$ rpki-client -vvf rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft File: D1kUy7lqcNoGsR7z3StjyeQHsxw.mft (raw, json) Hash identifier: oU5mZzQBkACGNQP3ShEt2tIsZPi3o/YHwGaWHu+Uonk= Subject key identifier: 1E:9D:6E:F8:29:AC:F6:65:3B:AB:E1:E4:08:07:C6:E9:C0:03:D1:A0 Authority key identifier: 0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C Certificate issuer: /CN=A91D03FC/serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft Manifest number: 0199 Signing time: Thu 23 Jul 2026 05:44:48 +0000 Manifest this update: Thu 23 Jul 2026 05:44:47 +0000 Manifest next update: Thu 30 Jul 2026 05:44:47 +0000 Files and hashes: 1: D1kUy7lqcNoGsR7z3StjyeQHsxw.crl (hash: pge6bxKYaQWhxpL7szbgTb2OWG0Ua/3l36mWMzBF7Xk=) 2: 4FFFD8D41D7211EFA095B25AC4F9AE02.roa (hash: 0xEtLNXzgQLI5eu4N0PHbVDzi3ImrQGP3QrG+KX9gfw=) 3: 507C31C21D7211EFA095B25AC4F9AE02.roa (hash: iX2Fa2bKeusUD7e1kk7qEOazrDitQAwWU/vzKbzi2Es=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:44:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D03FC, serialNumber=0F5914CBB96A70DA06B11EF3DD2B63C9E407B31C Validity Not Before: Jul 23 05:44:47 2026 GMT Not After : Jul 30 05:44:47 2026 GMT Subject: CN=6a61aa4f-6956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c9:97:86:f5:53:4f:3f:f0:43:3f:46:7d:a7: a9:96:72:71:e2:b2:d7:65:b8:ef:82:5b:d2:38:2f: 18:29:24:dc:35:42:a8:cd:f4:4f:7b:1c:57:80:d9: 8c:7c:47:67:71:e8:60:90:23:60:99:58:7d:83:56: df:16:db:70:fa:af:36:c7:da:36:9b:5c:fd:4b:28: 04:18:9d:7e:ee:f5:3c:a1:c5:66:f9:d6:e6:f4:21: 58:fd:4b:fc:80:59:25:f9:e2:1d:43:cd:d6:d0:04: af:40:03:a0:8e:f8:b8:a5:f2:28:ba:37:69:1e:dc: 3d:0c:3a:c0:95:4a:73:c6:50:9f:9d:dd:42:9d:55: 48:68:0b:c6:81:78:83:54:da:8b:61:51:a7:a5:71: 4c:0e:45:35:b1:22:ce:5e:9d:6d:8b:44:2e:b6:41: 1d:4f:41:18:0a:46:28:75:84:2c:8e:21:8c:b1:9b: bc:40:e6:40:28:f8:5f:3f:4a:2c:1b:26:42:da:2b: dd:8e:18:20:a0:ac:9b:09:a1:0c:d9:e8:ac:25:94: d6:1e:12:d6:0c:47:1d:5e:be:61:0f:70:e4:ca:9f: c2:aa:94:d3:17:74:1c:8d:73:b9:28:b2:1b:ad:29: 2d:f7:68:b7:07:59:11:65:12:7d:c5:3c:5c:f9:5d: aa:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9D:6E:F8:29:AC:F6:65:3B:AB:E1:E4:08:07:C6:E9:C0:03:D1:A0 X509v3 Authority Key Identifier: keyid:0F:59:14:CB:B9:6A:70:DA:06:B1:1E:F3:DD:2B:63:C9:E4:07:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1kUy7lqcNoGsR7z3StjyeQHsxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D03FC/C7B093561D7111EF95E26840C4F9AE02/D1kUy7lqcNoGsR7z3StjyeQHsxw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:f8:15:02:e7:af:6d:c9:f3:0f:b4:c0:3d:6f:89:e8:62:32: 