$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft File: T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft (raw, json) Hash identifier: 2TmvkjNPc3FQ5NkZ36Y6IEI5Jv2+niqSPn+KOzYmPg0= Subject key identifier: 96:C5:BA:8F:05:BC:C1:18:2D:61:D0:FC:73:B4:1E:50:3F:65:8E:8E Authority key identifier: 4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC Certificate issuer: /CN=A91BF4A1/serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft Manifest number: 028B Signing time: Mon 27 Jul 2026 03:13:34 +0000 Manifest this update: Mon 27 Jul 2026 03:13:34 +0000 Manifest next update: Mon 03 Aug 2026 03:13:34 +0000 Files and hashes: 1: T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl (hash: YeyD5AOgHrTe32KoUal9qzA1FL/S8S4hjB3jCpD1M3M=) 2: B780E2A097F711EF89B09770C4F9AE02.roa (hash: wK5N6NDC53NOeUkX3Bv4KZdcSUQAmAYv+3NUjiBBfqc=) 3: 4405F70C03AE11F08ECE4754C4F9AE02.roa (hash: xdixf0+5RIcyAcaWT4O3nyVovihJ9bK/xD8dsvcNSEs=) 4: B987C6AAB7A311F095EF5E67C4F9AE02.roa (hash: BXJT+VuR/xyvQ8o0R6nT8W4UMQGcievCOsLixY+E6r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF4A1, serialNumber=4FEE47943ABE13E38556A73C281B90E3549237DC Validity Not Before: Jul 27 03:13:34 2026 GMT Not After : Aug 3 03:13:34 2026 GMT Subject: CN=6a66ccde-bfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:79:24:42:e0:1a:f3:79:d2:6b:76:44:ee:83: ef:49:5b:8f:25:ad:ac:c1:76:c6:f8:76:4a:3c:cb: cc:fb:03:0c:6f:d9:00:95:07:61:80:89:fe:14:61: 81:e2:bb:74:e3:e1:1a:81:96:9c:09:8a:79:05:7f: e4:e7:bd:e9:36:3c:e6:b2:1a:01:99:f3:6e:79:3d: 49:2e:74:b6:a1:6c:f1:21:cd:4d:ee:bc:9d:2b:fc: 5a:be:79:fc:02:0c:10:51:ef:9d:c4:08:fd:cb:4f: c3:09:f7:ca:eb:85:b1:a4:28:3c:d8:7f:a5:c2:96: a9:c8:12:bc:0c:40:9e:84:00:4d:78:32:8a:3d:16: e5:9c:0b:72:e7:85:cb:45:f4:ad:fb:ee:d1:d6:24: 94:8e:63:4e:3b:1d:1e:1d:31:db:c5:2e:2a:e1:c6: 07:ab:64:de:6f:9f:6c:8f:0e:dd:41:19:8d:fc:d5: 69:0c:b1:94:60:0c:95:dd:71:02:10:56:9b:c4:e6: 5e:a9:7c:1a:7c:23:48:a0:d5:35:21:bb:d9:da:0d: a7:dd:3f:6e:70:7c:94:ac:4d:95:ca:cf:1f:5e:4c: 8d:90:99:88:0d:88:f8:e3:be:5e:15:0a:f6:38:cd: c0:27:54:87:45:fa:91:91:fa:3b:76:73:8f:11:28: f9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C5:BA:8F:05:BC:C1:18:2D:61:D0:FC:73:B4:1E:50:3F:65:8E:8E X509v3 Authority Key Identifier: keyid:4F:EE:47:94:3A:BE:13:E3:85:56:A7:3C:28:1B:90:E3:54:92:37:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-5HlDq-E-OFVqc8KBuQ41SSN9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF4A1/0F587A88B1CC11ED85F25A3DC4F9AE02/T-5HlDq-E-OFVqc8KBuQ41SSN9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7f:0d:8f:74:e3:79:29:c6:05:4f:34:b0:ae:50:f2:37:0a: 