$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft File: F_M9uCahQtM3xeuZhL4txPm8ZCk.mft (raw, json) Hash identifier: jNSJ6FrmQWGx/8+jHnEqWPJvyWEljSyqqRiG66vz/cQ= Subject key identifier: 21:64:5D:93:C2:CD:9A:44:84:7D:08:BD:78:40:B0:F0:D6:11:75:14 Authority key identifier: 17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 Certificate issuer: /CN=A91BFA29/serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Certificate serial: 3589 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft Manifest number: 3570 Signing time: Sun 26 Jul 2026 15:20:09 +0000 Manifest this update: Sun 26 Jul 2026 15:20:08 +0000 Manifest next update: Sun 02 Aug 2026 15:20:08 +0000 Files and hashes: 1: F_M9uCahQtM3xeuZhL4txPm8ZCk.crl (hash: Y6ZrnSPMZcahRC3w0OO8TZUOEzOZsLEcgtAnxYB3dRw=) 2: 3A42DAB8DE6311E8BFB1BF16C4F9AE02.roa (hash: qbotwLlAh51+g4Xv22i4fgZHlT9iGbA8driasdN6/0A=) 3: 91268A4A06F311F09EDDC851C4F9AE02.roa (hash: 8HVixqpXOTJwr8xhnI3q6f8IZdTatsuz93wdVY1nD/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 15:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13705 (0x3589) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFA29, serialNumber=17F33DB826A142D337C5EB9984BE2DC4F9BC6429 Validity Not Before: Jul 26 15:20:08 2026 GMT Not After : Aug 2 15:20:08 2026 GMT Subject: CN=6a6625a8-d327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2d:0d:28:4b:28:5b:fa:99:5d:46:5b:04:ba: a9:00:3d:e8:93:99:dd:88:7c:66:95:16:5e:d8:82: 6a:f6:9c:2a:82:e1:99:cc:10:24:79:88:72:7a:eb: 75:5e:6d:5a:65:ff:a9:a8:99:ef:12:af:74:c2:53: 5e:31:c4:6c:5d:12:52:96:22:89:a6:98:6e:96:8c: e6:c6:3f:ca:2d:25:6c:e2:23:d3:84:52:3c:5a:0a: 55:01:41:a2:23:01:cf:e9:34:51:a6:b7:49:b0:b7: ce:59:e9:d7:e8:88:de:bb:ac:20:f6:a5:dc:d5:1d: 39:6c:47:5b:b0:f0:04:46:46:46:74:75:93:af:f7: 9c:c7:f0:01:15:57:80:f4:76:66:4a:a3:ff:5e:9a: ed:a8:60:ac:9d:1a:36:ca:71:8f:11:0b:14:e9:0a: 34:eb:89:f8:ff:ca:b2:e6:27:a1:a0:7a:69:1b:cf: 63:58:e1:f0:63:08:2c:a8:d5:48:bb:98:aa:02:c0: d7:7e:a8:a5:72:6f:6d:26:c0:9c:0a:9a:de:58:cc: ba:ef:d4:8c:bf:7e:68:29:0c:ca:7b:74:f4:37:5a: f6:28:b4:45:54:cc:67:f6:79:fd:57:7a:4d:5a:9c: d0:be:a4:c2:66:09:e2:94:b5:03:77:55:40:27:53: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:64:5D:93:C2:CD:9A:44:84:7D:08:BD:78:40:B0:F0:D6:11:75:14 X509v3 Authority Key Identifier: keyid:17:F3:3D:B8:26:A1:42:D3:37:C5:EB:99:84:BE:2D:C4:F9:BC:64:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_M9uCahQtM3xeuZhL4txPm8ZCk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFA29/0F1A4E641DAA11E28E727DA508B02CD2/F_M9uCahQtM3xeuZhL4txPm8ZCk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:26:32:48:88:02:bb:d2:3c:b2:87:ac:ec:3f:14:32:61:23: 