$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft File: kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft (raw, json) Hash identifier: O9PmSTyi9Txgd+sM83gG8AN4HBndJ4rym3iX+SCUl0A= Subject key identifier: B9:A4:F1:26:8C:8A:8D:61:6A:22:A5:11:94:4B:09:51:18:6E:6E:E5 Authority key identifier: 91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91 Certificate issuer: /CN=A91D8157/serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft Manifest number: 5F Signing time: Tue 21 Jul 2026 10:10:59 +0000 Manifest this update: Tue 21 Jul 2026 10:10:59 +0000 Manifest next update: Tue 28 Jul 2026 10:10:59 +0000 Files and hashes: 1: kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl (hash: J4o4ginMJph2rL3AfDSIO3ywKEbxTL1QII3ycfExpSU=) 2: D386B66251D411F185203A1790833773.roa (hash: x9YNhs52Js+F/nkP6R0eX91Umj1eirlfbF7q2WvjGA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 10:10:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8157, serialNumber=91DA3A17637CD292CEA4670DD13A72D86EAA2D91 Validity Not Before: Jul 21 10:10:59 2026 GMT Not After : Jul 28 10:10:59 2026 GMT Subject: CN=6a5f45b3-ff2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:ea:06:53:73:ea:35:a5:86:c6:8f:10:31: 43:54:96:4d:9d:e1:a1:e8:1b:a2:c9:63:29:4f:84: 44:31:d6:7b:0d:3d:dd:e7:70:9c:ba:f2:4b:31:e3: ac:05:d4:39:37:d1:73:8e:82:7d:07:1a:af:e4:42: 85:a6:4b:8d:c6:93:b3:22:d8:20:6b:0b:07:73:0f: 2a:14:24:bf:fd:1e:2e:24:25:ce:d9:34:d5:36:63: 81:08:82:0d:f5:1c:d3:ce:68:d8:a8:ac:52:3d:58: 55:b0:06:ab:d4:40:b5:f7:2a:8e:27:f6:d4:28:db: d7:47:0f:56:55:83:79:a7:e8:0c:70:96:f5:08:c5: 52:cf:ee:99:98:07:37:66:da:14:61:d6:a9:65:3f: a4:52:53:04:06:61:a8:db:16:b7:eb:f4:8e:72:99: 56:24:01:c5:a9:f7:38:d0:05:c3:31:13:94:1a:36: 96:c8:26:49:e4:4b:fb:0e:cf:60:34:60:a8:0d:46: 60:f9:fa:11:b4:f0:92:8c:4c:99:9a:5d:57:dd:c9: 80:e3:5a:31:55:1e:bd:07:68:73:49:0e:50:90:e1: 0c:ed:66:d3:92:33:10:eb:78:e2:a4:f9:12:16:d4: 32:f9:5d:16:5a:55:87:18:a9:ca:d2:75:ad:02:b2: 49:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A4:F1:26:8C:8A:8D:61:6A:22:A5:11:94:4B:09:51:18:6E:6E:E5 X509v3 Authority Key Identifier: keyid:91:DA:3A:17:63:7C:D2:92:CE:A4:67:0D:D1:3A:72:D8:6E:AA:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/kdo6F2N80pLOpGcN0Tpy2G6qLZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8157/250838AE114211F19D37628F213D8C67/kdo6F2N80pLOpGcN0Tpy2G6qLZE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:57:e4:fe:79:ce:18:7e:ca:a0:24:8f:1c:8c:74:27:35:65: 