$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft File: cNjYKyIacSIO_Vg9kvc2F15dAvE.mft (raw, json) Hash identifier: 1u+tK7opAVBURABfrUYyzbZhUgj3arLJaFRUmwzJpDE= Subject key identifier: CC:1B:DC:89:86:0E:F5:C4:33:BF:D9:F5:F7:39:4B:4D:C0:CC:25:10 Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 Certificate issuer: /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft Manifest number: 77 Signing time: Thu 23 Jul 2026 09:44:15 +0000 Manifest this update: Thu 23 Jul 2026 09:44:14 +0000 Manifest next update: Thu 30 Jul 2026 09:44:14 +0000 Files and hashes: 1: cNjYKyIacSIO_Vg9kvc2F15dAvE.crl (hash: /gfp5cYQWfdtlB0keoDRr3HoPURzBvYNizzw1PBXSRE=) 2: 98127914D29411F0BA72510FC4F9AE02.roa (hash: fcVzdG0+J4J9gwuAgPs1jVI9TN7koe+xVsb1q5pHJIA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1 Validity Not Before: Jul 23 09:44:14 2026 GMT Not After : Jul 30 09:44:14 2026 GMT Subject: CN=6a61e26f-45e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:37:08:88:73:a0:d4:46:1a:a1:48:aa:aa: ef:cc:7e:a3:86:81:36:65:ee:4a:77:9a:e4:18:68: 5a:9a:c1:61:d6:ec:2f:13:74:e7:5c:46:b1:89:71: ee:45:70:a0:16:15:12:fb:e3:b4:a9:b6:81:e2:16: b4:7a:0c:64:9c:af:45:76:92:09:32:5f:65:fc:d2: 63:07:04:bb:20:f5:77:f2:9c:14:9d:4a:d4:24:8a: ef:69:4c:f4:ae:29:1b:6c:8e:33:6e:81:1f:e2:90: 5c:7f:91:88:2a:72:a0:f3:2a:65:dc:a6:90:ae:ea: 09:45:f6:f9:9d:75:a2:fa:1d:0d:6b:02:d2:af:b7: 69:86:1b:42:4b:12:c6:e2:e1:83:c6:d6:cb:02:9c: 27:11:e4:39:54:97:30:4b:b0:a7:b2:73:eb:13:eb: 18:45:37:40:08:3a:b4:10:2a:25:bc:14:69:44:13: 86:96:c5:8d:2e:7f:8d:00:70:54:cb:3f:62:d7:cb: 29:81:b0:a4:95:49:8c:2a:8d:2e:b4:d8:19:ac:61: 18:03:2d:0f:81:4c:a0:ab:a4:ff:9d:a8:ef:28:58: c9:2e:2d:72:76:4a:0c:84:3f:f2:83:e2:b2:38:3f: 6d:d5:c0:d6:72:d4:7a:b3:d5:c8:2d:45:86:97:fb: 83:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1B:DC:89:86:0E:F5:C4:33:BF:D9:F5:F7:39:4B:4D:C0:CC:25:10 X509v3 Authority Key Identifier: keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:67:b2:8c:45:a0:a7:d0:86:e6:ad:b4:b1:11:c0:38:e6:ca: 1e:86:cc:ed:92:e6:31:34:dc:b8:a9:31:8d:e4:ed:ab:25:37: de:92:23:45:82:62:9a:ff:f5:4d:64:a2:b5:23:c8:9c:6f:14: 50:18:9d:a4:1a:0f:51:5e:76:6c:6b:8d:25:96:f0:8c:9d:5b: ed:41:ac:14:02:7a:d6:ad:0a:39:da:84:06:94:6d:56:14:cc: 24:50:d6:e9:a2:7e:06:71:9f:df:85:ad:d8:f0:ab:db:1f:94: 47:e1:59:74:50:4e:95:38:0c:ab:59:06:a2:ef:31:75:b9:5a: 44:60:07:bc:e6:f7:e9:62:42:0b:70:a5:b8:d1:41:bf:e3:ef: 1c:ab:34:62:89:5a:b9:29:a9:9c:f3:0f:ed:01:f1:23:d7:b4: b6:c8:be:e1:16:38:8a:19:99:48:b9:f9:23:bc:3a:9b:29:25: 61:a3:58:7f:35:f5:54:bc:7b:d3:7a:bc:4b:4b:55:ad:0d:a6: e9:2e:5b:a7:53:4b:b8:30:47:20:e8:72:bc:45:1b:c4:75:b1: 37:60:c9:f2:a9:63:0d:11:74:82:25:f6:ec:fe:91:a0:32:3a: 5f:d1:2d:65:3f:69:8e:7a:b3:e6:0e:5e:60:f5:ff:57:07:ea: a6:b6:e5:51 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUIzOTExMC8GA1UEBRMoNzBEOEQ4MkIyMjFBNzEyMjBFRkQ1ODNEOTJGNzM2MTc1 RTVEMDJGMTAeFw0yNjA3MjMwOTQ0MTRaFw0yNjA3MzAwOTQ0MTRaMBgxFjAUBgNV BAMTDTZhNjFlMjZmLTQ1ZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZWjcIiHOg1EYaoUiqqu/MfqOGgTZl7kp3muQYaFqawWHW7C8TdOdcRrGJce5F cKAWFRL747SptoHiFrR6DGScr0V2kgkyX2X80mMHBLsg9XfynBSdStQkiu9pTPSu KRtsjjNugR/ikFx/kYgqcqDzKmXcppCu6glF9vmddaL6HQ1rAtKvt2mGG0JLEsbi 4YPG1ssCnCcR5DlUlzBLsKeyc+sT6xhFN0AIOrQQKiW8FGlEE4aWxY0uf40AcFTL P2LXyymBsKSVSYwqjS602BmsYRgDLQ+BTKCrpP+dqO8oWMkuLXJ2SgyEP/KD4rI4 P23VwNZy1Hqz1cgtRYaX+4NXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUzBvciYYO 9cQzv9n19zlLTcDMJRAwHwYDVR0jBBgwFoAUcNjYKyIacSIO/Vg9kvc2F15dAvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QjM5LzVBRUYyMjJDRDI5 MzExRjA4Q0E2NUQ3N0M0RjlBRTAyL2NOallLeUlhY1NJT19WZzlrdmMyRjE1ZEF2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05qWUt5SWFjU0lPX1ZnOWt2YzJGMTVkQXZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QjM5LzVBRUYyMjJDRDI5MzExRjA4Q0E2NUQ3N0M0RjlBRTAyL2NOallLeUlhY1NJ T19WZzlrdmMyRjE1ZEF2RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAhZ7KMRaCn0IbmrbSxEcA45soehsztkuYxNNy4qTGN5O2rJTfekiNFgmKa//VN ZKK1I8icbxRQGJ2kGg9RXnZsa40llvCMnVvtQawUAnrWrQo52oQGlG1WFMwkUNbp on4GcZ/fha3Y8KvbH5RH4Vl0UE6VOAyrWQai7zF1uVpEYAe85vfpYkILcKW40UG/ 4+8cqzRiiVq5Kamc8w/tAfEj17S2yL7hFjiKGZlIufkjvDqbKSVho1h/NfVUvHvT erxLS1WtDabpLlunU0u4MEcg6HK8RRvEdbE3YMnyqWMNEXSCJfbs/pGgMjpf0S1l P2mOerPmDl5g9f9XB+qmtuVR -----END CERTIFICATE-----Generated at Thu Jul 23 21:31:31 2026 by rpki-client