$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: KafLGToyDfy2Iu7aViAs9+FIJs12xBKmL30AVNZ2CWQ= Subject key identifier: 70:07:FA:3D:C0:0A:E2:35:0D:76:39:17:E6:E3:EE:0B:51:29:7E:60 Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 0A72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 0A61 Signing time: Mon 20 Jul 2026 17:21:48 +0000 Manifest this update: Mon 20 Jul 2026 17:21:48 +0000 Manifest next update: Mon 27 Jul 2026 17:21:48 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: 72QATyDKlVtKgTzAfqDdDgV5fDzz0+ImgC4+TRoF4MM=) 2: 7B01065ECB6611F0911E3B40C4F9AE02.roa (hash: 6Dvm4ulNHKTvy2zEThI5CFxM48R2WkZ0mp2MxrhNEVA=) 3: 7C4C4384CB6611F09E0E3B40C4F9AE02.roa (hash: jmLTUdjA6fVp52xmmEEVibY5+Y7NyInAVp9PHPY/5uE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 17:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2674 (0xa72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: Jul 20 17:21:48 2026 GMT Not After : Jul 27 17:21:48 2026 GMT Subject: CN=6a5e592c-78b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:db:71:93:45:da:ab:10:63:bd:6c:0f:e3:a1: 8a:aa:dc:9e:e1:ea:19:e1:af:77:b0:22:a7:7d:a0: 79:20:7d:f9:b8:83:98:c1:a4:dd:ce:18:3d:55:47: a1:13:ee:a3:c4:e3:35:e1:89:d6:64:9a:8d:d2:b6: 24:99:98:80:f2:8b:0a:b2:23:78:c9:69:60:5b:2d: 3a:29:b7:79:6a:4e:4b:86:66:69:19:40:76:80:e5: 07:3b:68:2d:65:1b:1e:95:a0:60:8f:6f:78:9d:33: dc:35:20:c5:bd:2c:56:f4:bc:50:3e:44:e1:13:33: 53:a2:af:77:47:61:80:57:2d:49:1d:28:59:5d:d3: da:b3:0c:92:27:a4:e8:69:ef:1a:8f:57:f9:48:72: ae:8f:5a:52:6a:f3:5f:b0:25:72:df:9c:dd:04:11: d8:54:df:de:a8:92:89:d8:52:4d:5c:f3:00:c5:3d: c3:97:3c:2a:29:87:23:c2:c5:6f:c6:fb:88:c0:8f: 43:f5:e9:b0:9d:f1:6a:42:36:1b:4a:1f:b5:64:5c: 49:db:5e:0f:82:eb:d7:77:07:91:17:a0:71:71:ff: 4f:a8:1c:77:5d:1f:09:0e:3d:cc:35:b8:c8:7e:09: 30:a8:04:ab:f0:c5:fe:02:f9:5e:ef:66:3e:30:08: 9e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:07:FA:3D:C0:0A:E2:35:0D:76:39:17:E6:E3:EE:0B:51:29:7E:60 X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:50:89:d9:b9:5b:b5:43:96:ce:cb:ab:c5:0c:04:4a:75:02: 75:e0:d3:a6:dc:f2:63:e3:03:0e:01:60:d5:0f:26:a3:d4:cf: 5e:43:20:24:5f:e0:76:d4:3c:3d:d5:02:6a:aa:8b:04:5b:c7: 79:bc:ee:bb:4d:81:0d:a5:a8:f1:1a:06:9e:00:d9:dd:a5:3f: cf:a8:df:3f:cf:4b:07:7b:98:67:aa:b6:de:42:47:f6:ef:50: e6:32:52:de:ca:e0:62:d5:ff:46:1a:cc:99:76:ab:5f:dd:db: fc:0d:0f:d0:2b:2a:1d:09:9d:05:6d:4a:77:44:52:40:b6:f8: f5:f0:09:00:f7:ef:c9:e7:9c:ba:6c:ab:10:f1:89:7f:1d:ca: e9:e0:67:95:50:ed:bf:56:ef:c3:57:f5:57:8d:e6:f5:cd:ac: 3d:ce:a5:50:ab:6d:3b:29:48:76:5b:1d:32:6a:82:dc:85:aa: 80:bb:15:cf:5b:05:b0:93:9e:47:1b:70:24:39:09:0d:62:69: b9:91:22:96:d7:71:24:aa:97:f7:31:5c:9b:87:4c:e1:ec:d7: 94:fb:96:e8:3b:61:dd:d2:8b:97:c1:11:fb:7f:fc:ac:63:39: 72:2b:51:7b:c8:69:42:14:a9:30:7e:0a:91:17:77:59:93:4d: e6:f4:90:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjYwNzIwMTcyMTQ4WhcNMjYwNzI3MTcyMTQ4WjAYMRYwFAYD VQQDEw02YTVlNTkyYy03OGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsttxk0XaqxBjvWwP46GKqtye4eoZ4a93sCKnfaB5IH35uIOYwaTdzhg9VUeh E+6jxOM14YnWZJqN0rYkmZiA8osKsiN4yWlgWy06Kbd5ak5LhmZpGUB2gOUHO2gt ZRselaBgj294nTPcNSDFvSxW9LxQPkThEzNToq93R2GAVy1JHShZXdPaswySJ6To ae8aj1f5SHKuj1pSavNfsCVy35zdBBHYVN/eqJKJ2FJNXPMAxT3DlzwqKYcjwsVv xvuIwI9D9emwnfFqQjYbSh+1ZFxJ214PguvXdweRF6Bxcf9PqBx3XR8JDj3MNbjI fgkwqASr8MX+Avle72Y+MAieXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAH+j3A CuI1DXY5F+bj7gtRKX5gMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHlCJ2blbtUOWzsurxQwESnUCdeDTptzyY+MDDgFg1Q8mo9TPXkMgJF/gdtQ8 PdUCaqqLBFvHebzuu02BDaWo8RoGngDZ3aU/z6jfP89LB3uYZ6q23kJH9u9Q5jJS 3srgYtX/RhrMmXarX93b/A0P0CsqHQmdBW1Kd0RSQLb49fAJAPfvyeecumyrEPGJ fx3K6eBnlVDtv1bvw1f1V43m9c2sPc6lUKttOylIdlsdMmqC3IWqgLsVz1sFsJOe RxtwJDkJDWJpuZEiltdxJKqX9zFcm4dM4ezXlPuW6Dth3dKLl8ER+3/8rGM5citR e8hpQhSpMH4KkRd3WZNN5vSQ2w== -----END CERTIFICATE-----Generated at Tue Jul 21 12:24:44 2026 by rpki-client