$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft File: JYQfp3wFcWWF_nvbBgC5hk40BtI.mft (raw, json) Hash identifier: iOaP/XgMa+XrDv0HO5dCLeslE1jRQsUS7XdKqjr7hCk= Subject key identifier: 38:2D:59:6F:06:D7:BB:92:85:49:4E:5D:F2:50:C3:EF:62:57:76:3C Authority key identifier: 25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 Certificate issuer: /CN=A91E28C1/serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Certificate serial: 0A47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft Manifest number: 0A29 Signing time: Thu 16 Jul 2026 19:59:53 +0000 Manifest this update: Thu 16 Jul 2026 19:59:52 +0000 Manifest next update: Thu 23 Jul 2026 19:59:52 +0000 Files and hashes: 1: JYQfp3wFcWWF_nvbBgC5hk40BtI.crl (hash: ynzyBT2/ZZU4ClnrmqFxFUnbsjUtNrpzQO0dcmOEVS4=) 2: 91FD24BA23C511EDA6D7F073C4F9AE02.roa (hash: 5herfVtiX3Vkwm/8fsoSk+EzMfC6vIVDvWWZDlnOkKU=) 3: 14A4E3F099E211EAAC99C833C4F9AE02.roa (hash: icEGC8iWrZAuCb+Toy7ITwaY5wPDLr4xdAi9iPNhR7A=) 4: FCC951D6FB1211EDBFADE86AC4F9AE02.roa (hash: 8dSZPcTAakCu9QFROWtp0AtwoX7QWCqBkxw8aYFakak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Jul 2026 19:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2631 (0xa47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E28C1, serialNumber=25841FA77C05716585FE7BDB0600B9864E3406D2 Validity Not Before: Jul 16 19:59:52 2026 GMT Not After : Jul 23 19:59:52 2026 GMT Subject: CN=6a593839-e408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:51:c3:53:fa:b2:d8:f3:fa:34:3d:04:c1: 88:c3:d7:13:26:53:c8:56:1b:cf:24:04:9d:71:c2: 39:df:fa:21:76:07:5c:ff:b7:ae:64:77:be:03:29: a8:95:26:46:30:3a:5d:01:a4:75:8c:71:c3:f8:51: a9:5c:83:59:64:e9:95:6b:4d:31:b0:73:a6:a5:f6: 2a:cb:6c:ea:95:1b:fa:c7:3b:e6:ed:d5:1e:60:02: 3d:5e:15:16:b7:3b:30:50:57:c5:c1:aa:f6:c4:b6: bb:b2:75:84:7b:93:41:ce:ba:fd:b1:06:ee:ef:41: b0:30:0e:1b:80:f7:3d:69:86:c0:b3:c9:10:c2:5a: 54:e8:55:80:18:9b:5c:e3:05:59:c8:aa:5d:0b:d0: 05:fa:e2:03:62:c8:24:21:b1:a2:1f:5d:5e:ef:55: 90:d3:05:27:2b:4d:a1:f9:94:9f:15:db:16:64:a6: 66:e5:27:38:37:0a:d1:f9:e4:28:81:ce:a4:f7:10: 72:5c:b4:db:7b:81:f6:ef:1f:99:82:49:53:99:84: fc:c0:c2:b3:10:09:d4:4e:f8:38:68:17:6d:6e:bc: c7:ba:b1:78:75:a3:ac:07:a6:f6:2c:e1:59:ca:9b: 80:3e:26:81:df:be:9c:ca:85:f3:e2:74:86:8a:06: ae:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2D:59:6F:06:D7:BB:92:85:49:4E:5D:F2:50:C3:EF:62:57:76:3C X509v3 Authority Key Identifier: