$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json) Hash identifier: B7NieiF1YwtDJNAbWQrePgh26MSSivpx9SuPZE4N2IY= Subject key identifier: 4A:0C:42:74:D4:51:39:E4:B3:0A:F1:38:F4:E0:BD:42:3A:A3:E3:AF Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 02AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft Manifest number: 0296 Signing time: Thu 23 Jul 2026 02:50:39 +0000 Manifest this update: Thu 23 Jul 2026 02:50:39 +0000 Manifest next update: Thu 30 Jul 2026 02:50:39 +0000 Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: ZFLRKGOJQ+184mJP7AdHC7wHieE1AzKxm3rsi1dfyvo=) 2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ZK4LGz9IH3YYiFptoI1UZ2KXhSWEWUkXq5JqqcwZNko=) 3: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: qIJw0+FjxuTWluHNODsBUj7/4aX0PbanF96QaF1KBaA=) 4: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: fbmqeqVKiqA0r2a2Diispb0Kfg/Ww32W2ewxBa+GSGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 684 (0x2ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: Jul 23 02:50:39 2026 GMT Not After : Jul 30 02:50:39 2026 GMT Subject: CN=6a61817f-115b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b9:d2:dd:75:8d:e5:54:96:f3:1a:69:99:61: c7:75:31:b7:1b:03:5d:a7:85:90:8f:eb:77:68:30: 60:a0:94:7e:0a:32:70:8b:2a:51:bb:00:d8:26:97: ed:b8:69:d9:1f:5f:ca:bd:a9:70:59:40:a1:70:31: e6:0e:44:0e:5e:27:e3:e1:c8:ca:f3:00:19:7b:bb: f9:02:ed:c3:c8:e9:0f:93:91:44:bf:1e:fd:e7:35: 4c:34:07:b1:c6:57:61:ee:34:a4:8f:9a:a8:13:4f: 6b:20:b7:a1:b8:18:28:3e:7e:60:f2:72:ab:37:8e: b1:ea:7f:46:b1:b3:b5:56:25:14:b1:18:8b:88:27: 11:bb:30:78:03:a2:3f:eb:bb:09:3d:05:49:c8:a9: df:68:77:d7:55:f7:ee:06:63:30:f4:5f:76:19:da: e3:67:75:f5:5d:cf:c1:d7:a2:fe:7f:20:01:19:b4: 5c:26:80:0f:c8:4c:17:ac:0f:52:c3:4a:e6:89:b7: 53:cf:57:76:f7:e4:5b:da:db:93:54:af:58:34:bf: 04:87:79:69:2b:89:20:ec:bd:5d:36:a4:d1:ee:ce: b1:52:e8:f4:1c:f2:94:8a:70:90:3b:2e:f9:b8:94: 59:71:55:c7:ce:de:db:d1:90:76:fe:22:a2:f6:d1: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:0C:42:74:D4:51:39:E4:B3:0A:F1:38:F4:E0:BD:42:3A:A3:E3:AF X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:dd:3c:c5:6d:fe:32:fd:64:f8:af:23:2e:e9:8a:59:a8:ae: 6b:04:29:49:6e:65:69:ac:ef:ea:c8:e8:c5:51:3c:a6:e7:89: 36:7f:cd:a5:cf:a1:d3:67:c0:41:13:b4:72:0c:07:2a:96:b2: 16:6f:88:ec:67:31:e8:99:46:0b:42:a2:30:6e:4b:f9:54:a5: 98:92:dd:74:47:cc:2f:92:c2:f0:0e:d5:6e:70:7d:aa:b6:32: cd:bb:c1:69:1c:db:c6:bf:d2:58:c1:57:71:e0:05:ea:a7:d9: f6:a6:73:ef:a9:59:2a:3d:78:f7:e0:e0:59:f1:f7:15:1b:cd: a4:f4:fe:b0:72:31:4e:3d:a0:0d:7c:39:fc:9e:f6:d2:32:80: d2:52:1c:1f:e7:96:59:18:e3:ca:2f:6b:5d:10:50:e2:16:4f: f1:0b:d4:9a:5b:2f:9f:9f:17:f6:62:89:03:00:86:bb:e9:1d: 48:3d:95:44:48:83:89:f7:e6:8e:bb:4e:51:a3:36:36:d6:92: a0:a3:b4:5f:a1:fb:36:c4:e7:25:56:cf:24:bc:a1:fb:75:a9: ae:9d:b3:f6:45:c4:b5:5e:68:88:09:c3:aa:94:00:9c:41:3b: 31:87:83:5a:ea:ff:39:91:df:c1:0e:ab:83:57:a9:0a:0d:b0: 79:ad:3a:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjYwNzIzMDI1MDM5WhcNMjYwNzMwMDI1MDM5WjAYMRYwFAYD VQQDEw02YTYxODE3Zi0xMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bnS3XWN5VSW8xppmWHHdTG3GwNdp4WQj+t3aDBgoJR+CjJwiypRuwDYJpft uGnZH1/KvalwWUChcDHmDkQOXifj4cjK8wAZe7v5Au3DyOkPk5FEvx795zVMNAex xldh7jSkj5qoE09rILehuBgoPn5g8nKrN46x6n9GsbO1ViUUsRiLiCcRuzB4A6I/ 67sJPQVJyKnfaHfXVffuBmMw9F92GdrjZ3X1Xc/B16L+fyABGbRcJoAPyEwXrA9S w0rmibdTz1d29+Rb2tuTVK9YNL8Eh3lpK4kg7L1dNqTR7s6xUuj0HPKUinCQOy75 uJRZcVXHzt7b0ZB2/iKi9tFpjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoMQnTU UTnkswrxOPTgvUI6o+OvMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD cDZIazJrc3NCdnJTcXU1TGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoN08xW3+Mv1k+K8jLumKWaiuawQpSW5laazv6sjoxVE8pueJNn/Npc+h02fA QRO0cgwHKpayFm+I7Gcx6JlGC0KiMG5L+VSlmJLddEfML5LC8A7VbnB9qrYyzbvB aRzbxr/SWMFXceAF6qfZ9qZz76lZKj149+DgWfH3FRvNpPT+sHIxTj2gDXw5/J72 0jKA0lIcH+eWWRjjyi9rXRBQ4hZP8QvUmlsvn58X9mKJAwCGu+kdSD2VREiDiffm jrtOUaM2NtaSoKO0X6H7NsTnJVbPJLyh+3Wprp2z9kXEtV5oiAnDqpQAnEE7MYeD Wur/OZHfwQ6rg1epCg2wea06xQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:01:08 2026 by rpki-client