$ rpki-client -vvf rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft File: DxfzfbyUhNluGgq8eKT5ys1e2oo.mft (raw, json) Hash identifier: HNy4hrXttNZawklGCWebBGNUCvyhE8PIC9yfxdgF7DA= Subject key identifier: 6A:78:E7:67:34:F3:F2:58:86:BC:34:20:B1:57:72:E9:79:10:A4:CC Authority key identifier: 0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A Certificate issuer: /CN=A91B036A/serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft Manifest number: 01EA Signing time: Sun 05 Jul 2026 04:31:20 +0000 Manifest this update: Sun 05 Jul 2026 04:31:19 +0000 Manifest next update: Sun 12 Jul 2026 04:31:19 +0000 Files and hashes: 1: DxfzfbyUhNluGgq8eKT5ys1e2oo.crl (hash: PISAejAvu8zWrYzc2iZwxFRVhvwKfiPQQu/LEaZPVjA=) 2: B060FCD00E4311F1AA27A3801A3D8C67.roa (hash: /jHwnGcod93mkftOIXxHTA503k6CU3aAb5UZbSQZX9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 04:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B036A, serialNumber=0F17F37DBC9484D96E1A0ABC78A4F9CACD5EDA8A Validity Not Before: Jul 5 04:31:19 2026 GMT Not After : Jul 12 04:31:19 2026 GMT Subject: CN=6a49de18-9bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:35:71:78:ba:c5:4e:9c:21:a0:8d:d0:76: 96:37:20:7a:4b:77:59:26:2b:c2:70:a2:f6:cb:ec: 87:93:39:1e:36:38:c3:31:32:2d:6b:98:01:6e:1e: a8:67:6e:49:00:85:48:7a:88:6e:d4:7a:cf:b8:62: f5:dd:e2:3b:04:24:c8:f2:cf:da:c1:3c:cd:3d:e5: 15:a8:d7:fb:2a:5c:85:87:cd:eb:ea:5c:6f:3f:67: 0e:e6:08:72:b2:80:8e:9a:8f:1d:eb:5f:80:de:26: 85:95:3f:3a:d8:f6:6a:2f:94:92:2c:22:af:b2:f9: cf:84:69:99:5e:cd:59:5b:99:5c:96:a9:e5:ec:11: d2:7a:6d:4d:62:e0:8e:7c:2a:4c:a3:62:c5:9e:05: 3a:43:ff:03:dd:d2:c0:13:28:a4:55:e9:42:96:87: 32:7a:86:15:3a:a3:1f:02:53:7f:84:ff:76:d3:17: 90:63:a6:07:df:1d:df:aa:44:2e:57:f1:67:17:14: 81:bb:c0:f0:fc:55:b8:78:e7:d9:08:c6:2a:56:05: f9:ae:c9:e0:94:8f:e2:b2:17:a2:6a:a0:90:e7:1b: d7:a8:2e:e4:fa:a9:c5:3c:b5:ec:e2:93:25:3c:66: 97:34:21:83:9c:9b:7f:9e:bb:31:10:cd:15:8d:3f: cf:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:78:E7:67:34:F3:F2:58:86:BC:34:20:B1:57:72:E9:79:10:A4:CC X509v3 Authority Key Identifier: keyid:0F:17:F3:7D:BC:94:84:D9:6E:1A:0A:BC:78:A4:F9:CA:CD:5E:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DxfzfbyUhNluGgq8eKT5ys1e2oo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B036A/BBC2F776D1F111EE86051A61C4F9AE02/DxfzfbyUhNluGgq8eKT5ys1e2oo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ab:a2:00:d1:41:73:41:a8:cd:72:86:23:a9:0e:ef:1f:97: 