keyid:25:84:1F:A7:7C:05:71:65:85:FE:7B:DB:06:00:B9:86:4E:34:06:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JYQfp3wFcWWF_nvbBgC5hk40BtI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28C1/F8AFA14099E011EA96652F32C4F9AE02/JYQfp3wFcWWF_nvbBgC5hk40BtI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c0:ff:85:6f:19:05:eb:c0:40:dc:cf:0d:5a:ac:1a:c1:a0: 4f:07:94:b1:58:70:0c:eb:b6:77:25:73:c2:d6:11:1c:55:27: 8e:08:10:8c:5f:22:ae:b3:77:ec:0c:18:3f:1f:31:6b:7b:2a: c1:8b:ac:e8:28:56:cc:8f:2f:07:f0:32:22:7a:63:45:2b:54: 33:06:73:b9:3b:ba:e0:5a:eb:11:f4:07:a8:89:d0:28:f5:49: 02:c0:bc:ee:49:2a:45:07:f7:5e:28:61:f3:c1:d0:8b:02:4f: 45:99:df:9f:be:d8:ca:69:6a:36:a8:3d:55:68:07:ca:40:f2: bb:a7:e0:42:5b:82:af:5f:50:e3:c2:3f:43:a7:15:e4:16:17: 45:56:6f:f3:df:8f:d6:2f:d5:e1:b0:36:08:d4:5a:4c:15:96: 5d:12:e4:5d:ab:30:26:1c:66:ee:53:d4:de:49:7e:02:52:35: 6a:4a:c5:bb:de:37:6b:52:03:24:8b:a0:01:78:5a:c7:1d:7c: a2:c4:14:41:c2:e5:d2:94:c5:40:25:17:35:67:29:b8:f8:5f: a1:ca:fc:f9:11:61:00:d0:d0:29:bd:f8:70:94:f1:a8:21:27: 14:be:dc:4a:bf:50:9c:e8:3b:59:2a:f6:7c:ee:13:dc:bd:d7: 50:29:ed:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4QzExMTAvBgNVBAUTKDI1ODQxRkE3N0MwNTcxNjU4NUZFN0JEQjA2MDBCOTg2 NEUzNDA2RDIwHhcNMjYwNzE2MTk1OTUyWhcNMjYwNzIzMTk1OTUyWjAYMRYwFAYD VQQDEw02YTU5MzgzOS1lNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3JRw1P6stjz+jQ9BMGIw9cTJlPIVhvPJASdccI53/ohdgdc/7euZHe+Aymo lSZGMDpdAaR1jHHD+FGpXINZZOmVa00xsHOmpfYqy2zqlRv6xzvm7dUeYAI9XhUW tzswUFfFwar2xLa7snWEe5NBzrr9sQbu70GwMA4bgPc9aYbAs8kQwlpU6FWAGJtc 4wVZyKpdC9AF+uIDYsgkIbGiH11e71WQ0wUnK02h+ZSfFdsWZKZm5Sc4NwrR+eQo gc6k9xByXLTbe4H27x+ZgklTmYT8wMKzEAnUTvg4aBdtbrzHurF4daOsB6b2LOFZ ypuAPiaB376cyoXz4nSGigauoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDgtWW8G 17uShUlOXfJQw+9iV3Y8MB8GA1UdIwQYMBaAFCWEH6d8BXFlhf572wYAuYZONAbS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjhDMS9GOEFGQTE0MDk5 RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNXV0ZfbnZiQmdDNWhrNDBC dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pZUWZwM3dGY1dXRl9udmJCZ0M1aGs0MEJ0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjhDMS9GOEFGQTE0MDk5RTAxMUVBOTY2NTJGMzJDNEY5QUUwMi9KWVFmcDN3RmNX V0ZfbnZiQmdDNWhrNDBCdEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABcD/hW8ZBevAQNzPDVqsGsGgTweUsVhwDOu2dyVzwtYRHFUnjggQjF8irrN3 7AwYPx8xa3sqwYus6ChWzI8vB/AyInpjRStUMwZzuTu64FrrEfQHqInQKPVJAsC8 7kkqRQf3Xihh88HQiwJPRZnfn77YymlqNqg9VWgHykDyu6fgQluCr19Q48I/Q6cV 5BYXRVZv89+P1i/V4bA2CNRaTBWWXRLkXaswJhxm7lPU3kl+AlI1akrFu943a1ID JIugAXhaxx18osQUQcLl0pTFQCUXNWcpuPhfocr8+RFhANDQKb34cJTxqCEnFL7c Sr9QnOg7WSr2fO4T3L3XUCntNg== -----END CERTIFICATE-----Generated at Sat Jul 18 07:16:44 2026 by rpki-client