$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft File: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft (raw, json) Hash identifier: b5cAkVO+pdft8HBc9GysK6A6MTgkid1LSR6VD7jnZaw= Subject key identifier: 4D:3E:67:6A:B2:BC:12:78:33:A0:62:15:EC:53:D6:3D:95:99:FD:CA Authority key identifier: E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 Certificate issuer: /CN=A91BBA4F/serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft Manifest number: D9 Signing time: Thu 23 Jul 2026 08:24:01 +0000 Manifest this update: Thu 23 Jul 2026 08:24:00 +0000 Manifest next update: Thu 30 Jul 2026 08:24:00 +0000 Files and hashes: 1: 4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl (hash: CcCzMiCky9pPVkXwtmYjVcUZ6lnmYa+qc6ToURgk/bo=) 2: 58C16E043B7811F099AF3F55C4F9AE02.roa (hash: ff9Hb3p8NVhNbBeRoRPoSLLnHieGzUbHBlT6U/ikvfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA4F, serialNumber=E0398D54ACD9DB33ED4FCAA8D22805D45E80CBB6 Validity Not Before: Jul 23 08:24:00 2026 GMT Not After : Jul 30 08:24:00 2026 GMT Subject: CN=6a61cfa0-9ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:98:e8:4a:73:26:62:66:fd:a1:22:e2:22:82: 8d:06:7a:17:c3:bf:d7:b6:c8:54:37:29:a9:f3:64: 3b:ba:17:9f:a7:84:65:62:d2:86:b4:af:96:6a:fc: fd:1e:57:33:42:0a:72:f5:68:cc:8b:97:92:39:30: 03:aa:6c:9f:e3:90:38:83:a0:08:95:96:59:c8:f3: b0:ef:da:73:cc:61:da:d4:db:49:2c:3a:9e:75:61: bd:9e:27:42:e4:e5:00:08:5a:9b:fe:ae:2d:0b:bb: 0f:ba:f4:0b:5f:6e:61:9f:43:f6:8f:55:d6:c8:f6: 4c:9a:eb:29:51:59:27:c3:8a:75:b7:da:e2:56:7a: 4f:98:fd:34:99:c3:fe:19:27:32:02:19:5a:1e:91: 7e:24:8c:7e:4c:6f:36:b5:f7:8f:13:93:39:72:90: 49:7f:e7:3f:8a:76:35:6c:43:fe:22:a7:0a:96:36: 24:8a:2c:30:74:c0:1c:49:c9:c2:4b:6c:e2:c9:b9: 6c:23:ed:df:5a:b7:3b:8d:5b:c5:07:ca:b8:e6:eb: 3c:16:f3:59:99:a6:8e:8f:7c:24:d5:18:84:33:cd: dd:cf:2b:eb:01:f1:80:fe:33:87:1e:f3:83:7a:46: fc:07:3b:34:bc:14:78:85:51:46:58:83:e1:76:ff: 03:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3E:67:6A:B2:BC:12:78:33:A0:62:15:EC:53:D6:3D:95:99:FD:CA X509v3 Authority Key Identifier: keyid:E0:39:8D:54:AC:D9:DB:33:ED:4F:CA:A8:D2:28:05:D4:5E:80:CB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA4F/587F35DA3B7711F097A8BB24C4F9AE02/4DmNVKzZ2zPtT8qo0igF1F6Ay7Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7f:7a:87:b9:ee:b9:21:08:b8:ef:bf:cc:a4:d4:c3:ec:33: 