29:17:e2:8b:ee:aa:68:2c:5e:b8:e9:54:a4:7f:4b:51:74:4b: ab:0a:52:12:42:fd:02:21:3c:72:df:a5:7f:31:fa:88:81:9a: 3a:7e:0f:12:71:74:49:6e:a1:e1:fd:71:62:3e:b0:10:e1:54: 65:11:29:e1:f4:84:85:20:3e:8a:2c:36:9d:37:11:1d:a8:c5: 75:af:65:c0:92:35:d2:09:42:8f:06:94:0a:fb:f4:34:f7:68: 9a:0b:c4:cf:a1:01:f4:ca:cd:2e:15:fc:dc:cf:0f:08:68:48: c8:2d:20:48:a4:75:69:bc:02:33:fe:c3:8c:5d:63:b8:08:a0: 96:03:8d:fd:75:92:17:b9:29:3a:50:d6:b0:dd:d5:1f:7a:e2: f2:be:17:34:98:93:0f:6d:34:0e:19:45:53:e5:6c:48:8b:c8: f5:c0:37:58:74:68:ae:0b:21:ab:45:92:8d:9f:96:f2:9a:7f: 6a:01:20:5b:ff:7e:89:46:ac:37:87:1f:31:80:34:95:0d:14: 52:57:9c:1d:f2:b7:72:0d:f3:05:ce:bf:44:11:9e:ca:ab:3d: d6:2d:e0:0a:21:ce:29:a1:4e:89:ab:bb:2d:c5:91:90:93:86: c0:02:db:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAzNkExMTAvBgNVBAUTKDBGMTdGMzdEQkM5NDg0RDk2RTFBMEFCQzc4QTRGOUNB Q0Q1RURBOEEwHhcNMjYwNzA1MDQzMTE5WhcNMjYwNzEyMDQzMTE5WjAYMRYwFAYD VQQDEw02YTQ5ZGUxOC05YmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiM1cXi6xU6cIaCN0HaWNyB6S3dZJivCcKL2y+yHkzkeNjjDMTIta5gBbh6o Z25JAIVIeohu1HrPuGL13eI7BCTI8s/awTzNPeUVqNf7KlyFh83r6lxvP2cO5ghy soCOmo8d61+A3iaFlT862PZqL5SSLCKvsvnPhGmZXs1ZW5lclqnl7BHSem1NYuCO fCpMo2LFngU6Q/8D3dLAEyikVelClocyeoYVOqMfAlN/hP920xeQY6YH3x3fqkQu V/FnFxSBu8Dw/FW4eOfZCMYqVgX5rsnglI/isheiaqCQ5xvXqC7k+qnFPLXs4pMl PGaXNCGDnJt/nrsxEM0VjT/PcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGp452c0 8/JYhrw0ILFXcul5EKTMMB8GA1UdIwQYMBaAFA8X8328lITZbhoKvHik+crNXtqK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM2QS9CQkMyRjc3NkQx RjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhObHVHZ3E4ZUtUNXlzMWUy b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0R4ZnpmYnlVaE5sdUdncThlS1Q1eXMxZTJvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDM2QS9CQkMyRjc3NkQxRjExMUVFODYwNTFBNjFDNEY5QUUwMi9EeGZ6ZmJ5VWhO bHVHZ3E4ZUtUNXlzMWUyb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHKuiANFBc0GozXKGI6kO7x+XKRfii+6qaCxeuOlUpH9LUXRLqwpSEkL9AiE8 ct+lfzH6iIGaOn4PEnF0SW6h4f1xYj6wEOFUZREp4fSEhSA+iiw2nTcRHajFda9l wJI10glCjwaUCvv0NPdomgvEz6EB9MrNLhX83M8PCGhIyC0gSKR1abwCM/7DjF1j uAiglgON/XWSF7kpOlDWsN3VH3ri8r4XNJiTD200DhlFU+VsSIvI9cA3WHRorgsh q0WSjZ+W8pp/agEgW/9+iUasN4cfMYA0lQ0UUlecHfK3cg3zBc6/RBGeyqs91i3g CiHOKaFOiau7LcWRkJOGwALbtQ== -----END CERTIFICATE-----Generated at Sun Jul 5 08:39:56 2026 by rpki-client