$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: DhmsfjwoyTyeA+SDPG1zXfjLibCJYiCwjECjyM2/Wjc= Subject key identifier: 6A:09:EA:87:27:9B:BB:B5:39:A2:A7:BE:84:79:83:A6:2D:AA:D4:87 Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 054F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 0507 Signing time: Tue 21 Jul 2026 00:35:41 +0000 Manifest this update: Tue 21 Jul 2026 00:35:40 +0000 Manifest next update: Tue 28 Jul 2026 00:35:40 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: bWkaEa8mkscQjn4a2gI5bV9FZwfm+ROUgSvxESzBBzg=) 2: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: D21a7LlMu8RnxWZ8YgRZ6sV/m0f2ZXrJTQlAZBy166E=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: w1LkgMGS8oqwPRuQKx3FjuBZt3rf+t0hZFmWkXtaaSY=) 4: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: GS31bTdPfKVJ1J6UCJ9YLKFQUEEmZi77Y2aiEp3HKVY=) 5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: kXgZNQ9cWIHfXiEIAxnhKXY51BGRFvcRzJmJYDyHg78=) 6: E84DD6FAC9C311F0ACE5A118C4F9AE02.roa (hash: u2rzRUism7xTPxp63V3W7DOQwUN/ky3ASLXGx242uU8=) 7: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: xijaZu6pAwwNLd6WONxWQ6mZqU3GdiHzZC1uaLYBENo=) 8: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: a2Eak+r8Eojdu+clly0gi9Nawkq6TirHUh3AZGHAXRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: Jul 21 00:35:40 2026 GMT Not After : Jul 28 00:35:40 2026 GMT Subject: CN=6a5ebedc-fb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1d:c7:59:8c:04:64:c8:01:b0:43:3f:d5:be: 75:6c:20:30:35:40:a5:cf:7f:30:f4:1e:63:e4:67: e8:51:f9:01:6a:36:d4:15:86:9b:46:49:c8:6c:e4: cb:0e:97:3a:01:56:29:1c:c5:99:cd:74:67:05:7f: 0b:25:53:70:f3:8d:2e:51:15:d3:da:fc:28:26:d7: 8f:1a:88:6f:4b:69:db:a3:97:15:00:c4:4c:60:8f: d7:a8:65:4a:c9:5a:4b:27:e0:f6:50:c9:c9:c3:ce: 52:ed:02:52:d4:af:d6:37:0d:90:ea:66:6a:a6:51: e0:ac:9a:cb:de:28:94:99:7c:85:ef:7d:80:46:51: 83:f3:65:32:c0:20:37:d1:10:8a:c5:60:8c:ad:d2: b3:20:d1:ac:59:00:74:e3:f0:3f:8e:f4:0b:14:a2: be:5a:79:84:2e:e3:89:7e:28:c1:bb:5d:d1:3a:6d: 5c:ab:0a:3e:46:99:f2:9d:cb:d6:60:50:bc:b6:01: 49:51:1a:c7:fb:29:cc:a6:36:6e:33:79:6e:f2:a5: 9c:ad:fa:b1:a7:b9:10:78:b4:2c:6a:e7:1e:d1:f0: 6d:b2:0e:5f:0b:8a:dd:47:45:b7:44:09:bb:ba:53: a1:c1:a5:7a:23:22:39:ba:26:56:80:63:cb:2c:b0: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:09:EA:87:27:9B:BB:B5:39:A2:A7:BE:84:79:83:A6:2D:AA:D4:87 X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d9:3c:bc:96:26:95:9a:20:1a:1a:25:1e:41:17:d0:e4:c3: 90:48:f4:b9:64:cb:bc:00:11:c7:1a:32:e6:df:a7:b9:df:7d: c3:ab:4a:71:a8:78:52:27:c5:6e:cf:e5:f5:5d:6d:db:5c:42: 16:e4:dc:53:a0:0c:1a:22:f6:11:ed:18:24:26:4a:ad:df:35: ec:5f:b4:2a:b3:5b:a7:f7:23:d6:d8:4b:c6:07:d0:86:14:98: bb:e1:06:6b:df:1d:18:36:ee:c6:29:72:56:11:29:4f:92:bc: d1:7b:84:3a:0b:25:57:c1:9d:77:ea:e2:f5:47:cb:31:dc:3c: 33:dd:2d:88:4a:d5:38:0c:81:71:d0:1d:ba:32:c0:44:5d:e1: 63:af:a9:b9:ec:41:f8:34:e2:c3:9e:4e:e0:c4:45:e2:b9:a9: af:56:d8:1f:ff:14:d0:f9:21:1c:67:8b:88:21:ce:02:34:6e: e7:7d:bb:3b:e3:dc:bd:35:da:93:61:69:24:c7:2f:30:03:7f: 44:17:5b:71:cf:4a:a1:16:87:2d:3e:be:07:64:3b:a8:d5:ac: 6a:32:80:ca:d9:30:43:cb:3f:c6:87:25:97:8f:93:f7:ce:d6: e9:10:ad:6d:5e:8a:7d:e7:ba:3f:1e:94:10:f5:f6:cf:1f:33: 6b:a4:60:f5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjYwNzIxMDAzNTQwWhcNMjYwNzI4MDAzNTQwWjAYMRYwFAYD VQQDEw02YTVlYmVkYy1mYjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6x3HWYwEZMgBsEM/1b51bCAwNUClz38w9B5j5GfoUfkBajbUFYabRknIbOTL Dpc6AVYpHMWZzXRnBX8LJVNw840uURXT2vwoJtePGohvS2nbo5cVAMRMYI/XqGVK yVpLJ+D2UMnJw85S7QJS1K/WNw2Q6mZqplHgrJrL3iiUmXyF732ARlGD82UywCA3 0RCKxWCMrdKzINGsWQB04/A/jvQLFKK+WnmELuOJfijBu13ROm1cqwo+RpnyncvW YFC8tgFJURrH+ynMpjZuM3lu8qWcrfqxp7kQeLQsauce0fBtsg5fC4rdR0W3RAm7 ulOhwaV6IyI5uiZWgGPLLLAvtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGoJ6ocn m7u1OaKnvoR5g6YtqtSHMB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUdk8vJYmlZogGholHkEX0OTDkEj0uWTLvAARxxoy5t+nud99w6tKcah4UifF bs/l9V1t21xCFuTcU6AMGiL2Ee0YJCZKrd817F+0KrNbp/cj1thLxgfQhhSYu+EG a98dGDbuxilyVhEpT5K80XuEOgslV8Gdd+ri9UfLMdw8M90tiErVOAyBcdAdujLA RF3hY6+puexB+DTiw55O4MRF4rmpr1bYH/8U0PkhHGeLiCHOAjRu5327O+PcvTXa k2FpJMcvMAN/RBdbcc9KoRaHLT6+B2Q7qNWsajKAytkwQ8s/xocll4+T987W6RCt bV6Kfee6Px6UEPX2zx8za6Rg9Q== -----END CERTIFICATE-----Generated at Tue Jul 21 16:34:08 2026 by rpki-client