$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft File: l85Wj2RoJWRz-Es4s84D6jVJ64k.mft (raw, json) Hash identifier: W2oovRU9b0udwPw52fmp9M4AMu1bwftvnRYHH03ZXzk= Subject key identifier: C5:06:FB:7A:48:93:EB:89:75:AA:8C:B7:2D:64:F5:EF:CC:F0:B7:27 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft Manifest number: 024A Signing time: Thu 23 Jul 2026 03:33:36 +0000 Manifest this update: Thu 23 Jul 2026 03:33:36 +0000 Manifest next update: Thu 30 Jul 2026 03:33:36 +0000 Files and hashes: 1: l85Wj2RoJWRz-Es4s84D6jVJ64k.crl (hash: z0rdn6tS5ICoxFbaxgQi1CxK3ion5pq9W1dop2pSkco=) 2: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (hash: BQffJWUhC3MFwSjvVuhP9nq/ZEQ/mBQ35OQP2zYEaDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Jul 23 03:33:36 2026 GMT Not After : Jul 30 03:33:36 2026 GMT Subject: CN=6a618b90-9069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:2f:27:22:17:67:b1:80:1b:c2:cb:09:e2: d9:e1:91:80:06:16:33:78:21:14:48:43:06:06:4f: fd:2d:02:60:a0:eb:ec:71:12:26:4a:63:88:dd:36: 48:e2:0d:17:a8:97:4e:62:1a:86:2d:ad:1b:2d:68: ba:1d:bf:fd:5a:fc:de:a6:99:fa:3a:42:b9:77:8b: 98:40:d5:15:e0:f8:e8:5d:73:e3:eb:c2:d8:49:d0: 6e:b4:b9:eb:bc:61:0b:2a:05:5e:91:22:15:cf:75: 81:30:f9:91:bb:99:a6:e3:1b:07:3a:5d:c7:70:76: 2f:de:61:4d:0b:91:b7:59:12:81:f0:8b:eb:a8:fe: 0a:0d:94:a0:f8:3f:a9:f6:9a:77:d1:16:7a:0e:83: 27:d5:80:da:b2:4b:ce:04:91:28:9b:bc:17:fc:f1: d9:12:7b:bc:b1:c3:ac:64:c9:de:95:a2:b1:b1:b1: 26:4e:4f:f1:96:54:28:eb:c3:89:d4:7f:04:8c:c6: c1:05:e1:79:02:a9:3c:67:33:5c:fc:a8:f3:01:08: f8:1a:ba:eb:49:3d:19:63:a0:1a:13:27:0d:0e:33: b7:05:80:f0:e5:01:63:2e:d7:ff:40:41:97:7e:3e: c2:a2:8b:80:1f:49:9c:c1:7b:6e:f6:36:8a:8f:f4: f2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:06:FB:7A:48:93:EB:89:75:AA:8C:B7:2D:64:F5:EF:CC:F0:B7:27 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:10:41:26:0f:ee:a4:09:fc:b2:ef:ca:f0:11:44:b5:3e:47: 7c:2c:36:b9:ec:c3:10:89:70:95:28:2e:de:48:4d:45:4e:9a: 86:14:8e:dd:c8:33:c9:25:7f:9c:b3:66:6d:38:cb:92:e9:e1: 4a:7a:90:64:09:65:5b:3b:2f:8b:08:31:21:10:bc:92:62:9b: 1f:e5:d1:c3:fd:40:90:49:15:cd:13:82:64:1f:96:ff:cd:46: 7b:1c:0c:8d:55:01:c6:58:4b:58:64:fe:87:88:c2:c3:e9:39: 39:b3:49:ff:93:14:a9:be:63:61:1a:e6:f7:fc:e3:d0:e8:5e: 30:c0:7a:6e:8e:6b:a7:7d:e1:23:7e:b7:21:ab:b5:ce:a4:79: e7:b0:20:10:70:8b:31:ee:00:ab:fd:85:6b:d1:fc:12:f0:d5: c7:9a:cd:26:e2:e1:2c:5b:7d:40:98:e5:c6:ea:78:74:03:2d: 2b:5a:8f:ec:91:b0:cc:87:83:cf:e4:d0:63:b0:32:27:79:a5: bb:5b:52:4b:26:81:08:6f:d4:ef:a0:35:85:6b:91:d9:07:d6: 12:a2:bf:99:02:35:99:f9:96:80:45:ad:70:21:87:29:07:e4: 5a:ab:41:03:93:88:6d:10:74:7f:8d:55:d6:ff:8d:4b:a2:85: 66:a2:38:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjYwNzIzMDMzMzM2WhcNMjYwNzMwMDMzMzM2WjAYMRYwFAYD VQQDEw02YTYxOGI5MC05MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArp0vJyIXZ7GAG8LLCeLZ4ZGABhYzeCEUSEMGBk/9LQJgoOvscRImSmOI3TZI 4g0XqJdOYhqGLa0bLWi6Hb/9Wvzeppn6OkK5d4uYQNUV4PjoXXPj68LYSdButLnr vGELKgVekSIVz3WBMPmRu5mm4xsHOl3HcHYv3mFNC5G3WRKB8IvrqP4KDZSg+D+p 9pp30RZ6DoMn1YDaskvOBJEom7wX/PHZEnu8scOsZMnelaKxsbEmTk/xllQo68OJ 1H8EjMbBBeF5Aqk8ZzNc/KjzAQj4GrrrST0ZY6AaEycNDjO3BYDw5QFjLtf/QEGX fj7CoouAH0mcwXtu9jaKj/TyHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMUG+3pI k+uJdaqMty1k9e/M8LcnMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0FCQy9DNTUxNjQxMjA1QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pX UnotRXM0czg0RDZqVko2NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfhBBJg/upAn8su/K8BFEtT5HfCw2uezDEIlwlSgu3khNRU6ahhSO3cgzySV/ nLNmbTjLkunhSnqQZAllWzsviwgxIRC8kmKbH+XRw/1AkEkVzROCZB+W/81GexwM jVUBxlhLWGT+h4jCw+k5ObNJ/5MUqb5jYRrm9/zj0OheMMB6bo5rp33hI363Iau1 zqR557AgEHCLMe4Aq/2Fa9H8EvDVx5rNJuLhLFt9QJjlxup4dAMtK1qP7JGwzIeD z+TQY7AyJ3mlu1tSSyaBCG/U76A1hWuR2QfWEqK/mQI1mfmWgEWtcCGHKQfkWqtB A5OIbRB0f41V1v+NS6KFZqI4Ow== -----END CERTIFICATE-----Generated at Thu Jul 23 21:42:25 2026 by rpki-client