16:54:cc:07:63:86:7b:75:3c:01:f8:9d:07:5b:29:7e:c7:57: fd:d1:ee:37:8a:a7:99:6a:f5:63:6c:72:2b:8c:56:63:b3:57: 3d:3c:85:42:09:9b:44:98:65:41:ee:78:d9:6a:a5:cc:a4:ab: d1:29:11:43:0e:40:c7:56:44:5a:6c:82:6e:b5:e1:bd:df:34: 6a:b6:45:96:b4:38:8f:21:5f:9b:42:01:ce:8b:6b:e2:ea:75: 03:f9:91:2e:e2:a5:ad:b9:02:ab:cb:68:fb:25:ff:4d:27:d1: 74:c9:ff:4c:9c:a7:60:bf:e3:11:ce:bf:d3:a7:2b:b7:d3:c4: 3b:76:e1:fc:3f:76:5e:6a:34:c5:3c:ee:36:1a:b3:d4:f0:d2: 9b:b6:0f:49:76:39:ce:9f:96:0d:80:62:02:ef:e5:13:8f:eb: 9f:3c:46:d9:ff:d5:85:cb:c0:38:4f:b7:d7:5e:dd:23:08:99: a0:27:72:41:c8:77:6b:1f:37:76:b9:1f:bd:db:20:0e:82:69: f8:af:b1:54:80:4b:26:87:a3:aa:eb:92:98:85:20:bd:3b:69: 5f:d2:5e:68:d4:fa:0b:fa:0e:de:ed:49:e6:cd:a0:8d:e8:99: 2c:06:2f:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBNEYxMTAvBgNVBAUTKEUwMzk4RDU0QUNEOURCMzNFRDRGQ0FBOEQyMjgwNUQ0 NUU4MENCQjYwHhcNMjYwNzIzMDgyNDAwWhcNMjYwNzMwMDgyNDAwWjAYMRYwFAYD VQQDEw02YTYxY2ZhMC05ZWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArpjoSnMmYmb9oSLiIoKNBnoXw7/XtshUNymp82Q7uhefp4RlYtKGtK+Wavz9 HlczQgpy9WjMi5eSOTADqmyf45A4g6AIlZZZyPOw79pzzGHa1NtJLDqedWG9nidC 5OUACFqb/q4tC7sPuvQLX25hn0P2j1XWyPZMmuspUVknw4p1t9riVnpPmP00mcP+ GScyAhlaHpF+JIx+TG82tfePE5M5cpBJf+c/inY1bEP+IqcKljYkiiwwdMAcScnC S2ziyblsI+3fWrc7jVvFB8q45us8FvNZmaaOj3wk1RiEM83dzyvrAfGA/jOHHvOD ekb8Bzs0vBR4hVFGWIPhdv8DaQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0+Z2qy vBJ4M6BiFexT1j2Vmf3KMB8GA1UdIwQYMBaAFOA5jVSs2dsz7U/KqNIoBdRegMu2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE0Ri81ODdGMzVEQTNC NzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6UHRUOHFvMGlnRjFGNkF5 N1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzREbU5WS3paMnpQdFQ4cW8waWdGMUY2QXk3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE0Ri81ODdGMzVEQTNCNzcxMUYwOTdBOEJCMjRDNEY5QUUwMi80RG1OVkt6WjJ6 UHRUOHFvMGlnRjFGNkF5N1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXH96h7nuuSEIuO+/zKTUw+wzFlTMB2OGe3U8AfidB1spfsdX/dHuN4qnmWr1 Y2xyK4xWY7NXPTyFQgmbRJhlQe542WqlzKSr0SkRQw5Ax1ZEWmyCbrXhvd80arZF lrQ4jyFfm0IBzotr4up1A/mRLuKlrbkCq8to+yX/TSfRdMn/TJynYL/jEc6/06cr t9PEO3bh/D92Xmo0xTzuNhqz1PDSm7YPSXY5zp+WDYBiAu/lE4/rnzxG2f/VhcvA OE+3117dIwiZoCdyQch3ax83drkfvdsgDoJp+K+xVIBLJoejquuSmIUgvTtpX9Je aNT6C/oO3u1J5s2gjeiZLAYvGQ== -----END CERTIFICATE-----Generated at Fri Jul 24 06:45:37 2026 by rpki-client