$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft File: 07yEKALa0i1cMMKCZffRCL1HjnA.mft (raw, json) Hash identifier: bJogJ2KAL29rRn2938c8brvKgHOgzWVBQUv4tJTaGaM= Subject key identifier: 59:3B:1E:46:62:BB:25:4F:0D:85:BA:C7:A5:47:69:BE:C8:2A:21:31 Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 Certificate issuer: /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft Manifest number: 01C9 Signing time: Thu 23 Jul 2026 05:13:06 +0000 Manifest this update: Thu 23 Jul 2026 05:13:06 +0000 Manifest next update: Thu 30 Jul 2026 05:13:06 +0000 Files and hashes: 1: 07yEKALa0i1cMMKCZffRCL1HjnA.crl (hash: zOVW/cav1d/9RP2LDGpRtnwy9otfCU/u+EZbf2e6Z7s=) 2: 675CAE1C097B11F089FAE77FC4F9AE02.roa (hash: 1R5i5o2t6sI6xlQkmjgkQQNJTTUz/BHQTGAZz17WwEA=) 3: C63D0814097B11F0B1329480C4F9AE02.roa (hash: MmLLr6l4IDOg8XMaUZVystbsTDwX0oyuPDuuzGnXhFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Validity Not Before: Jul 23 05:13:06 2026 GMT Not After : Jul 30 05:13:06 2026 GMT Subject: CN=6a61a2e2-4ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3a:42:05:74:9a:8c:ad:b2:c0:aa:b6:b1:50: 1a:66:a8:e0:71:30:bb:0d:af:04:d7:3d:62:54:03: 22:6d:ba:2a:c0:2a:4a:34:5d:e7:da:77:78:f2:f2: c4:51:ae:46:06:da:85:d9:5d:18:75:01:e5:78:21: fc:4a:18:b1:4b:cf:6e:47:fb:56:ea:c0:3f:70:76: 44:ae:3d:e4:41:76:f5:40:45:8f:be:48:43:14:f9: 1d:0e:87:7f:13:33:5a:e0:cf:6f:8d:86:29:26:20: c7:d9:94:6b:fc:0d:fa:97:6e:93:07:95:6a:5e:6a: c9:20:7c:a9:f0:e8:6f:91:60:4e:22:5f:c4:92:cd: 01:99:ed:f2:0d:1e:52:12:90:56:ee:1d:ea:1d:59: 33:5c:ae:ad:7e:04:a7:f3:60:74:4b:b6:d3:05:7e: 6b:0b:46:fa:d9:3b:16:1b:a9:48:18:bb:5e:f9:b6: 1e:eb:1a:65:27:a6:ae:59:06:2a:9b:7d:b7:c2:67: e6:1d:2b:b4:b0:3d:c9:04:68:a2:d6:c5:f1:bb:a1: e4:4a:fa:aa:3c:53:a5:a5:8a:91:a1:68:1c:be:71: dd:66:f1:cd:3f:f1:c6:8d:b2:4a:61:c6:c2:d7:2f: 7a:2c:55:f2:f7:a5:5b:89:61:47:e4:5e:e1:f2:e4: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3B:1E:46:62:BB:25:4F:0D:85:BA:C7:A5:47:69:BE:C8:2A:21:31 X509v3 Authority Key Identifier: keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:33:3b:e6:e1:88:39:11:1e:37:3b:8a:23:cd:1d:1d:ea:3a: 00:80:bf:8a:66:d6:13:f8:39:a2:2a:83:36:59:ee:26:80:3e: cd:d0:af:83:81:50:5a:43:e8:5c:3f:a0:c1:6a:e5:1b:7b:de: f1:a6:75:18:2e:f0:30:fb:4a:9a:4b:16:a7:44:21:55:d3:0c: 9e:b0:60:49:ec:8a:a2:b0:a6:ac:ec:fb:93:03:cd:5a:77:f3: b6:f6:f8:55:f5:61:61:1a:d5:84:0e:62:25:29:02:f6:18:90: a8:94:1a:65:d4:7d:00:4f:5d:f5:a5:cc:62:4a:6f:d3:79:e7: 36:fe:9a:fb:cc:40:b3:b2:aa:42:54:eb:02:ff:40:b4:1f:42: 8a:cc:3f:d6:e6:f4:7f:25:05:5a:e5:8d:99:d5:f1:0b:ea:8c: db:5b:4d:a7:b5:49:b4:0b:78:ce:79:d3:9d:6b:29:52:86:03: 75:42:ce:a5:04:d9:72:40:3b:e6:09:ed:b0:37:b2:c3:bb:c9: 90:f6:41:ed:03:b6:93:6c:22:92:61:14:9b:b9:1f:7d:60:14: a0:4c:e8:cf:4e:88:89:68:35:bf:02:e2:fb:45:ec:e9:23:5a: 4d:6a:ca:76:f8:ee:79:46:ba:42:84:46:e6:68:fe:54:3a:e6: 8b:44:74:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKEQzQkM4NDI4MDJEQUQyMkQ1QzMwQzI4MjY1RjdEMTA4 QkQ0NzhFNzAwHhcNMjYwNzIzMDUxMzA2WhcNMjYwNzMwMDUxMzA2WjAYMRYwFAYD VQQDEw02YTYxYTJlMi00ZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzpCBXSajK2ywKq2sVAaZqjgcTC7Da8E1z1iVAMibboqwCpKNF3n2nd48vLE Ua5GBtqF2V0YdQHleCH8ShixS89uR/tW6sA/cHZErj3kQXb1QEWPvkhDFPkdDod/ EzNa4M9vjYYpJiDH2ZRr/A36l26TB5VqXmrJIHyp8OhvkWBOIl/Eks0Bme3yDR5S EpBW7h3qHVkzXK6tfgSn82B0S7bTBX5rC0b62TsWG6lIGLte+bYe6xplJ6auWQYq m323wmfmHSu0sD3JBGii1sXxu6HkSvqqPFOlpYqRoWgcvnHdZvHNP/HGjbJKYcbC 1y96LFXy96VbiWFH5F7h8uS94wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFk7HkZi uyVPDYW6x6VHab7IKiExMB8GA1UdIwQYMBaAFNO8hCgC2tItXDDCgmX30Qi9R45w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9EREVDODEyNEQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBpMWNNTUtDWmZmUkNMMUhq bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA3eUVLQUxhMGkxY01NS0NaZmZSQ0wxSGpuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9EREVDODEyNEQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBp MWNNTUtDWmZmUkNMMUhqbkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHTM75uGIOREeNzuKI80dHeo6AIC/imbWE/g5oiqDNlnuJoA+zdCvg4FQWkPo XD+gwWrlG3ve8aZ1GC7wMPtKmksWp0QhVdMMnrBgSeyKorCmrOz7kwPNWnfztvb4 VfVhYRrVhA5iJSkC9hiQqJQaZdR9AE9d9aXMYkpv03nnNv6a+8xAs7KqQlTrAv9A tB9Cisw/1ub0fyUFWuWNmdXxC+qM21tNp7VJtAt4znnTnWspUoYDdULOpQTZckA7 5gntsDeyw7vJkPZB7QO2k2wikmEUm7kffWAUoEzoz06IiWg1vwLi+0Xs6SNaTWrK dvjueUa6QoRG5mj+VDrmi0R0UA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:25 2026 by rpki-client