:f2:be:77:61:eb: a1:82:3a:f4:c3:2b:ab:d0:7d:fa:0b:4b:fb:52:8a: 79:25:c7:30:3d:a4:d6:fe:dc:95:d8:bc:f7:2a:f0: 81:77:21:e8:78:e6:bb:48:79:e6:d2:31:31:a0:44: 9e:e9:9f:e7:ab:d0:06:a8:bd:64:d5:6b:8e:f1:31: e5:0a:38:ed:30:ef:1e:f8:93:31:cb:40:f9:c4:75: e9:3c:6f:73:09:c2:22:c6:50:fe:33:62:7f:5f:b6: 75:a8:8b:65:56:5d:5b:ba:6c:d6:44:fe:53:45:4e: 4c:82:15:6e:04:5b:49:a2:1f:38:6f:3e:72:5e:db: 75:f2:a5:3b:57:61:f4:32:56:9f:a4:8d:81:85:68: e2:96:54:7b:f0:7c:82:42:60:14:3a:f0:65:07:cc: fd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8A:BE:A9:53:66:2A:5A:A5:D0:8D:3D:1A:B3:11:96:1D:0C:8D:44 X509v3 Authority Key Identifier: keyid:76:78:72:BD:D0:EF:82:6A:64:95:D8:12:6A:13:9F:C4:04:93:80:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhyvdDvgmpkldgSahOfxASTgA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B67D1/6CBC9B40611D11E9B012DB37C4F9AE02/dnhyvdDvgmpkldgSahOfxASTgA8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:18:e4:4c:d2:19:e0:f4:b5:cf:44:ff:ae:35:4a:7c:14:55: 5a:43:13:04:e4:f7:db:bd:f9:a2:f8:33:1f:35:ac:ee:96:46: 70:06:98:c8:6e:ac:82:31:f6:68:58:7d:0e:f4:e1:1b:b3:1e: e0:66:97:b0:be:fe:6a:94:83:75:ac:5c:cb:81:45:87:96:af: 42:96:f7:5d:54:77:b2:8f:61:fe:a2:cd:b5:5f:9e:23:c5:73: 17:33:6a:8c:62:b0:5c:f0:bb:ee:2b:42:c8:70:20:53:4f:b7: 45:e2:7b:c6:89:92:44:ff:ef:73:18:15:a9:90:54:6e:10:b9: 93:84:98:ce:8a:aa:dc:d3:5e:4e:e6:8e:6a:82:70:0a:92:08: 72:53:4c:13:56:62:ee:b3:c9:d6:f9:09:02:2f:d8:f9:40:e2: 74:11:70:c0:0e:7b:9d:51:4f:c8:eb:1c:a1:a7:3c:5d:78:f4: b4:c1:b6:83:82:fd:60:92:df:20:9c:58:41:05:ba:69:77:fa: f0:52:7c:51:dc:4e:3f:c7:ab:61:74:5b:25:2c:88:13:fd:8f: 5e:15:8c:f6:70:55:03:f6:2b:27:87:8d:4a:f8:f1:e3:41:c9: 3e:09:d6:00:fe:66:ce:8b:5c:8e:3c:fb:af:14:f5:90:e7:d2: 1a:80:25:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3RDExMTAvBgNVBAUTKDc2Nzg3MkJERDBFRjgyNkE2NDk1RDgxMjZBMTM5RkM0 MDQ5MzgwMEYwHhcNMjYwNzIyMTczMzAyWhcNMjYwNzI5MTczMzAyWjAYMRYwFAYD VQQDEw02YTYwZmVjZS05MzExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlWy7aaTy2cmWzMlZS++u7fOlRiMqAI8PXKMFMa3zBgV1tw437dVNfZDDIR3z q0wvbY0wt6mhQFcJH7mZk4CamQxHDMzutKfjnfpIrtJUPJ7d+AKUgC1/kO2LYor/ 1kUUA8Bi8r53Yeuhgjr0wyur0H36C0v7Uop5JccwPaTW/tyV2Lz3KvCBdyHoeOa7 SHnm0jExoESe6Z/nq9AGqL1k1WuO8THlCjjtMO8e+JMxy0D5xHXpPG9zCcIixlD+ M2J/X7Z1qItlVl1bumzWRP5TRU5MghVuBFtJoh84bz5yXtt18qU7V2H0MlafpI2B hWjillR78HyCQmAUOvBlB8z9OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGKvqlT ZipapdCNPRqzEZYdDI1EMB8GA1UdIwQYMBaAFHZ4cr3Q74JqZJXYEmoTn8QEk4AP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjdEMS82Q0JDOUI0MDYx MUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdtcGtsZGdTYWhPZnhBU1Rn QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RuaHl2ZER2Z21wa2xkZ1NhaE9meEFTVGdBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjdEMS82Q0JDOUI0MDYxMUQxMUU5QjAxMkRCMzdDNEY5QUUwMi9kbmh5dmREdmdt cGtsZGdTYWhPZnhBU1RnQTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeRjkTNIZ4PS1z0T/rjVKfBRVWkMTBOT32735ovgzHzWs7pZGcAaYyG6sgjH2 aFh9DvThG7Me4GaXsL7+apSDdaxcy4FFh5avQpb3XVR3so9h/qLNtV+eI8VzFzNq jGKwXPC77itCyHAgU0+3ReJ7xomSRP/vcxgVqZBUbhC5k4SYzoqq3NNeTuaOaoJw CpIIclNME1Zi7rPJ1vkJAi/Y+UDidBFwwA57nVFPyOscoac8XXj0tMG2g4L9YJLf IJxYQQW6aXf68FJ8UdxOP8erYXRbJSyIE/2PXhWM9nBVA/YrJ4eNSvjx40HJPgnW AP5mzotcjjz7rxT1kOfSGoAlvA== -----END CERTIFICATE-----Generated at Fri Jul 24 05:36:43 2026 by rpki-client