$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft File: 9oPyIkSMakhd2P7f4encdEIT-jw.mft (raw, json) Hash identifier: CSb/aVDWw6KON/0tV+mUEOc9hjoDEQAhzap4F7wUngs= Subject key identifier: DE:84:6E:DB:C9:34:8A:2E:5C:FD:6E:99:F4:1B:CA:FE:84:B0:A5:96 Authority key identifier: F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C Certificate issuer: /CN=A91A2886/serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft Manifest number: 56 Signing time: Tue 21 Jul 2026 10:10:18 +0000 Manifest this update: Tue 21 Jul 2026 10:10:17 +0000 Manifest next update: Tue 28 Jul 2026 10:10:17 +0000 Files and hashes: 1: 9oPyIkSMakhd2P7f4encdEIT-jw.crl (hash: b00C77KdVlrvbUSfEoqGsjWts93lH+EWt9sEmsYm8LU=) 2: 35037C3414DD11F1B12014D7123D8C67.roa (hash: j+SdwyC8ptJD+qecbYia9qa2SzHrIz3dLwQQE297jB4=) 3: 9541152014DD11F1B59CF9DA123D8C67.roa (hash: o6jXstt3oz0pLRapDBGquL+NWtwn1qFvviGsBZcW4hM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2886, serialNumber=F683F222448C6A485DD8FEDFE1E9DC744213FA3C Validity Not Before: Jul 21 10:10:17 2026 GMT Not After : Jul 28 10:10:17 2026 GMT Subject: CN=6a5f458a-2efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:06:a2:07:a2:50:37:32:4c:c0:de:40:1d:94: b0:dc:94:f8:c1:b4:61:94:e1:85:8c:a2:65:85:59: 1c:25:f3:a8:0e:ab:ba:bc:31:cc:9a:56:dc:fc:16: 83:5c:9f:77:10:69:cc:36:8c:ab:10:33:ef:c6:d8: e4:3b:46:b8:6b:36:a0:80:e2:8c:8c:c2:05:0e:be: 04:eb:9f:80:7a:eb:2c:64:56:45:b7:8d:a7:e9:f5: 88:79:df:1d:df:e4:ca:85:84:da:99:4d:c3:03:3d: 86:ce:b5:f7:90:d1:67:32:61:64:01:6d:02:fb:07: f6:4a:f5:0d:eb:2f:a3:e4:84:19:3d:aa:2f:99:16: 56:9d:52:36:90:2a:b1:b5:f5:4a:ee:e0:f5:23:76: e6:ad:f3:d9:cb:f0:e1:3a:b9:3e:5d:46:1d:52:0a: 6f:b5:3c:8b:0f:ab:d5:36:95:10:b2:31:db:29:48: 72:30:25:c2:f4:c2:43:07:fe:94:3a:e5:9e:c8:90: 68:f8:9c:ae:b5:c8:3e:ed:22:46:5d:e7:56:fb:aa: cd:cc:14:a5:a1:13:9d:fb:28:61:f0:ff:f5:db:1c: 81:1d:37:8b:70:d7:e5:0c:ab:49:81:67:01:c8:0e: 0e:68:95:02:62:3b:72:7f:32:2f:df:bf:01:53:ed: 28:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:84:6E:DB:C9:34:8A:2E:5C:FD:6E:99:F4:1B:CA:FE:84:B0:A5:96 X509v3 Authority Key Identifier: keyid:F6:83:F2:22:44:8C:6A:48:5D:D8:FE:DF:E1:E9:DC:74:42:13:FA:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9oPyIkSMakhd2P7f4encdEIT-jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2886/8632809810A311F1BE72B5AF393D8C67/9oPyIkSMakhd2P7f4encdEIT-jw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3c:d6:4a:62:3e:c7:5b:7d:d4:70:58:98:54:9a:eb:26:64: