$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: TLOaxsyL0pArr8EVjT4YxfLBgkOZx+VrpaQu/8B5z7I= Subject key identifier: B5:A9:1E:E8:2D:A3:99:E2:67:C2:95:64:96:2D:56:DE:90:4C:92:22 Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: D4 Signing time: Tue 21 Jul 2026 08:25:05 +0000 Manifest this update: Tue 21 Jul 2026 08:25:04 +0000 Manifest next update: Tue 28 Jul 2026 08:25:04 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: i8wnzXith0IrrsbERBlQ/WOSDZG32w9cq1wer/y29EY=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: azH5Q9viXquY/moxc/UZ4RwNqYyQHdR8aAwu/HmXV5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 216 (0xd8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Jul 21 08:25:04 2026 GMT Not After : Jul 28 08:25:04 2026 GMT Subject: CN=6a5f2ce1-005b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:bf:de:e6:0a:91:75:68:03:c8:c6:14:4c: 8f:1f:dc:55:61:e1:05:30:8c:6b:71:a8:0d:0d:b9: 42:b5:b3:df:6e:50:69:19:b3:84:e2:cb:58:b0:ef: ed:62:91:9f:9d:0a:f7:94:6b:ce:28:f7:10:ff:12: 48:e4:fd:32:68:e3:a0:c2:c4:9e:2b:5d:b0:84:57: 55:12:55:fb:3a:50:fe:bb:a4:39:01:b7:ad:b3:cc: 23:19:80:dc:92:ff:82:1f:7f:ed:63:1f:7b:7a:ce: ff:1f:e8:0f:a4:51:55:fc:24:38:93:85:32:ce:80: 1d:56:fe:ff:c5:45:83:01:db:3c:01:e1:56:3a:82: 81:c9:4c:ab:30:81:42:39:c9:9b:e1:e1:c3:1f:c9: c7:18:07:c3:ac:0c:58:6c:89:65:0e:5e:21:66:46: 97:aa:79:01:a0:43:d1:62:f3:bc:01:92:97:2a:5a: d0:74:e6:4c:ab:d7:e9:61:8c:7f:12:1e:06:7a:b7: 69:f1:31:29:2c:18:a1:89:0e:e7:58:11:b9:7b:a9: 39:be:ef:f5:32:c2:76:94:54:6f:93:2c:24:b2:0b: c4:8b:f8:39:0b:ef:c1:f8:d5:84:01:e8:ef:67:8b: 11:99:9e:eb:f5:86:fc:16:4e:e8:47:94:c7:35:0b: 45:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A9:1E:E8:2D:A3:99:E2:67:C2:95:64:96:2D:56:DE:90:4C:92:22 X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:48:da:08:73:92:51:f8:69:8c:b7:b3:96:d2:b5:9d:16:85: 30:49:c1:b0:85:f5:bf:75:11:8f:4d:c1:47:78:cd:97:37:7e: 5b:81:6c:cb:ca:31:66:c8:9f:b2:5f:a3:7b:cb:b3:51:3a:4d: 8a:26:95:64:65:5e:70:5a:64:70:2b:a0:f6:03:d6:9a:ca:14: 3b:6b:cc:6a:7e:40:89:3c:ec:b3:bb:1c:ce:9b:63:39:e1:3f: bb:22:5a:99:d2:94:e3:96:53:c8:9f:9f:79:3a:ae:17:4a:b5: e0:97:06:39:27:48:e3:e6:2b:80:e0:58:64:c9:ec:9e:79:28: 0a:6c:05:e6:cf:b0:cf:4f:30:b2:6a:df:5a:5d:4c:68:15:89: 68:5f:03:30:78:99:a9:43:69:96:2d:1e:1a:8d:df:c2:28:42: e8:26:63:16:a5:3a:68:bc:fb:e7:9b:aa:b1:7c:27:70:b3:3f: 0b:05:c1:79:e3:33:33:6f:c0:ba:d1:cf:e1:ea:91:43:5d:88: 97:36:87:04:d2:56:71:50:1b:32:40:3b:51:82:fb:dc:2f:b7: 1d:9f:3b:dd:fb:fe:34:f9:fa:1b:ae:12:bb:50:77:4f:4f:fe: 1b:da:03:c1:09:99:cb:c2:60:28:cb:63:af:db:d3:8e:45:56: 8e:e4:b7:33 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCOUExMTAvBgNVBAUTKEMzRENEOTVBNzI0QUQ2RTNCOTg3NEM2RTRENkIzOUVC Q0UxNDJDRDQwHhcNMjYwNzIxMDgyNTA0WhcNMjYwNzI4MDgyNTA0WjAYMRYwFAYD VQQDEw02YTVmMmNlMS0wMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApyq/3uYKkXVoA8jGFEyPH9xVYeEFMIxrcagNDblCtbPfblBpGbOE4stYsO/t YpGfnQr3lGvOKPcQ/xJI5P0yaOOgwsSeK12whFdVElX7OlD+u6Q5Abets8wjGYDc kv+CH3/tYx97es7/H+gPpFFV/CQ4k4UyzoAdVv7/xUWDAds8AeFWOoKByUyrMIFC Ocmb4eHDH8nHGAfDrAxYbIllDl4hZkaXqnkBoEPRYvO8AZKXKlrQdOZMq9fpYYx/ Eh4Gerdp8TEpLBihiQ7nWBG5e6k5vu/1MsJ2lFRvkywksgvEi/g5C+/B+NWEAejv Z4sRmZ7r9Yb8Fk7oR5THNQtFWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWpHugt o5niZ8KVZJYtVt6QTJIiMB8GA1UdIwQYMBaAFMPc2VpyStbjuYdMbk1rOevOFCzU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI5QS8yMjdBQzQ4NjQ1 QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi93OXpaV25KSzF1TzVoMHh1VFdzNTY4NFVM TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkI5QS8yMjdBQzQ4NjQ1QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi93OXpaV25KSzF1 TzVoMHh1VFdzNTY4NFVMTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcUjaCHOSUfhpjLezltK1nRaFMEnBsIX1v3URj03BR3jNlzd+W4Fsy8oxZsif sl+je8uzUTpNiiaVZGVecFpkcCug9gPWmsoUO2vMan5AiTzss7sczptjOeE/uyJa mdKU45ZTyJ+feTquF0q14JcGOSdI4+YrgOBYZMnsnnkoCmwF5s+wz08wsmrfWl1M aBWJaF8DMHiZqUNpli0eGo3fwihC6CZjFqU6aLz755uqsXwncLM/CwXBeeMzM2/A utHP4eqRQ12IlzaHBNJWcVAbMkA7UYL73C+3HZ873fv+NPn6G64Su1B3T0/+G9oD wQmZy8JgKMtjr9vTjkVWjuS3Mw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:07:31 2026 by rpki-client