$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft File: 72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json) Hash identifier: ZwOx00bSmOikEoHHsoqmCHSraUI8f5hps6gfm8BoBlA= Subject key identifier: 04:BC:01:93:80:B8:39:EA:8B:A1:81:3B:57:8F:55:D8:9C:6A:28:19 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 1387 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft Manifest number: 1358 Signing time: Wed 26 Aug 2026 16:56:49 +0000 Manifest this update: Wed 26 Aug 2026 16:56:49 +0000 Manifest next update: Wed 02 Sep 2026 16:56:49 +0000 Files and hashes: 1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: 9i1IQTQBhbFyg7FurXPoZRXiKmTa69h1L24IfJJ8Yrk=) 2: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: W3z7Z3gndKKyVqbzLQ8UmizWLHqqgUTLcWOrGVdfX2g=) 3: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (hash: qPTI/BGOaPiA+Ijb2fpDa3jM09PINNTUUy/wyXi8Tlc=) 4: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: 7EPo/flJodzTo6ZQPpsGfoF7ns5UVMsBGxpdCAuapx8=) 5: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: mfo6BYkWVfZpnu+glUHzyovdLshNnH3m/MtZdby+qOY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Sep 2026 16:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4999 (0x1387) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: Aug 26 16:56:49 2026 GMT Not After : Sep 2 16:56:49 2026 GMT Subject: CN=6a8f1ad1-0c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0a:51:03:0a:4c:aa:e5:03:b9:3c:01:f7:92: d2:28:19:66:99:8c:46:a1:2d:cd:77:45:f7:48:2e: 45:bf:2b:bb:95:74:e6:18:0e:5c:75:1e:ea:33:a0: 9c:2a:2d:7b:59:ba:05:df:c7:5a:c1:f5:99:bd:e7: 58:b8:b3:e9:14:82:9d:93:34:bd:af:53:cf:03:7a: 61:59:e4:f5:e6:7b:57:6f:e3:1b:78:94:00:a5:09: 71:a9:ec:ef:f1:8a:a1:9c:2b:78:1c:02:67:4a:cb: 88:64:e9:c7:87:90:b7:fd:9c:78:86:92:00:f2:22: d5:fd:b7:20:14:be:c7:d1:ab:37:1f:f0:59:8d:d2: d3:2c:ec:20:7b:f3:46:19:8c:c3:21:9e:ea:35:41: 33:15:00:fa:5e:69:bc:af:ff:44:0e:df:b3:7e:f9: cd:b5:fd:89:7a:e5:93:71:1d:e0:c1:87:95:77:60: c5:cf:9b:c8:cf:fc:0d:b2:0f:bf:eb:20:bc:dc:4a: 33:ad:f4:f5:91:cb:8f:d7:21:37:66:ba:27:bb:46: d5:12:04:5c:df:f6:fa:65:0f:d8:24:fa:78:99:85: c0:9b:e6:51:33:1f:43:73:36:3f:32:80:fc:c4:da: 96:f1:45:78:8e:9d:09:99:47:6c:db:bb:1a:70:c8: bb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BC:01:93:80:B8:39:EA:8B:A1:81:3B:57:8F:55:D8:9C:6A:28:19 X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c6:92:0a:c0:42:b3:06:fa:75:d5:6a:2e:61:4c:36:b3:97: 04:4d:fe:ee:23:4d:66:39:88:c6:a4:84:fe:6a:3e:26:83:6b: 55:05:37:b3:ce:f4:a0:59:e9:06:a0:19:b3:ae:62:54:ba:f5: 59:72:da:23:a6:fd:74:aa:45:32:a6:d3:45:eb:7f:e3:a3:3f: aa:1e:aa:50:ee:df:fc:b8:81:4f:89:2f:6f:f0:cd:93:9b:60: 9d:8d:65:fd:5d:bc:15:a9:27:33:bb:5c:93:52:64:66:ba:13: 69:eb:c8:e6:ea:ab:7e:a9:7a:3b:a6:cc:d9:38:bb:fc:aa:65: 02:f0:bd:a3:8e:ca:fc:31:74:ec:f8:19:63:ef:4f:1a:88:77: 3a:f8:2d:47:ad:34:32:f6:54:30:95:7c:70:23:b6:9a:06:87: 0f:7d:b6:43:c6:01:eb:34:cb:14:ff:8b:48:c8:bf:13:9f:39: d0:35:a2:94:87:ad:f1:a5:5e:08:89:73:7b:f3:b5:64:ce:c3: 44:81:c0:bc:ac:9b:92:0d:ed:42:5c:26:52:06:a2:3d:90:ba: ee:3c:e6:db:91:1a:6f:34:37:71:88:fe:43:bb:d2:e1:b7:c9: d6:e0:90:97:3a:75:ee:75:e8:52:c4:36:70:f0:46:fe:0a:16: f7:6b:59:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjYwODI2MTY1NjQ5WhcNMjYwOTAyMTY1NjQ5WjAYMRYwFAYD VQQDEw02YThmMWFkMS0wYzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkgpRAwpMquUDuTwB95LSKBlmmYxGoS3Nd0X3SC5Fvyu7lXTmGA5cdR7qM6Cc Ki17WboF38dawfWZvedYuLPpFIKdkzS9r1PPA3phWeT15ntXb+MbeJQApQlxqezv 8YqhnCt4HAJnSsuIZOnHh5C3/Zx4hpIA8iLV/bcgFL7H0as3H/BZjdLTLOwge/NG GYzDIZ7qNUEzFQD6Xmm8r/9EDt+zfvnNtf2JeuWTcR3gwYeVd2DFz5vIz/wNsg+/ 6yC83EozrfT1kcuP1yE3Zronu0bVEgRc3/b6ZQ/YJPp4mYXAm+ZRMx9DczY/MoD8 xNqW8UV4jp0JmUds27sacMi7pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAS8AZOA uDnqi6GBO1ePVdicaigZMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU2QS8xRDY0MzI4RUQzODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhW QkpRZlZ4N3Qtc0N2ekZLRmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAScaSCsBCswb6ddVqLmFMNrOXBE3+7iNNZjmIxqSE/mo+JoNrVQU3s870oFnp BqAZs65iVLr1WXLaI6b9dKpFMqbTRet/46M/qh6qUO7f/LiBT4kvb/DNk5tgnY1l /V28FaknM7tck1JkZroTaevI5uqrfql6O6bM2Ti7/KplAvC9o47K/DF07PgZY+9P Goh3OvgtR600MvZUMJV8cCO2mgaHD322Q8YB6zTLFP+LSMi/E5850DWilIet8aVe CIlze/O1ZM7DRIHAvKybkg3tQlwmUgaiPZC67jzm25EabzQ3cYj+Q7vS4bfJ1uCQ lzp17nXoUsQ2cPBG/goW92tZ1g== -----END CERTIFICATE-----Generated at Thu Aug 27 11:32:29 2026 by rpki-client