$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft File: -J0aOgEq7dJ69ICrnjbpKOaPiUI.mft (raw, json) Hash identifier: cpGhLElVDj1goR/AWcLBAae0MFQyXUkHT5vIRnDhMK0= Subject key identifier: F5:2A:73:7A:47:45:A2:66:15:C9:C8:04:87:6F:A9:C1:5C:1C:4A:92 Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 Certificate issuer: /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Certificate serial: 1FF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft Manifest number: 1FED Signing time: Wed 22 Jul 2026 16:02:39 +0000 Manifest this update: Wed 22 Jul 2026 16:02:39 +0000 Manifest next update: Wed 29 Jul 2026 16:02:39 +0000 Files and hashes: 1: -J0aOgEq7dJ69ICrnjbpKOaPiUI.crl (hash: x0sI+Wm2W7BojQEcniH7JAw96hpeI6IokiLUXTT4F4M=) 2: A423811CAF8511F081CFDB4FC4F9AE02.roa (hash: t9f19zC5S/IYriertqckeC3YEvgJ+JaLXV3b4hj/fXo=) 3: 91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (hash: GjOMUfWbv01wGvJ1FvR6+5UWkPxfCYmtbqRruiSURbE=) 4: 911C2670AF8311F0AA3DB580C4F9AE02.roa (hash: RZhjBvcmyXIMzlb/8UlxgzJQXUre9xl2GZfQAX/t0EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8181 (0x1ff5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942 Validity Not Before: Jul 22 16:02:39 2026 GMT Not After : Jul 29 16:02:39 2026 GMT Subject: CN=6a60e99f-72d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:68:9c:76:f3:26:4f:0c:44:8d:d3:0a:a5:a5: 11:16:2a:5f:05:f3:70:01:fe:ef:88:e6:09:47:e3: 7f:3b:8e:9c:a0:19:14:9c:1c:d4:60:28:03:c7:e2: c3:b0:3c:55:80:6a:37:fb:ad:eb:f2:55:be:44:50: bb:f3:0c:ea:47:f7:30:08:4e:72:08:8c:57:4c:a1: 4d:db:0a:bc:69:5d:9e:94:81:7a:9d:8c:24:f6:30: 12:05:cd:86:57:b4:0d:d7:36:b7:dc:e7:ba:dc:e7: 1a:02:c1:ad:8a:93:90:1b:05:c5:0c:a2:6b:9c:bf: 79:8d:1e:4b:4d:4c:5e:26:1b:e9:ec:cf:24:02:e6: a5:65:5f:df:a5:93:ea:d4:ca:ae:88:74:51:2f:55: 92:1e:7e:1f:52:5d:4c:9a:a7:be:41:65:d2:d8:ae: ee:88:c1:df:70:9e:54:10:22:0e:5f:bf:9d:fc:8b: 12:6b:19:b1:94:b3:4a:a3:93:66:82:9d:47:15:cf: 93:8f:82:c0:72:f1:f1:e1:d4:8b:2f:e7:d2:e5:a9: 21:ea:d1:dc:74:1f:3f:e3:df:d8:87:a9:38:83:41: e7:1c:03:37:b9:62:ae:19:e1:54:3a:08:a9:a4:4a: bb:16:89:b3:44:1c:9b:eb:9e:1d:bb:2f:c1:ff:48: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2A:73:7A:47:45:A2:66:15:C9:C8:04:87:6F:A9:C1:5C:1C:4A:92 X509v3 Authority Key Identifier: keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1e:37:81:1e:86:6b:40:f0:fb:6a:fa:33:48:03:65:dc:b7: