$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft File: a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft (raw, json) Hash identifier: Y5nwd7/bHVUki5nTtCoj/Vpx4km3ih+0T4ofKteq0bQ= Subject key identifier: 69:ED:AB:B1:B1:95:BA:A4:22:3B:5B:D8:A3:18:67:6B:B2:41:1C:77 Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 Certificate issuer: /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft Manifest number: 013C Signing time: Tue 21 Jul 2026 07:35:03 +0000 Manifest this update: Tue 21 Jul 2026 07:35:02 +0000 Manifest next update: Tue 28 Jul 2026 07:35:02 +0000 Files and hashes: 1: a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl (hash: PZqvAgnR2kgbFX/VEq/rnn/PpYNGbt2ojY5ka4OvxVs=) 2: 1EC7CB56760211F1B3B8C5AB79A30FBC.roa (hash: Wfm/h2xxK745Y94Za2JSuJBHY7H1Tf1IdALtA1szaWo=) 3: 2C32A252760211F1835524AC79A30FBC.roa (hash: mDZPGG6cuYVhz8v924vB5h8F7Ar/FIJqlTg/7hiJaTI=) 4: BC6277B8700211F19DFE431193A30FBC.roa (hash: GSeqy5s5t10nUG8tqKIEN6PcxnTZQTa977Nxb8Hr8hw=) 5: 8BB9BA0A739411F195A6A0F072A30FBC.roa (hash: FzVInQGTXeLkU7QD7YhuspnWb0dDGRHG9zYuBhHsID4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:35:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904 Validity Not Before: Jul 21 07:35:02 2026 GMT Not After : Jul 28 07:35:02 2026 GMT Subject: CN=6a5f2127-8b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b7:bc:46:fa:75:db:89:0a:2c:32:9a:4a:2b: 77:eb:5b:aa:bd:62:be:d4:b2:84:f8:dc:94:e4:1e: dd:91:f0:9a:d4:61:13:86:03:ed:86:1d:ad:26:95: 59:f0:e7:c6:0f:75:26:1a:91:4f:a6:d7:e7:39:9e: 4a:fd:bb:9d:df:94:dc:00:fc:39:10:6c:ef:ba:fd: 4f:7b:cb:f3:3a:2a:12:b6:b2:d8:1a:8b:90:54:01: 8b:07:31:36:34:4a:c1:f7:f5:60:ac:2b:0c:61:0d: 43:a8:63:59:ac:7b:86:71:fb:ff:e6:4e:96:06:a5: 28:d4:14:64:10:99:03:6f:e1:d4:ec:14:10:f2:f2: 14:13:2e:54:b0:7e:5f:a0:79:9a:bb:d9:b8:93:89: 5f:c8:e5:2e:2c:ea:73:05:57:6d:ff:c2:9d:ca:68: 75:e7:ed:33:01:a8:d2:4b:72:a1:f8:17:45:58:71: 55:f8:5f:ad:86:6d:11:1d:d5:50:2a:53:b0:b9:04: 0e:fc:cc:b7:52:f7:cf:33:88:79:35:b3:64:df:c6: b7:ed:19:5a:19:c8:ce:5e:aa:4f:14:c8:d4:cc:8f: 6f:72:ed:71:12:91:a3:55:7f:81:6a:e0:50:f6:b4: 7c:6a:e2:0b:aa:ba:7d:c0:6a:b8:92:e8:23:3d:fe: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:ED:AB:B1:B1:95:BA:A4:22:3B:5B:D8:A3:18:67:6B:B2:41:1C:77 X509v3 Authority Key Identifier: keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:ce:2b:a7:5b:73:74:b6:44:cf:85:7a:31:8d:59:91:6e:ae: