$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft File: dsy3G8ONvsj1s1rnufdOprg25Qg.mft (raw, json) Hash identifier: zrE8QiPY+ph3fopZ0Dhauq/SsGzmS/7vYV4B/5O9FzA= Subject key identifier: 10:73:F5:9D:E4:45:81:0E:A2:D9:AC:81:D9:8E:F6:1E:AC:1F:84:35 Authority key identifier: 76:CC:B7:1B:C3:8D:BE:C8:F5:B3:5A:E7:B9:F7:4E:A6:B8:36:E5:08 Certificate issuer: /CN=A91C7425/serialNumber=76CCB71BC38DBEC8F5B35AE7B9F74EA6B836E508 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft Manifest number: 2D Signing time: Thu 23 Jul 2026 10:47:00 +0000 Manifest this update: Thu 23 Jul 2026 10:46:59 +0000 Manifest next update: Thu 30 Jul 2026 10:46:59 +0000 Files and hashes: 1: dsy3G8ONvsj1s1rnufdOprg25Qg.crl (hash: Xtx4vaPFUZKEEptXv4CCho4hGSvzDbVKSQHAf6YXVl4=) 2: 8A11628E49A511F1AC5B8E7699833773.roa (hash: niJhKfV+ouFK6sQjUZt4n5DTxe39SMX+kn/MPEsu8wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.crl rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7425, serialNumber=76CCB71BC38DBEC8F5B35AE7B9F74EA6B836E508 Validity Not Before: Jul 23 10:46:59 2026 GMT Not After : Jul 30 10:46:59 2026 GMT Subject: CN=6a61f123-2fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:bc:97:50:b8:b7:50:cf:ea:2f:40:93:36: 6f:0a:c3:61:6c:83:20:7e:f3:e2:23:56:80:59:a7: b3:af:e8:38:96:12:b6:9c:9f:34:43:ae:7a:f1:98: 1e:42:2d:b8:78:55:8d:2d:68:28:1a:78:be:e8:0b: 89:2c:2f:00:78:21:26:6c:89:9a:3b:c7:46:f8:9e: 02:ff:68:be:91:ab:4f:b8:b1:13:50:a8:35:82:95: 7c:4d:35:9d:64:a4:da:45:53:d4:e0:d2:bf:b7:e8: 0a:a8:98:39:dc:f0:33:d1:da:2f:19:86:5d:ad:cf: e0:53:c5:00:d9:dc:70:b7:9f:65:7a:ae:71:be:b2: 80:36:de:e0:a1:ba:c4:e3:b3:1c:ea:40:da:49:34: ce:56:7b:33:18:fa:f8:6f:40:da:7d:82:f3:9c:30: a3:68:dc:d0:f4:8f:7e:45:71:a5:76:8a:43:56:cb: 8b:50:36:cc:47:f4:af:86:ff:80:84:fb:84:4a:ca: 21:96:7a:e3:29:a7:c3:98:6e:2f:b4:d1:38:e8:ee: 5a:d4:5d:76:f6:cb:bd:9f:14:44:3a:c3:d1:19:6c: 9b:dc:37:af:6b:a2:47:c0:e6:27:1e:76:1b:fb:1c: 91:6f:e7:7b:52:e4:09:0a:b4:a6:f0:09:fb:3a:d4: d0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:73:F5:9D:E4:45:81:0E:A2:D9:AC:81:D9:8E:F6:1E:AC:1F:84:35 X509v3 Authority Key Identifier: keyid:76:CC:B7:1B:C3:8D:BE:C8:F5:B3:5A:E7:B9:F7:4E:A6:B8:36:E5:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsy3G8ONvsj1s1rnufdOprg25Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7425/5267DE6E430411F1BAAFDF3B9A833773/dsy3G8ONvsj1s1rnufdOprg25Qg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:90:bd:3c:5c:44:bf:ab:d2:04:2b:1e:60:ba:fe:67:c4:0a: d6:68:0d:95:93:c9:70:27:de:72:c4:ca:68:ab:86:05:a7:ec: ee:01:c5:17:fa:7e:a4:45:64:ae:89:c2:84:ae:f2:99:bb:17: b6:8e:f7:7a:31:8f:0a:97:11:c7:39:a1:6b:0b:09:01:2e:9e: 66:07:17:09:7f:c6:19:87:db:e8:36:10:18:27:23:c6:01:43: 12:64:74:55:16:6a:06:b1:e4:77:87:33:89:f4:20:5e:90:08: 53:56:79:75:1f:bf:cb:dd:58:eb:78:75:13:07:2e:93:79:cd: 57:b2:64:f9:26:6b:61:50:4b:61:09:32:4a:4b:45:e9:b2:4a: a4:f3:e9:5e:50:c2:aa:62:78:1a:8b:81:37:ec:6e:62:32:d4: 53:50:23:d7:9e:ce:68:27:85:3d:f6:f5:07:df:76:fe:8b:a2: 77:c5:9b:6f:32:84:56:6e:0b:1e:d6:be:9b:45:a8:16:9f:9a: 66:6d:4e:90:a7:5b:69:ec:5a:5e:55:12:46:01:35:b4:84:f6: 76:77:29:a8:00:9f:67:0e:ac:1f:6d:97:d1:4f:ce:a3:c2:18: 77:45:29:92:b4:77:82:80:43:a9:29:fe:37:81:74:fe:dc:03: f6:ef:53:f8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzQyNTExMC8GA1UEBRMoNzZDQ0I3MUJDMzhEQkVDOEY1QjM1QUU3QjlGNzRFQTZC ODM2RTUwODAeFw0yNjA3MjMxMDQ2NTlaFw0yNjA3MzAxMDQ2NTlaMBgxFjAUBgNV BAMTDTZhNjFmMTIzLTJmYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxibyXULi3UM/qL0CTNm8Kw2FsgyB+8+IjVoBZp7Ov6DiWEracnzRDrnrxmB5C Lbh4VY0taCgaeL7oC4ksLwB4ISZsiZo7x0b4ngL/aL6Rq0+4sRNQqDWClXxNNZ1k pNpFU9Tg0r+36AqomDnc8DPR2i8Zhl2tz+BTxQDZ3HC3n2V6rnG+soA23uChusTj sxzqQNpJNM5WezMY+vhvQNp9gvOcMKNo3ND0j35FcaV2ikNWy4tQNsxH9K+G/4CE +4RKyiGWeuMpp8OYbi+00Tjo7lrUXXb2y72fFEQ6w9EZbJvcN69rokfA5icedhv7 HJFv53tS5AkKtKbwCfs61NAtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUEHP1neRF gQ6i2ayB2Y72HqwfhDUwHwYDVR0jBBgwFoAUdsy3G8ONvsj1s1rnufdOprg25Qgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NDI1LzUyNjdERTZFNDMw NDExRjFCQUFGREYzQjlBODMzNzczL2RzeTNHOE9OdnNqMXMxcm51ZmRPcHJnMjVR Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZHN5M0c4T052c2oxczFybnVmZE9wcmcyNVFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NDI1LzUyNjdERTZFNDMwNDExRjFCQUFGREYzQjlBODMzNzczL2RzeTNHOE9OdnNq MXMxcm51ZmRPcHJnMjVRZy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0kL08XES/q9IEKx5guv5nxArWaA2Vk8lwJ95yxMpoq4YFp+zuAcUX+n6kRWSu icKErvKZuxe2jvd6MY8KlxHHOaFrCwkBLp5mBxcJf8YZh9voNhAYJyPGAUMSZHRV FmoGseR3hzOJ9CBekAhTVnl1H7/L3VjreHUTBy6Tec1XsmT5JmthUEthCTJKS0Xp skqk8+leUMKqYngai4E37G5iMtRTUCPXns5oJ4U99vUH33b+i6J3xZtvMoRWbgse 1r6bRagWn5pmbU6Qp1tp7FpeVRJGATW0hPZ2dymoAJ9nDqwfbZfRT86jwhh3RSmS tHeCgEOpKf43gXT+3AP271P4 -----END CERTIFICATE-----Generated at Thu Jul 23 23:21:06 2026 by rpki-client