$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft File: WY3Vo5rkd2WK1by_42JkoaYdZwg.mft (raw, json) Hash identifier: moiUj3x3G/Uw5uyYbBC1n44ktb75Kf49tfQbCJzk7rs= Subject key identifier: B8:8D:AB:85:52:B5:58:AE:84:DC:70:AE:90:F8:C7:43:11:0B:93:10 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0A9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft Manifest number: 0A6D Signing time: Sun 26 Jul 2026 20:10:23 +0000 Manifest this update: Sun 26 Jul 2026 20:10:23 +0000 Manifest next update: Sun 02 Aug 2026 20:10:23 +0000 Files and hashes: 1: WY3Vo5rkd2WK1by_42JkoaYdZwg.crl (hash: Gzrt1GHrJNwC4YbpbaEbMU5FLEn7lNol/s83fyHv6/M=) 2: D68A6AA64D1B11F1887430DDB9833773.roa (hash: RbJva28JL0oRQGNXfDxaa35qEtDL+UO0626spMk2ark=) 3: C86AB87A4D2711F1906BF3DDBE833773.roa (hash: SKrWdYrl9KleuCmzcfglzGlBQ52LXQEO3/LUYZ1Seeg=) 4: C29855340DC711EFA3C7527AC4F9AE02.roa (hash: 60m3ux9qQuI8sAbqkpMf6ZbChso/+JAfGKgLBlRXOY4=) 5: 3D96FCE64D1C11F19558AE18BA833773.roa (hash: fWrnDRf0ygF/bELqyvqgRKiyxFoBJGTEgo2RIONYsM0=) 6: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (hash: vExhqYfIkomdDV7xNalk44Q9UiS8pz94A5xmO/cMcTw=) 7: 56AAA41CE2BF11EFBAC5A282C4F9AE02.roa (hash: wCl7rXzm53xP5orlsNl4KHMAfPJ5TI2KsLBB3PbjkDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2714 (0xa9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Jul 26 20:10:23 2026 GMT Not After : Aug 2 20:10:23 2026 GMT Subject: CN=6a6669af-163b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:a2:96:86:a2:aa:2e:5c:2a:dd:ec:b4:6b: 6d:1b:c5:94:16:69:a2:0b:6d:bb:ed:de:66:0c:e3: 77:6d:29:79:39:5b:59:41:4a:11:b8:e4:69:8c:d5: b7:f4:f8:45:ea:0e:f4:fd:53:ef:da:03:15:8d:cc: 46:9d:e1:2b:f7:b3:bf:15:42:28:73:1b:99:c5:84: 9f:d3:3f:5d:6d:ae:8d:8e:3b:9f:60:e1:3d:7b:8d: aa:82:ff:cf:e4:c9:f6:34:81:d9:c7:20:a0:fd:96: 13:9f:af:4c:05:e6:af:11:7a:8a:38:5f:10:72:99: 81:35:1f:91:30:6a:bb:70:48:96:11:05:fd:d5:9f: bd:81:27:41:34:f4:fa:ff:12:b9:24:25:98:eb:5a: 8f:27:3b:d0:85:e7:86:a0:ac:46:d8:14:c8:a2:75: d8:8a:f8:ee:37:f5:be:c0:d8:38:04:77:f0:c9:f3: 8c:5e:09:db:56:fb:e8:5c:3b:57:b4:6a:1c:ec:63: 37:f3:06:b6:2b:b2:74:43:29:46:52:0c:6c:e5:e2: fb:ad:84:60:78:c9:8e:85:31:09:ea:36:ce:12:10: d4:f6:db:39:f1:3a:37:c4:90:8e:9a:69:7e:7d:e8: 48:fe:74:bf:a2:62:49:e2:0f:a8:63:9f:d5:2d:b4: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8D:AB:85:52:B5:58:AE:84:DC:70:AE:90:F8:C7:43:11:0B:93:10 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f2:35:52:10:5a:09:84:42:25:cf:01:22:90:9f:be:00:0c: 11:52:98:13:95:2e:18:95:01:41:47:80:3b:11:6c:af:c4:19: 60:7f:39:6b:da:d9:3a:b3:91:93:f7:ac:0e:1c:b6:25:3f:c1: d6:ff:24:62:1d:bf:15:fa:b8:63:d1:94:1b:24:ef:9f:91:e4: 0b:f8:fc:af:f9:47:ae:ba:84:8b:07:74:72:7d:35:09:0c:1f: 6d:ff:57:b5:f3:81:b8:93:fc:6d:d8:e1:3b:29:15:40:9d:3e: 0b:ac:1b:ab:90:0a:8b:ae:b9:9f:08:92:c9:93:2b:9f:3e:bc: c2:88:ca:17:af:57:64:aa:c9:7b:71:dc:bc:81:40:65:e5:31: 7b:c3:c4:65:7f:27:77:fe:c9:9c:b4:c1:16:01:3c:6e:c0:21: fc:5c:2b:d5:35:df:57:ab:55:00:80:ee:13:5b:4d:aa:e7:2e: 9b:81:43:9a:6c:81:38:92:5a:aa:5e:22:2c:4c:4d:52:1f:a8: 86:a3:7e:92:c3:81:c5:0e:de:26:d6:5c:f4:16:5e:a9:6d:44: c4:35:73:45:3f:c5:f4:70:15:22:82:5f:d3:0a:b6:bd:cb:f3: 14:bb:13:81:ac:fb:00:17:2d:6b:53:29:75:12:e1:e7:08:06: 61:6c:74:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjYwNzI2MjAxMDIzWhcNMjYwODAyMjAxMDIzWjAYMRYwFAYD VQQDEw02YTY2NjlhZi0xNjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHWiloaiqi5cKt3stGttG8WUFmmiC2277d5mDON3bSl5OVtZQUoRuORpjNW3 9PhF6g70/VPv2gMVjcxGneEr97O/FUIocxuZxYSf0z9dba6NjjufYOE9e42qgv/P 5Mn2NIHZxyCg/ZYTn69MBeavEXqKOF8QcpmBNR+RMGq7cEiWEQX91Z+9gSdBNPT6 /xK5JCWY61qPJzvQheeGoKxG2BTIonXYivjuN/W+wNg4BHfwyfOMXgnbVvvoXDtX tGoc7GM38wa2K7J0QylGUgxs5eL7rYRgeMmOhTEJ6jbOEhDU9ts58To3xJCOmml+ fehI/nS/omJJ4g+oY5/VLbRVkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLiNq4VS tViuhNxwrpD4x0MRC5MQMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUExNC9GN0U4NjQ0NjhGQkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2Qy V0sxYnlfNDJKa29hWWRad2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbPI1UhBaCYRCJc8BIpCfvgAMEVKYE5UuGJUBQUeAOxFsr8QZYH85a9rZOrOR k/esDhy2JT/B1v8kYh2/Ffq4Y9GUGyTvn5HkC/j8r/lHrrqEiwd0cn01CQwfbf9X tfOBuJP8bdjhOykVQJ0+C6wbq5AKi665nwiSyZMrnz68wojKF69XZKrJe3HcvIFA ZeUxe8PEZX8nd/7JnLTBFgE8bsAh/Fwr1TXfV6tVAIDuE1tNqucum4FDmmyBOJJa ql4iLExNUh+ohqN+ksOBxQ7eJtZc9BZeqW1ExDVzRT/F9HAVIoJf0wq2vcvzFLsT gaz7ABcta1MpdRLh5wgGYWx0Dg== -----END CERTIFICATE-----Generated at Mon Jul 27 13:58:16 2026 by rpki-client