f7:7e:a9:70:2e:1f:45:4b:e7:eb:5c:d9:bf:d5:84:b2:bc:e7: 7d:19:70:6d:d2:06:ac:22:b7:ee:1b:4f:c0:b2:9d:ae:25:5f: 9c:28:72:5c:40:fb:72:9b:fb:a9:a7:40:65:78:a1:b4:bd:a8: 1a:76:56:ad:a7:de:1b:ee:e3:96:e5:f5:b1:d9:58:cb:f9:3c: b2:d0:16:76:e4:21:b6:3a:14:99:6b:b9:d0:dc:44:b4:ec:85: aa:28:50:12:9c:91:7a:03:75:ca:bb:e2:71:5a:8a:a4:c3:95: d0:86:55:28:51:be:b2:6b:a0:d5:8f:05:08:6b:13:43:9a:e1: f9:ef:ba:67:7d:8c:a0:a3:17:b4:4d:f3:9c:13:30:8d:c3:4b: 6a:85:20:0c:05:f0:8a:76:03:c6:5c:97:ee:35:5d:56:59:4e: 9e:6d:7f:5d:ce:ac:ad:84:f7:76:3f:0e:77:71:71:a9:00:d1: 18:a1:47:f4:48:ab:35:69:af:b8:f1:95:fc:12:2b:91:c1:9d: e2:92:5b:e2:41:76:ab:50:d5:16:1c:7b:a6:9f:d2:ca:a6:01: e8:72:6e:42:66:2c:92:bc:c3:65:f8:41:b4:c3:3a:1b:9f:93: fa:2e:3b:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJDOTMxMTAvBgNVBAUTKEY4OUQxQTNBMDEyQUVERDI3QUY0ODBBQjlFMzZFOTI4 RTY4Rjg5NDIwHhcNMjYwNzIyMTYwMjM5WhcNMjYwNzI5MTYwMjM5WjAYMRYwFAYD VQQDEw02YTYwZTk5Zi03MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmicdvMmTwxEjdMKpaURFipfBfNwAf7viOYJR+N/O46coBkUnBzUYCgDx+LD sDxVgGo3+63r8lW+RFC78wzqR/cwCE5yCIxXTKFN2wq8aV2elIF6nYwk9jASBc2G V7QN1za33Oe63OcaAsGtipOQGwXFDKJrnL95jR5LTUxeJhvp7M8kAualZV/fpZPq 1MquiHRRL1WSHn4fUl1Mmqe+QWXS2K7uiMHfcJ5UECIOX7+d/IsSaxmxlLNKo5Nm gp1HFc+Tj4LAcvHx4dSLL+fS5akh6tHcdB8/49/Yh6k4g0HnHAM3uWKuGeFUOgip pEq7FomzRByb654duy/B/0jWLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPUqc3pH RaJmFcnIBIdvqcFcHEqSMB8GA1UdIwQYMBaAFPidGjoBKu3SevSAq5426Sjmj4lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkM5My84RkI0OEJCNjUz NzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdkSjY5SUNybmpicEtPYVBp VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KMGFPZ0VxN2RKNjlJQ3JuamJwS09hUGlVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkM5My84RkI0OEJCNjUzNzAxMUU2OTZCQUM4MTVDNEY5QUUwMi8tSjBhT2dFcTdk SjY5SUNybmpicEtPYVBpVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWh43gR6Ga0Dw+2r6M0gDZdy3936pcC4fRUvn61zZv9WEsrznfRlwbdIGrCK3 7htPwLKdriVfnChyXED7cpv7qadAZXihtL2oGnZWrafeG+7jluX1sdlYy/k8stAW duQhtjoUmWu50NxEtOyFqihQEpyRegN1yrvicVqKpMOV0IZVKFG+smug1Y8FCGsT Q5rh+e+6Z32MoKMXtE3znBMwjcNLaoUgDAXwinYDxlyX7jVdVllOnm1/Xc6srYT3 dj8Od3FxqQDRGKFH9EirNWmvuPGV/BIrkcGd4pJb4kF2q1DVFhx7pp/SyqYB6HJu QmYskrzDZfhBtMM6G5+T+i47nw== -----END CERTIFICATE-----Generated at Fri Jul 24 06:35:08 2026 by rpki-client