$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft File: 5Otd-leSQpC7j-xFuZd_xsf2-jc.mft (raw, json) Hash identifier: SY+gm0ZA4jE8zd6TyqDz/4O/HfQncifSQ75bSAUayj0= Subject key identifier: 8D:1A:36:99:6F:46:93:B5:17:02:A2:CE:DE:D4:22:77:18:2E:40:12 Authority key identifier: E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 Certificate issuer: /CN=A91A8B0B/serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Certificate serial: 0D70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft Manifest number: 0D58 Signing time: Sun 26 Jul 2026 18:18:51 +0000 Manifest this update: Sun 26 Jul 2026 18:18:50 +0000 Manifest next update: Sun 02 Aug 2026 18:18:50 +0000 Files and hashes: 1: 5Otd-leSQpC7j-xFuZd_xsf2-jc.crl (hash: p/CqQCgR1frXp5JL/iFhKbd2AIlYc8QgBDU7kgp95f4=) 2: 5842DDF0FCE511E9BFA4B27AC4F9AE02.roa (hash: tiznFO31M77tVMAqZuT5RhZyjOfXG4VtSqcUKQ0h8mI=) 3: EA17F65E6C6711ECB7C0925AC4F9AE02.roa (hash: JBITMoocNfEn/DC51LyDttOjzmGPPbU/nUR+4OvjGYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:18:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B0B, serialNumber=E4EB5DFA57924290BB8FEC45B9977FC6C7F6FA37 Validity Not Before: Jul 26 18:18:50 2026 GMT Not After : Aug 2 18:18:50 2026 GMT Subject: CN=6a664f8a-3985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:7f:77:85:1b:70:a8:80:be:74:e0:87:de: c1:8a:2f:a1:50:9b:1c:11:bd:20:ce:c3:68:17:a4: d0:c0:e6:87:e7:a6:5f:94:eb:88:90:e3:cf:b4:8b: 0f:1c:8e:4c:af:44:54:0a:97:4d:86:09:81:03:f6: f2:82:78:3a:35:24:28:b8:c5:a6:7b:3a:97:b6:8c: 57:1f:e4:15:f8:15:19:ee:8e:86:f8:86:83:c9:1a: 46:15:3e:54:38:59:80:e6:e3:e7:82:cd:44:c4:fa: bc:e8:28:a8:4d:06:cb:41:32:7b:95:17:af:3a:ae: a2:6f:b8:4f:0a:a3:02:76:81:6d:7d:ca:01:d1:6f: b8:98:3e:9b:bf:35:05:bc:11:a0:69:17:0e:bd:87: 82:59:2a:12:01:28:18:6c:05:10:0a:4a:70:2a:9e: 87:a9:59:04:bb:e9:59:1f:18:49:b7:ea:e7:d3:44: b9:d1:08:05:94:1d:c9:dc:a4:1b:ae:3b:d8:8b:1a: 89:be:69:dc:8a:15:d9:27:31:87:40:2f:58:11:62: 86:12:a1:74:67:5f:91:d5:ae:05:ce:8f:4f:17:8f: 8b:a0:a0:f0:c3:24:a2:c6:61:80:ab:77:a8:f0:d8: b1:5e:8c:a8:5e:43:80:5e:12:5c:ec:9b:ef:fb:89: 6a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1A:36:99:6F:46:93:B5:17:02:A2:CE:DE:D4:22:77:18:2E:40:12 X509v3 Authority Key Identifier: keyid:E4:EB:5D:FA:57:92:42:90:BB:8F:EC:45:B9:97:7F:C6:C7:F6:FA:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Otd-leSQpC7j-xFuZd_xsf2-jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B0B/5AEB5EB2FCC511E99858A91EC4F9AE02/5Otd-leSQpC7j-xFuZd_xsf2-jc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0f:e1:bc:a8:04:67:49:40:d6:74:8a:c1:a5:84:c1:3d:d1: