$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft File: Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json) Hash identifier: lZrDHcSKTjYhGqsqSfZUFurbd0kBHYW1mXFxKWxnwEY= Subject key identifier: 48:68:ED:55:2C:5F:BE:37:14:21:9F:EA:8F:03:D3:9C:8A:E0:37:1C Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 Certificate issuer: /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft Manifest number: D4 Signing time: Thu 23 Jul 2026 08:29:28 +0000 Manifest this update: Thu 23 Jul 2026 08:29:28 +0000 Manifest next update: Thu 30 Jul 2026 08:29:28 +0000 Files and hashes: 1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: 0ZoocTye37G5YglMEx7vezqB47fFksmuFRcVvih5+wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7 Validity Not Before: Jul 23 08:29:28 2026 GMT Not After : Jul 30 08:29:28 2026 GMT Subject: CN=6a61d0e8-8cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:be:40:a7:bb:33:0c:2a:0b:f4:38:3c:b8:33: d4:92:4f:9c:e4:2c:cd:32:6f:00:2a:d0:a6:41:73: 72:dc:b5:22:70:21:2c:82:2c:70:b4:46:2f:6c:48: 37:fc:00:21:0f:cc:d3:ea:17:5a:46:d7:56:d8:77: ec:b3:f3:a8:99:31:4c:2f:ee:70:91:d8:9c:de:8f: 33:d1:e6:43:4a:6f:2d:28:b6:af:b1:e8:c0:cc:0c: 3a:0a:d2:5b:fd:93:2d:88:f2:23:f9:a3:be:12:48: 85:e3:bd:88:ad:be:82:0a:25:40:f6:83:02:67:93: 4d:ae:44:84:d1:1e:5a:f5:89:3e:a2:3c:9f:d8:33: be:f6:45:5d:4e:27:9e:b9:76:19:2d:24:05:f9:31: 27:1a:46:8d:3d:7d:fb:42:d6:d5:03:7f:a7:02:d2: 7d:f8:e1:1c:ac:30:9e:4b:52:a6:2d:94:18:96:5a: be:8f:09:d7:e3:35:72:46:e7:c4:82:91:54:96:0d: 22:a7:6d:fd:4d:fa:fb:a3:6d:5b:f0:27:50:52:1c: 14:3c:1c:8e:61:a6:4b:f4:90:87:a2:af:1e:10:67: c1:a1:ce:02:c3:29:90:c5:a1:a6:1f:04:e5:6b:fb: a8:3e:e5:19:a9:45:4e:2b:3a:36:d5:5d:d5:64:34: 12:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:68:ED:55:2C:5F:BE:37:14:21:9F:EA:8F:03:D3:9C:8A:E0:37:1C X509v3 Authority Key Identifier: keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3b:6e:9e:f8:1c:97:cc:e2:2f:bb:4a:e8:0f:9c:7c:1f:fe: 74:5d:8a:39:d1:1b:df:61:a7:0f:7b:53:c4:2e:d4:01:0d:bc: 20:a0:db:ba:50:53:08:25:3c:8f:66:50:2e:a7:92:30:3c:eb: 90:8c:c1:c2:6c:6b:b7:c5:9e:51:c4:3d:78:70:52:46:9f:d8: fb:8e:a8:80:1c:ad:05:9c:03:c6:26:cb:18:89:3f:fa:31:26: cd:5e:e7:8a:ea:bb:5d:4c:ac:38:46:65:d2:08:99:7e:81:df: f0:f9:38:b2:1a:0d:54:cb:f1:fd:bb:1f:72:ac:9d:73:6c:a3: bb:62:b3:a0:7f:79:ec:11:bd:46:87:8c:2e:5d:50:5d:05:fd: fb:3e:da:41:2e:1d:06:09:3e:8c:e7:56:2d:3f:ff:c6:95:2b: a1:ed:5c:25:1c:3f:64:dd:bc:2c:72:71:a0:3d:ec:f4:54:2c: 54:2c:4d:92:34:44:0c:86:bc:87:c3:a9:79:bc:f9:18:44:50: ff:3b:e4:fd:a2:92:66:c7:8e:80:c8:ec:ba:0f:2d:ea:ed:05: 4e:2b:21:c7:b2:27:5e:cc:93:c9:47:7a:c2:e6:dc:14:dd:51: 5b:d5:61:09:f7:ac:d0:7f:a8:90:6d:41:3c:ea:e0:67:ff:5e: 2f:ca:3f:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzMDMxMTAvBgNVBAUTKDNGMTc3OTA5ODkxNzJGNDA5MjY3RTBGRkU3NDRFRTQ4 QjAxNzkxRTcwHhcNMjYwNzIzMDgyOTI4WhcNMjYwNzMwMDgyOTI4WjAYMRYwFAYD VQQDEw02YTYxZDBlOC04Y2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwb5Ap7szDCoL9Dg8uDPUkk+c5CzNMm8AKtCmQXNy3LUicCEsgixwtEYvbEg3 /AAhD8zT6hdaRtdW2Hfss/OomTFML+5wkdic3o8z0eZDSm8tKLavsejAzAw6CtJb /ZMtiPIj+aO+EkiF472Irb6CCiVA9oMCZ5NNrkSE0R5a9Yk+ojyf2DO+9kVdTiee uXYZLSQF+TEnGkaNPX37QtbVA3+nAtJ9+OEcrDCeS1KmLZQYllq+jwnX4zVyRufE gpFUlg0ip239Tfr7o21b8CdQUhwUPByOYaZL9JCHoq8eEGfBoc4CwymQxaGmHwTl a/uoPuUZqUVOKzo21V3VZDQS3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEho7VUs X743FCGf6o8D05yK4DccMB8GA1UdIwQYMBaAFD8XeQmJFy9Akmfg/+dE7kiwF5Hn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTMwMy85QjQyNEQzMDQ2 ODUxMUYwQTg4MTg4M0VDNEY5QUUwMi9QeGQ1Q1lrWEwwQ1NaLURfNTBUdVNMQVhr ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B4ZDVDWWtYTDBDU1otRF81MFR1U0xBWGtlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTMwMy85QjQyNEQzMDQ2ODUxMUYwQTg4MTg4M0VDNEY5QUUwMi9QeGQ1Q1lrWEww Q1NaLURfNTBUdVNMQVhrZWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKDtunvgcl8ziL7tK6A+cfB/+dF2KOdEb32GnD3tTxC7UAQ28IKDbulBTCCU8 j2ZQLqeSMDzrkIzBwmxrt8WeUcQ9eHBSRp/Y+46ogBytBZwDxibLGIk/+jEmzV7n iuq7XUysOEZl0giZfoHf8Pk4shoNVMvx/bsfcqydc2yju2KzoH957BG9RoeMLl1Q XQX9+z7aQS4dBgk+jOdWLT//xpUroe1cJRw/ZN28LHJxoD3s9FQsVCxNkjREDIa8 h8Opebz5GERQ/zvk/aKSZseOgMjsug8t6u0FTishx7InXsyTyUd6wubcFN1RW9Vh Cfes0H+okG1BPOrgZ/9eL8o/0Q== -----END CERTIFICATE-----Generated at Fri Jul 24 01:22:43 2026 by rpki-client