$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft File: SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft (raw, json) Hash identifier: 5+BOuN90fou8ChqPqRxh941A3NDw1uohKa9DMbtSnqE= Subject key identifier: BB:59:13:1A:98:3A:3B:84:E1:25:3F:62:F7:87:D4:C8:3C:A9:20:71 Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 Certificate issuer: /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Certificate serial: 0907 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft Manifest number: 08C9 Signing time: Sun 26 Jul 2026 21:06:55 +0000 Manifest this update: Sun 26 Jul 2026 21:06:55 +0000 Manifest next update: Sun 02 Aug 2026 21:06:55 +0000 Files and hashes: 1: SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl (hash: 0+Kmjt8/WZD4aYNlHlxH8XUxdrk9ldyHwba+56/JRxo=) 2: 42CC52ECC68111EFAE49FF5FC4F9AE02.roa (hash: BpbgeH/Vr/553sYirLn87E6dC8av6GNKTUUgGPnSWFc=) 3: 2F220BBA95AA11ED84962E13C4F9AE02.roa (hash: hhAQbiBusLUKt765Go4ceXpM5iS75GtSHTtWboHmI4A=) 4: 67FF0960076911EF8569F157C4F9AE02.roa (hash: kux5oSfatn2oOCm3na/+0puHZ/uNesRh8WO7dtAzHlU=) 5: 68C5CFBE076911EF8569F157C4F9AE02.roa (hash: CdE0wm1hQkaULrjbI4DvgCzOn/hrQ6Nkq8KmfPCKoy0=) 6: 13279E2C124011ED9E430A4CC4F9AE02.roa (hash: Uv/v0jJRP1b/GKNvDesBCtfjzY1O3IX5XgFxcHY7TZA=) 7: DDBCA666F18911EAA922EB1FC4F9AE02.roa (hash: 42y2IvwrLcP86ePHCf3Zl904O206V8onirE7M47u3Ug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 21:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2311 (0x907) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74 Validity Not Before: Jul 26 21:06:55 2026 GMT Not After : Aug 2 21:06:55 2026 GMT Subject: CN=6a6676ef-9d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:96:28:8b:1a:4f:88:73:ab:2a:db:47:7e: 83:be:fe:35:c9:d7:69:8c:e7:5e:c9:1c:a6:fb:b6: ff:27:0b:b0:d0:f7:27:81:97:cd:1b:82:53:57:2c: 5b:a9:de:ba:ba:50:56:19:5b:63:d7:b9:2c:92:f6: fa:7d:01:fc:e7:b3:cd:f5:c2:90:20:ac:74:da:79: 9a:b4:c5:25:c2:93:bc:a3:94:3e:eb:ee:b7:4a:63: d3:d2:6b:4b:d6:25:39:14:70:13:8d:ba:73:53:c1: 6c:aa:78:6d:1a:c1:02:a2:36:89:50:3a:33:31:8a: 2d:7c:c7:f4:e9:48:dd:e7:4b:a4:61:19:ca:5b:c5: e6:34:be:07:9a:22:1f:06:80:12:3d:fa:60:68:cd: 39:8d:17:1e:44:3c:74:7e:de:72:3f:ed:48:c8:5c: f3:05:24:cb:1d:49:df:a4:cc:62:7a:ae:7d:d8:cf: 34:bd:03:c8:df:35:d2:c8:69:db:a9:f9:05:e7:a0: 31:4b:a6:19:39:aa:b8:d3:b4:8a:e9:d8:c1:fc:40: 95:fc:9a:76:12:dd:09:cc:3b:ad:a7:86:a4:0a:94: d4:a5:47:d3:f7:57:32:e0:29:14:8b:b5:30:12:5b: 50:d8:0a:c8:7f:6b:5b:af:d2:bb:55:45:d6:14:fa: fe:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:59:13:1A:98:3A:3B:84:E1:25:3F:62:F7:87:D4:C8:3C:A9:20:71 