$ rpki-client -vvf rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft File: 5NzsWVobtnOJciNlasY5uVNS3XM.mft (raw, json) Hash identifier: VfrOlv0ztmDtm3evv2DbOd+aav9IPyR5cA98YWH1BnE= Subject key identifier: CB:CF:21:24:34:AF:FF:8F:5B:02:2E:49:D4:24:5C:28:8B:2A:B8:8F Authority key identifier: E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 Certificate issuer: /CN=A91D604E/serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Certificate serial: 0D90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft Manifest number: 0D7E Signing time: Wed 22 Jul 2026 18:12:22 +0000 Manifest this update: Wed 22 Jul 2026 18:12:21 +0000 Manifest next update: Wed 29 Jul 2026 18:12:21 +0000 Files and hashes: 1: 5NzsWVobtnOJciNlasY5uVNS3XM.crl (hash: i57CThQJIrbbjaudFniLAI7BrpkX5rAnlARizzo5FY4=) 2: D1C40E28183411EF99FD8776C4F9AE02.roa (hash: 62d4jzUjfsj/dKFMhMN/kf/dBUMWoPHad4ewLC0GCPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3472 (0xd90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D604E, serialNumber=E4DCEC595A1BB673897223656AC639B95352DD73 Validity Not Before: Jul 22 18:12:21 2026 GMT Not After : Jul 29 18:12:21 2026 GMT Subject: CN=6a610806-c052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:56:bb:22:f1:aa:33:75:3d:65:7d:87:03:6f: e5:46:aa:74:a7:58:16:90:a6:d3:eb:93:26:d0:fa: 32:c0:90:96:1c:cb:c7:09:d3:7a:d4:5d:6d:94:0a: 4d:cf:f1:e9:74:d5:b0:1a:59:2c:e1:9f:d8:f4:30: 3e:d4:28:5b:0c:50:ee:4e:97:54:19:e7:ef:df:f3: 7c:53:bf:5b:89:c6:77:51:c0:c3:a8:92:3c:bd:19: c5:a6:52:1f:59:94:3b:79:55:ff:c8:7c:d0:a3:4a: 71:ab:be:e2:b6:24:b8:ff:5c:54:35:21:2a:26:27: 4f:e2:11:88:c7:14:92:a6:6c:03:f6:bc:8c:7c:7d: 12:90:96:75:7d:fc:fd:cb:92:10:3d:d4:0e:b0:46: 8a:1a:51:d5:2c:2a:f1:89:5b:3a:dd:c8:ae:b4:b1: 36:b4:1c:8d:73:9c:00:e6:57:a2:75:4d:5e:2a:dd: b2:b2:d3:c4:8c:44:bf:44:dd:d9:80:fa:8a:75:be: 24:d7:80:27:73:3e:73:e3:8e:41:b7:60:5a:73:01: 05:f3:1c:8f:51:6b:11:e5:99:b4:0a:09:0b:9b:f1: ed:99:a5:dd:e0:a7:18:ed:ad:81:8b:91:3f:76:fd: e8:97:f4:b6:d9:95:b8:e5:7d:ea:f0:7c:74:03:28: ec:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:CF:21:24:34:AF:FF:8F:5B:02:2E:49:D4:24:5C:28:8B:2A:B8:8F X509v3 Authority Key Identifier: keyid:E4:DC:EC:59:5A:1B:B6:73:89:72:23:65:6A:C6:39:B9:53:52:DD:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5NzsWVobtnOJciNlasY5uVNS3XM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D604E/91B5C0C0F4ED11E98CBFA013C4F9AE02/5NzsWVobtnOJciNlasY5uVNS3XM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b0:c2:7b:0c:5c:70:c2:bc:5a:15:b5:87:b7:70:fd:e4:2b: 