$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft File: D59xWNvf-ipXrgJIfJgga3g4BJY.mft (raw, json) Hash identifier: ls8aJpCgSNuIHCOAF1myDjy8m1q+9URHPqMk6RxOlqo= Subject key identifier: 5C:ED:B3:C4:D0:04:E7:63:0C:5E:D1:76:59:C2:0D:F9:1E:9C:30:6A Authority key identifier: 0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 Certificate issuer: /CN=A91FE9DC/serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Certificate serial: 01D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft Manifest number: 01B7 Signing time: Thu 23 Jul 2026 05:25:26 +0000 Manifest this update: Thu 23 Jul 2026 05:25:26 +0000 Manifest next update: Thu 30 Jul 2026 05:25:26 +0000 Files and hashes: 1: D59xWNvf-ipXrgJIfJgga3g4BJY.crl (hash: /SsZRfhi1KNgH+/IMIMpDgxj0wOAdTHrSo0125PEBEU=) 2: 507476EE6BD811EFBDD72932C4F9AE02.roa (hash: tI8081Qes7Wl6iTmVmk2PhB8XaNxc++Td85vrFv3YGM=) 3: CAF5E0EA6BDA11EF942AB06BC4F9AE02.roa (hash: G0wfXD8YdWR0Wc2toljzpi576bi3k/pJ5bJYPQ4s76s=) 4: 1132F3026BD811EF90DBC631C4F9AE02.roa (hash: tjSNlsLVDVemDbg8MkCxHj6lieTSIIDFdS4u4JZvSN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 472 (0x1d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9DC, serialNumber=0F9F7158DBDFFA2A57AE02487C98206B78380496 Validity Not Before: Jul 23 05:25:26 2026 GMT Not After : Jul 30 05:25:26 2026 GMT Subject: CN=6a61a5c6-a064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ae:bc:8d:f0:08:c6:79:f2:7a:8b:de:1e:ec: 9f:f2:7f:c3:d6:86:4b:a9:90:a0:c9:20:87:3d:1a: 87:79:c1:77:c6:35:52:82:80:9a:40:47:df:c2:b4: e1:b4:05:7d:ab:ba:9a:74:6d:af:85:b0:fd:7d:6c: c3:d6:fb:20:4a:f6:e1:ef:1b:3d:b1:af:cf:63:ad: 6e:36:75:d1:90:a4:f4:f4:77:13:50:5c:a9:a0:bf: 71:fc:25:30:63:d7:0d:89:6b:fa:4c:56:2e:04:c8: 38:7f:dc:c7:d4:36:00:14:00:5d:1c:51:f2:0c:a5: b8:c8:f9:8d:b1:c4:64:00:5b:56:78:90:71:0a:6e: be:00:df:c7:a0:fc:ce:21:c3:e0:75:4a:5e:53:36: 13:4e:d5:c5:c2:4c:fd:5b:c2:03:0b:f9:83:ac:05: 26:cb:72:de:f7:1b:18:b9:78:5e:a9:a8:33:8f:31: 85:75:ac:c5:54:a8:c7:4e:7f:ee:35:54:67:2c:27: 96:f8:a3:26:e2:99:01:2f:c9:b8:ac:85:52:7d:79: 3a:60:e0:38:f3:72:c4:8d:c2:8f:99:8d:4e:8b:db: fc:d4:21:20:6c:08:3f:e8:15:77:cb:3f:80:58:29: d9:b1:7f:ee:c8:32:f8:8d:a0:a6:71:4d:71:d3:01: 13:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:ED:B3:C4:D0:04:E7:63:0C:5E:D1:76:59:C2:0D:F9:1E:9C:30:6A X509v3 Authority Key Identifier: