$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft File: CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft (raw, json) Hash identifier: zR5I5L7nvn0I4KUA5DjpZXkQllm4u1p3YZUuUNQ5iM4= Subject key identifier: D5:A1:AE:DF:98:B4:93:88:38:1A:A4:96:D6:E1:51:B8:08:0A:FA:53 Authority key identifier: 09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F Certificate issuer: /CN=A91F89DB/serialNumber=09B1C8604234172274BA8494EB4266748F55029F Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft Manifest number: 17 Signing time: Thu 23 Jul 2026 11:03:35 +0000 Manifest this update: Thu 23 Jul 2026 11:03:35 +0000 Manifest next update: Thu 30 Jul 2026 11:03:35 +0000 Files and hashes: 1: CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl (hash: /nLUySCYTMHYgmxAolRXm5Pnn6eSPpqA+iPETK9zPkk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:03:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89DB, serialNumber=09B1C8604234172274BA8494EB4266748F55029F Validity Not Before: Jul 23 11:03:35 2026 GMT Not After : Jul 30 11:03:35 2026 GMT Subject: CN=6a61f507-1c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:c7:0d:01:5e:36:81:ce:1d:09:56:cd:c5: 7d:5c:61:56:52:54:56:84:a3:36:d3:5a:66:a1:53: 2f:11:d4:a4:7f:33:24:8c:e6:a5:fb:5d:da:0e:fe: db:a3:3a:f6:f3:cb:bb:0a:97:7d:64:58:0e:c8:f4: 0f:0b:50:69:7a:57:f5:96:16:f3:c9:fd:f7:68:17: 8a:6b:06:a6:97:9a:c7:7c:2d:c2:b7:79:d7:41:d5: 24:da:95:72:be:a4:5a:42:44:7c:21:05:bf:af:93: a1:b3:58:54:52:08:63:75:7d:34:7c:de:78:87:b4: d6:47:1c:71:7e:c9:23:fc:22:99:58:47:59:27:df: 23:0c:13:91:58:e0:7b:68:d2:5c:15:70:8c:f8:17: ba:08:bf:33:54:f5:4b:72:af:ae:c9:db:7d:9c:6a: 15:38:1f:20:68:9f:1c:29:dd:e6:80:26:ce:5d:44: c8:7b:e5:41:b7:cc:49:88:a5:e9:2f:7c:fc:90:e3: 0a:09:cc:79:7f:60:79:6f:bd:6f:f6:a3:e0:72:f2: 7d:7c:a7:f0:a4:a7:f4:95:74:3f:f3:14:e4:42:f0: ee:52:52:29:7f:4a:90:86:48:a3:7a:1b:98:d3:69: 7b:c2:f4:68:c4:09:52:99:fd:09:a5:3a:25:14:b8: 34:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:A1:AE:DF:98:B4:93:88:38:1A:A4:96:D6:E1:51:B8:08:0A:FA:53 X509v3 Authority Key Identifier: keyid:09:B1:C8:60:42:34:17:22:74:BA:84:94:EB:42:66:74:8F:55:02:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CbHIYEI0FyJ0uoSU60JmdI9VAp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89DB/C3EA0662639711F198FA81586E47A888/CbHIYEI0FyJ0uoSU60JmdI9VAp8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:c9:4a:37:54:05:fb:9e:dc:71:57:67:e2:a3:00:29:31:d6: 56:4a:94:78:fe:85:5e:47:b8:4a:ae:6f:72:da:6d:ea:bd:ac: 8f:b0:f8:61:2a:25:72:b1:a9:97:f0:db:54:67:ca:5f:1c:d7: 9c:23:cd:e3:06:7b:33:c1:61:8f:37:e6:eb:0c:81:02:e9:25: fa:18:bb:97:55:2a:0f:f8:a8:be:52:60:3b:01:ad:07:4f:dc: e1:0a:32:df:c4:58:45:d9:87:a0:93:16:7b:3b:e5:d8:1e:f5: f4:12:57:29:41:8d:90:f9:4e:3a:99:bf:d4:73:6d:f8:fc:a2: fe:66:73:3d:e5:41:76:33:c5:46:26:8f:db:43:5f:85:4e:31: a7:d8:04:f2:f2:f7:00:16:29:82:de:7c:41:ec:46:03:04:d3: 1e:bc:9a:8b:c5:59:4a:5a:7e:33:50:89:d9:d1:f8:71:80:72: 4a:0e:46:b3:34:05:c0:2d:db:02:63:be:09:dc:c1:b1:f6:e8: a4:70:a0:dc:6a:10:94:43:f6:95:50:b4:25:76:85:b2:72:05: f1:a4:60:c7:bd:8c:fd:0a:14:af:ca:5c:8d:e7:69:02:0c:94: f7:d5:91:1d:1a:fc:57:39:90:13:ce:92:01:4e:b9:c9:8b:a7: 2d:af:6c:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG ODlEQjExMC8GA1UEBRMoMDlCMUM4NjA0MjM0MTcyMjc0QkE4NDk0RUI0MjY2NzQ4 RjU1MDI5RjAeFw0yNjA3MjMxMTAzMzVaFw0yNjA3MzAxMTAzMzVaMBgxFjAUBgNV BAMTDTZhNjFmNTA3LTFjOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdJ8cNAV42gc4dCVbNxX1cYVZSVFaEozbTWmahUy8R1KR/MySM5qX7XdoO/tuj Ovbzy7sKl31kWA7I9A8LUGl6V/WWFvPJ/fdoF4prBqaXmsd8LcK3eddB1STalXK+ pFpCRHwhBb+vk6GzWFRSCGN1fTR83niHtNZHHHF+ySP8IplYR1kn3yMME5FY4Hto 0lwVcIz4F7oIvzNU9Utyr67J232cahU4HyBonxwp3eaAJs5dRMh75UG3zEmIpekv fPyQ4woJzHl/YHlvvW/2o+By8n18p/Ckp/SVdD/zFORC8O5SUil/SpCGSKN6G5jT aXvC9GjECVKZ/QmlOiUUuDRlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1aGu35i0 k4g4GqSW1uFRuAgK+lMwHwYDVR0jBBgwFoAUCbHIYEI0FyJ0uoSU60JmdI9VAp8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4OURCL0MzRUEwNjYyNjM5 NzExRjE5OEZBODE1ODZFNDdBODg4L0NiSElZRUkwRnlKMHVvU1U2MEptZEk5VkFw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2JISVlFSTBGeUowdW9TVTYwSm1kSTlWQXA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY4 OURCL0MzRUEwNjYyNjM5NzExRjE5OEZBODE1ODZFNDdBODg4L0NiSElZRUkwRnlK MHVvU1U2MEptZEk5VkFwOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAXyUo3VAX7ntxxV2fiowApMdZWSpR4/oVeR7hKrm9y2m3qvayPsPhhKiVysamX 8NtUZ8pfHNecI83jBnszwWGPN+brDIEC6SX6GLuXVSoP+Ki+UmA7Aa0HT9zhCjLf xFhF2YegkxZ7O+XYHvX0ElcpQY2Q+U46mb/Uc234/KL+ZnM95UF2M8VGJo/bQ1+F TjGn2ATy8vcAFimC3nxB7EYDBNMevJqLxVlKWn4zUInZ0fhxgHJKDkazNAXALdsC Y74J3MGx9uikcKDcahCUQ/aVULQldoWycgXxpGDHvYz9ChSvylyN52kCDJT31ZEd GvxXOZATzpIBTrnJi6ctr2xD -----END CERTIFICATE-----Generated at Thu Jul 23 22:59:08 2026 by rpki-client