$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft File: u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft (raw, json) Hash identifier: vlHta6PfWOMtaa5w2dAVXWXbKgi1+VWV7jN1NeeFr2s= Subject key identifier: C0:82:4F:D7:38:1C:3E:F3:C9:AF:97:F4:76:0A:80:FE:C6:BD:CA:37 Authority key identifier: BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 Certificate issuer: /CN=A91A2265/serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft Manifest number: 021A Signing time: Mon 27 Jul 2026 04:22:38 +0000 Manifest this update: Mon 27 Jul 2026 04:22:37 +0000 Manifest next update: Mon 03 Aug 2026 04:22:37 +0000 Files and hashes: 1: u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl (hash: 0xNy7H5DC1/o5pI3AUQiQA12IiUh6JicTVghWlQljLg=) 2: 9F5C80A8F3EB11EFBAF62455C4F9AE02.roa (hash: dicUkqJpWBQlhJi+bO6jbQ3e2lQm0aq0QA9SUOerdpM=) 3: FCD162AE508511EEBA4C0E2BC4F9AE02.roa (hash: 59acFeQy4V5pQjYYCiasQgZVB5QvS3oo/PphMyeS6gg=) 4: FD57EA90508511EEBA4C0E2BC4F9AE02.roa (hash: Hlrpuim6i7fHk0KlEnhldHqMP2jG8T1/tqWjQFLYvbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2265, serialNumber=BBEC210E7529FD397F1338FFAC1DDD783C0FAA32 Validity Not Before: Jul 27 04:22:37 2026 GMT Not After : Aug 3 04:22:37 2026 GMT Subject: CN=6a66dd0e-15d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:34:52:3a:b8:e1:fa:d3:92:07:4f:50:0d: cf:55:53:95:da:00:98:4c:50:bd:06:2b:13:f4:54: 83:8e:24:17:45:45:23:52:73:7d:a9:b3:21:0e:24: e8:70:61:b6:e0:ec:2f:e2:54:9d:3a:c1:f4:3c:c6: b8:77:a1:85:e3:ed:0d:3b:db:cc:c1:f5:f8:37:af: 1a:be:bd:79:0d:b0:09:42:b5:60:58:bb:6b:ef:9d: b5:fe:45:a7:83:9f:d8:6c:a0:c9:9c:78:47:1a:2b: b0:09:b5:37:5c:bd:fc:a0:0b:99:78:44:ee:73:94: c9:83:0f:0c:4b:41:76:32:f7:8e:f9:df:d9:89:51: 04:8f:15:50:13:6b:e8:fd:61:ee:9d:b1:cc:d6:e7: 27:49:aa:1d:c2:63:53:9f:41:d2:38:ca:03:ed:ab: 8f:03:95:33:25:05:25:b6:98:ef:6c:06:ad:5d:fc: 64:fc:cf:55:6e:d1:a4:b7:57:02:6a:70:95:05:bb: f6:60:1b:51:66:a1:20:5d:24:e6:87:ef:37:0c:cc: 55:57:e0:05:96:5c:01:dd:fb:34:61:54:88:fa:ae: 95:fb:9f:b4:5b:68:9c:ad:4a:9a:ec:5c:12:80:cc: f9:8c:53:49:64:c5:a0:18:e1:ad:40:b9:14:bc:c3: fa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:82:4F:D7:38:1C:3E:F3:C9:AF:97:F4:76:0A:80:FE:C6:BD:CA:37 X509v3 Authority Key Identifier: keyid:BB:EC:21:0E:75:29:FD:39:7F:13:38:FF:AC:1D:DD:78:3C:0F:AA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-whDnUp_Tl_Ezj_rB3deDwPqjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2265/9A66AADE508511EEBA3EFC11C4F9AE02/u-whDnUp_Tl_Ezj_rB3deDwPqjI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:03:ed:a1:e8:38:f3:7d:20:4b:6f:dd:b5:7a:22:7e:28:f3: