$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft File: y1McHsaSJfDcrkTOyl41mAzpwPI.mft (raw, json) Hash identifier: DTU+3/t5Dty+egYfuNuetNfHzjM4/FQj+GnPTSNNzWE= Subject key identifier: DF:E3:AF:93:B7:EC:8B:61:6A:77:01:A9:F1:27:B0:D6:19:A3:DC:A8 Authority key identifier: CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 Certificate issuer: /CN=A91CFFCB/serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft Manifest number: D9 Signing time: Thu 23 Jul 2026 08:27:43 +0000 Manifest this update: Thu 23 Jul 2026 08:27:42 +0000 Manifest next update: Thu 30 Jul 2026 08:27:42 +0000 Files and hashes: 1: y1McHsaSJfDcrkTOyl41mAzpwPI.crl (hash: UCkmKY252YKkS6p6l+LirbvCITWVd0c24r2hg+9vZJk=) 2: BB8F3118497B11F096DCA14EC4F9AE02.roa (hash: 54rNaHs3BHHyTMIFPvOgY9u0ai10wJmM8WXV532IDWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFCB, serialNumber=CB531C1EC69225F0DCAE44CECA5E35980CE9C0F2 Validity Not Before: Jul 23 08:27:42 2026 GMT Not After : Jul 30 08:27:42 2026 GMT Subject: CN=6a61d07e-f4f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2d:a4:04:3a:96:90:4b:83:2c:a8:62:a0:8e: f5:9d:07:2f:5f:11:b1:e0:48:e4:b1:1c:36:c1:61: c5:17:09:b9:37:84:13:9b:26:a1:63:08:d4:d6:07: 8e:ac:ef:85:d5:7a:1b:51:cf:e8:a9:7f:e3:e1:21: d8:d2:2b:30:ca:cc:7e:f0:9f:87:aa:f0:4d:f5:13: 06:f8:0c:89:80:63:31:88:a4:79:8e:2a:bb:89:2c: c5:32:15:88:0b:dd:ce:0e:e6:8d:31:6e:e2:d8:29: bc:62:a3:68:77:b4:f4:4f:6f:58:ef:1a:9c:f2:ad: a6:e3:c1:a6:05:f7:83:ce:31:d4:a4:33:98:a5:08: 02:1c:4d:ac:d3:6e:4e:ed:37:0a:a8:7e:3a:1d:95: 04:6f:33:7a:dc:06:b1:2a:24:38:9f:c9:e7:58:9b: 9b:98:71:bd:be:00:8a:fb:f1:a4:20:d0:4c:3a:2e: 6e:d9:81:31:c9:97:a6:dc:e0:3b:f0:62:84:5f:b0: 45:97:8b:20:8b:c8:0e:51:f4:4b:f2:1f:6f:07:26: 3b:78:8f:95:1e:a2:30:36:7f:6c:77:f4:26:b7:3e: 18:50:f2:b9:26:34:75:a5:6d:98:88:47:a1:e8:79: f1:2b:91:1f:57:9b:1f:5f:3f:17:6d:c5:dc:a8:9d: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E3:AF:93:B7:EC:8B:61:6A:77:01:A9:F1:27:B0:D6:19:A3:DC:A8 X509v3 Authority Key Identifier: keyid:CB:53:1C:1E:C6:92:25:F0:DC:AE:44:CE:CA:5E:35:98:0C:E9:C0:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1McHsaSJfDcrkTOyl41mAzpwPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFCB/F5DB7A16420511F0BF7A8711C4F9AE02/y1McHsaSJfDcrkTOyl41mAzpwPI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:39:46:e7:14:ac:81:e8:d0:4d:33:0f:d3:4f:83:f1:e1:7a: 