$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft File: o1D687bxS8juGymW7tSOJwIOEIM.mft (raw, json) Hash identifier: U2apn8gPsZR2si5s1rX8/+YJPekjIOx7fa5zYlx7jPI= Subject key identifier: 55:D3:AA:C4:CF:25:98:DC:1C:C6:A9:10:47:7D:93:DF:9B:89:3A:4D Authority key identifier: A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 Certificate issuer: /CN=A91D4834/serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Certificate serial: 0953 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft Manifest number: 0930 Signing time: Wed 22 Jul 2026 20:42:36 +0000 Manifest this update: Wed 22 Jul 2026 20:42:35 +0000 Manifest next update: Wed 29 Jul 2026 20:42:35 +0000 Files and hashes: 1: o1D687bxS8juGymW7tSOJwIOEIM.crl (hash: xRPy+R461ll5FaqogbFAtvGbeT2yeylgP0txkndDQXs=) 2: 18C57F047EAF11F1A86AC8B467A30FBC.roa (hash: TwfuImduumf2E6CwFlSoq4jZU9n/ol3F3dOv5htetzY=) 3: C5E7AA2289A011F08D995D74C4F9AE02.roa (hash: O+J9NJa3UAiRFIsaF/1cDe44mda6RPgxat0aYJVT3MQ=) 4: 1845D6647EAF11F1A86AC8B467A30FBC.roa (hash: hAU4qUdvHl3msSyOtoY08felpEvTOnOlkZDcpV81OCM=) 5: 43BCAA10601011F1B53A223F8947A888.roa (hash: UAOZoXUNlqRhbsm6Ye0JLiTSN1KyydXhLfW68ppQgWM=) 6: ECE8975685D811F09A4FFA45C4F9AE02.roa (hash: fecuy51h04kA/93Fl9Jso7L2bJu10CuAwHp5PsU5FhA=) 7: 17A584347EAF11F1A86AC8B467A30FBC.roa (hash: cWMVPdtFhLjtPumAhMJx7mxgsrChxX1MDuj/JICmZU8=) 8: 1702453A7EAF11F1A86AC8B467A30FBC.roa (hash: kK9g04kyEiFnynqhVR38EeQ3FQu8/W3rZrXFesWAU4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2387 (0x953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4834, serialNumber=A350FAF3B6F14BC8EE1B2996EED48E27020E1083 Validity Not Before: Jul 22 20:42:35 2026 GMT Not After : Jul 29 20:42:35 2026 GMT Subject: CN=6a612b3c-0b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:48:b5:49:da:ef:d3:15:5a:20:dc:86:2b: 72:1a:a8:8b:25:2f:de:ad:7c:44:d1:e7:01:04:3c: 29:ff:e2:79:43:ad:df:40:85:e6:7f:3f:fe:fa:32: 51:c9:84:4c:dd:e2:81:24:a7:db:19:04:26:25:03: 24:1f:e3:8f:a9:d5:b8:e2:93:63:1b:fb:a7:94:2b: 2a:88:1e:cf:ba:7f:96:b6:68:31:66:d6:ff:0b:85: d8:e3:83:62:a4:8e:81:33:b9:18:75:62:46:9d:cf: 79:d4:10:4d:56:c4:39:74:16:88:ab:f6:b0:73:98: e4:f9:a9:0c:0d:53:d2:06:f3:9e:b1:82:ec:84:f5: 12:eb:9d:c0:df:3f:2f:d2:a4:9b:10:b2:fb:04:19: 23:0a:4f:ab:e4:96:78:f9:a4:4b:85:75:39:6e:51: 43:a4:32:b0:8e:5b:99:fe:a3:1f:4f:cc:c5:52:d0: 70:e6:09:55:e9:0e:c9:47:5c:e2:87:12:33:f8:51: f4:9a:ac:ee:e5:b7:fc:75:d5:d5:61:8c:7e:52:dd: b5:45:3d:02:4a:1b:d7:11:b2:c2:96:61:37:5a:9b: 68:25:d8:e1:b6:9d:2b:e3:40:bc:c5:3d:4b:43:c0: 63:56:fe:eb:71:55:57:23:31:30:23:26:8d:1b:5e: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D3:AA:C4:CF:25:98:DC:1C:C6:A9:10:47:7D:93:DF:9B:89:3A:4D X509v3 Authority Key