$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft File: 0WaBZz8RihAOwgFHTM-7UYeD2WA.mft (raw, json) Hash identifier: gwJDz9b4Mq/Xi8PSD/6s+ml+QyEowanRnGLArnrr4vQ= Subject key identifier: 3D:49:2B:0F:27:2F:2A:42:01:21:B7:B5:12:E3:FF:CA:7F:9A:61:EE Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft Manifest number: 83 Signing time: Tue 21 Jul 2026 04:18:13 +0000 Manifest this update: Tue 21 Jul 2026 04:18:12 +0000 Manifest next update: Tue 28 Jul 2026 04:18:12 +0000 Files and hashes: 1: 0WaBZz8RihAOwgFHTM-7UYeD2WA.crl (hash: QdYnYVEkQw+mci1wpKwNYjnysZ26RZminM+eypz2M6w=) 2: D798F0A0C04B11F0A85A7449C4F9AE02.roa (hash: D1XVMH1vA5La0IfiYGXEnqhzX2rQW9q2kW1yPmg2KPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 04:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960 Validity Not Before: Jul 21 04:18:12 2026 GMT Not After : Jul 28 04:18:12 2026 GMT Subject: CN=6a5ef305-4a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:05:f2:b8:8d:7e:35:2f:d1:4d:98:98:03:bf: 5f:85:71:75:7a:27:14:23:01:a8:76:79:2b:e1:fe: 4e:fd:d7:bc:25:32:a1:5d:f5:f8:1c:f0:e4:2e:df: 98:39:24:c4:2b:45:ce:a9:9e:49:ec:37:e6:72:71: 70:bc:f6:fc:ad:80:e2:3e:a2:53:08:1a:d3:0c:09: 4f:67:b4:d1:cc:94:1c:b7:ca:1f:00:4c:74:a1:e9: d6:3a:e7:e5:f4:45:ed:09:66:fc:ba:6f:2d:c0:1c: 5c:a3:69:36:2f:45:99:af:b9:d2:bd:4a:00:f3:c3: 19:a9:29:73:57:d0:03:9e:fb:05:48:67:b1:87:35: 21:1b:7e:41:44:4d:96:a9:80:45:80:54:3e:2d:2b: 1e:19:76:ba:0a:77:5d:1a:91:b9:f7:a1:d4:4e:5a: d0:b2:68:d3:aa:0c:25:e4:15:87:85:b1:b9:43:73: ee:48:e3:6b:be:f7:ef:14:23:1b:1a:8e:6a:25:ae: 7a:bc:0e:63:08:96:a2:fe:0b:35:09:c4:34:76:15: 6d:37:4b:50:dc:93:b2:ba:89:59:04:3e:65:81:6e: 41:b8:8a:67:af:d6:9a:80:1d:76:52:f0:81:e1:ff: db:ed:fc:6e:84:2f:32:9d:23:e7:75:5d:43:69:26: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:49:2B:0F:27:2F:2A:42:01:21:B7:B5:12:E3:FF:CA:7F:9A:61:EE X509v3 Authority Key Identifier: keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a3:64:77:e9:55:bd:0b:c0:c9:67:c4:ca:6e:6f:1e:09:1b: 8b:81:d4:dc:30:59:26:d2:24:a8:e3:dc:ec:30:7c:fe:4f:b6: 29:31:60:7b:bb:14:55:5e:12:e7:95:c8:e5:eb:7d:1d:c4:f5: e1:77:7b:e6:b2:e2:3f:6e:85:50:e3:7b:4d:fe:61:ff:3b:b1: 39:8d:c9:48:02:85:cb:9a:4d:21:ad:98:b2:ed:b3:41:32:2a: f7:39:90:66:29:d0:14:42:2f:ef:c6:0d:fd:f7:d4:ba:25:e2: 4e:80:4b:58:b8:b6:2f:06:ea:44:a9:e3:c2:b6:b1:65:57:b8: 05:f1:f5:a4:4a:f7:75:28:ef:1a:dc:7d:11:11:33:68:04:e6: f0:65:30:37:9a:8b:4b:4c:db:b1:7e:b4:ac:7c:6b:eb:c8:94: ba:6b:bc:73:76:c9:da:1b:28:13:a3:07:e3:62:a3:ad:8e:f7: c7:c4:c0:e9:e6:82:8a:fb:bc:5a:98:6b:6c:be:a4:f2:ba:ec: cf:74:00:57:ac:3c:f2:7c:85:ff:a9:7b:27:c7:50:5f:61:d1: fa:6e:6f:f6:a0:90:5c:9a:c7:c2:52:94:9a:f2:87:80:82:6b: f6:9a:72:10:3d:74:ed:4a:eb:f7:6d:f8:10:63:6e:9a:4a:7e: e5:0f:ee:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKEQxNjY4MTY3M0YxMThBMTAwRUMyMDE0NzRDQ0ZCQjUx ODc4M0Q5NjAwHhcNMjYwNzIxMDQxODEyWhcNMjYwNzI4MDQxODEyWjAYMRYwFAYD VQQDEw02YTVlZjMwNS00YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgXyuI1+NS/RTZiYA79fhXF1eicUIwGodnkr4f5O/de8JTKhXfX4HPDkLt+Y OSTEK0XOqZ5J7DfmcnFwvPb8rYDiPqJTCBrTDAlPZ7TRzJQct8ofAEx0oenWOufl 9EXtCWb8um8twBxco2k2L0WZr7nSvUoA88MZqSlzV9ADnvsFSGexhzUhG35BRE2W qYBFgFQ+LSseGXa6CnddGpG596HUTlrQsmjTqgwl5BWHhbG5Q3PuSONrvvfvFCMb Go5qJa56vA5jCJai/gs1CcQ0dhVtN0tQ3JOyuolZBD5lgW5BuIpnr9aagB12UvCB 4f/b7fxuhC8ynSPndV1DaSYTTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD1JKw8n LypCASG3tRLj/8p/mmHuMB8GA1UdIwQYMBaAFNFmgWc/EYoQDsIBR0zPu1GHg9lg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9CMzdCNzg0QUJF OUUxMUYwOTgxQjRDMzJDNEY5QUUwMi8wV2FCWno4UmloQU93Z0ZIVE0tN1VZZUQy V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBXYUJaejhSaWhBT3dnRkhUTS03VVllRDJXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9CMzdCNzg0QUJFOUUxMUYwOTgxQjRDMzJDNEY5QUUwMi8wV2FCWno4Umlo QU93Z0ZIVE0tN1VZZUQyV0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQaNkd+lVvQvAyWfEym5vHgkbi4HU3DBZJtIkqOPc7DB8/k+2KTFge7sUVV4S 55XI5et9HcT14Xd75rLiP26FUON7Tf5h/zuxOY3JSAKFy5pNIa2Ysu2zQTIq9zmQ ZinQFEIv78YN/ffUuiXiToBLWLi2LwbqRKnjwraxZVe4BfH1pEr3dSjvGtx9EREz aATm8GUwN5qLS0zbsX60rHxr68iUumu8c3bJ2hsoE6MH42KjrY73x8TA6eaCivu8 WphrbL6k8rrsz3QAV6w88nyF/6l7J8dQX2HR+m5v9qCQXJrHwlKUmvKHgIJr9ppy ED107Urr9234EGNumkp+5Q/uSw== -----END CERTIFICATE-----Generated at Tue Jul 21 17:50:54 2026 by rpki-client