$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft File: 5JdLhBatO5ndEfOwQFbwx5m3ocs.mft (raw, json) Hash identifier: ck2LvqKK0KnZJWBqiMVDDtHJH53AO/Xdjbq7F3Z8xYQ= Subject key identifier: 3C:9B:CB:98:49:00:25:85:8A:EB:A2:E0:2F:E8:D4:3F:45:A5:55:52 Authority key identifier: E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB Certificate issuer: /CN=A91D9CA8/serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft Manifest number: 0111 Signing time: Thu 23 Jul 2026 07:40:16 +0000 Manifest this update: Thu 23 Jul 2026 07:40:15 +0000 Manifest next update: Thu 30 Jul 2026 07:40:15 +0000 Files and hashes: 1: 5JdLhBatO5ndEfOwQFbwx5m3ocs.crl (hash: 6U8np+NHoQtznYlCyEAOnB4choYJSKkTP18XI16xeqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:40:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9CA8, serialNumber=E4974B8416AD3B99DD11F3B04056F0C799B7A1CB Validity Not Before: Jul 23 07:40:15 2026 GMT Not After : Jul 30 07:40:15 2026 GMT Subject: CN=6a61c560-1b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:7e:7d:cd:c0:36:08:1b:66:0c:d1:c8:71: 3d:2f:fc:17:86:a7:da:96:19:19:34:9f:77:51:c4: 58:9e:30:dd:2e:59:af:63:f8:cf:6a:3f:b6:06:49: a5:3c:d0:69:7a:d4:d5:2e:ef:95:97:2e:d9:18:3a: d4:ad:64:ce:1e:95:41:0c:e9:b3:ee:61:57:b7:fc: 55:ba:45:77:33:89:4e:a4:55:e7:eb:dd:8f:05:0b: d9:db:ea:78:2d:fd:c2:0b:b2:02:95:23:17:69:8c: 45:bb:e7:74:f9:3b:e8:f5:3a:bd:22:de:3e:32:a5: 29:cb:ec:28:b5:62:89:b5:53:6d:fc:66:8c:14:09: 14:ed:42:ec:a4:1a:41:94:fd:68:ba:f8:9d:bb:d1: fa:15:9a:e4:6f:f5:4f:0c:7d:3c:37:11:e6:e1:30: ea:95:8c:a3:f1:2e:1f:41:f0:46:3e:69:9d:cc:ff: b6:ba:0a:ca:fa:6c:a5:fe:27:47:78:64:1a:76:1c: 44:d0:5a:59:9a:38:ce:83:aa:76:b5:8d:5b:da:af: bf:17:b4:f5:ef:48:18:b9:93:bc:92:59:2a:e2:22: 22:70:cd:7e:af:1d:88:5e:06:20:0d:de:5e:0d:0e: 71:75:7e:8c:77:39:15:35:78:0a:43:b9:c6:83:60: 21:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9B:CB:98:49:00:25:85:8A:EB:A2:E0:2F:E8:D4:3F:45:A5:55:52 X509v3 Authority Key Identifier: keyid:E4:97:4B:84:16:AD:3B:99:DD:11:F3:B0:40:56:F0:C7:99:B7:A1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5JdLhBatO5ndEfOwQFbwx5m3ocs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CA8/2932C588E4FD11EFAC1CE67FC4F9AE02/5JdLhBatO5ndEfOwQFbwx5m3ocs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:e8:bb:78:6f:09:05:08:81:3a:5d:66:96:a0:54:81:bb:df: 