d6:bc:bf:e8:0a:45:b8:03:9d:fd:9b:04:c9:aa:93:1b:5b:ef: b9:91:47:cc:d5:54:98:e3:2e:70:43:6c:7b:ac:78:55:0d:83: 75:fb:7e:c2:08:58:30:0e:2c:fb:90:31:25:8f:ba:0c:1c:32: 63:61:b3:1a:69:42:41:d4:b8:c7:bf:53:85:d7:e1:5e:c1:1d: af:38:0b:35:36:8e:22:22:ef:f5:6c:41:2b:b7:83:fd:89:fb: d2:b7:22:7d:59:3c:de:af:47:fc:1e:96:68:02:e7:9f:ab:ed: f5:da:0c:55:8a:78:02:4d:f5:90:14:83:62:34:e4:12:b2:0d: d8:70:0d:e2:a5:8a:4c:ac:ba:9d:49:4b:76:94:ca:36:f0:1f: 9a:df:84:4f:a4:af:13:aa:a8:f9:58:9e:fd:69:85:e1:ae:9e: ca:c7:40:07:c3:17:3e:31:e6:2e:06:b2:f0:17:e2:9a:10:48: 7b:cb:21:3e:12:0f:33:6f:a3:35:73:9d:92:4f:dc:bd:fa:24: b3:8b:39:36:92:8b:24:dc:89:11:f9:c6:4d:59:ce:f9:4c:d0: bc:b0:ab:dd:a6:60:79:6e:aa:5f:23:2a:99:59:15:fd:c6:4d: b5:2c:c7:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIyNjUxMTAvBgNVBAUTKEJCRUMyMTBFNzUyOUZEMzk3RjEzMzhGRkFDMURERDc4 M0MwRkFBMzIwHhcNMjYwNzI3MDQyMjM3WhcNMjYwODAzMDQyMjM3WjAYMRYwFAYD VQQDEw02YTY2ZGQwZS0xNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulE0Ujq44frTkgdPUA3PVVOV2gCYTFC9BisT9FSDjiQXRUUjUnN9qbMhDiTo cGG24Owv4lSdOsH0PMa4d6GF4+0NO9vMwfX4N68avr15DbAJQrVgWLtr7521/kWn g5/YbKDJnHhHGiuwCbU3XL38oAuZeETuc5TJgw8MS0F2MveO+d/ZiVEEjxVQE2vo /WHunbHM1ucnSaodwmNTn0HSOMoD7auPA5UzJQUltpjvbAatXfxk/M9VbtGkt1cC anCVBbv2YBtRZqEgXSTmh+83DMxVV+AFllwB3fs0YVSI+q6V+5+0W2icrUqa7FwS gMz5jFNJZMWgGOGtQLkUvMP6JwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCCT9c4 HD7zya+X9HYKgP7Gvco3MB8GA1UdIwQYMBaAFLvsIQ51Kf05fxM4/6wd3Xg8D6oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjI2NS85QTY2QUFERTUw ODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9UbF9FempfckIzZGVEd1Bx akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Utd2hEblVwX1RsX0V6al9yQjNkZUR3UHFqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjI2NS85QTY2QUFERTUwODUxMUVFQkEzRUZDMTFDNEY5QUUwMi91LXdoRG5VcF9U bF9FempfckIzZGVEd1BxakkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANgPtoeg4830gS2/dtXoifijz1ry/6ApFuAOd/ZsEyaqTG1vvuZFHzNVUmOMu cENse6x4VQ2Ddft+wghYMA4s+5AxJY+6DBwyY2GzGmlCQdS4x79ThdfhXsEdrzgL NTaOIiLv9WxBK7eD/Yn70rcifVk83q9H/B6WaALnn6vt9doMVYp4Ak31kBSDYjTk ErIN2HAN4qWKTKy6nUlLdpTKNvAfmt+ET6SvE6qo+Vie/WmF4a6eysdAB8MXPjHm Lgay8BfimhBIe8shPhIPM2+jNXOdkk/cvfoks4s5NpKLJNyJEfnGTVnO+UzQvLCr 3aZgeW6qXyMqmVkV/cZNtSzHmg== -----END CERTIFICATE-----Generated at Mon Jul 27 14:22:19 2026 by rpki-client