$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: fP32vQn4fEGefFlz/JBG1WlqUMmhdteVXc4eTxQNHuI= Subject key identifier: 68:D7:98:03:E5:2E:67:4E:25:2A:3A:84:FC:81:DE:14:46:B8:D2:E8 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0D14 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0D00 Signing time: Mon 20 Jul 2026 17:37:12 +0000 Manifest this update: Mon 20 Jul 2026 17:37:12 +0000 Manifest next update: Mon 27 Jul 2026 17:37:12 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: yaUKmNHDy4UvCx9tsZJ6ii1ZgXbixi7jPf6RhMc+nFg=) 2: DD004670C39711F0A241F86DC4F9AE02.roa (hash: ILb2f5MFl0hmYnyJlCFO6BUBR2uQox0knIxNniHNGBA=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 17:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Jul 20 17:37:12 2026 GMT Not After : Jul 27 17:37:12 2026 GMT Subject: CN=6a5e5cc8-27b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:55:c5:e1:3c:0d:eb:e7:a7:e7:31:f2:5e: a8:bd:e0:3f:c9:5d:35:79:f4:71:d1:1f:d4:84:cc: 11:ab:bb:d1:ca:6e:86:47:01:3c:6d:28:ce:1d:a1: d1:4d:0b:87:49:ab:0b:54:cf:06:04:d2:df:dc:d6: ce:c3:5c:10:30:9f:53:61:d6:27:38:8a:ca:5c:45: 9d:4f:a3:9d:82:2a:f9:e3:16:36:eb:7e:b0:ff:c2: 16:22:35:ae:e4:99:82:cb:b3:62:6b:54:04:92:89: fa:e9:64:8a:4c:73:82:ae:dc:4d:6e:b3:13:3e:7a: d1:04:d8:eb:b6:51:66:71:c1:c2:50:d7:3a:97:83: 7a:ad:74:a1:0e:5f:99:28:94:08:ba:49:03:60:48: 56:8e:e4:94:90:1d:51:51:7e:42:38:63:27:99:01: 2e:ab:82:8f:a2:55:0a:2e:ac:21:c0:89:97:77:3d: c5:10:8b:b4:5e:f4:9d:b0:62:42:c2:30:90:58:b6: d3:75:50:24:35:34:ce:60:71:0a:90:6b:52:be:7e: d6:11:b3:44:72:b4:01:24:d6:89:47:10:c2:8b:89: 74:2b:1b:80:1f:74:e1:f8:62:52:63:0d:74:67:60: ad:af:f6:a4:d3:01:8e:13:33:04:a6:3e:d2:80:de: 32:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D7:98:03:E5:2E:67:4E:25:2A:3A:84:FC:81:DE:14:46:B8:D2:E8 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:28:16:99:14:5e:83:aa:84:de:65:38:1a:15:98:5b:e6:b0: f0:9a:71:30:6e:f8:82:9a:3e:e3:d9:52:0d:8a:1c:5d:40:82: 2f:3a:94:c2:56:e4:e3:79:83:c5:61:cb:ff:4d:e1:09:27:e0: bf:78:f7:8e:dd:7b:41:36:77:5c:6d:08:54:3c:94:80:b8:8c: dd:96:6f:1a:b7:cb:5f:26:49:5c:c4:87:8b:7b:c7:34:fd:c5: 66:17:e1:cc:e3:ae:22:84:65:f9:c7:c4:25:4f:e5:99:7f:3e: 27:ae:70:93:54:09:5a:b9:41:a9:38:20:b9:6c:47:ea:77:2e: 53:56:da:59:25:45:2e:c1:5c:70:c0:4d:7f:aa:af:30:c2:d6: bd:36:2e:14:b9:d3:d0:bf:7d:19:61:91:72:6f:0c:5a:32:6d: cd:d9:12:29:61:54:51:1a:e4:b1:98:c9:d8:b4:28:af:f9:15: 70:a7:8f:04:fd:ba:05:85:e3:1f:d0:92:af:cb:59:4a:4b:a0: 57:46:de:6e:a6:a6:11:e3:c4:98:a0:b8:b5:af:1b:7f:dc:3f: 52:3a:d5:fe:db:93:79:c0:41:21:e3:50:2c:11:f9:c9:cc:cb: 70:d8:46:d8:58:fc:df:02:de:46:f1:9e:5d:03:0f:9f:c4:f3: 93:4e:e9:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjYwNzIwMTczNzEyWhcNMjYwNzI3MTczNzEyWjAYMRYwFAYD VQQDEw02YTVlNWNjOC0yN2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+FVxeE8Devnp+cx8l6oveA/yV01efRx0R/UhMwRq7vRym6GRwE8bSjOHaHR TQuHSasLVM8GBNLf3NbOw1wQMJ9TYdYnOIrKXEWdT6Odgir54xY2636w/8IWIjWu 5JmCy7Nia1QEkon66WSKTHOCrtxNbrMTPnrRBNjrtlFmccHCUNc6l4N6rXShDl+Z KJQIukkDYEhWjuSUkB1RUX5COGMnmQEuq4KPolUKLqwhwImXdz3FEIu0XvSdsGJC wjCQWLbTdVAkNTTOYHEKkGtSvn7WEbNEcrQBJNaJRxDCi4l0KxuAH3Th+GJSYw10 Z2Ctr/ak0wGOEzMEpj7SgN4y4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjXmAPl LmdOJSo6hPyB3hRGuNLoMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApCgWmRReg6qE3mU4GhWYW+aw8JpxMG74gpo+49lSDYocXUCCLzqUwlbk43mD xWHL/03hCSfgv3j3jt17QTZ3XG0IVDyUgLiM3ZZvGrfLXyZJXMSHi3vHNP3FZhfh zOOuIoRl+cfEJU/lmX8+J65wk1QJWrlBqTgguWxH6ncuU1baWSVFLsFccMBNf6qv MMLWvTYuFLnT0L99GWGRcm8MWjJtzdkSKWFUURrksZjJ2LQor/kVcKePBP26BYXj H9CSr8tZSkugV0bebqamEePEmKC4ta8bf9w/UjrV/tuTecBBIeNQLBH5yczLcNhG 2Fj83wLeRvGeXQMPn8Tzk07pKg== -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:51 2026 by rpki-client