Identifier: keyid:A3:50:FA:F3:B6:F1:4B:C8:EE:1B:29:96:EE:D4:8E:27:02:0E:10:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o1D687bxS8juGymW7tSOJwIOEIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4834/51BEDFC4CC8D11EAAFFEDB36C4F9AE02/o1D687bxS8juGymW7tSOJwIOEIM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:90:38:ad:89:03:83:8d:15:d9:c7:45:0a:4a:6c:67:e6:82: a2:9d:45:14:4a:f0:c5:58:5b:c8:18:a3:43:a4:04:05:83:6e: 37:57:49:38:b4:a6:20:40:da:b2:9b:8d:f4:2d:a3:c0:81:e0: 97:cd:97:fb:25:99:f1:fc:74:d0:39:c2:df:9a:f0:18:4e:a7: 5c:fb:3f:a6:1e:9c:93:2f:ef:29:8a:cd:c2:48:21:a9:15:17: b6:f4:ca:65:c5:47:c2:59:9d:64:1e:fe:52:b0:65:a4:7f:54: 14:01:86:d0:9d:07:0d:8d:6b:09:ea:2f:a1:61:c7:7f:ae:cd: 75:83:dc:42:fa:25:8e:80:ae:c0:36:60:04:1c:e2:29:5e:87: 39:c3:e7:dc:e9:d5:d2:cd:db:87:40:6a:2a:e0:90:5d:88:de: 3d:1c:5c:00:42:92:1d:ff:ae:1a:bf:3d:50:cf:5b:29:ef:fd: ab:8a:27:e7:ed:23:d3:83:ab:56:ff:b3:dd:2a:ea:09:03:4e: ea:0b:95:53:f0:49:06:08:42:a5:73:55:27:64:2a:47:06:2d: 75:46:39:3d:bf:11:e3:f6:fc:5c:1b:1a:1e:73:fa:76:11:44: 4c:21:81:29:ab:a3:76:07:2a:55:87:7b:96:91:89:4e:bd:e7: f0:a8:45:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4MzQxMTAvBgNVBAUTKEEzNTBGQUYzQjZGMTRCQzhFRTFCMjk5NkVFRDQ4RTI3 MDIwRTEwODMwHhcNMjYwNzIyMjA0MjM1WhcNMjYwNzI5MjA0MjM1WjAYMRYwFAYD VQQDEw02YTYxMmIzYy0wYjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5BItUna79MVWiDchityGqiLJS/erXxE0ecBBDwp/+J5Q63fQIXmfz/++jJR yYRM3eKBJKfbGQQmJQMkH+OPqdW44pNjG/unlCsqiB7Pun+WtmgxZtb/C4XY44Ni pI6BM7kYdWJGnc951BBNVsQ5dBaIq/awc5jk+akMDVPSBvOesYLshPUS653A3z8v 0qSbELL7BBkjCk+r5JZ4+aRLhXU5blFDpDKwjluZ/qMfT8zFUtBw5glV6Q7JR1zi hxIz+FH0mqzu5bf8ddXVYYx+Ut21RT0CShvXEbLClmE3WptoJdjhtp0r40C8xT1L Q8BjVv7rcVVXIzEwIyaNG15F9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXTqsTP JZjcHMapEEd9k9+biTpNMB8GA1UdIwQYMBaAFKNQ+vO28UvI7hsplu7UjicCDhCD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzNC81MUJFREZDNEND OEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4anVHeW1XN3RTT0p3SU9F SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28xRDY4N2J4UzhqdUd5bVc3dFNPSndJT0VJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzNC81MUJFREZDNENDOEQxMUVBQUZGRURCMzZDNEY5QUUwMi9vMUQ2ODdieFM4 anVHeW1XN3RTT0p3SU9FSU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWpA4rYkDg40V2cdFCkpsZ+aCop1FFErwxVhbyBijQ6QEBYNuN1dJOLSmIEDa spuN9C2jwIHgl82X+yWZ8fx00DnC35rwGE6nXPs/ph6cky/vKYrNwkghqRUXtvTK ZcVHwlmdZB7+UrBlpH9UFAGG0J0HDY1rCeovoWHHf67NdYPcQvoljoCuwDZgBBzi KV6HOcPn3OnV0s3bh0BqKuCQXYjePRxcAEKSHf+uGr89UM9bKe/9q4on5+0j04Or Vv+z3SrqCQNO6guVU/BJBghCpXNVJ2QqRwYtdUY5Pb8R4/b8XBsaHnP6dhFETCGB KaujdgcqVYd7lpGJTr3n8KhFxw== -----END CERTIFICATE-----Generated at Fri Jul 24 05:36:56 2026 by rpki-client