$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft File: tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json) Hash identifier: Z71zohvIM0Uz7MdZgMxrZrx46rlmFEH01K4RLvVEl/Y= Subject key identifier: 65:B6:90:15:0A:07:4F:B1:E9:4A:FE:44:6F:0A:11:7A:22:67:44:4F Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 Certificate issuer: /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft Manifest number: 01AA Signing time: Sat 25 Jul 2026 05:37:31 +0000 Manifest this update: Sat 25 Jul 2026 05:37:30 +0000 Manifest next update: Sat 01 Aug 2026 05:37:30 +0000 Files and hashes: 1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: 6oWTpF2u+HuHDmxQ+zKTchN64/SJFcU4me0R1u56s3c=) 2: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: vRQ6HdkSj/Wf7+vduG5A9cFn7YJoyEBj6p0aYIaPJ/w=) 3: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: 5D/Ry/8ZP2E54WupdxSy/KsQmqjx8wwM6c9M/jH7pYs=) 4: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: SsVxQtDk/Oa1shqSFxMi2LpzccLXqJhR2Mhs5lXheR4=) 5: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: +2GaHe5cWbVmXD0EaHkbTYfFj1TTwinsmIfZx+qjcRc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 05:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902 Validity Not Before: Jul 25 05:37:30 2026 GMT Not After : Aug 1 05:37:30 2026 GMT Subject: CN=6a644b9a-079f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fe:0a:ab:fd:3a:55:f4:cc:87:50:20:ca:88: 31:79:d8:9c:fa:5f:3c:4a:86:24:38:9a:74:0f:75: 50:1b:56:bb:d7:20:5b:d4:94:a0:12:4c:e5:0c:77: 57:36:77:83:8f:c0:22:56:0f:8c:7a:59:df:dc:db: d4:ba:09:e5:3c:7a:98:d3:59:fe:00:b5:39:30:77: 03:76:2e:dc:c5:a6:61:0e:54:aa:1b:bf:f2:59:f1: 5e:c1:e4:54:28:bd:4a:ba:6b:d3:62:79:96:a5:44: a8:6d:74:d3:30:cc:90:25:10:94:6b:7b:d3:f1:5b: bf:74:14:f9:51:ec:72:29:e5:3b:6b:4c:a7:cc:af: 5e:d7:92:45:37:2a:d9:83:c5:cd:79:d4:cd:bd:72: f6:62:f6:8b:5e:a2:76:06:36:e4:1a:75:72:1a:46: 16:a8:78:fc:a2:7e:bf:bc:6d:f2:69:47:5a:04:d6: 75:07:a3:4d:f1:a7:a7:1e:b7:38:b5:90:24:75:82: e5:9f:b5:68:03:b8:6d:49:5e:09:b6:11:a5:f3:b0: c8:c2:c1:03:1f:6a:89:a1:1d:6e:a6:6b:8b:3c:8f: b6:76:9f:bb:ea:dc:a2:bc:49:d3:2b:f3:25:97:2d: b3:76:77:9f:87:27:27:1c:ec:27:7a:06:f6:d0:ab: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B6:90:15:0A:07:4F:B1:E9:4A:FE:44:6F:0A:11:7A:22:67:44:4F X509v3 Authority Key Identifier: keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:bf:03:7c:a5:04:46:ab:63:21:9c:08:07:fe:34:fe:c4:77: 77:ce:47:32:80:a5:c5:ed:fc:63:bf:c4:bf:7a:b7:51:88:b9: 1b:30:a7:83:ef:36:13:ec:3f:91:58:c0:dc:16:75:ae:c3:1a: 2b:1a:9c:66:0b:b8:cb:eb:bd:54:2d:cb:f4:3c:57:69:89:f0: 40:03:59:57:12:5a:b8:63:ce:da:98:a7:b2:91:b0:72:0b:45: 82:c4:47:76:67:e2:29:b7:12:ca:27:24:c6:b6:84:89:9c:90: 1e:a2:7c:54:a0:6d:1e:95:f6:b8:a0:e2:d1:2c:2b:b9:16:84: 9b:c6:fe:cc:c3:54:bd:e7:f6:23:13:05:83:78:6e:dd:d2:7a: fc:a9:7c:c2:11:7c:9a:db:95:20:29:78:a6:f1:e7:3d:81:b9: a6:62:60:02:49:47:bb:86:fa:cd:bb:f1:fc:24:c9:50:aa:62: b3:06:a5:10:c7:57:5b:06:2e:e7:d4:34:b6:3c:8e:5e:1a:81: 12:28:9e:24:ce:54:ba:de:2e:f8:5d:e1:3f:04:b9:35:da:6f: f1:1f:e0:34:29:22:7d:7e:4a:2e:b9:4f:a2:3d:74:25:22:f5: dd:fa:0e:f8:c9:a4:37:66:9f:cc:5a:98:63:ca:73:2b:6b:f6: df:97:29:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGNUQxMTAvBgNVBAUTKEI0MDgxODE1QzZCQUVEOThBMUNDOTUwQUM2RkExMEJD NjAwNTg5MDIwHhcNMjYwNzI1MDUzNzMwWhcNMjYwODAxMDUzNzMwWjAYMRYwFAYD VQQDEw02YTY0NGI5YS0wNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv4Kq/06VfTMh1Agyogxedic+l88SoYkOJp0D3VQG1a71yBb1JSgEkzlDHdX NneDj8AiVg+Melnf3NvUugnlPHqY01n+ALU5MHcDdi7cxaZhDlSqG7/yWfFeweRU KL1KumvTYnmWpUSobXTTMMyQJRCUa3vT8Vu/dBT5UexyKeU7a0ynzK9e15JFNyrZ g8XNedTNvXL2YvaLXqJ2BjbkGnVyGkYWqHj8on6/vG3yaUdaBNZ1B6NN8aenHrc4 tZAkdYLln7VoA7htSV4JthGl87DIwsEDH2qJoR1upmuLPI+2dp+76tyivEnTK/Ml ly2zdnefhycnHOwnegb20KvtswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGW2kBUK B0+x6Ur+RG8KEXoiZ0RPMB8GA1UdIwQYMBaAFLQIGBXGuu2YocyVCsb6ELxgBYkC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0Y1RC8xMEY5NEVGMDA2 QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjdaaWh6SlVLeHZvUXZHQUZp UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RBZ1lGY2E2N1ppaHpKVUt4dm9RdkdBRmlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0Y1RC8xMEY5NEVGMDA2QUIxMUVGODdCRkE3MjVDNEY5QUUwMi90QWdZRmNhNjda aWh6SlVLeHZvUXZHQUZpUUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGL8DfKUERqtjIZwIB/40/sR3d85HMoClxe38Y7/Ev3q3UYi5GzCng+82E+w/ kVjA3BZ1rsMaKxqcZgu4y+u9VC3L9DxXaYnwQANZVxJauGPO2pinspGwcgtFgsRH dmfiKbcSyickxraEiZyQHqJ8VKBtHpX2uKDi0SwruRaEm8b+zMNUvef2IxMFg3hu 3dJ6/Kl8whF8mtuVICl4pvHnPYG5pmJgAklHu4b6zbvx/CTJUKpiswalEMdXWwYu 59Q0tjyOXhqBEiieJM5Uut4u+F3hPwS5Ndpv8R/gNCkifX5KLrlPoj10JSL13foO +MmkN2afzFqYY8pzK2v235cpSw== -----END CERTIFICATE-----Generated at Mon Jul 27 01:13:37 2026 by rpki-client