$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: OG4CXDHaoQXovzZ+7dKze1lJzNiDa3zmCuaEfCDjOZk= Subject key identifier: A0:10:FF:4E:DF:31:3F:C4:E5:F3:75:BA:7C:3D:E6:11:6C:3C:AB:CE Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 0247 Signing time: Tue 21 Jul 2026 03:39:18 +0000 Manifest this update: Tue 21 Jul 2026 03:39:18 +0000 Manifest next update: Tue 28 Jul 2026 03:39:18 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: wgS8PR5dsqY85phdTNyLfXVDmVom1s0wOKbP2jtrQsM=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: ZuQdvo3O3mwgbl46FNxheRRrkq5c13FZ1QLKqfjZUX8=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: PPUG38GrYc1pSvAs42aCMPByXIt0IlvrGE9mP2N9xD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Jul 21 03:39:18 2026 GMT Not After : Jul 28 03:39:18 2026 GMT Subject: CN=6a5ee9e6-d339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:05:80:f7:81:ce:34:9b:c7:5b:b5:40:97: 99:a9:1b:4f:f6:8b:94:0d:20:88:f4:aa:55:09:ad: 06:2c:b1:6d:0e:4a:52:11:c7:bd:8f:f9:6b:a6:78: fd:6e:9a:40:f7:4b:0c:06:c4:41:6d:96:60:93:da: e3:c1:c2:83:eb:5a:e2:bb:2d:09:e4:e8:c6:98:9a: 16:e0:e7:4c:e3:23:4f:e1:20:f5:4c:6c:7a:23:58: 53:5b:11:2a:82:96:e7:45:af:87:b5:d8:ea:50:56: f2:72:3c:a8:0f:0b:28:39:77:72:c7:46:d8:bf:ee: c2:2c:ec:9a:7d:30:99:e8:80:98:29:b2:65:74:dc: ec:b7:6e:d6:3d:51:8b:b1:80:59:e7:30:39:a5:d5: ca:46:28:89:3e:9e:4e:45:ab:ae:c9:1d:fc:e0:60: db:ea:bd:c2:6e:04:8c:d9:2a:c0:66:ca:f3:86:b8: f0:49:09:cf:a0:63:af:4c:c7:d2:23:84:c0:2e:b7: 44:66:f1:f6:c3:49:88:6a:90:6b:6a:71:a0:3e:ce: 16:6a:6c:aa:7c:11:49:4c:47:15:23:e4:ad:63:15: f5:fb:ae:ea:dc:d3:0a:0a:6b:76:43:4b:48:ab:cb: 71:c6:a8:4b:7b:a9:d4:a1:00:5d:0b:3c:15:bd:8a: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:10:FF:4E:DF:31:3F:C4:E5:F3:75:BA:7C:3D:E6:11:6C:3C:AB:CE X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:b3:f7:65:f5:8e:48:d2:df:56:51:2e:f3:f3:50:b7:c3:55: 8e:e6:2c:7b:2a:1c:eb:10:50:f4:5a:8b:10:93:39:a4:e7:6d: 4e:a3:67:0e:92:70:c0:c7:49:20:9d:68:e4:27:a5:9f:f3:44: cf:a8:33:67:81:99:b8:35:5f:5a:15:da:94:6e:24:4b:4f:02: 27:2f:3d:78:b0:0d:23:b4:f2:db:92:d5:2b:c1:19:76:42:a0: f4:4d:47:ee:c1:86:ea:54:20:89:99:2d:e7:d3:95:d1:87:56: 56:b6:00:c2:35:5a:57:1e:f5:18:23:3c:b7:b2:6b:d8:2d:51: 2d:a5:8b:d4:a7:18:fd:33:0d:de:e8:8d:86:19:1c:88:89:80: 60:85:70:08:ea:25:f5:02:f8:8c:97:f1:4a:28:18:4a:00:2a: d8:6a:39:cb:7f:a6:44:13:45:0c:82:9a:9c:64:f3:29:fa:92: 6e:95:00:cf:11:6a:93:db:50:af:4b:6f:a2:e4:48:fd:da:1c: 4d:09:39:43:20:1a:55:37:51:5e:74:c3:7e:ba:1a:a5:c2:e9: 1f:00:76:26:33:24:6e:00:7b:d7:f6:a0:29:75:76:ca:30:46: 2f:5a:d2:cf:27:cd:c3:69:50:1f:a5:ad:53:27:d5:12:28:85: 0f:f9:44:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjYwNzIxMDMzOTE4WhcNMjYwNzI4MDMzOTE4WjAYMRYwFAYD VQQDEw02YTVlZTllNi1kMzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEoFgPeBzjSbx1u1QJeZqRtP9ouUDSCI9KpVCa0GLLFtDkpSEce9j/lrpnj9 bppA90sMBsRBbZZgk9rjwcKD61riuy0J5OjGmJoW4OdM4yNP4SD1TGx6I1hTWxEq gpbnRa+HtdjqUFbycjyoDwsoOXdyx0bYv+7CLOyafTCZ6ICYKbJldNzst27WPVGL sYBZ5zA5pdXKRiiJPp5ORauuyR384GDb6r3CbgSM2SrAZsrzhrjwSQnPoGOvTMfS I4TALrdEZvH2w0mIapBranGgPs4WamyqfBFJTEcVI+StYxX1+67q3NMKCmt2Q0tI q8txxqhLe6nUoQBdCzwVvYpl6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKAQ/07f MT/E5fN1unw95hFsPKvOMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdbP3ZfWOSNLfVlEu8/NQt8NVjuYseyoc6xBQ9FqLEJM5pOdtTqNnDpJwwMdJ IJ1o5Celn/NEz6gzZ4GZuDVfWhXalG4kS08CJy89eLANI7Ty25LVK8EZdkKg9E1H 7sGG6lQgiZkt59OV0YdWVrYAwjVaVx71GCM8t7Jr2C1RLaWL1KcY/TMN3uiNhhkc iImAYIVwCOol9QL4jJfxSigYSgAq2Go5y3+mRBNFDIKanGTzKfqSbpUAzxFqk9tQ r0tvouRI/docTQk5QyAaVTdRXnTDfroapcLpHwB2JjMkbgB71/agKXV2yjBGL1rS zyfNw2lQH6WtUyfVEiiFD/lEVw== -----END CERTIFICATE-----Generated at Wed Jul 22 02:03:32 2026 by rpki-client