$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft File: U8lIF-sTZfHejDwrRAIjmIHBlD0.mft (raw, json) Hash identifier: 7DXFDY0JKuFbrrLzbrujjcJP0qq+nRhadMnjuPXtnjQ= Subject key identifier: 53:23:55:7E:42:43:F6:0A:79:A5:0F:00:CF:28:CF:D8:B5:A9:BA:25 Authority key identifier: 53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D Certificate issuer: /CN=A91D3307/serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Certificate serial: 0591 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft Manifest number: 0570 Signing time: Thu 23 Jul 2026 00:12:35 +0000 Manifest this update: Thu 23 Jul 2026 00:12:35 +0000 Manifest next update: Thu 30 Jul 2026 00:12:35 +0000 Files and hashes: 1: U8lIF-sTZfHejDwrRAIjmIHBlD0.crl (hash: Hd+k3IllvFxHI1UDhIwpY/nItlYZQqNum8WGu8sCh9U=) 2: C908B72A696F11EFA4DA475FC4F9AE02.roa (hash: W6dcDrB3RcselU+HE/a3UN93ZRWn0E/P0SOzXj78T2A=) 3: C9C70AEA696F11EFA4DA475FC4F9AE02.roa (hash: 593+o8elVRSxa1C/n0n+gLQTiowZqiqwRC7MRYiWVSc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3307, serialNumber=53C94817EB1365F1DE8C3C2B4402239881C1943D Validity Not Before: Jul 23 00:12:35 2026 GMT Not After : Jul 30 00:12:35 2026 GMT Subject: CN=6a615c73-7068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:ab:40:26:c0:98:31:a0:9e:db:8f:b4:e6: ac:4e:eb:88:fa:5c:c3:45:06:ae:e9:d1:72:2e:3d: 9d:c2:01:d8:6b:ab:71:62:ac:e3:b3:eb:9b:35:6b: 64:c2:e4:eb:16:d4:f0:b6:a1:9f:d5:27:af:33:5d: 12:0e:42:63:bf:ce:a6:de:f1:9a:cf:4e:c5:69:3b: b0:90:80:02:e1:62:77:60:a4:1d:2c:84:df:88:7a: d1:92:3c:24:2a:34:3f:ff:17:3b:fe:4a:1c:dc:69: fd:8f:d7:ec:83:24:45:f9:d6:c4:1a:ef:47:69:6a: 32:c6:70:78:30:cd:cd:10:ff:0f:ef:1d:65:66:08: 6d:55:e5:8c:62:2e:45:67:d1:4f:3f:c3:90:94:5c: 27:6d:12:a2:5a:f5:a9:fc:30:fe:52:fe:33:47:1a: 96:12:9f:10:c5:96:db:7f:b6:43:6f:ec:c6:1a:b9: c9:e0:0f:49:0f:22:45:70:18:88:47:3b:e2:85:34: da:3e:c8:88:5b:48:ee:2f:9a:95:d2:49:cc:a1:2f: bf:0c:08:b8:ff:85:b9:f6:f7:c3:87:56:42:16:75: ec:e2:ed:82:88:a9:03:80:e9:d5:ad:1f:fa:09:72: 91:85:62:f5:d8:f5:14:10:87:aa:0a:a6:8f:9d:b7: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:23:55:7E:42:43:F6:0A:79:A5:0F:00:CF:28:CF:D8:B5:A9:BA:25 X509v3 Authority Key Identifier: keyid:53:C9:48:17:EB:13:65:F1:DE:8C:3C:2B:44:02:23:98:81:C1:94:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U8lIF-sTZfHejDwrRAIjmIHBlD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3307/342D832842CC11EC8F13320DC4F9AE02/U8lIF-sTZfHejDwrRAIjmIHBlD0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c9:c0:1c:ba:cb:ab:2d:15:f1:38:82:ad:5a:a4:4c:8f:90: 