bc:65:2b:05:e1:00:26:7d:76:5b:b5:b1:d1:be:81:7c:a6:67: 4c:2f:98:a2:6f:f4:58:52:ef:ff:cf:d8:95:36:d6:2a:b0:6a: 82:78:ba:d0:9b:01:4e:83:fa:d0:6c:87:6c:18:aa:9d:e4:f6: b8:db:ed:c4:c4:3f:15:62:c9:06:e1:a5:50:ca:b9:5e:9d:a7: 4e:d8:8a:0a:e4:6a:bd:f9:b4:bb:da:18:29:e5:aa:fe:de:48: 87:05:65:dd:f0:a5:e2:f1:d7:05:a2:d1:14:b9:f4:cb:de:45: 25:64:77:93:56:55:9f:03:eb:e1:e2:3f:41:5a:08:60:40:f9: 07:07:f2:fe:88:8e:cf:30:14:01:95:f3:fe:68:7e:75:16:1f: ba:d7:42:ea:ba:68:1f:3a:33:cc:08:f4:ea:fe:4c:75:c2:0f: 42:c9:c3:24:46:26:48:ff:37:15:ee:5b:5e:e3:a2:dc:45:fc: d8:ba:de:54:78:bb:8d:af:38:04:08:29:f8:da:a4:1b:72:e5: 36:a2:31:ec:08:f3:9f:73:e3:9d:4f:c9:0d:85:2c:a2:2e:9d: 56:a0:d5:28:2a:aa:95:41:93:b8:e0:b0:fc:6e:4b:81:97:f2: df:f1:5e:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRFRUIxMTAvBgNVBAUTKDZCNjNBNjBFN0Q3RjUxRDAzODcyOEM2NDI1OTA2MDQ3 MDE2Qzk5MDQwHhcNMjYwNzIxMDczNTAyWhcNMjYwNzI4MDczNTAyWjAYMRYwFAYD VQQDEw02YTVmMjEyNy04Yjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8be8Rvp124kKLDKaSit361uqvWK+1LKE+NyU5B7dkfCa1GEThgPthh2tJpVZ 8OfGD3UmGpFPptfnOZ5K/bud35TcAPw5EGzvuv1Pe8vzOioStrLYGouQVAGLBzE2 NErB9/VgrCsMYQ1DqGNZrHuGcfv/5k6WBqUo1BRkEJkDb+HU7BQQ8vIUEy5UsH5f oHmau9m4k4lfyOUuLOpzBVdt/8Kdymh15+0zAajSS3Kh+BdFWHFV+F+thm0RHdVQ KlOwuQQO/My3UvfPM4h5NbNk38a37RlaGcjOXqpPFMjUzI9vcu1xEpGjVX+BauBQ 9rR8auILqrp9wGq4kugjPf6uBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGntq7Gx lbqkIjtb2KMYZ2uyQRx3MB8GA1UdIwQYMBaAFGtjpg59f1HQOHKMZCWQYEcBbJkE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREVFQi8xRUU3RkE2MEU1 RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1VkQTRjb3hrSlpCZ1J3RnNt UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyT21EbjFfVWRBNGNveGtKWkJnUndGc21RUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REVFQi8xRUU3RkE2MEU1RjQxMUVGQUJEMzlEN0VDNEY5QUUwMi9hMk9tRG4xX1Vk QTRjb3hrSlpCZ1J3RnNtUVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQM4rp1tzdLZEz4V6MY1ZkW6uvGUrBeEAJn12W7Wx0b6BfKZnTC+Yom/0WFLv /8/YlTbWKrBqgni60JsBToP60GyHbBiqneT2uNvtxMQ/FWLJBuGlUMq5Xp2nTtiK CuRqvfm0u9oYKeWq/t5IhwVl3fCl4vHXBaLRFLn0y95FJWR3k1ZVnwPr4eI/QVoI YED5Bwfy/oiOzzAUAZXz/mh+dRYfutdC6rpoHzozzAj06v5MdcIPQsnDJEYmSP83 Fe5bXuOi3EX82LreVHi7ja84BAgp+NqkG3LlNqIx7Ajzn3PjnU/JDYUsoi6dVqDV KCqqlUGTuOCw/G5LgZfy3/FeSw== -----END CERTIFICATE-----Generated at Tue Jul 21 20:32:24 2026 by rpki-client