$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft File: PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft (raw, json) Hash identifier: PPdtNYuAaRT3Gt2t2ViuU8fwdk0Rsnky/bL7RwdCbLQ= Subject key identifier: 07:5F:72:44:4E:B5:DD:9C:97:DD:85:BF:D1:02:25:E6:99:E9:34:B8 Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF Certificate issuer: /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Certificate serial: 0601 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft Manifest number: 05EB Signing time: Wed 22 Jul 2026 23:44:21 +0000 Manifest this update: Wed 22 Jul 2026 23:44:21 +0000 Manifest next update: Wed 29 Jul 2026 23:44:21 +0000 Files and hashes: 1: PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl (hash: B5YLEq4DaqLcC7ShlfELCt+iTxe424ZuVHsJeZzUGXc=) 2: 9BB673AA479111ECA77ED34DC4F9AE02.roa (hash: 9p+9k7Facd+Aj9FTPOqeaWhpizHbwTwIdBQJJ41NhYo=) 3: 9D752204479111ECA77ED34DC4F9AE02.roa (hash: 2ung5ks0wrUO/hDRvjIHZLVeK77dP8EGbpcgDXcJSM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1537 (0x601) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF Validity Not Before: Jul 22 23:44:21 2026 GMT Not After : Jul 29 23:44:21 2026 GMT Subject: CN=6a6155d5-5cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8b:6f:68:6e:83:40:31:2f:4c:94:f8:84:56: 52:cb:f2:1b:6d:ca:ba:10:96:46:a8:59:fc:33:7b: 06:bf:8e:11:d6:4c:7e:69:69:79:76:ea:cb:c5:6f: 2d:e1:76:28:09:32:9a:17:b1:da:83:ca:be:f3:6a: 8f:42:b7:2d:9d:6e:0b:17:04:f2:75:f3:32:ce:bb: db:31:17:ca:2c:f5:3c:c3:1b:f1:ce:28:64:60:c1: b3:24:ce:d4:2d:3f:2e:ce:1b:53:68:c4:6e:bb:30: 59:1f:16:8c:c1:50:60:e9:23:10:ea:28:4b:b9:5d: d3:5a:32:b1:d7:d6:75:26:62:f2:de:23:ad:b4:ee: 80:a1:d7:f5:b0:51:59:e8:65:77:9b:37:88:47:25: dc:25:e8:b4:79:23:02:6a:b4:9b:06:01:91:78:7a: d1:1d:4b:79:ad:f7:2d:25:ab:f2:f0:1a:5e:83:ce: c0:4f:ba:64:1b:30:cc:80:af:46:61:3a:20:a4:6b: 2a:51:a1:68:bb:ce:f9:62:29:73:ea:cb:83:45:f1: 5d:c7:42:0c:f3:e6:3d:75:aa:74:93:29:a2:77:87: 3c:96:dd:8c:9b:e2:52:a4:5b:a9:9a:79:b4:62:5a: 72:0f:45:ab:e5:64:ec:8d:7f:cb:e6:d6:39:2f:d8: 57:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5F:72:44:4E:B5:DD:9C:97:DD:85:BF:D1:02:25:E6:99:E9:34:B8 X509v3 Authority Key Identifier: keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:fe:65:1e:7b:c3:0a:07:41:1d:05:36:c1:cd:7d:90:cb:5e: e5:b8:12:dd:91:47:d6:09:9d:eb:f9:db:67:83:29:06:13:f6: 8e:fd:21:93:2a:68:88:31:de:1c:b6:17:52:e8:33:96:b1:6d: 9e:7d:6a:9e:b8:45:09:6a:32:9a:05:f5:5c:0d:28:dd:6c:3c: f0:80:cb:11:8c:cc:1c:8d:1c:9c:f4:95:62:21:4a:63:92:b4: 0a:3e:d2:7e:15:d4:33:57:9f:73:c9:09:4e:54:b7:c5:48:8a: 2c:c3:5e:05:d7:32:8e:08:dc:07:5a:39:df:ed:3e:d1:43:9f: a3:d6:f0:ca:bf:69:aa:82:17:51:d7:4e:5c:f7:03:92:d8:73: 1a:8b:f3:9e:10:ae:2f:fa:28:9a:60:ba:6c:e3:b9:1b:71:82: 45:6d:58:55:61:b0:98:88:e6:0b:14:30:f2:c9:df:d3:a2:3e: 50:f3:84:1c:12:55:69:5c:96:71:e3:11:ee:f9:b3:66:59:56: 87:b1:ea:36:e8:18:50:b0:5d:fc:b6:be:a6:09:5f:90:26:e3: a0:0e:82:1c:21:24:e0:4f:a9:c9:0b:e5:88:02:4d:8a:a7:f3: b1:b6:7b:b3:59:fa:ad:0f:7a:18:88:49:1b:75:75:93:ab:a4: b7:a1:6c:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI3OEIxMTAvBgNVBAUTKDNDNDMzQjY0RTY0QzQ2REZENThFNjNDMTE1Mjg0NDg1 ODE1MjMxRkYwHhcNMjYwNzIyMjM0NDIxWhcNMjYwNzI5MjM0NDIxWjAYMRYwFAYD VQQDEw02YTYxNTVkNS01Y2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0otvaG6DQDEvTJT4hFZSy/Ibbcq6EJZGqFn8M3sGv44R1kx+aWl5durLxW8t 4XYoCTKaF7Hag8q+82qPQrctnW4LFwTydfMyzrvbMRfKLPU8wxvxzihkYMGzJM7U LT8uzhtTaMRuuzBZHxaMwVBg6SMQ6ihLuV3TWjKx19Z1JmLy3iOttO6Aodf1sFFZ 6GV3mzeIRyXcJei0eSMCarSbBgGReHrRHUt5rfctJavy8Bpeg87AT7pkGzDMgK9G YTogpGsqUaFou875Yilz6suDRfFdx0IM8+Y9dap0kymid4c8lt2Mm+JSpFupmnm0 YlpyD0Wr5WTsjX/L5tY5L9hXvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdfckRO td2cl92Fv9ECJeaZ6TS4MB8GA1UdIwQYMBaAFDxDO2TmTEbf1Y5jwRUoRIWBUjH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjc4Qi8wNkIwQjYyQTBB NDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0X1ZqbVBCRlNoRWhZRlNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BFTTdaT1pNUnRfVmptUEJGU2hFaFlGU01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mjc4Qi8wNkIwQjYyQTBBNDgxMUVDQkM1NzNENUZDNEY5QUUwMi9QRU03Wk9aTVJ0 X1ZqbVBCRlNoRWhZRlNNZjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACf5lHnvDCgdBHQU2wc19kMte5bgS3ZFH1gmd6/nbZ4MpBhP2jv0hkypoiDHe HLYXUugzlrFtnn1qnrhFCWoymgX1XA0o3Ww88IDLEYzMHI0cnPSVYiFKY5K0Cj7S fhXUM1efc8kJTlS3xUiKLMNeBdcyjgjcB1o53+0+0UOfo9bwyr9pqoIXUddOXPcD kthzGovznhCuL/oommC6bOO5G3GCRW1YVWGwmIjmCxQw8snf06I+UPOEHBJVaVyW ceMR7vmzZllWh7HqNugYULBd/La+pglfkCbjoA6CHCEk4E+pyQvliAJNiqfzsbZ7 s1n6rQ96GIhJG3V1k6ukt6Fs3Q== -----END CERTIFICATE-----Generated at Fri Jul 24 02:39:28 2026 by rpki-client