$ rpki-client -vvf rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft File: BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft (raw, json) Hash identifier: RPk9psSqZcJVy0NvxgUWuTnjcvkG0RM+SRqOIfiX9Wo= Subject key identifier: 4F:A7:F0:B4:55:AE:7C:E8:38:AD:17:3A:62:5D:4D:86:63:65:48:0D Authority key identifier: 06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1 Certificate issuer: /CN=A91F63DC/serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1 Certificate serial: 020D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft Manifest number: 020B Signing time: Thu 23 Jul 2026 04:17:36 +0000 Manifest this update: Thu 23 Jul 2026 04:17:36 +0000 Manifest next update: Thu 30 Jul 2026 04:17:36 +0000 Files and hashes: 1: BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl (hash: 592gmtOi3nvzQnf5T5yq3UIdBvi/Ocu/taTkx3TvZQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 525 (0x20d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F63DC, serialNumber=06666AECD78C0A5ED13790A5E9AA40C3490FBCF1 Validity Not Before: Jul 23 04:17:36 2026 GMT Not After : Jul 30 04:17:36 2026 GMT Subject: CN=6a6195e0-c2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ca:35:02:c5:9c:39:d0:5e:3f:4d:1b:c5:3e: 04:17:fe:c6:ce:71:2f:bf:ce:b7:5b:a6:01:b9:71: 35:c6:c9:5a:85:54:06:2b:f1:d2:ef:81:b1:4a:57: 49:8a:f0:a2:7a:61:bb:92:87:47:c8:63:18:c3:ac: 28:fe:2c:8d:b5:57:45:62:e5:b6:9e:b2:6b:5c:9c: 69:d8:ee:48:c0:d5:82:08:b4:af:5b:3c:9e:ad:2a: cf:aa:20:26:58:85:ed:7c:aa:df:62:e9:6c:8f:c6: 29:5f:5b:9a:84:e0:29:84:60:4c:b4:bc:62:2c:aa: a8:0f:d2:21:37:56:90:79:d3:86:91:62:20:03:32: 86:69:b8:a2:c1:ff:dd:54:39:59:d4:df:5e:67:5f: 36:db:25:12:80:67:59:5e:aa:99:73:dd:c6:29:c6: c9:32:d3:c6:26:42:4a:03:25:5f:3e:d7:f6:2d:9b: 64:bf:b8:87:10:1e:d3:1b:f1:95:fe:cc:51:0d:46: 2e:fa:c5:de:c7:e3:c6:43:80:3e:78:a7:6a:4c:17: 8e:66:b2:6f:19:ca:f1:a8:bc:55:f1:66:0e:9d:53: 30:54:03:7c:24:7f:2e:a8:3f:7c:6e:a2:07:90:bb: 92:13:ac:d3:b6:a1:d9:98:0f:1a:a5:18:8b:63:01: 1f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A7:F0:B4:55:AE:7C:E8:38:AD:17:3A:62:5D:4D:86:63:65:48:0D X509v3 Authority Key Identifier: keyid:06:66:6A:EC:D7:8C:0A:5E:D1:37:90:A5:E9:AA:40:C3:49:0F:BC:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmZq7NeMCl7RN5Cl6apAw0kPvPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F63DC/043152E2665311EE9C68EE2BC4F9AE02/BmZq7NeMCl7RN5Cl6apAw0kPvPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:57:a1:0e:5f:1c:fe:0d:11:eb:d4:04:0f:43:a6:94:e5:ee: 