$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft File: _RYHGGNz6B9E0TeyoOlpV-YquKE.mft (raw, json) Hash identifier: ZvbK0r+t5rycZPK5rbHdeba+3VeK8NZvwTInbKlmDVU= Subject key identifier: BC:F7:50:6A:CD:53:D6:0C:A6:3A:E0:53:C1:DB:62:04:C4:7D:8C:E9 Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 35AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft Manifest number: 3584 Signing time: Mon 20 Jul 2026 15:04:40 +0000 Manifest this update: Mon 20 Jul 2026 15:04:40 +0000 Manifest next update: Mon 27 Jul 2026 15:04:40 +0000 Files and hashes: 1: _RYHGGNz6B9E0TeyoOlpV-YquKE.crl (hash: m4ew5TRFuQV6xQDXgcWvl9JiPgVB07PPdPsT9C4pIkQ=) 2: D347187A7E9511ECA9132A0BC4F9AE02.roa (hash: AqP5pcAaJH32TYuGX0fOzFQdp/XSO4T3mcIC6gFmJ5s=) 3: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (hash: 24VUnNW+IwALD6fth9CM1bbdRgcY8qK4/vGIkj8WWe4=) 4: 59F4A758BD2F11EBB84EE532C4F9AE02.roa (hash: 5+kHlPMY1vlmnCm2khEV4Cm9ZkyzeUnR4wfzGT1Bqgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 15:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13741 (0x35ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: Jul 20 15:04:40 2026 GMT Not After : Jul 27 15:04:40 2026 GMT Subject: CN=6a5e3908-5674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:bd:10:9f:be:8f:b0:7f:31:23:9c:9d:a4: 17:a5:a9:17:fe:eb:bb:a6:d1:f1:57:87:bc:44:72: 63:e9:7b:bf:ef:c3:ce:30:50:49:f2:d9:0d:31:e1: 3d:d6:e1:72:05:60:a0:a6:ee:74:bf:3a:d0:df:40: 4f:0e:cd:8d:13:55:cd:06:4a:36:9f:a5:08:fa:74: a3:93:e4:70:df:a4:2b:8a:5b:c2:6a:9d:43:71:b8: 00:78:23:20:b7:31:c3:75:da:0c:b4:44:43:22:dc: b0:09:1f:1c:7b:a8:3b:a3:0e:e7:e2:c3:5c:e4:c6: c4:f3:19:fb:b0:ad:91:e4:a8:26:f8:3e:c0:aa:da: 31:89:93:37:59:ce:9a:75:cd:a2:da:70:b9:b9:80: 93:9e:48:1e:f6:09:a6:e6:de:bb:88:02:d6:ac:7b: 0a:1b:68:fb:6f:81:35:11:d9:ea:56:1e:f2:ae:92: 1b:a3:06:16:c2:61:da:43:cc:d1:c4:e5:d8:82:34: 5b:4d:52:8b:cf:b6:d2:14:5f:4b:ab:c7:db:c6:9e: 3e:0f:68:e2:c7:53:11:1f:da:a3:d5:5f:ab:8d:cc: 4e:c1:f2:4c:49:7a:bc:ce:8e:d4:e2:64:b8:1f:64: d5:24:9e:1d:62:75:86:c1:9d:20:45:09:5d:c0:fa: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F7:50:6A:CD:53:D6:0C:A6:3A:E0:53:C1:DB:62:04:C4:7D:8C:E9 X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:35:4b:b5:11:ab:14:44:6e:fc:e8:e7:41:14:06:d1:75:e2: 1a:2c:13:67:1f:d9:fd:99:d9:be:cd:18:8b:cb:da:73:35:21: e4:80:c7:b3:b6:62:25:0f:0e:d4:b8:fd:38:5e:c4:ca:f0:85: 6a:97:f7:86:f3:eb:e6:26:83:bc:4e:6f:15:57:32:cd:d2:5c: 81:7f:61:e4:8f:e7:27:2b:ee:14:82:65:1e:c8:96:3a:41:4c: a2:86:7a:fc:2c:32:fe:d6:07:ce:72:51:b2:e7:c1:3f:52:50: 9a:04:98:97:be:74:f0:87:ec:e3:6b:07:c4:d4:39:39:bc:a6: 75:e4:22:a8:1c:ac:ce:97:98:0d:59:91:ab:84:82:24:66:cd: b5:8f:d1:ba:01:bb:8c:c9:ce:62:7d:dd:14:42:ca:89:c1:0c: 57:4a:98:ee:c1:e2:06:e6:a6:be:9b:b7:92:94:b7:f9:fd:4d: fb:f9:2d:49:13:7b:48:18:ae:3b:1e:77:83:2d:e2:ef:19:86: f8:8f:c7:9b:1a:82:68:78:5a:c0:b3:68:cf:b4:33:4d:8f:8b: 95:4e:d4:c4:8e:a2:d7:0b:13:47:3c:3c:d9:c2:fd:73:65:6d: c3:e0:6f:4b:ee:bb:99:55:4f:e1:10:51:08:f7:b1:c0:ba:f4: 00:15:e1:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjYwNzIwMTUwNDQwWhcNMjYwNzI3MTUwNDQwWjAYMRYwFAYD VQQDEw02YTVlMzkwOC01Njc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufO9EJ++j7B/MSOcnaQXpakX/uu7ptHxV4e8RHJj6Xu/78POMFBJ8tkNMeE9 1uFyBWCgpu50vzrQ30BPDs2NE1XNBko2n6UI+nSjk+Rw36QrilvCap1DcbgAeCMg tzHDddoMtERDItywCR8ce6g7ow7n4sNc5MbE8xn7sK2R5Kgm+D7AqtoxiZM3Wc6a dc2i2nC5uYCTnkge9gmm5t67iALWrHsKG2j7b4E1EdnqVh7yrpIbowYWwmHaQ8zR xOXYgjRbTVKLz7bSFF9Lq8fbxp4+D2jix1MRH9qj1V+rjcxOwfJMSXq8zo7U4mS4 H2TVJJ4dYnWGwZ0gRQldwPorSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLz3UGrN U9YMpjrgU8HbYgTEfYzpMB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTk1OC81QUUxOTdGNDFEOUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZC OUUwVGV5b09scFYtWXF1S0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADTVLtRGrFERu/OjnQRQG0XXiGiwTZx/Z/ZnZvs0Yi8vaczUh5IDHs7ZiJQ8O 1Lj9OF7EyvCFapf3hvPr5iaDvE5vFVcyzdJcgX9h5I/nJyvuFIJlHsiWOkFMooZ6 /Cwy/tYHznJRsufBP1JQmgSYl7508Ifs42sHxNQ5ObymdeQiqByszpeYDVmRq4SC JGbNtY/RugG7jMnOYn3dFELKicEMV0qY7sHiBuamvpu3kpS3+f1N+/ktSRN7SBiu Ox53gy3i7xmG+I/HmxqCaHhawLNoz7QzTY+LlU7UxI6i1wsTRzw82cL9c2Vtw+Bv S+67mVVP4RBRCPexwLr0ABXh0A== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:48 2026 by rpki-client