ea:e2:e7:4a:5d:ba:7a:66:25:70:9e:ac:2f:7c:08:03:f2:f4: dd:52:b9:52:e2:d8:19:00:04:c5:10:48:89:35:52:9e:dc:36: d4:8f:b2:48:a4:e1:2c:e5:57:0e:7a:2f:8c:fb:59:db:bc:e8: 0b:db:ea:02:e9:ec:1b:ac:94:3a:bc:ef:cc:d4:40:12:03:2b: 39:64:fa:20:1e:1f:55:09:4f:76:c4:45:59:c5:e3:95:5e:21: 10:20:03:ad:49:f2:89:5f:ee:24:e7:09:26:38:59:3c:aa:77: 37:91:1b:fa:94:b1:25:1d:cd:83:6e:cb:8a:6a:ae:34:60:ac: 05:44:72:17:58:d1:63:69:2f:b7:80:c9:e0:8c:e6:35:2b:67: 43:b1:3a:cf:fc:84:52:eb:d0:95:2b:3e:a1:39:de:af:c9:e5: b2:c8:e4:dd:4c:9f:fe:2c:2e:1b:0e:7d:3b:a3:a8:0e:3a:3f: bc:f3:b4:3a:05:41:4d:83:4b:e1:15:85:9b:40:71:3f:47:aa: 75:86:15:1f:37:d1:d9:b0:cd:1c:e9:b8:32:63:b4:c9:ac:e9: 8c:3e:c1:23:b7:08:ca:c3:cf:b9:66:04:24:21:40:25:7d:5f: 88:d1:e9:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCMEIxMTAvBgNVBAUTKEU0RUI1REZBNTc5MjQyOTBCQjhGRUM0NUI5OTc3RkM2 QzdGNkZBMzcwHhcNMjYwNzI2MTgxODUwWhcNMjYwODAyMTgxODUwWjAYMRYwFAYD VQQDEw02YTY2NGY4YS0zOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuq9/d4UbcKiAvnTgh97Bii+hUJscEb0gzsNoF6TQwOaH56ZflOuIkOPPtIsP HI5Mr0RUCpdNhgmBA/bygng6NSQouMWmezqXtoxXH+QV+BUZ7o6G+IaDyRpGFT5U OFmA5uPngs1ExPq86CioTQbLQTJ7lRevOq6ib7hPCqMCdoFtfcoB0W+4mD6bvzUF vBGgaRcOvYeCWSoSASgYbAUQCkpwKp6HqVkEu+lZHxhJt+rn00S50QgFlB3J3KQb rjvYixqJvmncihXZJzGHQC9YEWKGEqF0Z1+R1a4Fzo9PF4+LoKDwwySixmGAq3eo 8NixXoyoXkOAXhJc7Jvv+4lqEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0aNplv RpO1FwKizt7UIncYLkASMB8GA1UdIwQYMBaAFOTrXfpXkkKQu4/sRbmXf8bH9vo3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEIwQi81QUVCNUVCMkZD QzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1FwQzdqLXhGdVpkX3hzZjIt amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVPdGQtbGVTUXBDN2oteEZ1WmRfeHNmMi1qYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEIwQi81QUVCNUVCMkZDQzUxMUU5OTg1OEE5MUVDNEY5QUUwMi81T3RkLWxlU1Fw QzdqLXhGdVpkX3hzZjItamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiw/hvKgEZ0lA1nSKwaWEwT3R6uLnSl26emYlcJ6sL3wIA/L03VK5UuLYGQAE xRBIiTVSntw21I+ySKThLOVXDnovjPtZ27zoC9vqAunsG6yUOrzvzNRAEgMrOWT6 IB4fVQlPdsRFWcXjlV4hECADrUnyiV/uJOcJJjhZPKp3N5Eb+pSxJR3Ng27Limqu NGCsBURyF1jRY2kvt4DJ4IzmNStnQ7E6z/yEUuvQlSs+oTner8nlssjk3Uyf/iwu Gw59O6OoDjo/vPO0OgVBTYNL4RWFm0BxP0eqdYYVHzfR2bDNHOm4MmO0yazpjD7B I7cIysPPuWYEJCFAJX1fiNHpTw== -----END CERTIFICATE-----Generated at Mon Jul 27 22:27:42 2026 by rpki-client