7e:34:9a:8b:d7:e4:e6:32:bd:0a:e0:8c:a2:40:4d:c6:98:52: 1d:8e:14:7a:1b:4d:fc:c2:a6:42:55:be:25:63:ca:0a:cc:05: 6f:c6:e9:1f:06:13:c5:8a:c8:5b:37:a3:49:22:1a:32:78:5b: 2f:d9:94:8a:2d:b0:33:e2:a4:65:a9:69:d3:5d:6e:85:cf:a0: f6:2e:18:1e:10:31:10:cc:9c:98:26:5f:85:7c:24:a7:1a:37: 4f:6e:2f:80:7e:fa:67:50:23:a3:3d:4c:ec:cd:c4:32:fc:23: 07:0a:02:7c:2e:17:cb:88:6c:63:cd:0b:8e:3e:ea:6e:69:9b: 42:75:29:19:60:a4:66:65:86:f3:b4:f1:12:da:89:ca:fd:3a: 1f:27:d2:9d:cb:8f:d3:25:a0:c5:9e:d0:35:a1:58:14:fa:ef: 96:1f:8b:bf:81:22:a9:c8:f7:5c:c1:53:4a:ba:d9:bf:1c:66: a8:72:ea:35:8f:77:87:2b:ee:4d:24:17:98:db:f4:bb:4a:85: 3b:5f:8d:65:35:f3:be:92:ec:8d:4c:41:5e:6f:8f:84:d9:d8: d3:3b:5c:c0:95:e7:67:37:58:46:71:61:18:ce:dc:19:b8:68: c1:98:fd:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY0QTExMTAvBgNVBAUTKDRGRUU0Nzk0M0FCRTEzRTM4NTU2QTczQzI4MUI5MEUz NTQ5MjM3REMwHhcNMjYwNzI3MDMxMzM0WhcNMjYwODAzMDMxMzM0WjAYMRYwFAYD VQQDEw02YTY2Y2NkZS1iZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7HkkQuAa83nSa3ZE7oPvSVuPJa2swXbG+HZKPMvM+wMMb9kAlQdhgIn+FGGB 4rt04+EagZacCYp5BX/k573pNjzmshoBmfNueT1JLnS2oWzxIc1N7rydK/xavnn8 AgwQUe+dxAj9y0/DCffK64WxpCg82H+lwpapyBK8DECehABNeDKKPRblnAty54XL RfSt++7R1iSUjmNOOx0eHTHbxS4q4cYHq2Teb59sjw7dQRmN/NVpDLGUYAyV3XEC EFabxOZeqXwafCNIoNU1IbvZ2g2n3T9ucHyUrE2Vys8fXkyNkJmIDYj4475eFQr2 OM3AJ1SHRfqRkfo7dnOPESj5iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJbFuo8F vMEYLWHQ/HO0HlA/ZY6OMB8GA1UdIwQYMBaAFE/uR5Q6vhPjhVanPCgbkONUkjfc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjRBMS8wRjU4N0E4OEIx Q0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUtT0ZWcWM4S0J1UTQxU1NO OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtNUhsRHEtRS1PRlZxYzhLQnVRNDFTU045dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjRBMS8wRjU4N0E4OEIxQ0MxMUVEODVGMjVBM0RDNEY5QUUwMi9ULTVIbERxLUUt T0ZWcWM4S0J1UTQxU1NOOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbH8Nj3TjeSnGBU80sK5Q8jcKfjSai9fk5jK9CuCMokBNxphSHY4UehtN/MKm QlW+JWPKCswFb8bpHwYTxYrIWzejSSIaMnhbL9mUii2wM+KkZalp011uhc+g9i4Y HhAxEMycmCZfhXwkpxo3T24vgH76Z1Ajoz1M7M3EMvwjBwoCfC4Xy4hsY80Ljj7q bmmbQnUpGWCkZmWG87TxEtqJyv06HyfSncuP0yWgxZ7QNaFYFPrvlh+Lv4Eiqcj3 XMFTSrrZvxxmqHLqNY93hyvuTSQXmNv0u0qFO1+NZTXzvpLsjUxBXm+PhNnY0ztc wJXnZzdYRnFhGM7cGbhowZj9GA== -----END CERTIFICATE-----Generated at Mon Jul 27 05:46:42 2026 by rpki-client