36:7f:60:bd:21:0a:78:f8:41:87:96:d1:d3:96:0b:46:12:31: bb:20:ad:62:c3:fd:73:bd:0a:f9:9a:7f:19:c7:c5:62:8e:3e: 12:aa:55:77:15:3b:3e:4c:b0:a2:e1:bc:da:64:75:2b:79:4f: 91:34:34:a0:b8:63:7d:0e:f0:ac:67:aa:79:32:60:96:28:f8: 2e:51:77:5f:6b:7c:46:4a:86:a1:5e:43:51:5c:95:e0:39:40: 24:7d:ad:21:ba:99:83:bf:ca:70:49:2c:0f:0f:97:32:85:6d: e6:63:02:bf:83:79:a3:6a:b0:58:35:d3:97:aa:5d:a9:81:a1: 66:66:e2:42:2f:81:99:31:ad:73:0a:81:15:80:99:96:eb:bc: a4:ef:fa:93:26:e6:52:45:61:ec:5d:e5:db:04:3e:a9:29:a4: 0a:a5:13:80:8c:c3:86:30:87:2a:da:4b:cf:78:e7:67:24:63: 2a:7d:9b:1c:81:fc:1e:f3:91:36:99:93:f0:42:a6:60:57:ef: bd:ec:9f:ec:da:0f:8f:ff:b3:2a:e5:5d:4c:0c:5c:cc:51:7d: 50:f7:4b:4d:5d:75:d9:f0:f8:fd:76:da:76:46:e7:9f:35:27: a6:13:38:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAzRkMxMTAvBgNVBAUTKDBGNTkxNENCQjk2QTcwREEwNkIxMUVGM0REMkI2M0M5 RTQwN0IzMUMwHhcNMjYwNzIzMDU0NDQ3WhcNMjYwNzMwMDU0NDQ3WjAYMRYwFAYD VQQDEw02YTYxYWE0Zi02OTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocmXhvVTTz/wQz9GfaeplnJx4rLXZbjvglvSOC8YKSTcNUKozfRPexxXgNmM fEdncehgkCNgmVh9g1bfFttw+q82x9o2m1z9SygEGJ1+7vU8ocVm+dbm9CFY/Uv8 gFkl+eIdQ83W0ASvQAOgjvi4pfIoujdpHtw9DDrAlUpzxlCfnd1CnVVIaAvGgXiD VNqLYVGnpXFMDkU1sSLOXp1ti0QutkEdT0EYCkYodYQsjiGMsZu8QOZAKPhfP0os GyZC2ivdjhggoKybCaEM2eisJZTWHhLWDEcdXr5hD3Dkyp/CqpTTF3QcjXO5KLIb rSkt92i3B1kRZRJ9xTxc+V2qrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6dbvgp rPZlO6vh5AgHxunAA9GgMB8GA1UdIwQYMBaAFA9ZFMu5anDaBrEe890rY8nkB7Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDNGQy9DN0IwOTM1NjFE NzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNOb0dzUjd6M1N0anllUUhz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Qxa1V5N2xxY05vR3NSN3ozU3RqeWVRSHN4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDNGQy9DN0IwOTM1NjFENzExMUVGOTVFMjY4NDBDNEY5QUUwMi9EMWtVeTdscWNO b0dzUjd6M1N0anllUUhzeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEfgVAuevbcnzD7TAPW+J6GIyNn9gvSEKePhBh5bR05YLRhIxuyCtYsP9c70K +Zp/GcfFYo4+EqpVdxU7PkywouG82mR1K3lPkTQ0oLhjfQ7wrGeqeTJglij4LlF3 X2t8RkqGoV5DUVyV4DlAJH2tIbqZg7/KcEksDw+XMoVt5mMCv4N5o2qwWDXTl6pd qYGhZmbiQi+BmTGtcwqBFYCZluu8pO/6kybmUkVh7F3l2wQ+qSmkCqUTgIzDhjCH KtpLz3jnZyRjKn2bHIH8HvORNpmT8EKmYFfvveyf7NoPj/+zKuVdTAxczFF9UPdL TV112fD4/XbadkbnnzUnphM4Rw== -----END CERTIFICATE-----Generated at Fri Jul 24 18:08:24 2026 by rpki-client