$ rpki-client -vvf rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft File: DYtx2GteICkzvLAqW210CSpSoXw.mft (raw, json) Hash identifier: aVu8hjk769kqzbwagf5IKzaWfY8OcNL7n7rmecSh27Q= Subject key identifier: FE:7C:B1:E3:A7:90:3D:1A:0F:4E:C9:1F:DC:2A:92:4F:7C:9F:51:97 Authority key identifier: 0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C Certificate issuer: /CN=A91A395C/serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Certificate serial: 35DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft Manifest number: 3586 Signing time: Sun 26 Jul 2026 14:53:03 +0000 Manifest this update: Sun 26 Jul 2026 14:53:02 +0000 Manifest next update: Sun 02 Aug 2026 14:53:02 +0000 Files and hashes: 1: DYtx2GteICkzvLAqW210CSpSoXw.crl (hash: 7Y7ZWpFnyQQxS5i1/4nl28zlNl8yX5GDu3L8BQAJ9dg=) 2: D56D9FD87E8711EC9A928B6AC4F9AE02.roa (hash: l9+xBEny0RtitxX+horpYy85rL+QwU54sl8n7bTIiQE=) 3: 9A2B0DE4593F11EA9F9FA238C4F9AE02.roa (hash: NLs+1lW2c+XRSot8ioe6j0/P90GPYhhRdikdITCoGOI=) 4: 65552C3AE8D411ED8D0FAD45C4F9AE02.roa (hash: D7Y0D/y/CKTIEfmEtpoWEBzYAJ2qa9qCceCAIRlHBxE=) 5: 3DBC186C5AD611EF85A4557BC4F9AE02.roa (hash: 6uLGUsAxDCCetxCSvWggNZXKnXx2TcJW5ybw8uE9+E8=) 6: 991EB004BE8511EE960E5082C4F9AE02.roa (hash: rP4EBcoYjp/fb5drtfKj/6SrPS0+St4OmibSJgW68j8=) 7: 9B71FEB0593F11EA9F9FA238C4F9AE02.roa (hash: Q4GRmFRI4ONgbTnKmbxTEpLs75sW5Sq4FWea39SXv98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 14:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13790 (0x35de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A395C, serialNumber=0D8B71D86B5E202933BCB02A5B6D74092A52A17C Validity Not Before: Jul 26 14:53:02 2026 GMT Not After : Aug 2 14:53:02 2026 GMT Subject: CN=6a661f4f-c1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:bd:5b:4e:5d:fe:44:03:2b:4e:cc:46:64: fa:3f:7f:9e:5b:a2:10:ce:4e:37:24:18:9d:60:5b: 10:b5:ea:4f:8d:f6:2b:61:06:2c:a7:94:19:66:da: e6:f6:e4:b1:a2:9a:90:75:af:c4:ea:7f:b5:39:f4: a1:81:47:4b:d4:1e:72:e3:f7:23:cf:33:49:19:7b: f1:e6:e2:a6:11:dd:3a:66:f2:25:3d:e3:75:01:1d: 31:c7:c8:fb:12:80:12:31:48:d2:11:c0:22:0c:37: 5a:ef:f5:49:a2:41:da:0c:c7:13:85:e5:9a:02:1f: 33:40:4e:c4:50:12:69:b6:67:22:24:d7:43:33:e3: d2:e9:c7:39:b7:07:3d:57:a0:3d:65:58:5c:ac:c0: ea:53:62:3f:a9:0a:af:1a:32:3d:17:00:65:fd:20: 48:05:12:a3:f5:6a:4d:5a:27:c7:7f:20:6b:95:0a: d1:9a:ae:53:e0:49:23:eb:2b:17:68:13:84:1f:3b: 64:42:3f:2e:3d:71:c8:41:1c:2a:8a:d5:1d:44:69: cf:e8:bb:01:a9:23:21:3a:01:cc:2e:55:f4:9f:2a: 1e:2a:dc:e0:bf:c0:3e:9e:a6:03:ef:27:55:c5:f5: fc:1b:bf:da:9e:3c:89:99:a1:b6:33:f5:de:36:74: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:B1:E3:A7:90:3D:1A:0F:4E:C9:1F:DC:2A:92:4F:7C:9F:51:97 X509v3 Authority Key Identifier: keyid:0D:8B:71:D8:6B:5E:20:29:33:BC:B0:2A:5B:6D:74:09:2A:52:A1:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DYtx2GteICkzvLAqW210CSpSoXw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A395C/BB3417C01D9611E2B8BB827F08B02CD2/DYtx2GteICkzvLAqW210CSpSoXw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:fb:3a:34:7b:e5:9b:32:39:8e:ee:53:05:c0:76:47:b6:10: 6c:6d:4c:68:3e:32:40:6e:23:ee:f4:4e:5e:d4:d2:94:9e:da: c8:8e:ff:bf:eb:cc:c5:dc:7d:3b:a1:58:5b:57:3f:5e:ba:d7: 7e:7c:0a:67:fb:b1:0a:e9:4d:75:75:ee:73:60:c3:82:0b:0f: c2:a4:d4:97:a4:b1:3b:5e:8b:6a:e9:bb:54:df:20:1a:aa:94: 2f:20:6b:6a:a2:b3:8d:c1:bd:0f:9c:38:18:2c:f7:55:70:de: da:c8:05:a6:32:df:e5:cb:53:03:76:c0:25:1c:c5:ce:ef:82: 39:ac:5d:6c:5b:99:95:94:1f:99:9a:b9:bb:54:05:fe:c2:b5: d3:73:74:93:6b:10:4a:ee:74:77:8f:e7:08:7c:f5:f1:b5:44: 00:c0:1a:4e:de:92:74:0d:9a:2b:b4:b9:ff:43:f9:9e:5c:b1: 8d:43:b3:53:a1:50:bc:08:d1:50:10:df:8a:15:fb:e5:a1:6c: fa:04:04:8c:58:41:33:e1:35:b5:19:53:45:7f:e7:5e:6e:24: 25:29:24:02:c0:41:05:5a:d0:4e:ec:f6:95:e3:c2:a9:4c:40: f3:c4:65:fc:ff:7a:47:8a:ea:8c:0c:97:5f:35:5b:68:c2:be: 02:6c:4e:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM5NUMxMTAvBgNVBAUTKDBEOEI3MUQ4NkI1RTIwMjkzM0JDQjAyQTVCNkQ3NDA5 MkE1MkExN0MwHhcNMjYwNzI2MTQ1MzAyWhcNMjYwODAyMTQ1MzAyWjAYMRYwFAYD VQQDEw02YTY2MWY0Zi1jMWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAslu9W05d/kQDK07MRmT6P3+eW6IQzk43JBidYFsQtepPjfYrYQYsp5QZZtrm 9uSxopqQda/E6n+1OfShgUdL1B5y4/cjzzNJGXvx5uKmEd06ZvIlPeN1AR0xx8j7 EoASMUjSEcAiDDda7/VJokHaDMcTheWaAh8zQE7EUBJptmciJNdDM+PS6cc5twc9 V6A9ZVhcrMDqU2I/qQqvGjI9FwBl/SBIBRKj9WpNWifHfyBrlQrRmq5T4Ekj6ysX aBOEHztkQj8uPXHIQRwqitUdRGnP6LsBqSMhOgHMLlX0nyoeKtzgv8A+nqYD7ydV xfX8G7/anjyJmaG2M/XeNnTNvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP58seOn kD0aD07JH9wqkk98n1GXMB8GA1UdIwQYMBaAFA2LcdhrXiApM7ywKlttdAkqUqF8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzk1Qy9CQjM0MTdDMDFE OTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlDa3p2TEFxVzIxMENTcFNv WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RZdHgyR3RlSUNrenZMQXFXMjEwQ1NwU29Ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mzk1Qy9CQjM0MTdDMDFEOTYxMUUyQjhCQjgyN0YwOEIwMkNEMi9EWXR4Mkd0ZUlD a3p2TEFxVzIxMENTcFNvWHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABfs6NHvlmzI5ju5TBcB2R7YQbG1MaD4yQG4j7vROXtTSlJ7ayI7/v+vMxdx9 O6FYW1c/XrrXfnwKZ/uxCulNdXXuc2DDggsPwqTUl6SxO16Laum7VN8gGqqULyBr aqKzjcG9D5w4GCz3VXDe2sgFpjLf5ctTA3bAJRzFzu+COaxdbFuZlZQfmZq5u1QF /sK103N0k2sQSu50d4/nCHz18bVEAMAaTt6SdA2aK7S5/0P5nlyxjUOzU6FQvAjR UBDfihX75aFs+gQEjFhBM+E1tRlTRX/nXm4kJSkkAsBBBVrQTuz2lePCqUxA88Rl /P96R4rqjAyXXzVbaMK+AmxOHg== -----END CERTIFICATE-----Generated at Mon Jul 27 06:50:53 2026 by rpki-client