$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.mft File: G6ndjcO37zeOvYfhaOTrnw5JysA.mft (raw, json) Hash identifier: 8FpJvrPbK/RYqfI0CfNbD63pPR9Qf1EnVugRfKR5L30= Subject key identifier: 69:55:F0:AC:11:5A:D9:C4:C6:BE:F0:B5:04:D2:A7:48:AE:69:9B:9A Authority key identifier: 1B:A9:DD:8D:C3:B7:EF:37:8E:BD:87:E1:68:E4:EB:9F:0E:49:CA:C0 Certificate issuer: /CN=A91BB946/serialNumber=1BA9DD8DC3B7EF378EBD87E168E4EB9F0E49CAC0 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6ndjcO37zeOvYfhaOTrnw5JysA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.mft Manifest number: 02 Signing time: Tue 21 Jul 2026 07:49:59 +0000 Manifest this update: Tue 21 Jul 2026 07:49:58 +0000 Manifest next update: Tue 28 Jul 2026 07:49:58 +0000 Files and hashes: 1: G6ndjcO37zeOvYfhaOTrnw5JysA.crl (hash: lNpkbd29XcTz7e78qC+bwJDP4YFeh5d7W7bW7iW0kW8=) 2: C2B4BDB684D811F1AA5089AC5AA30FBC.roa (hash: ftQaGXx1fIvdKMJy0O9Lu4ioVXxX5G6/noF52zI+HLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.crl rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6ndjcO37zeOvYfhaOTrnw5JysA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB946, serialNumber=1BA9DD8DC3B7EF378EBD87E168E4EB9F0E49CAC0 Validity Not Before: Jul 21 07:49:58 2026 GMT Not After : Jul 28 07:49:58 2026 GMT Subject: CN=6a5f24a7-d6a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a4:b7:47:fd:07:cf:11:f9:3d:f2:15:06:5f: e1:98:3c:a4:8b:d5:64:67:0c:7d:cb:ba:0b:89:a5: 78:de:11:ec:8d:5e:f5:a8:4c:f8:37:4f:ee:63:42: c9:fb:a1:32:86:b5:4b:a4:20:8e:bf:f0:46:ad:30: 39:2f:42:d6:79:4f:7d:40:d3:dd:1a:fe:55:bd:96: e1:48:0c:a8:de:d9:3c:c7:df:1a:fb:bf:f9:a8:8a: c9:3f:fd:d3:9c:1e:f4:5a:b1:97:a6:35:df:f6:15: 63:f1:1e:6f:32:82:76:27:89:89:0f:6a:02:17:2e: c2:0b:88:3d:2c:94:12:d1:91:55:3f:19:b9:26:91: 5e:07:6d:29:2d:1e:bc:a1:f2:a7:25:e0:5b:c6:2d: 8e:98:1a:32:87:28:3a:67:6b:7f:97:47:9f:d4:fe: a5:42:cc:2e:c2:ad:fb:56:14:85:d1:64:ad:57:9e: 06:19:aa:fd:d4:d3:ef:c5:60:51:79:24:d6:73:b7: 9d:8d:dd:f8:07:fa:4f:e6:cb:cf:fe:d9:c6:e5:d3: f3:3f:f7:fa:1c:00:6d:4c:48:30:5a:c7:08:79:63: 6e:f2:73:77:e3:bc:65:33:6b:94:c1:ce:a9:e0:ae: b4:ec:61:76:c1:a1:00:45:44:b3:72:15:9e:f5:9c: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:55:F0:AC:11:5A:D9:C4:C6:BE:F0:B5:04:D2:A7:48:AE:69:9B:9A X509v3 Authority Key Identifier: keyid:1B:A9:DD:8D:C3:B7:EF:37:8E:BD:87:E1:68:E4:EB:9F:0E:49:CA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6ndjcO37zeOvYfhaOTrnw5JysA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB946/646FD6D284D811F196CAEBA85AA30FBC/G6ndjcO37zeOvYfhaOTrnw5JysA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:71:38:6d:8a:13:fc:be:76:bf:83:16:b5:6e:35:0d:fd:16: e4:0b:37:d7:1f:9c:78:50:9e:e7:45:3d:f3:c5:7e:85:ab:7a: b2:f1:b3:8a:6b:5b:1f:71:22:59:c3:36:59:fa:95:25:95:68: c9:14:2e:ed:1e:ec:28:42:82:a9:5b:d5:13:14:20:61:24:60: 64:2b:90:1b:4e:c5:3b:63:3e:63:0e:41:7a:45:5a:31:08:e3: 85:3d:04:06:ea:0a:d2:0d:cd:29:ab:57:1b:26:4e:67:1d:f0: b4:65:54:84:b8:f5:a4:dd:a3:a4:22:fc:16:80:a8:60:78:c5: 99:df:e5:92:7e:30:01:4e:07:3d:4e:f1:44:7d:60:c5:81:52: 37:b9:6c:20:2b:2a:33:61:35:cc:a3:c9:b6:06:9a:b6:c0:8f: f8:6a:35:63:aa:98:be:e3:81:b1:3e:5d:26:ce:50:fa:d5:b8: 7e:51:81:aa:4b:25:a6:99:7b:9c:f8:89:d1:49:d0:de:31:b5: ae:ae:21:47:6a:55:83:d2:b8:7c:9c:50:4a:34:28:1a:57:3b: e6:12:26:52:58:10:0e:06:91:6f:91:9a:74:6f:2a:88:fc:2c: 6a:10:44:d8:44:22:d4:a1:a4:9d:55:7d:c9:16:3a:f5:47:64: a0:9c:e8:95 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Qjk0NjExMC8GA1UEBRMoMUJBOUREOERDM0I3RUYzNzhFQkQ4N0UxNjhFNEVCOUYw RTQ5Q0FDMDAeFw0yNjA3MjEwNzQ5NThaFw0yNjA3MjgwNzQ5NThaMBgxFjAUBgNV BAMTDTZhNWYyNGE3LWQ2YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCNpLdH/QfPEfk98hUGX+GYPKSL1WRnDH3LuguJpXjeEeyNXvWoTPg3T+5jQsn7 oTKGtUukII6/8EatMDkvQtZ5T31A090a/lW9luFIDKje2TzH3xr7v/moisk//dOc HvRasZemNd/2FWPxHm8ygnYniYkPagIXLsILiD0slBLRkVU/GbkmkV4HbSktHryh 8qcl4FvGLY6YGjKHKDpna3+XR5/U/qVCzC7CrftWFIXRZK1XngYZqv3U0+/FYFF5 JNZzt52N3fgH+k/my8/+2cbl0/M/9/ocAG1MSDBaxwh5Y27yc3fjvGUza5TBzqng rrTsYXbBoQBFRLNyFZ71nDtVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUaVXwrBFa 2cTGvvC1BNKnSK5pm5owHwYDVR0jBBgwFoAUG6ndjcO37zeOvYfhaOTrnw5JysAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOTQ2LzY0NkZENkQyODRE ODExRjE5NkNBRUJBODVBQTMwRkJDL0c2bmRqY08zN3plT3ZZZmhhT1Rybnc1Snlz QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZuZGpjTzM3emVPdllmaGFPVHJudzVKeXNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC OTQ2LzY0NkZENkQyODREODExRjE5NkNBRUJBODVBQTMwRkJDL0c2bmRqY08zN3pl T3ZZZmhhT1Rybnc1SnlzQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAecThtihP8vna/gxa1bjUN/RbkCzfXH5x4UJ7nRT3zxX6Fq3qy8bOKa1sfcSJZ wzZZ+pUllWjJFC7tHuwoQoKpW9UTFCBhJGBkK5AbTsU7Yz5jDkF6RVoxCOOFPQQG 6grSDc0pq1cbJk5nHfC0ZVSEuPWk3aOkIvwWgKhgeMWZ3+WSfjABTgc9TvFEfWDF gVI3uWwgKyozYTXMo8m2Bpq2wI/4ajVjqpi+44GxPl0mzlD61bh+UYGqSyWmmXuc +InRSdDeMbWuriFHalWD0rh8nFBKNCgaVzvmEiZSWBAOBpFvkZp0byqI/CxqEETY RCLUoaSdVX3JFjr1R2SgnOiV -----END CERTIFICATE-----Generated at Tue Jul 21 22:12:49 2026 by rpki-client