$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft File: r5ACm-EBySLPz0vRRdevHcZA5eA.mft (raw, json) Hash identifier: Qr9LeJ7aV6dFkxzupWMRWPm6oC7mpQPvXh75i0+QPX0= Subject key identifier: 88:69:8C:D5:7D:8E:50:50:6D:A4:69:A8:B6:4B:2C:13:C0:D3:58:2A Authority key identifier: AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 Certificate issuer: /CN=A91D2646/serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Certificate serial: 0ACE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft Manifest number: 0AC1 Signing time: Wed 22 Jul 2026 19:51:00 +0000 Manifest this update: Wed 22 Jul 2026 19:50:59 +0000 Manifest next update: Wed 29 Jul 2026 19:50:59 +0000 Files and hashes: 1: r5ACm-EBySLPz0vRRdevHcZA5eA.crl (hash: jrrxtDEU99oa6uH0itmQVRUCOXN7Qgbegk32nP88cag=) 2: 2B3DAF56792F11F1AA232E0470A30FBC.roa (hash: oB7wH564CK9qQrKrv/eB1IRw7B2daf4dTuUwly5vgJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2766 (0xace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2646, serialNumber=AF90029BE101C922CFCF4BD145D7AF1DC640E5E0 Validity Not Before: Jul 22 19:50:59 2026 GMT Not After : Jul 29 19:50:59 2026 GMT Subject: CN=6a611f23-6cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:cb:89:a8:05:85:b1:60:ee:d9:8c:4b:0e:f8: 17:f9:8e:ea:ef:7a:2a:3c:95:90:0b:66:71:54:61: 98:95:33:30:8f:d4:12:b1:79:11:4d:f6:37:fa:f4: 18:fc:ee:ae:d8:a9:b7:f6:ff:b1:ec:de:09:68:1e: 54:05:20:58:0c:4f:50:21:ab:f8:16:66:86:da:c3: 80:96:57:3c:ff:d7:ea:77:96:1c:cb:62:08:b1:54: 6b:fb:ff:bb:63:17:2c:94:73:c1:a4:32:1d:32:c8: d9:d7:37:21:fb:5f:6e:9b:02:a3:e5:f6:e1:91:fb: eb:95:47:a7:f3:a0:24:71:71:b1:95:15:9e:63:b2: 50:7d:1b:b0:c5:6c:34:55:1f:86:45:89:ca:d8:14: 60:74:bb:a7:1e:69:76:a1:c1:76:4d:13:9f:fb:6c: b6:a2:89:b9:38:2e:91:f3:78:e1:ca:b2:0e:28:23: ee:eb:70:97:98:1d:d6:2e:07:eb:dd:3b:46:34:2a: d7:2d:84:31:71:c6:6b:8f:fe:4f:cd:eb:f4:fa:08: 3a:01:9e:05:d1:5f:8d:06:e6:14:c8:be:03:7f:39: 46:78:81:34:18:1e:a8:b5:66:73:9e:5e:4c:e4:1e: 02:80:64:0f:47:79:2c:2b:bc:5e:6b:63:82:66:1d: 97:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:69:8C:D5:7D:8E:50:50:6D:A4:69:A8:B6:4B:2C:13:C0:D3:58:2A X509v3 Authority Key Identifier: keyid:AF:90:02:9B:E1:01:C9:22:CF:CF:4B:D1:45:D7:AF:1D:C6:40:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r5ACm-EBySLPz0vRRdevHcZA5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2646/D2037D127BEC11EAA9A6C725C4F9AE02/r5ACm-EBySLPz0vRRdevHcZA5eA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e6:2c:c3:be:6f:0e:73:6f:bf:45:9b:cf:c7:e6:4c:26:b9: 