$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft File: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft (raw, json) Hash identifier: x1P4iP958sE9KdE1hxPBW2H9h3UPo8utBBsJMTTGOHs= Subject key identifier: C8:24:BC:B1:7E:41:DD:A5:C0:74:D3:6D:47:BB:52:83:E1:7A:BE:6A Authority key identifier: D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F Certificate issuer: /CN=A91CFFBE/serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft Manifest number: 065C Signing time: Sun 26 Jul 2026 23:29:32 +0000 Manifest this update: Sun 26 Jul 2026 23:29:32 +0000 Manifest next update: Sun 02 Aug 2026 23:29:32 +0000 Files and hashes: 1: 1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl (hash: O8JOa2JMIvXB+cNN/PKAFAj9Aomk8kexgMBt9d9ZsuU=) 2: C23617A8581011F1A51D608BA0833773.roa (hash: sCsgKLK+hoKhomlVo1jhxD2dTFhjbsrP7RzMdHZeDKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFBE, serialNumber=D70E594B81A1658C2ADDF4A3268EF9CF08F9650F Validity Not Before: Jul 26 23:29:32 2026 GMT Not After : Aug 2 23:29:32 2026 GMT Subject: CN=6a66985c-93d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6f:b9:6f:2a:1e:49:46:a9:5c:51:ee:16:4a: 66:43:c3:99:3c:5d:1c:38:a9:61:41:72:a5:42:f6: 7b:97:31:89:ce:54:9b:e1:e9:c7:dc:49:3c:64:fd: 6a:62:ac:f4:53:f9:81:c6:39:0e:fc:4f:12:33:d0: ec:47:79:38:84:cb:88:b0:ff:05:26:75:a8:a1:1a: 9d:2f:c2:f1:d8:d3:9b:19:e9:4a:73:47:8b:21:23: 2d:76:fb:ee:d2:35:4d:d1:56:c7:cd:3c:94:f9:78: 15:7b:83:ec:cf:27:4f:34:10:46:3a:dd:18:c9:1b: 29:62:a8:9e:f8:b4:1a:be:d3:f6:23:62:b8:2a:e0: 3a:be:d3:9b:44:14:15:70:51:f3:fa:d1:5f:7d:d4: 11:66:69:dd:f0:3c:e0:cb:16:5f:86:32:91:ce:34: 15:36:90:67:55:03:c8:44:1f:e6:93:7b:50:07:84: 77:7b:01:93:c2:af:41:4b:32:b5:e0:b6:71:70:e1: 4a:4a:4a:a9:50:f6:e3:88:96:35:88:73:6d:9d:3e: 9d:72:7c:19:e0:36:07:0b:c0:9a:8c:ce:24:fa:86: 36:1d:f1:2e:ec:bc:db:ad:c5:cf:e0:3e:15:da:a5: 08:dd:54:8d:28:3b:59:6e:ee:b6:6d:27:82:81:b6: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:24:BC:B1:7E:41:DD:A5:C0:74:D3:6D:47:BB:52:83:E1:7A:BE:6A X509v3 Authority Key Identifier: keyid:D7:0E:59:4B:81:A1:65:8C:2A:DD:F4:A3:26:8E:F9:CF:08:F9:65:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFBE/74223706DAFA11EB82FE3162C4F9AE02/1w5ZS4GhZYwq3fSjJo75zwj5ZQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:bd:45:5d:ea:32:8b:0c:b3:9e:99:6b:fb:df:e8:98:a4:6d: 