40:f5:cd:cc:e5:77:ef:77:d3:49:03:2b:c6:94:77:c4:1b:09: da:89:8d:4b:bd:81:c0:c1:ea:64:c8:5f:c3:1b:bb:12:e1:fa: 47:54:71:68:93:1c:7f:1c:1a:43:41:5f:5d:a7:f5:6a:63:13: 34:c7:db:b2:d7:b8:8b:67:10:ac:01:42:49:78:a1:6c:c5:d2: a9:b0:16:8a:83:4d:7b:df:df:5f:b4:eb:a1:5d:0f:ae:dd:ce: 1d:c0:fb:75:fd:e0:eb:66:9e:69:93:ac:8e:1e:34:78:a5:45: 14:25:27:15:6a:33:7f:78:db:33:bb:d0:ae:ac:ea:08:6a:82: 69:93:d1:02:e4:47:15:e2:12:2d:91:fe:53:e8:ee:21:a3:d8: 3b:b3:18:80:82:e8:ac:57:30:08:03:9f:89:49:ca:9f:90:6d: b8:32:9e:fd:c7:ee:a1:8b:33:cf:62:bb:2e:fe:33:80:10:c4: 72:13:2c:e4:f1:59:9a:b8:cc:28:a0:ff:ab:aa:e1:5f:94:14: 9c:e1:44:9b:20:b6:d8:a3:79:bf:47:1e:7e:42:c3:01:6b:25: 1d:89:87:c7:1d:4a:41:77:cb:26:f4:cd:28:13:5d:46:02:4c: a2:48:33:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMzMDcxMTAvBgNVBAUTKDUzQzk0ODE3RUIxMzY1RjFERThDM0MyQjQ0MDIyMzk4 ODFDMTk0M0QwHhcNMjYwNzIzMDAxMjM1WhcNMjYwNzMwMDAxMjM1WjAYMRYwFAYD VQQDEw02YTYxNWM3My03MDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDSrQCbAmDGgntuPtOasTuuI+lzDRQau6dFyLj2dwgHYa6txYqzjs+ubNWtk wuTrFtTwtqGf1SevM10SDkJjv86m3vGaz07FaTuwkIAC4WJ3YKQdLITfiHrRkjwk KjQ//xc7/koc3Gn9j9fsgyRF+dbEGu9HaWoyxnB4MM3NEP8P7x1lZghtVeWMYi5F Z9FPP8OQlFwnbRKiWvWp/DD+Uv4zRxqWEp8QxZbbf7ZDb+zGGrnJ4A9JDyJFcBiI RzvihTTaPsiIW0juL5qV0knMoS+/DAi4/4W59vfDh1ZCFnXs4u2CiKkDgOnVrR/6 CXKRhWL12PUUEIeqCqaPnbcbbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMjVX5C Q/YKeaUPAM8oz9i1qbolMB8GA1UdIwQYMBaAFFPJSBfrE2Xx3ow8K0QCI5iBwZQ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzMwNy8zNDJEODMyODQy Q0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpmSGVqRHdyUkFJam1JSEJs RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U4bElGLXNUWmZIZWpEd3JSQUlqbUlIQmxEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzMwNy8zNDJEODMyODQyQ0MxMUVDOEYxMzMyMERDNEY5QUUwMi9VOGxJRi1zVFpm SGVqRHdyUkFJam1JSEJsRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHMnAHLrLqy0V8TiCrVqkTI+QQPXNzOV373fTSQMrxpR3xBsJ2omNS72BwMHq ZMhfwxu7EuH6R1RxaJMcfxwaQ0FfXaf1amMTNMfbste4i2cQrAFCSXihbMXSqbAW ioNNe9/fX7TroV0Prt3OHcD7df3g62aeaZOsjh40eKVFFCUnFWozf3jbM7vQrqzq CGqCaZPRAuRHFeISLZH+U+juIaPYO7MYgILorFcwCAOfiUnKn5BtuDKe/cfuoYsz z2K7Lv4zgBDEchMs5PFZmrjMKKD/q6rhX5QUnOFEmyC22KN5v0cefkLDAWslHYmH xx1KQXfLJvTNKBNdRgJMokgzVQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:56:06 2026 by rpki-client