68:f4:09:2e:80:cc:e1:16:56:73:ae:6b:66:65:9b:60:64:31: 72:0d:4f:df:d6:1a:d7:b5:54:e7:93:96:44:26:59:b6:de:29: 6b:2d:8c:af:c3:6c:22:c2:09:8a:8c:aa:e4:ae:fe:29:7b:50: 2b:f8:db:ab:c0:21:dd:27:ef:7e:b0:b6:8b:30:02:06:69:51: 4d:4a:35:c4:e4:92:2f:ff:6a:b5:e2:01:b1:9d:2a:8a:20:e2: a7:23:fd:c6:f0:1e:11:0b:a1:b0:77:1b:e2:5c:1b:3f:70:90: 9f:74:e4:84:d4:30:8a:7c:3d:7c:a4:42:c9:1a:e8:15:b5:04: bb:37:a8:eb:36:24:69:bf:7c:70:38:fa:db:72:10:c1:4d:4d: c1:1a:5f:a6:dc:22:82:42:6b:e1:0b:9d:0b:c7:1f:dc:c4:5f: 80:98:dc:d9:0d:e5:05:d6:db:a6:c5:6b:e1:dc:b3:51:85:37: a7:63:34:27:c5:9f:15:11:c3:aa:2d:a7:0b:81:db:b1:b0:a7: 3d:99:cc:a4:7d:52:5d:8a:e1:cc:41:92:c3:ff:d0:3f:84:0c: 09:57:03:5c:98:9c:ca:de:b6:cd:79:34:93:22:4a:24:88:25: 72:c5:d5:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI2NDYxMTAvBgNVBAUTKEFGOTAwMjlCRTEwMUM5MjJDRkNGNEJEMTQ1RDdBRjFE QzY0MEU1RTAwHhcNMjYwNzIyMTk1MDU5WhcNMjYwNzI5MTk1MDU5WjAYMRYwFAYD VQQDEw02YTYxMWYyMy02Y2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MuJqAWFsWDu2YxLDvgX+Y7q73oqPJWQC2ZxVGGYlTMwj9QSsXkRTfY3+vQY /O6u2Km39v+x7N4JaB5UBSBYDE9QIav4FmaG2sOAllc8/9fqd5Ycy2IIsVRr+/+7 YxcslHPBpDIdMsjZ1zch+19umwKj5fbhkfvrlUen86AkcXGxlRWeY7JQfRuwxWw0 VR+GRYnK2BRgdLunHml2ocF2TROf+2y2oom5OC6R83jhyrIOKCPu63CXmB3WLgfr 3TtGNCrXLYQxccZrj/5Pzev0+gg6AZ4F0V+NBuYUyL4DfzlGeIE0GB6otWZznl5M 5B4CgGQPR3ksK7xea2OCZh2XuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhpjNV9 jlBQbaRpqLZLLBPA01gqMB8GA1UdIwQYMBaAFK+QApvhAckiz89L0UXXrx3GQOXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjY0Ni9EMjAzN0QxMjdC RUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlTTFB6MHZSUmRldkhjWkE1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I1QUNtLUVCeVNMUHowdlJSZGV2SGNaQTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjY0Ni9EMjAzN0QxMjdCRUMxMUVBQTlBNkM3MjVDNEY5QUUwMi9yNUFDbS1FQnlT TFB6MHZSUmRldkhjWkE1ZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnuYsw75vDnNvv0Wbz8fmTCa5aPQJLoDM4RZWc65rZmWbYGQxcg1P39Ya17VU 55OWRCZZtt4pay2Mr8NsIsIJioyq5K7+KXtQK/jbq8Ah3SfvfrC2izACBmlRTUo1 xOSSL/9qteIBsZ0qiiDipyP9xvAeEQuhsHcb4lwbP3CQn3TkhNQwinw9fKRCyRro FbUEuzeo6zYkab98cDj623IQwU1NwRpfptwigkJr4QudC8cf3MRfgJjc2Q3lBdbb psVr4dyzUYU3p2M0J8WfFRHDqi2nC4HbsbCnPZnMpH1SXYrhzEGSw//QP4QMCVcD XJicyt62zXk0kyJKJIglcsXVSw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:08:27 2026 by rpki-client