06:ec:a7:9f:76:8c:a3:33:db:b1:f6:5e:e4:1d:35:7f:38:0f: f7:f1:09:3f:9b:8f:1e:5d:a9:4d:42:1a:3a:e6:f5:87:fa:b1: 71:49:ee:27:b3:bd:ca:2f:c7:26:49:a7:09:ec:d1:37:a1:64: a7:69:d6:a3:a8:07:4f:36:71:a1:64:25:bc:18:53:b6:5a:ce: 0f:97:3e:f1:6d:0c:d9:08:b1:9b:1d:6d:c9:7c:67:aa:21:64: f7:64:79:ba:3e:24:32:e8:29:b1:72:46:59:31:c6:78:37:1c: 98:72:0c:99:b5:98:78:9e:90:5c:57:c9:1a:13:35:ed:5b:44: 0c:31:82:67:ea:4f:8f:d1:07:7a:19:5c:3c:52:33:4b:4c:a6: a1:64:c6:84:29:b7:55:fd:97:12:0e:9b:a9:a7:f1:7a:f3:4a: a9:f9:ba:ea:d2:a7:c9:a2:8a:20:08:2c:d0:00:d1:e1:f7:d4: 8e:29:54:aa:58:8a:20:62:f3:22:de:7d:f9:65:e7:7e:38:f6: 1d:8d:cf:79:46:18:52:bb:76:06:19:d1:ad:00:03:41:a0:44: ce:e8:2c:de:91:9e:a9:c6:31:a9:b2:31:11:56:95:fc:3b:6e: be:a2:78:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQ0IxMTAvBgNVBAUTKENCNTMxQzFFQzY5MjI1RjBEQ0FFNDRDRUNBNUUzNTk4 MENFOUMwRjIwHhcNMjYwNzIzMDgyNzQyWhcNMjYwNzMwMDgyNzQyWjAYMRYwFAYD VQQDEw02YTYxZDA3ZS1mNGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApS2kBDqWkEuDLKhioI71nQcvXxGx4EjksRw2wWHFFwm5N4QTmyahYwjU1geO rO+F1XobUc/oqX/j4SHY0iswysx+8J+HqvBN9RMG+AyJgGMxiKR5jiq7iSzFMhWI C93ODuaNMW7i2Cm8YqNod7T0T29Y7xqc8q2m48GmBfeDzjHUpDOYpQgCHE2s025O 7TcKqH46HZUEbzN63AaxKiQ4n8nnWJubmHG9vgCK+/GkINBMOi5u2YExyZem3OA7 8GKEX7BFl4sgi8gOUfRL8h9vByY7eI+VHqIwNn9sd/Qmtz4YUPK5JjR1pW2YiEeh 6HnxK5EfV5sfXz8XbcXcqJ2MzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN/jr5O3 7IthancBqfEnsNYZo9yoMB8GA1UdIwQYMBaAFMtTHB7GkiXw3K5EzspeNZgM6cDy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZDQi9GNURCN0ExNjQy MDUxMUYwQkY3QTg3MTFDNEY5QUUwMi95MU1jSHNhU0pmRGNya1RPeWw0MW1BenB3 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxTWNIc2FTSmZEY3JrVE95bDQxbUF6cHdQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZDQi9GNURCN0ExNjQyMDUxMUYwQkY3QTg3MTFDNEY5QUUwMi95MU1jSHNhU0pm RGNya1RPeWw0MW1BenB3UEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvDlG5xSsgejQTTMP00+D8eF6Buynn3aMozPbsfZe5B01fzgP9/EJP5uPHl2p TUIaOub1h/qxcUnuJ7O9yi/HJkmnCezRN6Fkp2nWo6gHTzZxoWQlvBhTtlrOD5c+ 8W0M2Qixmx1tyXxnqiFk92R5uj4kMugpsXJGWTHGeDccmHIMmbWYeJ6QXFfJGhM1 7VtEDDGCZ+pPj9EHehlcPFIzS0ymoWTGhCm3Vf2XEg6bqafxevNKqfm66tKnyaKK IAgs0ADR4ffUjilUqliKIGLzIt59+WXnfjj2HY3PeUYYUrt2BhnRrQADQaBEzugs 3pGeqcYxqbIxEVaV/DtuvqJ4cg== -----END CERTIFICATE-----Generated at Fri Jul 24 20:06:50 2026 by rpki-client