$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft File: tPvjSrdmEqnSCuUrCttB_PgKEv8.mft (raw, json) Hash identifier: ILtr+K5QTye868WsksxK48s+Ku0X68WrrMjAa6UK2vk= Subject key identifier: BF:D5:37:BB:30:6B:52:0A:84:24:78:5E:53:30:FD:79:09:7A:B0:8D Authority key identifier: B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF Certificate issuer: /CN=A91BF6CD/serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft Manifest number: AD Signing time: Thu 23 Jul 2026 09:00:30 +0000 Manifest this update: Thu 23 Jul 2026 09:00:29 +0000 Manifest next update: Thu 30 Jul 2026 09:00:29 +0000 Files and hashes: 1: tPvjSrdmEqnSCuUrCttB_PgKEv8.crl (hash: UZqkG2Koe7QOILYZpzIZPDL+5+0uPzwyh4qFVxAHHMk=) 2: 3E99E81C816E11F0A5992F28C4F9AE02.roa (hash: PtxDOStSKg5v1Xktyj+xGCbDFKA4GPkHNsN6+Bx9sn0=) 3: 3E1ABB8C816E11F0A5992F28C4F9AE02.roa (hash: uyOU7OWturYo16z8/9jzgKBsXU3ESi7wumKHXnMPiW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF6CD, serialNumber=B4FBE34AB76612A9D20AE52B0ADB41FCF80A12FF Validity Not Before: Jul 23 09:00:29 2026 GMT Not After : Jul 30 09:00:29 2026 GMT Subject: CN=6a61d82e-b3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f5:78:58:99:c8:7a:38:12:34:42:6e:25:fc: 2b:09:7f:0e:98:db:35:b1:44:a8:0d:72:94:f1:3f: ac:1c:79:7e:7c:f1:30:61:1e:e4:7f:73:60:51:a7: 14:fd:cc:94:af:2e:d8:c6:fb:cd:24:01:7b:7b:3e: b3:e0:39:77:ac:ee:70:fd:fb:01:1d:21:10:49:1f: 91:55:44:a0:56:af:30:ff:0e:b9:2d:19:18:f0:fd: c8:dc:7e:6d:f3:35:ac:a4:f4:fa:41:87:5d:fb:e8: 80:cf:cd:03:b1:48:cc:59:a2:83:de:2c:28:66:a7: d9:62:f2:6d:80:e3:3e:6e:97:80:d1:08:f9:40:da: 94:bd:6e:0f:75:43:f7:49:8b:f4:3f:0d:3e:91:ed: 3d:ed:3d:ac:83:ce:62:07:70:e4:b4:7a:c1:ff:6a: f2:fc:8b:5f:8c:9b:d4:7a:52:c0:6b:ce:24:da:89: 48:f7:37:92:ee:89:eb:00:47:f1:36:89:5b:e3:7c: 32:30:51:bf:d8:80:d4:eb:2f:16:c8:62:c5:2a:c7: 78:57:db:c6:9c:69:2b:50:11:b5:a9:13:bf:1f:cc: 84:2c:54:c5:09:ca:10:fe:f6:f1:d2:1a:5e:f3:74: 1f:eb:2e:f0:79:63:fb:09:2c:cb:a7:26:ab:21:82: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D5:37:BB:30:6B:52:0A:84:24:78:5E:53:30:FD:79:09:7A:B0:8D X509v3 Authority Key Identifier: keyid:B4:FB:E3:4A:B7:66:12:A9:D2:0A:E5:2B:0A:DB:41:FC:F8:0A:12:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tPvjSrdmEqnSCuUrCttB_PgKEv8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF6CD/333BC608816D11F0A9066D25C4F9AE02/tPvjSrdmEqnSCuUrCttB_PgKEv8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a2:f6:a3:f0:3a:31:af:ab:a4:9b:6a:04:9e:4d:9e:a2:87: