$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft File: mj2guGjFidoYRBoqcOBRSsl8QE0.mft (raw, json) Hash identifier: 8hHJv4nRhvkA2RiYSdgs8+CdakBNv0Jm1bbR4eKiEDE= Subject key identifier: 5F:1F:C8:BC:A1:43:09:4D:7D:73:A8:63:AA:DC:8C:6A:51:D3:64:3E Authority key identifier: 9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D Certificate issuer: /CN=A91AC6B1/serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft Manifest number: 54 Signing time: Tue 21 Jul 2026 10:06:50 +0000 Manifest this update: Tue 21 Jul 2026 10:06:49 +0000 Manifest next update: Tue 28 Jul 2026 10:06:49 +0000 Files and hashes: 1: mj2guGjFidoYRBoqcOBRSsl8QE0.crl (hash: eya3gavlW6I6XzLEhgG9EuJERKN2Y0JyglBNYmY2u58=) 2: 920A3E000E0611F1A3BA1443083D8C67.roa (hash: b9zTdqNPieWG5+8wmYAln2q07Z28/oicnZ6JHHByN/Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC6B1, serialNumber=9A3DA0B868C589DA18441A2A70E0514AC97C404D Validity Not Before: Jul 21 10:06:49 2026 GMT Not After : Jul 28 10:06:49 2026 GMT Subject: CN=6a5f44ba-e2eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:95:7c:c8:5d:51:e2:4c:ea:0a:e0:b9:28: de:0a:eb:37:8c:e5:cd:9d:78:94:9b:73:58:10:29: 76:6c:66:18:f2:88:ee:36:dc:3e:f8:a1:81:7d:aa: 66:3a:22:cd:02:4d:e4:86:62:c3:4c:7c:e1:a5:92: 48:07:9d:12:63:44:95:e2:96:ca:73:49:e5:4b:28: 75:51:68:ba:ea:87:e5:43:eb:61:9a:6e:7d:ae:47: 3f:72:ef:40:02:8a:9d:5c:f4:1c:f4:50:77:b7:89: 6d:55:82:90:59:0a:bc:4f:f1:a1:2f:f3:c3:d2:df: 73:22:41:c2:ca:b3:50:a7:e8:0f:12:2f:a0:b3:72: e2:31:be:7f:f7:73:c9:de:e4:3b:73:c3:6c:f0:78: b5:c5:2a:df:2d:87:ff:9b:09:3e:10:fb:c4:db:d9: 3f:5c:cd:c9:fe:1e:ee:b1:49:93:30:17:c9:4a:6b: e9:bd:90:f9:8d:68:57:08:ca:05:80:07:78:0b:90: 8a:5d:26:de:1a:62:d1:83:9b:5c:f8:86:8a:ef:57: 81:f9:de:a5:18:78:b1:2e:da:99:cc:6a:3e:c0:9b: ca:05:b8:c8:e5:38:3d:fa:0c:93:92:a6:53:c4:26: af:70:f1:e1:a6:c7:7e:ed:10:98:d1:23:76:1d:e4: 06:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1F:C8:BC:A1:43:09:4D:7D:73:A8:63:AA:DC:8C:6A:51:D3:64:3E X509v3 Authority Key Identifier: keyid:9A:3D:A0:B8:68:C5:89:DA:18:44:1A:2A:70:E0:51:4A:C9:7C:40:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj2guGjFidoYRBoqcOBRSsl8QE0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC6B1/F4A9157A088B11F1BCB153E70F3D8C67/mj2guGjFidoYRBoqcOBRSsl8QE0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:c9:96:66:1b:0a:bd:b7:89:fd:36:c9:af:9d:3c:3d:df:02: 