$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft File: IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft (raw, json) Hash identifier: peZXu8DPiK5weMg/zuq+QhWNEHTU8VgVyuH0v+iwUhc= Subject key identifier: C3:DE:C4:0E:D6:13:98:7A:80:39:A6:A6:08:01:36:8D:0D:21:75:30 Authority key identifier: 22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 Certificate issuer: /CN=A91CFFCB/serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft Manifest number: D9 Signing time: Thu 23 Jul 2026 08:27:40 +0000 Manifest this update: Thu 23 Jul 2026 08:27:39 +0000 Manifest next update: Thu 30 Jul 2026 08:27:39 +0000 Files and hashes: 1: IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl (hash: d+5S/UcA060MUkFGaSq52TR/guIwRL/90l8/qXR1vWI=) 2: BAEA3A3C497B11F096DCA14EC4F9AE02.roa (hash: +lH463qDPAwERrsUQl45+mVf4irW7NMTQzUVhbxqY6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=2224294416B8465706554B52CBC56F449BC46C89 Validity Not Before: Jul 23 08:27:39 2026 GMT Not After : Jul 30 08:27:39 2026 GMT Subject: CN=6a61d07c-e99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:ba:eb:88:94:51:c9:fd:dc:fd:9a:2e:78: c0:3a:8f:1a:55:a5:34:0e:ec:e2:c9:2c:a8:c0:68: e0:f8:05:cb:25:cd:8b:32:3f:0a:6b:f9:a4:b3:fe: c4:72:88:e6:b1:0a:10:f3:38:f9:b1:d1:97:a6:66: 0c:db:c7:bb:17:b0:e6:38:02:26:f9:2b:fa:07:4a: 13:2b:ac:14:fd:ed:f2:e9:02:83:2f:a9:dc:52:bf: 1f:b0:a6:d8:a1:e9:35:f4:4a:dd:80:c6:d4:97:13: 32:03:8f:12:45:1a:4f:fa:39:0f:fc:23:26:03:3a: cd:0c:26:40:2f:b9:e3:34:15:0f:9b:e1:df:1c:28: 07:38:ca:46:16:99:c9:34:46:96:0f:03:3f:10:6f: 88:e6:12:25:12:36:87:60:f3:a6:e9:b7:5e:59:d1: e7:53:62:4b:ef:8a:a1:99:11:8c:8d:9f:84:cd:e4: ea:da:d7:9b:29:08:f9:fa:c4:30:c2:77:ed:d3:ba: 38:5b:1e:1a:1a:29:b6:51:e7:56:24:67:5d:d5:d3: 25:06:4a:87:56:1e:b3:cd:53:3a:a7:04:5b:e4:0b: 27:30:57:c0:51:79:be:9e:b4:1d:a2:fa:4f:fd:e3: 8b:e4:49:a7:24:a1:a3:bb:0b:18:aa:0d:b5:45:f4: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DE:C4:0E:D6:13:98:7A:80:39:A6:A6:08:01:36:8D:0D:21:75:30 X509v3 Authority Key Identifier: keyid:22:24:29:44:16:B8:46:57:06:55:4B:52:CB:C5:6F:44:9B:C4:6C:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IiQpRBa4RlcGVUtSy8VvRJvEbIk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/ED0F11F4420511F0BF7A8711C4F9AE02/IiQpRBa4RlcGVUtSy8VvRJvEbIk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:1a:d1:02:a2:d9:d1:1b:db:69:35:70:e5:da:8d:5a:ea:45: da:a7:da:55:c0:53:eb:6a:bc:e1:ab:91:43:4e:dc:9b:b6:0e: a8:48:32:fd:7f:97:db:a3:5c:2b:6b:11:d4:0f:ec:0b:98:8b: 37:fd:75:76:d0:a6:5d:18:81:32:e1:da:3e:cf:92:f7:5f:02: 8f:56:66:5f:a3:c2:c5:2a:3a:5e:77:da:70:eb:7e:c1:49:17: 9f:8d:06:cd:a6:91:39:3a:ae:be:c4:7c:7d:56:f7:28:6e:40: fc:1d:ef:6b:cb:f8:af:d6:60:36:ee:27:28:50:43:d5:2e:d3: f4:d9:94:5d:15:f6:9a:cf:42:1a:aa:00:8d:24:c9:ba:ef:84: dd:b6:ab:34:ad:3f:44:a9:db:09:9f:0c:07:f8:8f:63:9b:9c: 7f:f2:17:9f:d8:08:6c:f3:b0:8b:aa:d6:35:aa:e9:87:a5:24: e3:a8:71:90:94:bf:37:a0:58:f4:1b:90:46:21:be:3a:d0:ae: 23:ed:16:1d:be:22:35:2e:70:f8:7f:d1:3d:ba:33:c0:c9:52: dd:a8:f6:99:37:71:03:f8:1a:bf:69:88:73:c4:2e:14:50:2f: 3a:0d:f4:c5:40:a6:7a:7c:80:56:13:e0:fb:84:07:36:66:23: 4c:07:cc:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKDIyMjQyOTQ0MTZCODQ2NTcwNjU1NEI1MkNCQzU2RjQ0 OUJDNDZDODkwHhcNMjYwNzIzMDgyNzM5WhcNMjYwNzMwMDgyNzM5WjAYMRYwFAYD VQQDEw02YTYxZDA3Yy1lOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnt6664iUUcn93P2aLnjAOo8aVaU0DuziySyowGjg+AXLJc2LMj8Ka/mks/7E cojmsQoQ8zj5sdGXpmYM28e7F7DmOAIm+Sv6B0oTK6wU/e3y6QKDL6ncUr8fsKbY oek19ErdgMbUlxMyA48SRRpP+jkP/CMmAzrNDCZAL7njNBUPm+HfHCgHOMpGFpnJ NEaWDwM/EG+I5hIlEjaHYPOm6bdeWdHnU2JL74qhmRGMjZ+EzeTq2tebKQj5+sQw wnft07o4Wx4aGim2UedWJGdd1dMlBkqHVh6zzVM6pwRb5AsnMFfAUXm+nrQdovpP /eOL5EmnJKGjuwsYqg21RfSKmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMPexA7W E5h6gDmmpggBNo0NIXUwMB8GA1UdIwQYMBaAFCIkKUQWuEZXBlVLUsvFb0SbxGyJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9FRDBGMTFGNDQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJsY0dWVXRTeThWdlJKdkVi SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lpUXBSQmE0UmxjR1ZVdFN5OFZ2Ukp2RWJJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9FRDBGMTFGNDQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi9JaVFwUkJhNFJs Y0dWVXRTeThWdlJKdkViSWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeRrRAqLZ0RvbaTVw5dqNWupF2qfaVcBT62q84auRQ07cm7YOqEgy/X+X26Nc K2sR1A/sC5iLN/11dtCmXRiBMuHaPs+S918Cj1ZmX6PCxSo6XnfacOt+wUkXn40G zaaROTquvsR8fVb3KG5A/B3va8v4r9ZgNu4nKFBD1S7T9NmUXRX2ms9CGqoAjSTJ uu+E3barNK0/RKnbCZ8MB/iPY5ucf/IXn9gIbPOwi6rWNarph6Uk46hxkJS/N6BY 9BuQRiG+OtCuI+0WHb4iNS5w+H/RPbozwMlS3aj2mTdxA/gav2mIc8QuFFAvOg30 xUCmenyAVhPg+4QHNmYjTAfMHA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:51:05 2026 by rpki-client