$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft File: 33H2KoYwGsbTrKQJgyzDqdmcmhE.mft (raw, json) Hash identifier: i0JwrMJsTE10uq5ab4yoNlhN5JuyHHy2jIzGGFz7UjY= Subject key identifier: 77:FC:14:AC:2A:99:13:4A:EA:1E:06:34:78:D7:34:60:4C:09:C4:52 Authority key identifier: DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 Certificate issuer: /CN=A91AE7C5/serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft Manifest number: 47 Signing time: Tue 21 Jul 2026 10:16:23 +0000 Manifest this update: Tue 21 Jul 2026 10:16:22 +0000 Manifest next update: Tue 28 Jul 2026 10:16:22 +0000 Files and hashes: 1: 33H2KoYwGsbTrKQJgyzDqdmcmhE.crl (hash: +G5eZMDjrfMUDwH/bkt7bhSjc8qinbApLUy0xOg0tF4=) 2: 08A46B6A1B5111F18293DF0B253D8C67.roa (hash: Hv/o1379KMJtJvWEMRxNQ2Z7UTHeeWhB/X6YFG7HH3s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:16:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE7C5, serialNumber=DF71F62A86301AC6D3ACA409832CC3A9D99C9A11 Validity Not Before: Jul 21 10:16:22 2026 GMT Not After : Jul 28 10:16:22 2026 GMT Subject: CN=6a5f46f7-eebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:8c:1c:61:36:e9:39:8e:71:31:1b:71:c9: ac:bb:cf:de:4d:6c:6a:eb:cf:be:94:2d:ce:66:b5: e8:1b:7e:46:4f:8d:11:40:47:5b:2c:ef:53:81:4b: 96:5f:38:84:30:88:e7:ea:90:39:a3:76:3a:42:6e: 7c:56:99:96:4b:0d:45:ab:f5:92:76:6d:f4:93:5e: 84:cf:dd:af:78:60:a1:0b:7c:a3:02:53:4b:d2:f9: c1:ff:61:1f:6a:e5:34:65:96:5f:be:c6:a8:da:ee: 6d:28:05:38:6d:e1:90:d4:cb:b2:a6:88:d6:3c:34: 6d:e0:3f:66:77:9d:32:96:d1:7a:20:2e:4a:fd:ca: f1:69:e0:8b:3e:4a:99:c3:5a:f3:a2:6d:87:c3:28: 79:2c:4b:e4:57:eb:1a:19:cb:2f:85:60:e5:cb:df: e1:9d:4b:14:30:5b:ab:da:55:91:a5:00:79:ef:83: db:f6:17:e6:55:50:be:27:ce:0a:13:84:79:05:90: 37:5a:40:52:95:d7:60:20:93:77:de:20:2a:6f:b0: 8b:5c:06:94:37:a4:43:d7:86:54:49:c8:21:b7:ad: 5f:ee:e0:20:ef:d5:94:23:52:8f:a2:f9:99:8d:0b: be:bc:6d:ae:8b:b2:5e:41:bd:3a:b8:7f:1e:42:ff: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FC:14:AC:2A:99:13:4A:EA:1E:06:34:78:D7:34:60:4C:09:C4:52 X509v3 Authority Key Identifier: keyid:DF:71:F6:2A:86:30:1A:C6:D3:AC:A4:09:83:2C:C3:A9:D9:9C:9A:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/33H2KoYwGsbTrKQJgyzDqdmcmhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/330749461B5011F1BD5AD0E8243D8C67/33H2KoYwGsbTrKQJgyzDqdmcmhE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a9:c6:db:e0:fe:92:24:b1:0a:4d:c5:14:42:51:2a:d2:17: 