de:07:5a:5f:02:99:28:6c:d6:d9:0f:d6:ea:90:f5:ae:4a:d2: f3:4a:d0:b8:43:10:4a:d1:ac:e3:a2:4a:6a:5b:4f:a5:56:25: da:7c:7c:76:89:e1:99:eb:31:8d:8b:f6:b9:d3:a8:43:cf:d8: 63:41:66:d8:6c:e8:22:52:9f:22:2e:c2:b1:ff:cb:9c:1e:db: b8:25:b4:90:8a:84:8e:4a:b1:c0:c5:3f:50:31:e9:7c:54:07: 5a:f6:e6:35:e4:1a:55:1a:e5:16:6d:c6:09:13:e7:f2:13:e7: 6b:e0:26:42:67:2f:04:93:15:7f:95:a9:5c:1b:13:70:66:02: 0a:57:cf:40:0f:78:6d:13:21:58:8d:83:c1:f2:d5:4d:eb:c2: 61:4a:8a:5a:f4:23:53:27:ab:d0:6e:14:ed:c4:b4:4f:b4:e0: bf:5d:26:6a:6f:08:2f:8c:42:91:85:be:8a:5b:9f:15:f4:63: 2a:a4:59:be:5b:e4:7b:03:af:2a:60:6b:06:d6:fe:4e:dc:ab: 10:33:16:67:79:23:62:c1:35:9e:58:a6:67:c1:f1:a4:c8:1f: b0:7e:41:eb:fa:43:d8:cf:c4:00:3a:c4:32:69:d3:b3:f4:82: 16:7f:f7:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY2Q0QxMTAvBgNVBAUTKEI0RkJFMzRBQjc2NjEyQTlEMjBBRTUyQjBBREI0MUZD RjgwQTEyRkYwHhcNMjYwNzIzMDkwMDI5WhcNMjYwNzMwMDkwMDI5WjAYMRYwFAYD VQQDEw02YTYxZDgyZS1iM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/V4WJnIejgSNEJuJfwrCX8OmNs1sUSoDXKU8T+sHHl+fPEwYR7kf3NgUacU /cyUry7YxvvNJAF7ez6z4Dl3rO5w/fsBHSEQSR+RVUSgVq8w/w65LRkY8P3I3H5t 8zWspPT6QYdd++iAz80DsUjMWaKD3iwoZqfZYvJtgOM+bpeA0Qj5QNqUvW4PdUP3 SYv0Pw0+ke097T2sg85iB3DktHrB/2ry/ItfjJvUelLAa84k2olI9zeS7onrAEfx Nolb43wyMFG/2IDU6y8WyGLFKsd4V9vGnGkrUBG1qRO/H8yELFTFCcoQ/vbx0hpe 83Qf6y7weWP7CSzLpyarIYKwTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/VN7sw a1IKhCR4XlMw/XkJerCNMB8GA1UdIwQYMBaAFLT740q3ZhKp0grlKwrbQfz4ChL/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjZDRC8zMzNCQzYwODgx NkQxMUYwQTkwNjZEMjVDNEY5QUUwMi90UHZqU3JkbUVxblNDdVVyQ3R0Ql9QZ0tF djguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RQdmpTcmRtRXFuU0N1VXJDdHRCX1BnS0V2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjZDRC8zMzNCQzYwODgxNkQxMUYwQTkwNjZEMjVDNEY5QUUwMi90UHZqU3JkbUVx blNDdVVyQ3R0Ql9QZ0tFdjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKaL2o/A6Ma+rpJtqBJ5NnqKH3gdaXwKZKGzW2Q/W6pD1rkrS80rQuEMQStGs 46JKaltPpVYl2nx8donhmesxjYv2udOoQ8/YY0Fm2GzoIlKfIi7Csf/LnB7buCW0 kIqEjkqxwMU/UDHpfFQHWvbmNeQaVRrlFm3GCRPn8hPna+AmQmcvBJMVf5WpXBsT cGYCClfPQA94bRMhWI2DwfLVTevCYUqKWvQjUyer0G4U7cS0T7Tgv10mam8IL4xC kYW+ilufFfRjKqRZvlvkewOvKmBrBtb+TtyrEDMWZ3kjYsE1nlimZ8HxpMgfsH5B 6/pD2M/EADrEMmnTs/SCFn/3qA== -----END CERTIFICATE-----Generated at Fri Jul 24 15:06:30 2026 by rpki-client