$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: M5qfKifjob6L2dhv2Fg4Gvm2MINJOLuSoU8hnM80GR4= Subject key identifier: F9:5A:98:85:A7:AC:95:6E:85:C1:54:D5:97:28:D8:99:B0:9B:1B:70 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0265 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0251 Signing time: Thu 23 Jul 2026 03:28:49 +0000 Manifest this update: Thu 23 Jul 2026 03:28:48 +0000 Manifest next update: Thu 30 Jul 2026 03:28:48 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: j3oBZfm2Hjl8uefoFEUq9JtMKSUiXU4Wd2tfXLUpqbc=) 2: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: jxIjxLYPAa1qnB0jFN6nM/shPAzKUb5KsBQXc5gos7U=) 3: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: rm62Zobf+vSIv757GLuOQnassUi+6YwaOUBaAetb62A=) 4: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: DAgB41BSoNhh0yFXjuFcNCWHBOk0V20tJ49xk0mHkPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 613 (0x265) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Jul 23 03:28:48 2026 GMT Not After : Jul 30 03:28:48 2026 GMT Subject: CN=6a618a71-f475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:0b:bc:6a:e1:0a:a3:ec:7b:57:f2:a1:5c: 0d:2c:c0:b4:bb:dd:fa:85:d1:5e:40:32:e5:16:e2: 02:5f:fb:af:22:e6:93:6a:5b:e8:2f:96:ac:d0:83: 34:e8:8d:52:3c:aa:22:71:0f:2a:5b:f3:84:8a:e5: 20:a1:a2:f7:72:6b:f8:3c:30:1a:9d:16:ac:93:7d: c4:9e:3f:e3:30:ec:1a:38:4a:3f:6f:78:13:82:08: 2e:f9:9b:f5:2d:db:12:39:f6:67:9b:98:f7:f2:27: 4c:70:79:4c:7f:ce:9d:8e:5b:86:70:46:8a:f6:11: 1c:a8:26:d5:b6:4c:42:9a:74:49:c4:6c:86:38:e2: 39:b9:a9:9f:b0:95:64:21:9d:b7:1d:8c:95:0f:a5: c1:d2:45:6e:ae:9b:a0:8b:69:e5:bb:5d:c3:e0:04: bc:0a:f8:cd:09:a3:56:e4:db:5e:9a:53:91:36:42: 92:cf:25:c0:f8:79:ec:05:16:5a:be:13:ba:5c:7b: 44:d3:1d:28:8a:78:ac:ad:28:71:a3:c8:66:48:7e: 45:f5:24:94:86:ad:df:c7:2b:0a:54:53:0c:15:01: 26:f0:91:24:0b:ca:cd:ae:0d:88:d6:8b:d5:ae:77: cf:0e:ec:b4:a3:fd:c7:04:6b:fe:6e:93:92:d6:e1: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:5A:98:85:A7:AC:95:6E:85:C1:54:D5:97:28:D8:99:B0:9B:1B:70 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:81:88:3f:be:62:08:ba:81:df:5b:49:9b:53:f3:c0:d8:9c: 26:33:47:fb:bf:26:d0:73:27:f2:3a:29:85:0a:a1:d3:3c:a2: cb:9e:e1:24:f5:80:d4:cd:1a:19:1e:e0:5b:f1:24:8d:4e:0c: 7a:3c:13:3b:02:41:81:98:21:b3:3a:8e:b3:ae:69:22:3a:d1: 2e:03:36:3e:72:80:59:86:18:55:55:ef:89:e0:f8:87:32:58: e9:f2:f1:4e:4b:7d:4a:38:21:52:de:e1:9d:68:0a:b7:61:8f: cf:d8:51:54:bb:1f:6f:5c:84:20:47:8a:99:52:02:59:63:86: 44:85:5f:94:7a:40:cc:26:9c:7a:44:a9:23:55:49:d2:fb:12: a2:b1:c9:8e:b9:c5:24:3e:e2:d3:ca:0d:86:6c:98:e6:d0:69: db:f1:38:84:26:e4:aa:2f:1c:20:8f:6e:4a:8b:d5:81:7c:52: b0:4b:b9:90:3a:ce:c4:99:c3:0e:0e:87:f8:39:dc:8d:ad:08: 8d:f0:e7:66:8f:94:a2:50:31:2e:54:dd:3a:04:8b:d5:42:bc: 31:30:b6:41:89:9e:da:1c:f3:58:8c:ce:04:3d:1e:11:48:71: ac:99:f7:20:d6:c5:99:ed:11:a3:19:ea:7c:80:23:d8:b8:40: 79:ce:c8:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwNzIzMDMyODQ4WhcNMjYwNzMwMDMyODQ4WjAYMRYwFAYD VQQDEw02YTYxOGE3MS1mNDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tALvGrhCqPse1fyoVwNLMC0u936hdFeQDLlFuICX/uvIuaTalvoL5as0IM0 6I1SPKoicQ8qW/OEiuUgoaL3cmv4PDAanRask33Enj/jMOwaOEo/b3gTgggu+Zv1 LdsSOfZnm5j38idMcHlMf86djluGcEaK9hEcqCbVtkxCmnRJxGyGOOI5uamfsJVk IZ23HYyVD6XB0kVurpugi2nlu13D4AS8CvjNCaNW5NtemlORNkKSzyXA+HnsBRZa vhO6XHtE0x0oinisrShxo8hmSH5F9SSUhq3fxysKVFMMFQEm8JEkC8rNrg2I1ovV rnfPDuy0o/3HBGv+bpOS1uEK1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPlamIWn rJVuhcFU1Zco2JmwmxtwMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN4GIP75iCLqB31tJm1PzwNicJjNH+78m0HMn8jophQqh0zyiy57hJPWA1M0a GR7gW/EkjU4MejwTOwJBgZghszqOs65pIjrRLgM2PnKAWYYYVVXvieD4hzJY6fLx Tkt9SjghUt7hnWgKt2GPz9hRVLsfb1yEIEeKmVICWWOGRIVflHpAzCacekSpI1VJ 0vsSorHJjrnFJD7i08oNhmyY5tBp2/E4hCbkqi8cII9uSovVgXxSsEu5kDrOxJnD Dg6H+Dncja0IjfDnZo+UolAxLlTdOgSL1UK8MTC2QYme2hzzWIzOBD0eEUhxrJn3 INbFme0RoxnqfIAj2LhAec7IoQ== -----END CERTIFICATE-----Generated at Fri Jul 24 13:30:07 2026 by rpki-client