$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft File: b70F9jC-RBCpUSzbaahco3zoxzk.mft (raw, json) Hash identifier: IyHVOfGltTMVeihNx1z9vkziznm/YM69dHT9CAnPLPI= Subject key identifier: C8:69:B0:99:AF:C1:C2:CF:1F:A5:E1:46:62:D8:BC:98:0A:97:A4:72 Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 Certificate issuer: /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft Manifest number: 5B Signing time: Thu 23 Jul 2026 10:10:14 +0000 Manifest this update: Thu 23 Jul 2026 10:10:14 +0000 Manifest next update: Thu 30 Jul 2026 10:10:14 +0000 Files and hashes: 1: b70F9jC-RBCpUSzbaahco3zoxzk.crl (hash: ZM7h6n+xDhfcs+Rr11JtHEydgZ6aXiOFd+j9er/c238=) 2: B8EA8ABC033311F1AAD74374203D8C67.roa (hash: VGTwiIqmaXq4MsscshpbxlIvpQ6VN4x9kiDNRx4VLZE=) 3: 2764AC08003111F18836FC08486F56BC.roa (hash: yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739 Validity Not Before: Jul 23 10:10:14 2026 GMT Not After : Jul 30 10:10:14 2026 GMT Subject: CN=6a61e886-6776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ac:84:30:0e:e0:a8:67:23:82:a0:40:32:15: 78:c1:56:dd:74:a4:6c:80:cc:a5:b7:cc:ff:d8:2d: 81:c4:02:1a:f8:da:cd:3e:29:2e:d0:e4:a5:e1:1e: f0:5b:6c:d1:2a:5a:b4:eb:c6:46:a7:23:a5:4d:98: dc:dc:8b:b7:e4:a2:41:f7:8d:4f:4f:c5:e9:9d:98: 33:4e:47:a7:36:7e:7d:f3:2c:ff:88:7a:19:ae:4f: 90:a3:89:13:10:5d:b6:76:c9:cd:92:9e:8c:ad:34: 8a:1a:47:13:2d:68:ea:29:00:a2:db:fb:52:b3:0f: 07:ee:32:67:0c:15:c2:8b:27:05:9b:50:ae:f3:62: 53:84:5c:b8:3d:28:0e:86:56:0d:84:5b:13:1f:03: 9f:b7:dc:fa:b8:fa:f1:3e:29:57:42:b0:86:a3:1e: e4:38:cf:a6:6c:08:6e:5b:44:e3:d2:1b:04:40:1f: b9:be:ff:42:69:ba:41:2a:8f:06:c3:e9:91:36:bc: 8b:77:e3:27:5e:d1:71:79:cf:eb:a7:b9:53:39:38: 8c:9f:e1:c3:74:ee:22:ff:1f:54:20:11:12:91:d8: f6:03:63:c1:83:f5:e5:2b:d2:79:6d:ea:7f:28:58: 1c:35:05:f7:63:3e:22:00:da:10:a3:4b:de:4e:d8: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:69:B0:99:AF:C1:C2:CF:1F:A5:E1:46:62:D8:BC:98:0A:97:A4:72 X509v3 Authority Key Identifier: keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d8:6f:30:86:0d:e7:e3:a1:a5:bf:e5:6b:62:de:b0:df:9a: bb:27:fc:6d:ce:5c:78:ba:1e:eb:76:e5:b8:ff:a0:7b:b7:09: f2:78:77:ca:a1:34:1d:4a:72:b9:41:b5:fa:99:e4:9b:f6:68: 24:a4:41:49:b7:c4:47:72:af:77:49:d0:d9:72:2f:9f:af:87: 2d:0d:6a:48:eb:40:30:7a:6c:c3:e9:71:3e:b4:91:58:f7:b4: 78:ba:36:5d:9f:d8:e5:ff:10:8a:e8:30:7c:0e:8d:69:4d:6b: c7:e1:e2:5b:b7:78:8e:7e:d3:72:b5:31:dc:5d:8f:33:00:68: 11:35:fc:f6:84:69:d1:67:84:94:bf:dd:4a:3a:d2:28:3e:1a: 5d:de:65:a1:3d:2f:17:b4:6c:b5:62:d8:68:1c:6f:23:f9:43: c6:98:8a:ad:67:38:3e:3a:60:de:62:6f:58:52:77:48:6e:1a: 56:bb:1c:0b:85:3a:e3:ce:0d:77:5d:16:47:30:ad:0d:6b:6c: 64:90:5b:9e:5e:09:ef:56:51:f9:db:f3:d6:c0:aa:ae:61:2e: 57:55:10:b7:92:5c:70:b1:36:61:5e:0d:5b:87:58:8a:a4:8c: d6:17:d7:95:d5:30:78:6f:7b:af:5f:c3:ce:44:ce:d4:c3:9b: 2f:7d:0d:b8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Qzg5NzExMC8GA1UEBRMoNkZCRDA1RjYzMEJFNDQxMEE5NTEyQ0RCNjlBODVDQTM3 Q0U4QzczOTAeFw0yNjA3MjMxMDEwMTRaFw0yNjA3MzAxMDEwMTRaMBgxFjAUBgNV BAMTDTZhNjFlODg2LTY3NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCMrIQwDuCoZyOCoEAyFXjBVt10pGyAzKW3zP/YLYHEAhr42s0+KS7Q5KXhHvBb bNEqWrTrxkanI6VNmNzci7fkokH3jU9PxemdmDNOR6c2fn3zLP+IehmuT5CjiRMQ XbZ2yc2SnoytNIoaRxMtaOopAKLb+1KzDwfuMmcMFcKLJwWbUK7zYlOEXLg9KA6G Vg2EWxMfA5+33Pq4+vE+KVdCsIajHuQ4z6ZsCG5bROPSGwRAH7m+/0JpukEqjwbD 6ZE2vIt34yde0XF5z+unuVM5OIyf4cN07iL/H1QgERKR2PYDY8GD9eUr0nlt6n8o WBw1BfdjPiIA2hCjS95O2PuVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyGmwma/B ws8fpeFGYti8mAqXpHIwHwYDVR0jBBgwFoAUb70F9jC+RBCpUSzbaahco3zoxzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzdGNEU2M0VDMDAz MDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJDcFVTemJhYWhjbzN6b3h6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvYjcwRjlqQy1SQkNwVVN6YmFhaGNvM3pveHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURD ODk3LzdGNEU2M0VDMDAzMDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJD cFVTemJhYWhjbzN6b3h6ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCe2G8whg3n46Glv+VrYt6w35q7J/xtzlx4uh7rduW4/6B7twnyeHfKoTQdSnK5 QbX6meSb9mgkpEFJt8RHcq93SdDZci+fr4ctDWpI60AwemzD6XE+tJFY97R4ujZd n9jl/xCK6DB8Do1pTWvH4eJbt3iOftNytTHcXY8zAGgRNfz2hGnRZ4SUv91KOtIo Phpd3mWhPS8XtGy1YthoHG8j+UPGmIqtZzg+OmDeYm9YUndIbhpWuxwLhTrjzg13 XRZHMK0Na2xkkFueXgnvVlH52/PWwKquYS5XVRC3klxwsTZhXg1bh1iKpIzWF9eV 1TB4b3uvX8PORM7Uw5svfQ24 -----END CERTIFICATE-----Generated at Thu Jul 23 21:29:27 2026 by rpki-client