$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json) Hash identifier: Zu6UFYIH2EH1XRdXFKLgawVZLe8FvSLEIpbOAE2hi3c= Subject key identifier: D1:EC:59:90:B6:16:E7:29:A0:A0:5F:42:16:87:08:A3:AD:12:E0:22 Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 35AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft Manifest number: 3586 Signing time: Fri 24 Jul 2026 15:05:56 +0000 Manifest this update: Fri 24 Jul 2026 15:05:55 +0000 Manifest next update: Fri 31 Jul 2026 15:05:55 +0000 Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: 7d9FP3J1NExv6+rCboDWeYPVPBYicBdGeuMzaSnevv0=) 2: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: AqP5pcAaJH32TYuGX0fOzFQdp/XSO4T3mcIC6gFmJ5s=) 3: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: 5+kHlPMY1vlmnCm2khEV4Cm9ZkyzeUnR4wfzGT1Bqgo=) 4: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: 24VUnNW+IwALD6fth9CM1bbdRgcY8qK4/vGIkj8WWe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Jul 2026 15:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13743 (0x35af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: Jul 24 15:05:55 2026 GMT Not After : Jul 31 15:05:55 2026 GMT Subject: CN=6a637f54-66cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:fb:d6:98:24:29:a8:84:42:16:8b:8c:3f: f3:d4:f0:e1:c9:10:3b:c8:10:58:3d:7e:f3:31:24: 8a:1c:ef:22:2c:de:2f:e4:94:f5:d0:4a:06:a6:25: 5f:e5:60:46:13:2b:5c:3a:8a:d5:0c:e0:20:8a:63: f2:1c:cc:18:07:7f:ec:08:7f:57:eb:fa:e5:f9:0a: 0b:74:44:7a:ac:fc:d4:c2:be:38:fd:e3:72:8a:f3: a5:3e:5f:0d:d5:82:69:4d:de:5e:0f:2f:e4:76:7d: 91:48:cb:65:61:0c:bd:3e:33:e4:f0:95:3b:be:04: 0f:67:bd:9d:66:82:74:f5:d1:da:ab:b0:a9:02:89: ad:67:9b:69:05:f5:1f:11:41:b5:13:d6:71:04:b5: 97:d5:ad:2e:8e:2f:5e:39:6b:1b:07:d1:7f:f4:b6: f6:a7:bb:43:00:14:c0:bb:66:2e:21:92:81:f4:16: 06:de:ed:f6:37:58:63:7b:30:e3:41:da:c4:66:9f: f3:d2:54:96:a2:a3:5c:67:57:1e:7d:c0:84:ab:1c: d8:ea:15:15:8b:a4:bc:f8:65:e1:b0:cc:89:75:5d: 85:0d:e3:70:c7:7a:84:ed:27:1e:d1:e5:ab:56:fc: 3e:9b:0d:9c:5b:f8:f5:0c:68:7c:c7:70:4c:3c:93: ac:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EC:59:90:B6:16:E7:29:A0:A0:5F:42:16:87:08:A3:AD:12:E0:22 X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:11:9a:46:ec:44:d5:ad:09:7c:b3:1d:41:50:91:0b:b2:4b: fe:11:6b:64:e5:4a:f6:aa:ef:ef:b2:f4:03:72:ec:5f:96:6f: 97:a5:45:f5:c6:f1:74:aa:9f:d8:b5:32:f5:eb:98:a3:e2:3b: 11:3f:35:77:4c:13:1e:b2:b7:f8:4d:78:4d:2e:34:74:ec:79: e0:d7:08:72:a5:c9:22:fb:1b:c3:a2:2c:3d:71:c9:87:ba:51: 95:80:e6:0f:2e:06:6c:f6:b6:15:50:da:c8:0b:26:e4:01:ca: ab:e6:99:1a:f3:7a:2f:90:3b:90:f8:06:f2:9d:d9:22:bb:bc: aa:ea:9c:81:37:f5:b7:39:ab:f3:27:1c:46:84:92:4e:4f:d9: 59:36:ab:3b:5c:2a:02:ce:3c:a2:b6:12:b5:51:ff:71:f4:b6: a7:74:2a:2d:90:9d:a8:e0:0a:82:37:c4:3a:bc:b1:7d:6b:f2: bd:a5:8f:35:07:28:be:4a:37:57:2a:70:d0:02:8d:b1:a7:ec: 67:d1:7b:eb:e2:46:f8:a5:1c:24:f9:28:e1:eb:29:77:c3:0a: 8a:8f:3f:16:77:23:1d:7a:5e:77:99:b5:d3:2b:f5:40:28:2b: 36:e7:39:00:22:7f:c1:8f:bf:75:15:34:52:59:fb:27:54:01: 0c:e6:a1:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjYwNzI0MTUwNTU1WhcNMjYwNzMxMTUwNTU1WjAYMRYwFAYD VQQDEw02YTYzN2Y1NC02NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtP/71pgkKaiEQhaLjD/z1PDhyRA7yBBYPX7zMSSKHO8iLN4v5JT10EoGpiVf 5WBGEytcOorVDOAgimPyHMwYB3/sCH9X6/rl+QoLdER6rPzUwr44/eNyivOlPl8N 1YJpTd5eDy/kdn2RSMtlYQy9PjPk8JU7vgQPZ72dZoJ09dHaq7CpAomtZ5tpBfUf EUG1E9ZxBLWX1a0uji9eOWsbB9F/9Lb2p7tDABTAu2YuIZKB9BYG3u32N1hjezDj QdrEZp/z0lSWoqNcZ1cefcCEqxzY6hUVi6S8+GXhsMyJdV2FDeNwx3qE7Sce0eWr Vvw+mw2cW/j1DGh8x3BMPJOsGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNHsWZC2 FucpoKBfQhaHCKOtEuAiMB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC81QUUxOTdGNDFEOUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZC OUUwVGV5b09scFYtWXF1S0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArBGaRuxE1a0JfLMdQVCRC7JL/hFrZOVK9qrv77L0A3LsX5Zvl6VF9cbxdKqf 2LUy9euYo+I7ET81d0wTHrK3+E14TS40dOx54NcIcqXJIvsbw6IsPXHJh7pRlYDm Dy4GbPa2FVDayAsm5AHKq+aZGvN6L5A7kPgG8p3ZIru8quqcgTf1tzmr8yccRoSS Tk/ZWTarO1wqAs48orYStVH/cfS2p3QqLZCdqOAKgjfEOryxfWvyvaWPNQcovko3 Vypw0AKNsafsZ9F76+JG+KUcJPko4espd8MKio8/FncjHXped5m10yv1QCgrNuc5 ACJ/wY+/dRU0Uln7J1QBDOahLA== -----END CERTIFICATE-----Generated at Fri Jul 24 20:26:42 2026 by rpki-client