$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json) Hash identifier: OLDQZJO5CmhSxES674RUXppgc8lmAX+rSZCMBIBe7V8= Subject key identifier: 9A:A3:6E:E2:11:B6:F0:6B:16:0A:F0:31:17:E7:27:7E:0F:43:BD:04 Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft Manifest number: D1 Signing time: Sat 25 Jul 2026 08:30:27 +0000 Manifest this update: Sat 25 Jul 2026 08:30:26 +0000 Manifest next update: Sat 01 Aug 2026 08:30:26 +0000 Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: esdN4JOjaWv9ZaqqyC61CAZhnq2+1ZrrRntWUMdfkfE=) 2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: 8TFnySzYjqGkLlYHhhpYGf9ApF8MAtmix4sZ0+hIQmI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 08:30:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 220 (0xdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Jul 25 08:30:26 2026 GMT Not After : Aug 1 08:30:26 2026 GMT Subject: CN=6a647422-7e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:3f:12:7b:f2:e3:14:f9:fd:7e:ee:db:54: 56:03:23:a4:e2:79:38:51:dd:ca:c9:ad:ec:06:55: 9c:6e:1e:00:0c:5a:61:ea:bd:e1:bf:31:f5:5f:33: 83:d8:af:24:63:a2:dd:d1:d2:9a:8b:a0:75:93:44: 6a:1a:a5:8a:5f:67:9b:68:b8:7f:3e:24:9f:85:1e: d8:22:fe:26:43:a6:97:5d:52:8c:4f:06:b0:a2:e8: 19:c0:73:63:79:30:29:9a:bf:bc:8c:d7:a8:16:2b: 2a:49:f5:8c:13:dc:3b:39:37:1e:29:02:35:5c:db: be:e4:37:b0:72:ae:4b:f6:d9:6c:6e:85:90:e0:c7: 24:35:53:84:02:9a:a1:35:f6:85:70:fa:d5:12:61: 42:29:58:57:4e:84:d6:0c:d6:12:63:bd:69:28:53: 8c:31:f9:4a:d1:f7:ce:c6:eb:c7:80:ac:39:a8:d0: 81:17:08:ef:d0:5f:73:15:82:68:37:67:1d:46:e8: 23:f4:29:87:a3:1a:fa:6b:64:44:fe:73:69:bf:d4: 7b:5f:2e:44:75:69:4c:ff:a9:2a:6e:4f:62:aa:be: 87:69:46:ec:79:66:46:3b:44:a1:35:0b:b1:b0:a7: b1:9d:82:5a:d0:27:df:c1:28:f8:b9:f6:cf:d7:38: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A3:6E:E2:11:B6:F0:6B:16:0A:F0:31:17:E7:27:7E:0F:43:BD:04 X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d1:05:0f:50:d2:0b:c1:7b:85:8b:32:33:50:2b:73:e8:66: d1:d5:e8:94:e0:c4:32:71:83:49:aa:35:21:0b:3a:51:c6:44: b2:be:ba:6b:1c:a8:c7:fb:61:1a:d7:05:f5:02:e3:00:84:02: 52:9f:32:4d:71:34:02:89:bd:49:da:60:d0:56:52:ae:13:8f: 57:1b:07:3f:81:94:72:f0:85:c5:6e:3e:69:3b:42:69:37:06: a6:4d:ce:87:05:56:5c:ad:b5:52:68:3a:ed:4b:9b:98:c6:b4: 3a:40:b5:04:67:f2:e8:ec:0e:fa:c0:60:f7:b3:38:a5:5a:46: e7:1a:7b:cd:c2:d9:26:80:64:dd:07:b4:5c:7a:6c:0e:ef:fe: cc:e5:98:88:65:0a:62:f0:c3:b2:58:87:7f:7f:58:f2:73:e0: 48:c9:e8:e8:6e:d8:7c:85:c3:95:94:a1:c8:f3:31:56:1b:bc: 7f:dc:1a:6e:8c:c5:fa:7f:37:10:94:56:39:27:74:d0:c7:06: 38:6c:56:d6:d1:c6:57:a9:9c:9f:da:a7:7d:36:b5:b1:47:85: 9e:e6:1e:cc:c7:de:06:e5:63:c9:05:90:32:77:6d:fa:13:d7: d1:a1:3f:66:70:ec:e3:99:1e:aa:ed:51:b2:74:af:4f:09:43: c8:f4:a0:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDNjgxMTAvBgNVBAUTKDdFM0FDNjkxOUMyMjhGOTgwMUFDRjkwNzVEOTA4RTUx MkRENkRBMzQwHhcNMjYwNzI1MDgzMDI2WhcNMjYwODAxMDgzMDI2WjAYMRYwFAYD VQQDEw02YTY0NzQyMi03ZTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxH0/Envy4xT5/X7u21RWAyOk4nk4Ud3Kya3sBlWcbh4ADFph6r3hvzH1XzOD 2K8kY6Ld0dKai6B1k0RqGqWKX2ebaLh/PiSfhR7YIv4mQ6aXXVKMTwawougZwHNj eTApmr+8jNeoFisqSfWME9w7OTceKQI1XNu+5Dewcq5L9tlsboWQ4MckNVOEApqh NfaFcPrVEmFCKVhXToTWDNYSY71pKFOMMflK0ffOxuvHgKw5qNCBFwjv0F9zFYJo N2cdRugj9CmHoxr6a2RE/nNpv9R7Xy5EdWlM/6kqbk9iqr6HaUbseWZGO0ShNQux sKexnYJa0CffwSj4ufbP1zgvbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqjbuIR tvBrFgrwMRfnJ34PQ70EMB8GA1UdIwQYMBaAFH46xpGcIo+YAaz5B12QjlEt1to0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREM2OC81NkZDRTA4QzUx OTcxMUYwQjZFOTc4NUVDNEY5QUUwMi9manJHa1p3aWo1Z0JyUGtIWFpDT1VTM1cy alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REM2OC81NkZDRTA4QzUxOTcxMUYwQjZFOTc4NUVDNEY5QUUwMi9manJHa1p3aWo1 Z0JyUGtIWFpDT1VTM1cyalEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjdEFD1DSC8F7hYsyM1Arc+hm0dXolODEMnGDSao1IQs6UcZEsr66axyox/th GtcF9QLjAIQCUp8yTXE0Aom9Sdpg0FZSrhOPVxsHP4GUcvCFxW4+aTtCaTcGpk3O hwVWXK21Umg67UubmMa0OkC1BGfy6OwO+sBg97M4pVpG5xp7zcLZJoBk3Qe0XHps Du/+zOWYiGUKYvDDsliHf39Y8nPgSMno6G7YfIXDlZShyPMxVhu8f9wabozF+n83 EJRWOSd00McGOGxW1tHGV6mcn9qnfTa1sUeFnuYezMfeBuVjyQWQMndt+hPX0aE/ ZnDs45kequ1RsnSvTwlDyPSgWg== -----END CERTIFICATE-----Generated at Sun Jul 26 20:33:15 2026 by rpki-client