keyid:0F:9F:71:58:DB:DF:FA:2A:57:AE:02:48:7C:98:20:6B:78:38:04:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D59xWNvf-ipXrgJIfJgga3g4BJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9DC/6EEC1F5CEFFD11EE90288A72C4F9AE02/D59xWNvf-ipXrgJIfJgga3g4BJY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:03:11:2f:65:3c:ec:93:98:dd:da:f1:b2:58:58:48:55:fe: 2d:83:29:f5:5e:3f:fe:ce:c5:1b:4e:9e:a5:0d:4c:a1:9a:d6: 68:5d:4f:d6:12:86:b7:d7:9b:58:f2:c6:5c:0f:0d:94:fb:a3: 56:ef:ce:f6:2f:20:92:dc:4d:75:e6:3d:26:8f:85:44:93:00: 2f:85:36:a4:58:70:6f:e3:01:cc:84:4e:97:60:c7:19:37:89: c5:ac:da:29:11:cb:85:4e:a9:8d:59:1f:b1:18:ed:eb:84:e6: c3:f3:e6:3b:4f:37:8d:1a:2f:e3:a8:39:23:16:1f:9c:73:de: 17:43:f5:55:db:8c:5e:9b:a5:54:28:8f:04:43:a7:bc:5b:17: 08:d9:f1:60:4d:2b:c0:39:a6:6f:90:1c:ed:a6:6d:aa:8f:a8: bf:b5:61:26:19:54:c6:0b:38:c2:d5:d3:d5:68:3c:31:77:ca: 8f:aa:80:90:d4:68:7c:39:38:ae:e3:e7:fd:7e:d9:47:cb:a4: 22:aa:b5:7e:dd:39:d9:69:a5:95:d3:db:b2:45:d1:66:76:d0: 14:d7:a0:32:a5:11:b2:6a:c4:98:0a:00:0b:40:f1:1f:43:0b: 61:a9:67:8d:00:4f:6e:e5:76:25:44:5f:71:29:8d:d7:79:03: 91:83:46:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5REMxMTAvBgNVBAUTKDBGOUY3MTU4REJERkZBMkE1N0FFMDI0ODdDOTgyMDZC NzgzODA0OTYwHhcNMjYwNzIzMDUyNTI2WhcNMjYwNzMwMDUyNTI2WjAYMRYwFAYD VQQDEw02YTYxYTVjNi1hMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl668jfAIxnnyeoveHuyf8n/D1oZLqZCgySCHPRqHecF3xjVSgoCaQEffwrTh tAV9q7qadG2vhbD9fWzD1vsgSvbh7xs9sa/PY61uNnXRkKT09HcTUFypoL9x/CUw Y9cNiWv6TFYuBMg4f9zH1DYAFABdHFHyDKW4yPmNscRkAFtWeJBxCm6+AN/HoPzO IcPgdUpeUzYTTtXFwkz9W8IDC/mDrAUmy3Le9xsYuXheqagzjzGFdazFVKjHTn/u NVRnLCeW+KMm4pkBL8m4rIVSfXk6YOA483LEjcKPmY1Oi9v81CEgbAg/6BV3yz+A WCnZsX/uyDL4jaCmcU1x0wETzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzts8TQ BOdjDF7RdlnCDfkenDBqMB8GA1UdIwQYMBaAFA+fcVjb3/oqV64CSHyYIGt4OASW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlEQy82RUVDMUY1Q0VG RkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1pcFhyZ0pJZkpnZ2EzZzRC SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1OXhXTnZmLWlwWHJnSklmSmdnYTNnNEJKWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlEQy82RUVDMUY1Q0VGRkQxMUVFOTAyODhBNzJDNEY5QUUwMi9ENTl4V052Zi1p cFhyZ0pJZkpnZ2EzZzRCSlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkgMRL2U87JOY3drxslhYSFX+LYMp9V4//s7FG06epQ1MoZrWaF1P1hKGt9eb WPLGXA8NlPujVu/O9i8gktxNdeY9Jo+FRJMAL4U2pFhwb+MBzIROl2DHGTeJxaza KRHLhU6pjVkfsRjt64Tmw/PmO083jRov46g5IxYfnHPeF0P1VduMXpulVCiPBEOn vFsXCNnxYE0rwDmmb5Ac7aZtqo+ov7VhJhlUxgs4wtXT1Wg8MXfKj6qAkNRofDk4 ruPn/X7ZR8ukIqq1ft052WmlldPbskXRZnbQFNegMqURsmrEmAoAC0DxH0MLYaln jQBPbuV2JURfcSmN13kDkYNG8Q== -----END CERTIFICATE-----Generated at Fri Jul 24 01:28:27 2026 by rpki-client