27:32:e8:e7:63:a0:44:fa:ae:23:46:e6:a8:27:5f:24:19:66: cc:0b:32:a6:86:db:09:b0:30:15:df:d9:3f:7d:a8:c3:12:4a: 0b:d3:2a:15:0b:41:9d:2d:1d:e1:07:7f:b7:e0:42:9b:a7:87: 22:c2:dd:99:0b:0e:2b:cf:a8:7b:64:a8:3f:ae:32:a4:20:ab: 12:11:1b:94:17:3d:7c:6d:6f:18:ec:e0:57:a0:1e:d1:ea:c3: 14:f5:aa:8c:90:b8:3c:eb:13:5e:c6:56:b0:87:df:19:80:6f: 96:a8:f9:c7:19:23:d9:6a:ae:a2:1d:5f:f9:59:30:92:c4:f3: cd:a6:32:c9:c8:43:5d:be:e5:7b:6f:24:ea:aa:ce:ff:15:19: 38:19:58:04:cf:97:b0:f9:46:fe:42:b1:20:cf:9d:91:2c:8b: 34:f9:7e:7d:f9:63:5a:b2:19:b7:df:89:41:41:60:47:fc:0b: e9:68:9a:59:0f:fd:34:e2:97:32:22:9c:0b:e0:73:b0:de:4c: c9:66:d4:4e:a8:d8:e0:3a:84:6f:63:a4:c8:e6:db:88:d6:0e: 3b:4d:18:7d:10:d5:54:b7:17:dd:a0:a2:bb:43:15:a8:94:1b: 9d:1d:ac:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlDQTgxMTAvBgNVBAUTKEU0OTc0Qjg0MTZBRDNCOTlERDExRjNCMDQwNTZGMEM3 OTlCN0ExQ0IwHhcNMjYwNzIzMDc0MDE1WhcNMjYwNzMwMDc0MDE1WjAYMRYwFAYD VQQDEw02YTYxYzU2MC0xYjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2o9+fc3ANggbZgzRyHE9L/wXhqfalhkZNJ93UcRYnjDdLlmvY/jPaj+2Bkml PNBpetTVLu+Vly7ZGDrUrWTOHpVBDOmz7mFXt/xVukV3M4lOpFXn692PBQvZ2+p4 Lf3CC7IClSMXaYxFu+d0+Tvo9Tq9It4+MqUpy+wotWKJtVNt/GaMFAkU7ULspBpB lP1ouvidu9H6FZrkb/VPDH08NxHm4TDqlYyj8S4fQfBGPmmdzP+2ugrK+myl/idH eGQadhxE0FpZmjjOg6p2tY1b2q+/F7T170gYuZO8klkq4iIicM1+rx2IXgYgDd5e DQ5xdX6MdzkVNXgKQ7nGg2AhXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDyby5hJ ACWFiuui4C/o1D9FpVVSMB8GA1UdIwQYMBaAFOSXS4QWrTuZ3RHzsEBW8MeZt6HL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUNBOC8yOTMyQzU4OEU0 RkQxMUVGQUMxQ0U2N0ZDNEY5QUUwMi81SmRMaEJhdE81bmRFZk93UUZid3g1bTNv Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVKZExoQmF0TzVuZEVmT3dRRmJ3eDVtM29jcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUNBOC8yOTMyQzU4OEU0RkQxMUVGQUMxQ0U2N0ZDNEY5QUUwMi81SmRMaEJhdE81 bmRFZk93UUZid3g1bTNvY3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArOi7eG8JBQiBOl1mlqBUgbvfJzLo52OgRPquI0bmqCdfJBlmzAsypobbCbAw Fd/ZP32owxJKC9MqFQtBnS0d4Qd/t+BCm6eHIsLdmQsOK8+oe2SoP64ypCCrEhEb lBc9fG1vGOzgV6Ae0erDFPWqjJC4POsTXsZWsIffGYBvlqj5xxkj2Wquoh1f+Vkw ksTzzaYyychDXb7le28k6qrO/xUZOBlYBM+XsPlG/kKxIM+dkSyLNPl+ffljWrIZ t9+JQUFgR/wL6WiaWQ/9NOKXMiKcC+BzsN5MyWbUTqjY4DqEb2OkyObbiNYOO00Y fRDVVLcX3aCiu0MVqJQbnR2sgQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:17:49 2026 by rpki-client