a6:91:5b:30:a0:85:02:6d:9e:fc:61:e6:b6:8c:28:5b:58:80: e7:e0:e1:98:cf:3d:41:d7:74:2d:b2:53:10:d3:89:74:84:ac: 00:5b:4a:d0:8f:af:fe:48:98:c4:cf:2c:bd:fc:7d:6e:84:fe: 38:81:f8:87:d1:de:c7:94:c9:0a:58:ad:c9:03:c7:0c:31:8b: 00:8a:bc:1b:a8:2e:cb:4b:f3:5a:99:28:40:4d:e6:c0:a3:a1: 6c:d7:b1:15:22:45:9a:e4:a7:23:65:4d:a8:0b:97:3c:be:a0: 90:53:c7:24:10:17:38:27:98:06:61:de:7d:67:96:37:f1:ef: 5c:ba:b1:05:de:09:0b:b3:97:8b:01:43:3c:56:79:89:6e:84: 24:b1:f1:1c:40:7b:de:f3:44:e4:07:a6:53:b5:55:ca:9b:aa: 14:0d:70:bc:bf:e9:e9:66:93:0c:c8:58:eb:8e:01:dc:74:09: cd:86:3d:87:bf:1d:d2:6e:23:58:37:c9:98:44:e3:85:01:ad: 15:ac:40:ac:cf:a8:a5:e1:87:6d:cf:27:cc:ba:f7:db:d2:af: 82:a8:5d:3f:34:c5:67:43:bf:25:42:fa:c0:7c:52:2d:b6:94: ee:28:7a:72 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB Mjg4NjExMC8GA1UEBRMoRjY4M0YyMjI0NDhDNkE0ODVERDhGRURGRTFFOURDNzQ0 MjEzRkEzQzAeFw0yNjA3MjExMDEwMTdaFw0yNjA3MjgxMDEwMTdaMBgxFjAUBgNV BAMTDTZhNWY0NThhLTJlZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoBqIHolA3MkzA3kAdlLDclPjBtGGU4YWMomWFWRwl86gOq7q8McyaVtz8FoNc n3cQacw2jKsQM+/G2OQ7RrhrNqCA4oyMwgUOvgTrn4B66yxkVkW3jafp9Yh53x3f 5MqFhNqZTcMDPYbOtfeQ0WcyYWQBbQL7B/ZK9Q3rL6PkhBk9qi+ZFladUjaQKrG1 9Uru4PUjduat89nL8OE6uT5dRh1SCm+1PIsPq9U2lRCyMdspSHIwJcL0wkMH/pQ6 5Z7IkGj4nK61yD7tIkZd51b7qs3MFKWhE537KGHw//XbHIEdN4tw1+UMq0mBZwHI Dg5olQJiO3J/Mi/fvwFT7SgHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU3oRu28k0 ii5c/W6Z9BvK/oSwpZYwHwYDVR0jBBgwFoAU9oPyIkSMakhd2P7f4encdEIT+jww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyODg2Lzg2MzI4MDk4MTBB MzExRjFCRTcyQjVBRjM5M0Q4QzY3LzlvUHlJa1NNYWtoZDJQN2Y0ZW5jZEVJVC1q dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvOW9QeUlrU01ha2hkMlA3ZjRlbmNkRUlULWp3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy ODg2Lzg2MzI4MDk4MTBBMzExRjFCRTcyQjVBRjM5M0Q4QzY3LzlvUHlJa1NNYWto ZDJQN2Y0ZW5jZEVJVC1qdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCbPNZKYj7HW33UcFiYVJrrJmSmkVswoIUCbZ78Yea2jChbWIDn4OGYzz1B13Qt slMQ04l0hKwAW0rQj6/+SJjEzyy9/H1uhP44gfiH0d7HlMkKWK3JA8cMMYsAirwb qC7LS/NamShATebAo6Fs17EVIkWa5KcjZU2oC5c8vqCQU8ckEBc4J5gGYd59Z5Y3 8e9curEF3gkLs5eLAUM8VnmJboQksfEcQHve80TkB6ZTtVXKm6oUDXC8v+npZpMM yFjrjgHcdAnNhj2Hvx3SbiNYN8mYROOFAa0VrECsz6il4YdtzyfMuvfb0q+CqF0/ NMVnQ78lQvrAfFIttpTuKHpy -----END CERTIFICATE-----Generated at Tue Jul 21 18:16:25 2026 by rpki-client