$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft File: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft (raw, json) Hash identifier: lSJpiiWptyOX5HC0jKBctZPBEAVldjjupxXjUC4qDQM= Subject key identifier: 82:FC:DB:53:CD:4A:3A:69:BA:98:81:3C:DE:0C:1C:18:33:DA:E9:6A Authority key identifier: 25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 Certificate issuer: /CN=A91B9A77/serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Certificate serial: 0371 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft Manifest number: 0362 Signing time: Mon 27 Jul 2026 02:01:57 +0000 Manifest this update: Mon 27 Jul 2026 02:01:57 +0000 Manifest next update: Mon 03 Aug 2026 02:01:57 +0000 Files and hashes: 1: JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl (hash: ps5JwLPYtVxvI2XS8DcJA6AlXRDOfAt9wP41eoosIJw=) 2: CD9B103E08DD11ED830BEB5CC4F9AE02.roa (hash: yibM9eFv/XCYroEUGNzHi6qKtlLPUreKYT8VNZNC2sA=) 3: 47C07DB84F9C11ED8B9E4333C4F9AE02.roa (hash: IcSskTZC8rLIHJAwVTRoZ3CDFnD/4dl9BDZKj8cykl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 881 (0x371) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=25293B0A7036C813A9CD02006DFC290AAF253274 Validity Not Before: Jul 27 02:01:57 2026 GMT Not After : Aug 3 02:01:57 2026 GMT Subject: CN=6a66bc15-e5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:97:79:38:af:14:c8:d8:38:8a:ef:39:95:36: c1:f6:48:f9:8c:b6:66:9f:e2:65:99:ac:60:7e:a9: ad:33:c2:82:6c:a4:1e:d6:cf:b3:ac:b6:b4:97:e0: 20:2e:3e:13:59:29:f2:0d:d1:e6:94:4b:a1:07:bf: 2b:03:10:c8:af:0b:e5:44:77:49:54:29:92:ed:a7: 72:ed:c9:0c:7b:64:ec:25:7b:49:2b:62:18:4e:9a: 48:68:63:69:74:1b:ca:34:f4:70:07:84:5e:0d:79: 3a:03:f9:01:94:0f:d0:23:6e:db:d0:cf:60:e2:a2: 22:55:03:cd:2d:f7:44:de:b8:3f:96:b5:c8:2c:14: 09:37:0c:24:8c:89:b0:e7:67:4e:c4:d5:fa:c3:1f: bf:51:b8:34:39:7e:89:d8:c8:1a:a4:20:c5:54:f0: c5:a5:54:e0:5b:db:6b:a5:df:46:14:38:d9:d0:09: a1:65:4d:c2:bb:5f:a7:e1:b9:06:6a:c5:3a:f8:a5: 1d:4a:5c:64:45:b3:35:19:95:07:d6:db:7f:be:7c: 21:8b:3e:ee:01:54:dd:d6:c2:a0:22:4f:01:fd:e5: 5a:66:95:a0:cf:66:f8:46:2c:ae:cd:b9:c7:f4:0a: ac:bf:23:16:fe:01:9d:34:19:4b:6b:30:1f:00:97: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FC:DB:53:CD:4A:3A:69:BA:98:81:3C:DE:0C:1C:18:33:DA:E9:6A X509v3 Authority Key Identifier: keyid:25:29:3B:0A:70:36:C8:13:A9:CD:02:00:6D:FC:29:0A:AF:25:32:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/D3AD07E208D911EDBE92C954C4F9AE02/JSk7CnA2yBOpzQIAbfwpCq8lMnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:7e:34:ce:38:37:60:95:97:3b:ea:db:e5:5a:8c:bf:55:8a: b7:1d:9f:e3:6e:c7:63:c7:2f:4e:77:e4:79:68:ad:90:37:4e: 31:83:c6:22:ea:32:af:4c:b0:62:5a:05:03:e3:1a:c9:de:8e: 22:3a:3f:62:36:90:81:a3:b4:a4:df:0f:59:31:9d:e0:ed:31: 6b:0f:a3:aa:9f:ed:a2:8c:02:f2:40:17:23:56:06:08:f2:2e: 46:0e:b6:f3:e0:cb:30:c2:4f:a5:c2:36:39:a8:66:f0:5d:8a: 49:ba:70:34:85:0b:33:c4:46:cf:f7:38:30:47:a5:70:47:a7: e9:51:2b:5b:69:9c:bd:3c:34:dc:3d:bd:40:dd:90:ba:44:75: 26:f8:d0:69:93:c2:e3:61:0c:29:03:18:99:44:d7:2a:95:a0: ae:db:a7:a3:4f:a1:92:94:e6:b4:0c:c4:dc:fb:ce:d3:63:1f: 33:5a:53:e1:61:e2:c9:13:ed:88:99:c0:ee:a4:b1:45:a4:3d: 1d:48:c0:df:88:0c:e3:4e:28:0f:8d:2f:c5:6b:53:74:94:ea: 45:2b:3d:13:4d:2e:76:65:7a:ff:0e:d6:76:12:8b:40:67:b3: d4:fb:66:76:c4:46:a6:31:82:c0:5a:1b:69:0f:d1:9c:f9:c4: d7:f7:4c:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKDI1MjkzQjBBNzAzNkM4MTNBOUNEMDIwMDZERkMyOTBB QUYyNTMyNzQwHhcNMjYwNzI3MDIwMTU3WhcNMjYwODAzMDIwMTU3WjAYMRYwFAYD VQQDEw02YTY2YmMxNS1lNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy5d5OK8UyNg4iu85lTbB9kj5jLZmn+JlmaxgfqmtM8KCbKQe1s+zrLa0l+Ag Lj4TWSnyDdHmlEuhB78rAxDIrwvlRHdJVCmS7ady7ckMe2TsJXtJK2IYTppIaGNp dBvKNPRwB4ReDXk6A/kBlA/QI27b0M9g4qIiVQPNLfdE3rg/lrXILBQJNwwkjImw 52dOxNX6wx+/Ubg0OX6J2MgapCDFVPDFpVTgW9trpd9GFDjZ0AmhZU3Cu1+n4bkG asU6+KUdSlxkRbM1GZUH1tt/vnwhiz7uAVTd1sKgIk8B/eVaZpWgz2b4RiyuzbnH 9AqsvyMW/gGdNBlLazAfAJecFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIL821PN SjppupiBPN4MHBgz2ulqMB8GA1UdIwQYMBaAFCUpOwpwNsgTqc0CAG38KQqvJTJ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9EM0FEMDdFMjA4 RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlCT3B6UUlBYmZ3cENxOGxN blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pTazdDbkEyeUJPcHpRSUFiZndwQ3E4bE1uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9EM0FEMDdFMjA4RDkxMUVEQkU5MkM5NTRDNEY5QUUwMi9KU2s3Q25BMnlC T3B6UUlBYmZ3cENxOGxNblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh340zjg3YJWXO+rb5VqMv1WKtx2f427HY8cvTnfkeWitkDdOMYPGIuoyr0yw YloFA+Mayd6OIjo/YjaQgaO0pN8PWTGd4O0xaw+jqp/toowC8kAXI1YGCPIuRg62 8+DLMMJPpcI2Oahm8F2KSbpwNIULM8RGz/c4MEelcEen6VErW2mcvTw03D29QN2Q ukR1JvjQaZPC42EMKQMYmUTXKpWgrtuno0+hkpTmtAzE3PvO02MfM1pT4WHiyRPt iJnA7qSxRaQ9HUjA34gM404oD40vxWtTdJTqRSs9E00udmV6/w7WdhKLQGez1Ptm dsRGpjGCwFobaQ/RnPnE1/dMig== -----END CERTIFICATE-----Generated at Mon Jul 27 23:29:56 2026 by rpki-client