22:7d:87:21:4e:d2:9e:62:6f:ad:60:4c:b5:53:3e:9c:57:0a: 0c:da:b3:86:cf:2f:d3:1a:6e:e7:c6:64:53:41:a4:ca:64:db: 3b:87:98:1e:5e:7e:72:3c:c5:b2:ac:8b:80:ca:41:57:0d:d7: 2d:1b:48:d6:0a:52:22:bf:0c:12:f9:85:15:59:ed:7a:ba:5f: c1:c6:91:ea:69:d3:51:76:c3:01:36:dd:4f:2b:eb:06:1e:61: b8:4f:f3:7f:e7:3b:46:85:4d:45:b6:01:b3:81:2e:c7:3e:91: 4f:20:bc:c9:c0:98:8a:aa:a3:72:13:a6:ca:9b:8e:8c:4a:2d: 08:f3:e3:19:06:c2:cf:96:66:bc:d7:71:5a:ef:26:50:d0:94: 9e:ea:77:43:23:32:4e:70:46:e3:0c:11:9a:a0:24:57:95:e0: 93:27:8a:78:bf:13:af:48:35:e4:f6:fd:af:09:ea:0c:4c:dd: 04:03:89:48:21:60:2f:86:89:d0:3b:82:a8:f8:d3:7d:9f:56: 1d:03:7b:5e:5e:cb:cb:c2:fa:91:4b:cc:ae:1e:0c:e9:5c:b8: 9d:3e:d1:33:5f:46:08:05:5b:30:6e:90:41:d3:08:bb:fa:65: 44:54:19:c0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE ODE1NzExMC8GA1UEBRMoOTFEQTNBMTc2MzdDRDI5MkNFQTQ2NzBERDEzQTcyRDg2 RUFBMkQ5MTAeFw0yNjA3MjExMDEwNTlaFw0yNjA3MjgxMDEwNTlaMBgxFjAUBgNV BAMTDTZhNWY0NWIzLWZmMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnK+oGU3PqNaWGxo8QMUNUlk2d4aHoG6LJYylPhEQx1nsNPd3ncJy68ksx46wF 1Dk30XOOgn0HGq/kQoWmS43Gk7Mi2CBrCwdzDyoUJL/9Hi4kJc7ZNNU2Y4EIgg31 HNPOaNiorFI9WFWwBqvUQLX3Ko4n9tQo29dHD1ZVg3mn6AxwlvUIxVLP7pmYBzdm 2hRh1qllP6RSUwQGYajbFrfr9I5ymVYkAcWp9zjQBcMxE5QaNpbIJknkS/sOz2A0 YKgNRmD5+hG08JKMTJmaXVfdyYDjWjFVHr0HaHNJDlCQ4QztZtOSMxDreOKk+RIW 1DL5XRZaVYcYqcrSda0CskmJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUuaTxJoyK jWFqIqURlEsJURhubuUwHwYDVR0jBBgwFoAUkdo6F2N80pLOpGcN0Tpy2G6qLZEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MTU3LzI1MDgzOEFFMTE0 MjExRjE5RDM3NjI4RjIxM0Q4QzY3L2tkbzZGMk44MHBMT3BHY04wVHB5Mkc2cUxa RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIva2RvNkYyTjgwcExPcEdjTjBUcHkyRzZxTFpFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 MTU3LzI1MDgzOEFFMTE0MjExRjE5RDM3NjI4RjIxM0Q4QzY3L2tkbzZGMk44MHBM T3BHY04wVHB5Mkc2cUxaRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCXV+T+ec4YfsqgJI8cjHQnNWUifYchTtKeYm+tYEy1Uz6cVwoM2rOGzy/TGm7n xmRTQaTKZNs7h5geXn5yPMWyrIuAykFXDdctG0jWClIivwwS+YUVWe16ul/BxpHq adNRdsMBNt1PK+sGHmG4T/N/5ztGhU1FtgGzgS7HPpFPILzJwJiKqqNyE6bKm46M Si0I8+MZBsLPlma813Fa7yZQ0JSe6ndDIzJOcEbjDBGaoCRXleCTJ4p4vxOvSDXk 9v2vCeoMTN0EA4lIIWAvhonQO4Ko+NN9n1YdA3teXsvLwvqRS8yuHgzpXLidPtEz X0YIBVswbpBB0wi7+mVEVBnA -----END CERTIFICATE-----Generated at Tue Jul 21 17:59:19 2026 by rpki-client