$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft File: ciYIDnxlJSNDlihmsxOfAjhyxAI.mft (raw, json) Hash identifier: Y4ufMITCRp42qW9b61+wwpVggeM4mv4fSEW7yqFczqc= Subject key identifier: 88:C8:59:42:4D:76:AD:0F:09:8F:7D:17:9C:63:84:50:69:EC:DB:A6 Authority key identifier: 72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 Certificate issuer: /CN=A91ED596/serialNumber=7226080E7C65252343962866B3139F023872C402 Certificate serial: 0173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft Manifest number: 016B Signing time: Thu 23 Jul 2026 06:19:28 +0000 Manifest this update: Thu 23 Jul 2026 06:19:28 +0000 Manifest next update: Thu 30 Jul 2026 06:19:28 +0000 Files and hashes: 1: ciYIDnxlJSNDlihmsxOfAjhyxAI.crl (hash: hdK0PzL3Vo/Dq1DkRlsR+U7PfpEA6q72D0NMz3rH5qU=) 2: C0C401905AE311EF90924C30C4F9AE02.roa (hash: rKKs75f3Fq0WXiFUQVZhwV3/C+6KDS0+3S6WBSvsbeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 371 (0x173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=7226080E7C65252343962866B3139F023872C402 Validity Not Before: Jul 23 06:19:28 2026 GMT Not After : Jul 30 06:19:28 2026 GMT Subject: CN=6a61b270-f2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:b9:62:9a:b6:4a:71:ea:be:30:ea:85:07: 1f:29:f2:d1:3a:49:f9:1f:b9:ae:8b:b9:3a:e0:9d: 29:8f:e3:e4:b7:56:7e:b3:4c:41:f6:62:74:8d:0c: f6:5d:0c:b1:c4:fd:cb:9d:bc:13:2b:6b:44:4e:f6: a3:5b:02:f3:0a:f0:74:61:e8:c7:22:f3:52:eb:5b: 36:81:75:09:5b:7d:ad:b5:25:5c:38:55:65:42:14: 78:53:43:b7:f6:08:15:e6:da:f2:ec:c1:f9:d8:9c: 0f:db:c4:a2:74:78:14:5c:e6:7e:f7:9b:63:5c:13: eb:58:30:7c:d0:81:e5:6f:a0:26:5b:f1:7f:83:f2: e1:0c:40:fa:ec:0b:8f:27:56:30:87:da:79:cc:55: 67:7d:0a:c9:db:71:32:80:e5:74:1f:a4:1d:ac:90: 97:d7:6e:0d:a8:e0:8f:74:b0:54:d8:5a:3c:45:65: 4e:91:ae:67:73:17:fe:fc:16:d7:3f:fa:9f:08:6e: 5f:59:cf:cc:1c:f8:7e:70:3c:58:61:a8:dc:97:d0: 3e:75:03:67:d7:d5:cf:f4:59:1a:63:2e:d7:23:60: 48:72:0e:f4:02:b6:60:3d:ee:05:21:7b:8d:15:65: 46:ab:94:6d:b8:0b:10:1d:61:33:3b:64:0f:c0:7c: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C8:59:42:4D:76:AD:0F:09:8F:7D:17:9C:63:84:50:69:EC:DB:A6 X509v3 Authority Key Identifier: keyid:72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:dc:eb:d1:43:d2:57:5d:a4:fc:eb:d4:7a:8a:87:ad:b2:23: 24:7e:df:fc:d8:b8:2f:90:36:6d:db:86:96:59:81:50:a5:c2: ac:99:59:15:7a:0b:24:00:4e:72:33:80:9a:43:2b:af:0e:71: 57:49:34:97:58:2d:a8:65:d8:4e:b8:23:f0:49:ec:85:0e:a0: 48:77:cd:7c:4b:37:f8:c9:31:9e:b3:32:fb:72:58:91:35:ef: 06:d6:c5:85:bf:3e:12:86:76:e3:e2:f9:f4:2c:20:44:6c:07: ec:b0:a7:64:7e:98:f7:37:26:4e:8d:8e:6a:f4:ce:67:53:ff: 26:9a:5e:d4:6d:09:81:2e:93:47:13:a2:4b:87:fe:8c:8c:c9: 7c:53:14:cc:ab:fb:f5:3d:42:19:99:e1:0a:af:b9:81:40:ae: e7:20:19:89:97:42:c1:87:64:b2:ae:2e:71:43:4f:ee:40:24: cf:53:3e:ad:0a:19:e3:03:71:a7:9f:0c:49:34:4d:04:c6:8f: be:80:6f:8a:64:b3:5c:a3:2d:51:a9:83:db:b4:79:43:45:df: bb:8d:dc:cb:f4:a8:58:af:0d:78:0b:57:28:4e:cf:f8:52:a3: 73:5d:5b:f2:1a:b5:61:c5:a2:68:b0:ad:52:d1:f2:c2:17:f5: 37:aa:52:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKDcyMjYwODBFN0M2NTI1MjM0Mzk2Mjg2NkIzMTM5RjAy Mzg3MkM0MDIwHhcNMjYwNzIzMDYxOTI4WhcNMjYwNzMwMDYxOTI4WjAYMRYwFAYD VQQDEw02YTYxYjI3MC1mMmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoM65Ypq2SnHqvjDqhQcfKfLROkn5H7mui7k64J0pj+Pkt1Z+s0xB9mJ0jQz2 XQyxxP3LnbwTK2tETvajWwLzCvB0YejHIvNS61s2gXUJW32ttSVcOFVlQhR4U0O3 9ggV5try7MH52JwP28SidHgUXOZ+95tjXBPrWDB80IHlb6AmW/F/g/LhDED67AuP J1Ywh9p5zFVnfQrJ23EygOV0H6QdrJCX124NqOCPdLBU2Fo8RWVOka5ncxf+/BbX P/qfCG5fWc/MHPh+cDxYYajcl9A+dQNn19XP9FkaYy7XI2BIcg70ArZgPe4FIXuN FWVGq5RtuAsQHWEzO2QPwHyu1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIjIWUJN dq0PCY99F5xjhFBp7NumMB8GA1UdIwQYMBaAFHImCA58ZSUjQ5YoZrMTnwI4csQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wREUyM0UxNjVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpTTkRsaWhtc3hPZkFqaHl4 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpWUlEbnhsSlNORGxpaG1zeE9mQWpoeXhBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU5Ni8wREUyM0UxNjVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpT TkRsaWhtc3hPZkFqaHl4QUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATNzr0UPSV12k/OvUeoqHrbIjJH7f/Ni4L5A2bduGllmBUKXCrJlZFXoLJABO cjOAmkMrrw5xV0k0l1gtqGXYTrgj8EnshQ6gSHfNfEs3+MkxnrMy+3JYkTXvBtbF hb8+EoZ24+L59CwgRGwH7LCnZH6Y9zcmTo2OavTOZ1P/Jppe1G0JgS6TRxOiS4f+ jIzJfFMUzKv79T1CGZnhCq+5gUCu5yAZiZdCwYdksq4ucUNP7kAkz1M+rQoZ4wNx p58MSTRNBMaPvoBvimSzXKMtUamD27R5Q0Xfu43cy/SoWK8NeAtXKE7P+FKjc11b 8hq1YcWiaLCtUtHywhf1N6pSzw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:32:37 2026 by rpki-client