11:4e:3d:3f:f7:29:c4:d6:66:44:9a:8c:48:88:87:df:12:81: bf:01:2a:31:cd:3f:76:7f:22:3f:ed:a2:b9:42:ca:1b:aa:4f: 2d:e7:4a:2b:ff:b4:6d:93:69:4f:c7:81:29:48:3e:08:ee:6b: 02:35:e3:d1:d4:e9:e1:fd:5d:02:9f:c4:ae:f6:52:b2:6a:58: 37:67:ae:fd:a5:fb:41:01:de:d6:7f:a7:27:53:6e:a3:66:12: 61:37:fd:6c:cd:c8:10:9e:be:13:8f:18:6e:c6:e5:22:dd:53: bf:e4:e3:93:09:50:c7:c7:80:59:ce:70:50:f1:33:a9:ae:ec: 63:17:91:5f:46:85:c7:90:5a:3f:8f:3e:c5:26:da:15:29:45: 74:89:27:ba:69:ca:a0:d5:09:5c:d4:e6:6c:8e:6a:c1:61:db: dc:f0:a4:b5:b2:f0:2d:58:ba:74:ac:1b:c0:3f:9d:a7:a6:54: cd:58:aa:f4:6d:32:11:2d:3c:c6:fb:57:1d:25:b3:1b:90:39: 1b:d9:3f:c8:94:96:5d:dd:fc:2d:37:37:15:e8:4b:b9:27:9e: f2:f0:4a:06:1a:78:4b:9d:da:67:28:b0:0d:4d:53:8f:69:fe: 00:01:b6:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjYzREMxMTAvBgNVBAUTKDA2NjY2QUVDRDc4QzBBNUVEMTM3OTBBNUU5QUE0MEMz NDkwRkJDRjEwHhcNMjYwNzIzMDQxNzM2WhcNMjYwNzMwMDQxNzM2WjAYMRYwFAYD VQQDEw02YTYxOTVlMC1jMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMo1AsWcOdBeP00bxT4EF/7GznEvv863W6YBuXE1xslahVQGK/HS74GxSldJ ivCiemG7kodHyGMYw6wo/iyNtVdFYuW2nrJrXJxp2O5IwNWCCLSvWzyerSrPqiAm WIXtfKrfYulsj8YpX1uahOAphGBMtLxiLKqoD9IhN1aQedOGkWIgAzKGabiiwf/d VDlZ1N9eZ1822yUSgGdZXqqZc93GKcbJMtPGJkJKAyVfPtf2LZtkv7iHEB7TG/GV /sxRDUYu+sXex+PGQ4A+eKdqTBeOZrJvGcrxqLxV8WYOnVMwVAN8JH8uqD98bqIH kLuSE6zTtqHZmA8apRiLYwEfFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+n8LRV rnzoOK0XOmJdTYZjZUgNMB8GA1UdIwQYMBaAFAZmauzXjApe0TeQpemqQMNJD7zx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjNEQy8wNDMxNTJFMjY2 NTMxMUVFOUM2OEVFMkJDNEY5QUUwMi9CbVpxN05lTUNsN1JONUNsNmFwQXcwa1B2 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JtWnE3TmVNQ2w3Uk41Q2w2YXBBdzBrUHZQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjNEQy8wNDMxNTJFMjY2NTMxMUVFOUM2OEVFMkJDNEY5QUUwMi9CbVpxN05lTUNs N1JONUNsNmFwQXcwa1B2UEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALFehDl8c/g0R69QED0OmlOXuEU49P/cpxNZmRJqMSIiH3xKBvwEqMc0/dn8i P+2iuULKG6pPLedKK/+0bZNpT8eBKUg+CO5rAjXj0dTp4f1dAp/ErvZSsmpYN2eu /aX7QQHe1n+nJ1Nuo2YSYTf9bM3IEJ6+E48YbsblIt1Tv+TjkwlQx8eAWc5wUPEz qa7sYxeRX0aFx5BaP48+xSbaFSlFdIknumnKoNUJXNTmbI5qwWHb3PCktbLwLVi6 dKwbwD+dp6ZUzViq9G0yES08xvtXHSWzG5A5G9k/yJSWXd38LTc3FehLuSee8vBK Bhp4S53aZyiwDU1Tj2n+AAG2dQ== -----END CERTIFICATE-----Generated at Fri Jul 24 01:15:36 2026 by rpki-client