5c:45:ce:f5:90:e7:22:4a:a4:88:33:1d:18:0c:43:a6:10:9a: 62:f0:05:55:63:00:41:67:02:ea:08:1e:95:92:77:38:b6:47: c0:44:23:c5:5b:b2:38:f2:6c:39:64:1e:3c:d1:cf:6b:78:62: e9:2e:66:bd:4e:4a:0b:1a:41:59:b4:90:5f:1f:d5:d2:57:50: 99:15:8f:ba:85:c8:19:da:ec:d7:1c:3d:96:07:4a:36:52:f0: 72:2b:c9:af:68:ca:35:40:49:93:e8:3d:cf:ad:21:f2:7d:49: cd:95:f5:69:2e:0c:26:13:ee:e4:0a:15:0e:93:c0:39:17:d8: 06:1e:81:1f:7c:6d:64:cc:89:ed:be:5d:a3:34:6d:c1:06:80: 36:f2:34:91:7a:8d:d2:c8:50:3d:9a:2c:4b:54:f5:dd:18:42: 6f:52:61:0d:e0:8f:cf:62:90:1b:12:7b:bd:6c:c8:e3:ed:6d: ff:dd:bd:48:85:38:09:c0:88:05:f1:b6:13:ec:c5:e4:2a:91: cf:60:8e:61:29:62:16:03:22:bf:a3:af:5b:40:cd:0b:05:43: f0:c0:3b:e0:ce:6b:73:ab:3e:c2:e9:d8:01:9c:5c:c5:e8:ad: 96:b2:3b:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwNEUxMTAvBgNVBAUTKEU0RENFQzU5NUExQkI2NzM4OTcyMjM2NTZBQzYzOUI5 NTM1MkRENzMwHhcNMjYwNzIyMTgxMjIxWhcNMjYwNzI5MTgxMjIxWjAYMRYwFAYD VQQDEw02YTYxMDgwNi1jMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlla7IvGqM3U9ZX2HA2/lRqp0p1gWkKbT65Mm0PoywJCWHMvHCdN61F1tlApN z/HpdNWwGlks4Z/Y9DA+1ChbDFDuTpdUGefv3/N8U79bicZ3UcDDqJI8vRnFplIf WZQ7eVX/yHzQo0pxq77itiS4/1xUNSEqJidP4hGIxxSSpmwD9ryMfH0SkJZ1ffz9 y5IQPdQOsEaKGlHVLCrxiVs63ciutLE2tByNc5wA5leidU1eKt2ystPEjES/RN3Z gPqKdb4k14Ancz5z445Bt2BacwEF8xyPUWsR5Zm0CgkLm/HtmaXd4KcY7a2Bi5E/ dv3ol/S22ZW45X3q8Hx0AyjsJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMvPISQ0 r/+PWwIuSdQkXCiLKriPMB8GA1UdIwQYMBaAFOTc7FlaG7ZziXIjZWrGOblTUt1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjA0RS85MUI1QzBDMEY0 RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRuT0pjaU5sYXNZNXVWTlMz WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVOenNXVm9idG5PSmNpTmxhc1k1dVZOUzNYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjA0RS85MUI1QzBDMEY0RUQxMUU5OENCRkEwMTNDNEY5QUUwMi81TnpzV1ZvYnRu T0pjaU5sYXNZNXVWTlMzWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV7DCewxccMK8WhW1h7dw/eQrXEXO9ZDnIkqkiDMdGAxDphCaYvAFVWMAQWcC 6ggelZJ3OLZHwEQjxVuyOPJsOWQePNHPa3hi6S5mvU5KCxpBWbSQXx/V0ldQmRWP uoXIGdrs1xw9lgdKNlLwcivJr2jKNUBJk+g9z60h8n1JzZX1aS4MJhPu5AoVDpPA ORfYBh6BH3xtZMyJ7b5dozRtwQaANvI0kXqN0shQPZosS1T13RhCb1JhDeCPz2KQ GxJ7vWzI4+1t/929SIU4CcCIBfG2E+zF5CqRz2COYSliFgMiv6OvW0DNCwVD8MA7 4M5rc6s+wunYAZxcxeitlrI7VA== -----END CERTIFICATE-----Generated at Fri Jul 24 11:01:36 2026 by rpki-client