60:93:1b:8f:33:7b:31:5b:d2:12:02:05:7e:66:07:15:c5:8a: 09:0d:cd:bd:e4:00:bb:0d:e2:a0:28:99:65:76:db:fe:3f:cd: 06:bb:3d:0d:03:87:6d:ee:a9:77:f2:49:28:2f:67:5d:a5:df: 37:2f:f6:9f:a1:1c:64:ff:60:f8:38:0e:99:bc:ef:d6:3d:e9: c9:e4:d6:6c:91:fd:c5:cd:1f:c6:ef:ca:58:d9:7f:7c:00:5b: a5:4f:9c:5c:f3:8d:bb:97:fa:4b:0a:42:f0:db:be:80:bb:3e: d0:1e:36:59:bf:74:3b:1d:5d:1e:e9:02:a3:7f:2e:55:b1:fd: b5:b8:c0:1d:59:4c:32:da:0e:f8:77:77:11:11:ce:1f:cc:44: 7a:d1:28:2b:0e:89:3c:40:f8:2c:9a:b9:fc:78:ab:a5:7e:0a: 72:40:e7:df:0f:88:e0:f5:e5:db:ca:b8:5a:d6:2b:d3:5e:85: 36:35:1c:33:fc:a8:53:09:f2:ae:92:cc:81:db:6b:e0:3a:3c: f2:94:9c:77:de:44:87:4c:7a:f9:b9:b9:f4:42:5b:61:30:60: 82:5d:6a:5b:99:e3:1b:4d:0b:eb:4b:dc:98:29:c2:1a:94:f8: 9f:62:06:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQkUxMTAvBgNVBAUTKEQ3MEU1OTRCODFBMTY1OEMyQURERjRBMzI2OEVGOUNG MDhGOTY1MEYwHhcNMjYwNzI2MjMyOTMyWhcNMjYwODAyMjMyOTMyWjAYMRYwFAYD VQQDEw02YTY2OTg1Yy05M2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4m+5byoeSUapXFHuFkpmQ8OZPF0cOKlhQXKlQvZ7lzGJzlSb4enH3Ek8ZP1q Yqz0U/mBxjkO/E8SM9DsR3k4hMuIsP8FJnWooRqdL8Lx2NObGelKc0eLISMtdvvu 0jVN0VbHzTyU+XgVe4PszydPNBBGOt0YyRspYqie+LQavtP2I2K4KuA6vtObRBQV cFHz+tFffdQRZmnd8DzgyxZfhjKRzjQVNpBnVQPIRB/mk3tQB4R3ewGTwq9BSzK1 4LZxcOFKSkqpUPbjiJY1iHNtnT6dcnwZ4DYHC8CajM4k+oY2HfEu7LzbrcXP4D4V 2qUI3VSNKDtZbu62bSeCgbaU2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMgkvLF+ Qd2lwHTTbUe7UoPher5qMB8GA1UdIwQYMBaAFNcOWUuBoWWMKt30oyaO+c8I+WUP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZCRS83NDIyMzcwNkRB RkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZd3EzZlNqSm83NXp3ajVa UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF3NVpTNEdoWll3cTNmU2pKbzc1endqNVpROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZCRS83NDIyMzcwNkRBRkExMUVCODJGRTMxNjJDNEY5QUUwMi8xdzVaUzRHaFpZ d3EzZlNqSm83NXp3ajVaUTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUr1FXeoyiwyznplr+9/omKRtYJMbjzN7MVvSEgIFfmYHFcWKCQ3NveQAuw3i oCiZZXbb/j/NBrs9DQOHbe6pd/JJKC9nXaXfNy/2n6EcZP9g+DgOmbzv1j3pyeTW bJH9xc0fxu/KWNl/fABbpU+cXPONu5f6SwpC8Nu+gLs+0B42Wb90Ox1dHukCo38u VbH9tbjAHVlMMtoO+Hd3ERHOH8xEetEoKw6JPED4LJq5/HirpX4KckDn3w+I4PXl 28q4WtYr016FNjUcM/yoUwnyrpLMgdtr4Do88pScd95Eh0x6+bm59EJbYTBggl1q W5njG00L60vcmCnCGpT4n2IGug== -----END CERTIFICATE-----Generated at Mon Jul 27 10:52:43 2026 by rpki-client