$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft File: D6tO-YKPSvJnwW2K1HEKjuybu64.mft (raw, json) Hash identifier: rIN4GvZi0IgkNwIIk99F2pLysmK2ksPDL8O6ga6nX/4= Subject key identifier: 20:84:B2:03:FC:2D:93:96:CA:09:E4:BA:CD:92:9C:97:FA:9E:A0:C1 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 025C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft Manifest number: 0248 Signing time: Sun 05 Jul 2026 02:55:59 +0000 Manifest this update: Sun 05 Jul 2026 02:55:58 +0000 Manifest next update: Sun 12 Jul 2026 02:55:58 +0000 Files and hashes: 1: D6tO-YKPSvJnwW2K1HEKjuybu64.crl (hash: dgWDd8ebyjs4kXZGLCy37/sQT7ftFzsTQJBNpOuq+cE=) 2: A16366C6FDF811EEA4D57274C4F9AE02.roa (hash: DAgB41BSoNhh0yFXjuFcNCWHBOk0V20tJ49xk0mHkPA=) 3: A1C0742EFDF811EEA4D57274C4F9AE02.roa (hash: jxIjxLYPAa1qnB0jFN6nM/shPAzKUb5KsBQXc5gos7U=) 4: A0DEDD52FDF811EEA4D57274C4F9AE02.roa (hash: rm62Zobf+vSIv757GLuOQnassUi+6YwaOUBaAetb62A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Jul 2026 02:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 604 (0x25c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Jul 5 02:55:58 2026 GMT Not After : Jul 12 02:55:58 2026 GMT Subject: CN=6a49c7bf-c262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:4b:87:05:32:dd:8f:56:c3:25:50:99:94:ed: 00:fd:8b:3f:77:0b:a7:67:d6:38:18:d6:f3:48:0d: 7e:e0:44:f8:20:8d:fd:49:b8:81:b2:fc:a2:f8:7d: b7:cb:9d:7a:6e:0c:c7:40:8b:8e:21:3e:85:9b:3c: 15:3c:fe:5e:92:49:44:18:c3:f3:41:bf:57:08:37: b3:67:ad:2a:96:28:bd:ab:77:0b:ca:b4:57:b1:74: f9:21:6a:63:92:b1:e0:7b:62:e2:6b:c7:6a:fd:22: 08:7e:a3:c9:50:07:86:47:ed:96:35:d6:06:10:4d: cc:60:f8:6d:cc:08:4f:79:8e:64:ae:22:5b:df:36: f7:e8:3c:1b:21:e4:79:de:69:7b:40:85:20:33:e3: 9b:9a:78:63:85:58:1f:b4:69:c5:2e:15:3d:e8:24: d9:67:36:af:80:68:7e:aa:74:54:44:bf:9d:27:09: 25:b1:4f:e1:a8:ae:2e:35:15:e4:e8:d7:cb:b1:23: d3:89:77:9a:07:31:35:55:26:dd:86:d2:64:d0:f5: 95:92:c8:df:0e:9f:a5:f3:e4:d2:46:d2:a3:a5:57: a3:70:ca:60:f2:e6:b3:f9:a4:1b:fd:18:87:97:9c: db:80:40:31:ce:a2:96:b6:9a:1e:3a:75:5e:99:63: 22:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:84:B2:03:FC:2D:93:96:CA:09:E4:BA:CD:92:9C:97:FA:9E:A0:C1 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:cc:c0:3e:51:d1:70:33:5e:64:da:b8:83:12:6c:4e:80:41: 67:f2:8c:de:fe:d6:21:7d:c3:74:86:ba:ff:19:de:6d:ee:dc: 85:59:55:10:7b:f2:62:cb:bc:f7:d8:46:22:22:fb:cf:b2:32: 4c:2b:6a:d5:61:ac:4a:7f:5b:fa:86:1e:d8:6d:89:f8:24:39: f1:57:44:78:c7:d9:00:0e:e2:c9:cd:65:55:74:b7:3a:5e:11: 3b:90:2c:52:5e:0a:02:88:f4:01:e3:60:09:cb:9a:70:bc:22: b5:7c:3d:00:c0:3e:4f:46:72:8f:36:8c:52:57:74:db:e0:56: e8:a4:a9:26:ea:c4:cb:a4:ff:1d:57:24:52:03:3d:83:ae:95: bf:fe:e4:ea:06:e7:9b:3b:84:21:d4:03:f0:d2:e7:eb:e3:02: 3e:71:3d:a9:96:24:9e:5c:a6:9b:95:7c:94:71:a5:13:ed:5a: 79:16:80:22:1b:1f:59:a7:b2:46:ea:d0:68:b7:f9:5a:39:64: 1a:e2:47:18:76:f0:ec:54:dd:8b:4c:42:93:a8:2f:48:d1:d4: 8c:39:7c:41:3b:9e:0c:a7:f3:23:5b:7c:f8:4e:4b:97:06:e2: 50:0f:00:77:c3:1a:41:20:81:b2:31:04:77:0a:ef:db:de:a7: 3a:c3:64:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwNzA1MDI1NTU4WhcNMjYwNzEyMDI1NTU4WjAYMRYwFAYD VQQDEw02YTQ5YzdiZi1jMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UuHBTLdj1bDJVCZlO0A/Ys/dwunZ9Y4GNbzSA1+4ET4II39SbiBsvyi+H23 y516bgzHQIuOIT6FmzwVPP5ekklEGMPzQb9XCDezZ60qlii9q3cLyrRXsXT5IWpj krHge2Lia8dq/SIIfqPJUAeGR+2WNdYGEE3MYPhtzAhPeY5kriJb3zb36DwbIeR5 3ml7QIUgM+ObmnhjhVgftGnFLhU96CTZZzavgGh+qnRURL+dJwklsU/hqK4uNRXk 6NfLsSPTiXeaBzE1VSbdhtJk0PWVksjfDp+l8+TSRtKjpVejcMpg8uaz+aQb/RiH l5zbgEAxzqKWtpoeOnVemWMiSwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCCEsgP8 LZOWygnkus2SnJf6nqDBMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJFOS85NEM5Qjg3ODAwNUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2 Sm53VzJLMUhFS2p1eWJ1NjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYszAPlHRcDNeZNq4gxJsToBBZ/KM3v7WIX3DdIa6/xnebe7chVlVEHvyYsu8 99hGIiL7z7IyTCtq1WGsSn9b+oYe2G2J+CQ58VdEeMfZAA7iyc1lVXS3Ol4RO5As Ul4KAoj0AeNgCcuacLwitXw9AMA+T0ZyjzaMUld02+BW6KSpJurEy6T/HVckUgM9 g66Vv/7k6gbnmzuEIdQD8NLn6+MCPnE9qZYknlymm5V8lHGlE+1aeRaAIhsfWaey RurQaLf5WjlkGuJHGHbw7FTdi0xCk6gvSNHUjDl8QTueDKfzI1t8+E5LlwbiUA8A d8MaQSCBsjEEdwrv296nOsNkpQ== -----END CERTIFICATE-----Generated at Mon Jul 6 20:12:20 2026 by rpki-client