X509v3 Authority Key Identifier: keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:5e:3e:84:3a:86:03:f1:87:e8:56:f6:ea:6d:0a:e9:87:51: 15:1e:89:64:02:12:e8:88:91:48:b4:d7:89:52:ab:4b:b2:ad: 86:48:69:54:b9:65:7b:ec:d0:ee:0e:82:02:99:ca:f2:d0:a3: 14:6b:17:76:06:fc:11:5f:2d:08:5a:e8:70:0c:9e:04:e9:cb: 78:7f:97:44:3b:f9:90:58:d2:40:46:f6:8c:01:55:a4:7f:e4: 2d:ff:af:43:c8:1f:81:9b:cb:c4:20:6b:07:4b:a0:da:15:cd: 9f:f9:b3:b3:f5:f7:3c:25:a4:2d:39:f7:ed:cd:23:7e:2c:67: b0:ec:d2:60:3a:71:95:e0:b9:75:1f:82:7f:dc:a4:36:6d:24: 04:cd:33:98:a3:7a:9c:75:fa:0e:c3:b0:83:31:09:da:0f:df: a9:5a:2c:da:85:10:ba:3a:64:1f:6c:a4:a8:87:be:5c:ca:e8: a0:b9:f6:4c:e8:ee:50:cc:75:5a:40:31:4d:f2:ec:d8:b3:a1: 36:44:54:45:19:7a:fd:a7:8b:ba:24:0c:45:71:dc:41:5d:03: 9e:9c:03:7f:18:71:76:99:6d:a7:b7:fc:f9:ae:9c:83:61:7c: a3:dd:04:fc:fd:9e:c5:6b:00:43:f8:73:0e:99:01:9c:88:03: 18:15:d5:71 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REExMEExMTAvBgNVBAUTKDQ5QjVBNDY0NjNFM0EyQjcwQTMzNDQ2MDE0RUJGNDBF NUM5RUZFNzQwHhcNMjYwNzI2MjEwNjU1WhcNMjYwODAyMjEwNjU1WjAYMRYwFAYD VQQDEw02YTY2NzZlZi05ZDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLOWKIsaT4hzqyrbR36Dvv41yddpjOdeyRym+7b/Jwuw0PcngZfNG4JTVyxb qd66ulBWGVtj17kskvb6fQH857PN9cKQIKx02nmatMUlwpO8o5Q+6+63SmPT0mtL 1iU5FHATjbpzU8FsqnhtGsECojaJUDozMYotfMf06Ujd50ukYRnKW8XmNL4HmiIf BoASPfpgaM05jRceRDx0ft5yP+1IyFzzBSTLHUnfpMxieq592M80vQPI3zXSyGnb qfkF56AxS6YZOaq407SK6djB/ECV/Jp2Et0JzDutp4akCpTUpUfT91cy4CkUi7Uw EltQ2ArIf2tbr9K7VUXWFPr+zQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLtZExqY OjuE4SU/YveH1Mg8qSBxMB8GA1UdIwQYMBaAFEm1pGRj46K3CjNEYBTr9A5cnv50 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTEwQS9FMzQwMjA0Q0Yx ODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9yY0tNMFJnRk92MERseWVf blEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NiV2taR1Bqb3JjS00wUmdGT3YwRGx5ZV9uUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTEwQS9FMzQwMjA0Q0YxODcxMUVBQjk3MzRCMUNDNEY5QUUwMi9TYldrWkdQam9y Y0tNMFJnRk92MERseWVfblEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAF4+hDqGA/GH6Fb26m0K6YdRFR6JZAIS6IiRSLTXiVKrS7KthkhpVLlle+zQ 7g6CApnK8tCjFGsXdgb8EV8tCFrocAyeBOnLeH+XRDv5kFjSQEb2jAFVpH/kLf+v Q8gfgZvLxCBrB0ug2hXNn/mzs/X3PCWkLTn37c0jfixnsOzSYDpxleC5dR+Cf9yk Nm0kBM0zmKN6nHX6DsOwgzEJ2g/fqVos2oUQujpkH2ykqIe+XMrooLn2TOjuUMx1 WkAxTfLs2LOhNkRURRl6/aeLuiQMRXHcQV0DnpwDfxhxdpltp7f8+a6cg2F8o90E /P2exWsAQ/hzDpkBnIgDGBXVcQ== -----END CERTIFICATE-----Generated at Mon Jul 27 01:09:06 2026 by rpki-client