06:2d:b8:e9:db:20:90:0b:89:9e:13:42:7b:d3:7d:a2:cd:e3: 4a:ca:48:1b:e4:f4:17:fc:b0:00:2f:f8:0a:51:7b:c8:a0:34: cc:87:f2:fd:fb:ee:4f:8c:98:6c:48:3d:11:2c:a6:8c:0b:7f: 1a:d8:f6:49:b9:b8:5b:eb:47:f0:d2:1a:16:a3:38:63:b5:fe: 77:90:8c:91:82:48:d1:8e:d7:e6:f5:58:e6:85:e1:66:65:cd: a7:c4:42:5d:d0:ce:09:ea:72:98:a2:16:b2:32:5e:51:a0:4f: 5c:27:3e:8d:f3:ef:35:2b:15:ac:26:97:e8:ca:37:21:c0:6e: 6c:2e:e0:2c:04:41:a6:f0:c6:3c:77:64:52:13:37:e7:92:6b: 39:bc:58:d3:81:a8:4c:06:aa:48:5e:b2:c2:07:ba:15:69:92: 73:a7:27:25:39:00:36:aa:b0:58:da:99:d4:7f:b5:fd:7d:63: e5:36:ca:19:16:ec:9f:c5:d5:10:59:04:fe:ab:1b:6d:55:77: d1:e5:0d:15:05:14:3e:07:d7:ef:20:21:6a:ec:35:cc:0e:6f: 35:83:a5:6c:2f:3d:17:f2:97:9c:ab:80:f8:ca:1a:dd:88:c5: d2:f7:39:f2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RTdDNTExMC8GA1UEBRMoREY3MUY2MkE4NjMwMUFDNkQzQUNBNDA5ODMyQ0MzQTlE OTlDOUExMTAeFw0yNjA3MjExMDE2MjJaFw0yNjA3MjgxMDE2MjJaMBgxFjAUBgNV BAMTDTZhNWY0NmY3LWVlYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCczowcYTbpOY5xMRtxyay7z95NbGrrz76ULc5mtegbfkZPjRFAR1ss71OBS5Zf OIQwiOfqkDmjdjpCbnxWmZZLDUWr9ZJ2bfSTXoTP3a94YKELfKMCU0vS+cH/YR9q 5TRlll++xqja7m0oBTht4ZDUy7KmiNY8NG3gP2Z3nTKW0XogLkr9yvFp4Is+SpnD WvOibYfDKHksS+RX6xoZyy+FYOXL3+GdSxQwW6vaVZGlAHnvg9v2F+ZVUL4nzgoT hHkFkDdaQFKV12Agk3feICpvsItcBpQ3pEPXhlRJyCG3rV/u4CDv1ZQjUo+i+ZmN C768ba6Lsl5BvTq4fx5C/xTrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUd/wUrCqZ E0rqHgY0eNc0YEwJxFIwHwYDVR0jBBgwFoAU33H2KoYwGsbTrKQJgyzDqdmcmhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFFN0M1LzMzMDc0OTQ2MUI1 MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3NiVHJLUUpneXpEcWRtY21o RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMzNIMktvWXdHc2JUcktRSmd5ekRxZG1jbWhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFF N0M1LzMzMDc0OTQ2MUI1MDExRjFCRDVBRDBFODI0M0Q4QzY3LzMzSDJLb1l3R3Ni VHJLUUpneXpEcWRtY21oRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCGqcbb4P6SJLEKTcUUQlEq0hcGLbjp2yCQC4meE0J7032izeNKykgb5PQX/LAA L/gKUXvIoDTMh/L9++5PjJhsSD0RLKaMC38a2PZJubhb60fw0hoWozhjtf53kIyR gkjRjtfm9VjmheFmZc2nxEJd0M4J6nKYohayMl5RoE9cJz6N8+81KxWsJpfoyjch wG5sLuAsBEGm8MY8d2RSEzfnkms5vFjTgahMBqpIXrLCB7oVaZJzpyclOQA2qrBY 2pnUf7X9fWPlNsoZFuyfxdUQWQT+qxttVXfR5Q0VBRQ+B9fvICFq7DXMDm81g6Vs Lz0X8pecq4D4yhrdiMXS9zny -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:50 2026 by rpki-client