$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft File: _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json) Hash identifier: xdVAJAsqHN8ABlMHUXGEroJO2s/b8prt2KSO9uNrEu8= Subject key identifier: 1D:D4:62:96:E0:D4:62:7D:F9:35:1F:E4:42:16:DA:7C:D7:B8:44:D6 Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C Certificate issuer: /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft Manifest number: 022D Signing time: Thu 23 Jul 2026 03:53:51 +0000 Manifest this update: Thu 23 Jul 2026 03:53:51 +0000 Manifest next update: Thu 30 Jul 2026 03:53:51 +0000 Files and hashes: 1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: 0o3j0scg1FnwvfJeLZrTZbCa8qvzkAQ2OG6MmpbTMj4=) 2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: 615JmX9cruG++rabOl7xOJVJY/bjLhdXzPxbybiBquw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C Validity Not Before: Jul 23 03:53:51 2026 GMT Not After : Jul 30 03:53:51 2026 GMT Subject: CN=6a61904f-fc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:ad:38:1f:b9:b9:09:6f:60:cb:dc:7b:10: 25:d0:91:0d:56:a8:3d:b7:16:dc:55:f7:33:ea:f4: 99:fc:2b:0e:13:c3:9a:08:a7:4a:af:5f:be:6b:c0: 2c:16:22:3e:2b:93:a3:ae:7e:24:d8:d9:93:38:b2: a6:7c:89:de:09:20:39:a5:bf:12:c8:1e:fb:31:1f: 15:f4:54:52:09:e3:fe:89:c8:8a:ce:eb:9b:84:f0: f8:7d:e8:40:45:dd:84:a3:58:cb:59:d5:58:16:28: eb:1d:98:43:08:98:e9:2b:cc:fd:be:0d:66:db:a7: d6:ee:ba:62:86:21:b8:6b:1c:66:b3:27:7b:d0:43: 2b:1b:fd:bd:bc:c9:7d:9b:d6:2e:14:4b:57:ab:5d: 9b:b4:7d:fd:49:10:b2:45:e2:fa:09:aa:85:38:67: 24:0c:bd:76:b8:70:85:a5:2b:d2:b2:7b:1c:d7:c8: 95:85:2b:08:28:02:19:0c:59:4f:d8:e5:7f:a4:73: 0b:60:4d:49:87:aa:88:e5:e5:70:39:d4:01:56:e3: d9:d3:22:a1:6f:b5:46:83:e4:bc:7f:ac:0a:c3:de: 62:94:4c:29:cf:6a:77:c9:04:de:5b:01:8f:4a:0d: 0a:54:26:ae:8f:9d:30:95:9d:78:68:71:b7:40:66: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D4:62:96:E0:D4:62:7D:F9:35:1F:E4:42:16:DA:7C:D7:B8:44:D6 X509v3 Authority Key Identifier: keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:2c:09:d6:d5:71:f1:b2:7b:8d:82:66:f0:7c:f6:65:5b:f1: 12:de:3f:e7:02:54:96:d3:20:0d:c7:6a:ae:55:29:f3:07:aa: 41:95:ba:37:00:3b:1a:10:a7:c0:2f:df:b5:77:b8:a2:10:2e: 0f:64:cf:fd:72:a4:87:1d:c4:86:1a:5a:11:07:08:89:96:05: 94:7a:2b:ba:ed:f8:d6:ea:3b:ec:ef:85:c9:5f:cd:77:7b:8e: e3:23:b8:1a:43:2c:2d:c0:14:c6:52:0f:48:08:35:7d:9f:99: 8a:5c:00:3e:12:39:41:b2:96:6b:b6:6f:62:8b:90:75:10:67: 05:82:48:fb:5c:2a:53:b8:93:59:74:a2:cf:dd:b4:27:fe:9a: 96:9a:42:3c:b4:71:67:99:f5:e4:e8:b0:79:10:c1:be:a1:b6: 20:07:2b:16:7c:46:8b:0d:29:1f:bf:6d:21:66:e6:e4:81:31: 47:7a:78:d9:34:96:76:d6:77:66:b3:c1:11:97:1e:25:b5:5a: 90:41:26:ef:79:8b:95:0a:28:bc:e4:6c:7a:96:b3:66:79:00: 31:74:69:1e:95:75:ac:1f:0e:8e:cf:f9:6d:26:6d:95:c0:05: 32:8d:ef:ce:3a:42:75:5b:c9:5f:f5:e3:fd:93:d8:f6:cb:1c: 79:74:9c:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4 MURBNEIzMUMwHhcNMjYwNzIzMDM1MzUxWhcNMjYwNzMwMDM1MzUxWjAYMRYwFAYD VQQDEw02YTYxOTA0Zi1mYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjGtOB+5uQlvYMvcexAl0JENVqg9txbcVfcz6vSZ/CsOE8OaCKdKr1++a8As FiI+K5Ojrn4k2NmTOLKmfIneCSA5pb8SyB77MR8V9FRSCeP+iciKzuubhPD4fehA Rd2Eo1jLWdVYFijrHZhDCJjpK8z9vg1m26fW7rpihiG4axxmsyd70EMrG/29vMl9 m9YuFEtXq12btH39SRCyReL6CaqFOGckDL12uHCFpSvSsnsc18iVhSsIKAIZDFlP 2OV/pHMLYE1Jh6qI5eVwOdQBVuPZ0yKhb7VGg+S8f6wKw95ilEwpz2p3yQTeWwGP Sg0KVCauj50wlZ14aHG3QGZ3mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3UYpbg 1GJ9+TUf5EIW2nzXuETWMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq M2E1amRsWlBqVmFCMmtzeHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkywJ1tVx8bJ7jYJm8Hz2ZVvxEt4/5wJUltMgDcdqrlUp8weqQZW6NwA7GhCn wC/ftXe4ohAuD2TP/XKkhx3EhhpaEQcIiZYFlHoruu341uo77O+FyV/Nd3uO4yO4 GkMsLcAUxlIPSAg1fZ+ZilwAPhI5QbKWa7ZvYouQdRBnBYJI+1wqU7iTWXSiz920 J/6alppCPLRxZ5n15OiweRDBvqG2IAcrFnxGiw0pH79tIWbm5IExR3p42TSWdtZ3 ZrPBEZceJbVakEEm73mLlQoovORsepazZnkAMXRpHpV1rB8Ojs/5bSZtlcAFMo3v zjpCdVvJX/Xj/ZPY9ssceXScsw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:04:20 2026 by rpki-client