0b:b3:23:14:f9:8f:7c:8e:ad:ff:4f:96:54:23:31:12:27:77: 5c:6d:3e:54:91:63:57:13:47:7f:91:c9:1c:55:f0:4b:32:ce: 3c:de:39:57:44:cd:22:68:e8:fa:9c:ef:49:ae:0d:aa:f0:cd: 8e:f9:5e:d1:36:a6:8d:34:a4:0e:c7:50:ca:54:34:8e:d2:89: 25:a1:92:16:28:77:36:cb:e9:4b:4c:37:5a:81:ed:62:0b:9e: 66:45:94:3f:cd:64:11:40:c8:d4:c5:e4:de:dd:8f:c8:03:a6: 34:b9:88:96:4d:09:34:3d:e3:e7:5e:20:0d:11:4f:5c:dc:03: 3a:dd:c2:b8:e6:ab:ea:65:7f:1e:09:89:df:6c:12:80:76:ce: 75:65:8c:38:64:43:c3:94:95:c0:c7:b9:11:d8:9c:37:99:3f: 2e:12:06:53:b8:d7:60:d0:29:01:9d:7e:9f:b4:c6:fe:aa:d7: e9:a5:61:e9:fe:eb:e0:3c:9b:60:6b:4e:48:ea:42:bf:fa:a9: 4b:f1:c8:3b:03:bc:86:44:1b:dd:e8:c8:1c:e6:f2:88:35:32: 87:86:6b:9e:04:ae:c9:0c:73:5a:db:27:3a:c4:58:ac:32:69: 94:3d:35:69 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QzZCMTExMC8GA1UEBRMoOUEzREEwQjg2OEM1ODlEQTE4NDQxQTJBNzBFMDUxNEFD OTdDNDA0RDAeFw0yNjA3MjExMDA2NDlaFw0yNjA3MjgxMDA2NDlaMBgxFjAUBgNV BAMTDTZhNWY0NGJhLWUyZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCSYpV8yF1R4kzqCuC5KN4K6zeM5c2deJSbc1gQKXZsZhjyiO423D74oYF9qmY6 Is0CTeSGYsNMfOGlkkgHnRJjRJXilspzSeVLKHVRaLrqh+VD62Gabn2uRz9y70AC ip1c9Bz0UHe3iW1VgpBZCrxP8aEv88PS33MiQcLKs1Cn6A8SL6CzcuIxvn/3c8ne 5Dtzw2zweLXFKt8th/+bCT4Q+8Tb2T9czcn+Hu6xSZMwF8lKa+m9kPmNaFcIygWA B3gLkIpdJt4aYtGDm1z4horvV4H53qUYeLEu2pnMaj7Am8oFuMjlOD36DJOSplPE Jq9w8eGmx37tEJjRI3Yd5AZjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXx/IvKFD CU19c6hjqtyMalHTZD4wHwYDVR0jBBgwFoAUmj2guGjFidoYRBoqcOBRSsl8QE0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFDNkIxL0Y0QTkxNTdBMDg4 QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRvWVJCb3FjT0JSU3NsOFFF MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWoyZ3VHakZpZG9ZUkJvcWNPQlJTc2w4UUUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFD NkIxL0Y0QTkxNTdBMDg4QjExRjFCQ0IxNTNFNzBGM0Q4QzY3L21qMmd1R2pGaWRv WVJCb3FjT0JSU3NsOFFFMC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBQyZZmGwq9t4n9NsmvnTw93wILsyMU+Y98jq3/T5ZUIzESJ3dcbT5UkWNXE0d/ kckcVfBLMs483jlXRM0iaOj6nO9Jrg2q8M2O+V7RNqaNNKQOx1DKVDSO0okloZIW KHc2y+lLTDdage1iC55mRZQ/zWQRQMjUxeTe3Y/IA6Y0uYiWTQk0PePnXiANEU9c 3AM63cK45qvqZX8eCYnfbBKAds51ZYw4ZEPDlJXAx7kR2Jw3mT8uEgZTuNdg0CkB nX6ftMb+qtfppWHp/uvgPJtga05I6kK/+qlL8cg7A7yGRBvd6Mgc5vKINTKHhmue BK7JDHNa2yc6xFisMmmUPTVp -----END CERTIFICATE-----Generated at Tue Jul 21 23:48:35 2026 by rpki-client