$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json) Hash identifier: F9h85T6QRTbZt71M24MtaPTzWf6EVmR08iuc91+Rl6c= Subject key identifier: DA:37:7C:49:A8:AE:E5:D6:57:83:0B:FF:D3:8F:8E:AC:B3:2E:19:0F Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft Manifest number: 0158 Signing time: Thu 23 Jul 2026 01:49:57 +0000 Manifest this update: Thu 23 Jul 2026 01:49:56 +0000 Manifest next update: Thu 30 Jul 2026 01:49:56 +0000 Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: Hf0NdowX6+s89MGC10d8tCEe7oaxE+unU/3uU797LpE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:49:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Validity Not Before: Jul 23 01:49:56 2026 GMT Not After : Jul 30 01:49:56 2026 GMT Subject: CN=6a617345-294b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:aa:49:12:75:f9:05:44:40:3c:3f:78:83:95: 52:2d:15:11:52:83:18:2f:de:dc:81:4a:52:c4:c3: 9c:4f:52:97:94:b5:67:7c:e4:7c:cf:9c:8c:01:93: 23:9e:54:5a:75:be:fe:24:a1:20:53:82:c5:af:20: 4e:ef:90:6e:d5:f2:82:ee:b4:04:6a:2c:21:76:30: 86:38:6e:cf:79:88:1c:2f:5f:a8:33:71:92:68:81: c1:c1:77:72:97:8c:68:76:a8:66:de:c1:10:04:91: 90:8b:71:23:13:ef:b9:ae:ca:d5:76:a5:81:90:88: 02:b2:98:75:2f:66:5c:65:17:de:67:ae:40:96:52: 7a:8b:97:60:8f:5a:16:ee:8f:36:da:48:e6:6a:db: ee:68:76:43:fc:58:c1:44:b8:11:c1:cd:ba:0a:50: b4:0b:e8:35:8d:7f:96:59:58:88:9d:32:67:4f:fa: 45:93:29:bb:a2:c9:29:bc:79:78:2e:45:86:7c:3e: b0:2e:f9:5d:92:32:1e:5f:92:a6:3e:72:9c:29:fd: 89:84:2d:87:8d:87:9a:16:61:97:23:90:a3:84:83: a9:39:28:a5:c0:d1:74:59:a2:f0:3b:8b:43:08:ac: e8:06:dc:75:b4:4b:a8:69:2e:2d:02:eb:64:62:4d: c5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:37:7C:49:A8:AE:E5:D6:57:83:0B:FF:D3:8F:8E:AC:B3:2E:19:0F X509v3 Authority Key Identifier: keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:14:aa:d8:01:4b:15:9c:4c:f9:fb:7e:82:94:d4:f8:25:f4: 68:f3:7b:09:fc:e7:e6:17:96:71:33:92:f9:bd:ce:74:95:00: 6d:65:f5:b8:ee:b2:8b:4b:db:ef:48:88:bb:cc:93:40:8f:87: 83:56:15:16:b3:c9:9c:19:1b:51:3f:e3:98:d8:94:8c:d9:67: 7b:4c:69:2a:b4:3c:73:83:c3:db:4d:bf:31:a7:92:fa:f6:a4: 4b:10:49:95:3e:57:08:cc:01:6b:07:d9:46:89:9d:59:71:8a: d2:b3:f6:4e:1c:e7:47:81:d8:1f:75:b3:e5:3e:50:14:1a:a4: 04:75:9a:fd:b3:fd:18:44:49:a3:02:88:f1:b5:d0:6e:3d:44: e4:c5:da:8c:c4:48:8f:5d:cf:eb:11:e4:53:05:90:ec:15:92: b0:39:a6:98:ee:e7:49:1c:73:85:fd:be:eb:fd:a2:1d:5e:26: 36:e7:b7:18:e9:29:f3:1b:2b:dd:9a:55:21:20:c9:06:16:84: 68:b3:08:70:b4:be:6d:e1:0f:b5:4a:76:7c:47:4c:b9:89:1e: 52:f0:ed:9d:86:b1:2a:bd:3c:3b:2f:5c:21:56:ab:d3:71:2b: bf:f6:5c:a1:8e:f1:12:4c:b7:35:18:6e:db:96:55:2d:ea:22: 23:71:5d:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKEQzRDc4M0VFNEM2OUJCNTA2M0ZCNUNGNUIyNjI4QkM3 QkVDMzc0OEEwHhcNMjYwNzIzMDE0OTU2WhcNMjYwNzMwMDE0OTU2WjAYMRYwFAYD VQQDEw02YTYxNzM0NS0yOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA66pJEnX5BURAPD94g5VSLRURUoMYL97cgUpSxMOcT1KXlLVnfOR8z5yMAZMj nlRadb7+JKEgU4LFryBO75Bu1fKC7rQEaiwhdjCGOG7PeYgcL1+oM3GSaIHBwXdy l4xodqhm3sEQBJGQi3EjE++5rsrVdqWBkIgCsph1L2ZcZRfeZ65AllJ6i5dgj1oW 7o822kjmatvuaHZD/FjBRLgRwc26ClC0C+g1jX+WWViInTJnT/pFkym7oskpvHl4 LkWGfD6wLvldkjIeX5KmPnKcKf2JhC2HjYeaFmGXI5CjhIOpOSilwNF0WaLwO4tD CKzoBtx1tEuoaS4tAutkYk3FcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNo3fEmo ruXWV4ML/9OPjqyzLhkPMB8GA1UdIwQYMBaAFNPXg+5MabtQY/tc9bJii8e+w3SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9BQjg1MzQ0MDdB M0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUxQmotMXoxc21LTHg3N0Rk SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA5ZUQ3a3hwdTFCai0xejFzbUtMeDc3RGRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9BQjg1MzQ0MDdBM0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUx QmotMXoxc21LTHg3N0RkSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdhSq2AFLFZxM+ft+gpTU+CX0aPN7Cfzn5heWcTOS+b3OdJUAbWX1uO6yi0vb 70iIu8yTQI+Hg1YVFrPJnBkbUT/jmNiUjNlne0xpKrQ8c4PD202/MaeS+vakSxBJ lT5XCMwBawfZRomdWXGK0rP2ThznR4HYH3Wz5T5QFBqkBHWa/bP9GERJowKI8bXQ bj1E5MXajMRIj13P6xHkUwWQ7BWSsDmmmO7nSRxzhf2+6/2iHV4mNue3GOkp8xsr 3ZpVISDJBhaEaLMIcLS+beEPtUp2fEdMuYkeUvDtnYaxKr08Oy9cIVar03Erv/Zc oY7xEky3NRhu25ZVLeoiI3FdNg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:18:28 2026 by rpki-client