62:e6:7b:01:5b:1f:c5:81:0e:3e:b8:ec:e6:36:7c:3a:ae:fd: fb:6f:4e:ba:b8:cd:1b:78:02:25:15:80:da:8c:e0:26:17:25: 69:15:b0:16:3e:09:60:ec:43:2a:62:a9:0c:cd:58:76:a8:a4: 49:aa:61:1c:32:33:1b:96:82:54:16:dd:2f:dd:9a:3f:75:72: 71:ae:18:81:94:88:a6:88:3e:32:fe:87:9f:da:f6:cb:4e:c9: 27:e0:e7:cc:e6:4d:63:9f:ff:ec:7f:0e:80:ea:50:15:3e:65: 6c:d0:a3:82:b2:7e:a7:26:34:ae:61:f4:dd:6d:4d:5a:36:cd: 9d:04:bc:f7:aa:22:ee:a4:8b:87:89:91:6b:67:be:56:06:ad: 0e:48:05:0d:c8:25:92:09:a7:d6:52:60:23:b0:d3:10:6c:7e: 8a:98:19:55:ce:75:84:e5:fe:c1:62:95:62:fa:7f:70:89:f7: 5f:b7:35:71:ce:b9:33:7c:70:2e:e2:1e:e9:e4:78:62:d0:50: 2f:4c:ff:b2:69:47:4a:25:5c:c9:c5:d0:9c:db:af:8a:28:f8: d4:8f:ca:cc:ef:b9:6f:82:3b:3a:f0:2c:e6:8a:f4:f7:4c:22: f5:12:8c:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZBMjkxMTAvBgNVBAUTKDE3RjMzREI4MjZBMTQyRDMzN0M1RUI5OTg0QkUyREM0 RjlCQzY0MjkwHhcNMjYwNzI2MTUyMDA4WhcNMjYwODAyMTUyMDA4WjAYMRYwFAYD VQQDEw02YTY2MjVhOC1kMzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAti0NKEsoW/qZXUZbBLqpAD3ok5ndiHxmlRZe2IJq9pwqguGZzBAkeYhyeut1 Xm1aZf+pqJnvEq90wlNeMcRsXRJSliKJpphulozmxj/KLSVs4iPThFI8WgpVAUGi IwHP6TRRprdJsLfOWenX6Ijeu6wg9qXc1R05bEdbsPAERkZGdHWTr/ecx/ABFVeA 9HZmSqP/XprtqGCsnRo2ynGPEQsU6Qo064n4/8qy5iehoHppG89jWOHwYwgsqNVI u5iqAsDXfqilcm9tJsCcCpreWMy679SMv35oKQzKe3T0N1r2KLRFVMxn9nn9V3pN WpzQvqTCZgnilLUDd1VAJ1POyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFkXZPC zZpEhH0IvXhAsPDWEXUUMB8GA1UdIwQYMBaAFBfzPbgmoULTN8XrmYS+LcT5vGQp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkEyOS8wRjFBNEU2NDFE QUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0TTN4ZXVaaEw0dHhQbTha Q2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfTTl1Q2FoUXRNM3hldVpoTDR0eFBtOFpDay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkEyOS8wRjFBNEU2NDFEQUExMUUyOEU3MjdEQTUwOEIwMkNEMi9GX005dUNhaFF0 TTN4ZXVaaEw0dHhQbThaQ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoyYySIgCu9I8soes7D8UMmEjYuZ7AVsfxYEOPrjs5jZ8Oq79+29OurjNG3gC JRWA2ozgJhclaRWwFj4JYOxDKmKpDM1YdqikSaphHDIzG5aCVBbdL92aP3Vyca4Y gZSIpog+Mv6Hn9r2y07JJ+DnzOZNY5//7H8OgOpQFT5lbNCjgrJ+pyY0rmH03W1N WjbNnQS896oi7qSLh4mRa2e+VgatDkgFDcglkgmn1lJgI7DTEGx+ipgZVc51hOX+ wWKVYvp/cIn3X7c1cc65M3xwLuIe6eR4YtBQL0z/smlHSiVcycXQnNuviij41I/K zO+5b4I7OvAs5or090wi9RKMtw== -----END CERTIFICATE-----Generated at Sun Jul 26 20:16:55 2026 by rpki-client