$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft File: 9JfRcWknbUPFhSFcGYMxwzwiWnU.mft (raw, json) Hash identifier: UIPlfWGDagwuXF0oOM3QHqpt5/ruPHRVnCnt1bzkYHs= Subject key identifier: 8A:AF:86:FC:70:11:10:47:F5:DB:3D:59:2B:67:B6:1E:FB:0B:83:4D Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft Manifest number: 02BD Signing time: Tue 21 Jul 2026 02:33:12 +0000 Manifest this update: Tue 21 Jul 2026 02:33:11 +0000 Manifest next update: Tue 28 Jul 2026 02:33:11 +0000 Files and hashes: 1: 9JfRcWknbUPFhSFcGYMxwzwiWnU.crl (hash: Jidl7+nFqMvIdoK9FTm06m/ot1B7kvSVttbgPApk+sI=) 2: C82A0778680811EE88B5527CC4F9AE02.roa (hash: aGkSuS0d5kC8SSbfjCl/wREw36WuVh33R9qpSzjLESg=) 3: B9D8F9CE89D011EEB603FF75C4F9AE02.roa (hash: hMb2hcSIJToNCOk3fqaJJZYV+N/CGmHdt8jBqc5Ar/g=) 4: AC8A59D689D311EE81F03018C4F9AE02.roa (hash: JVxMI3BBydPHJQteEqMVI2GOfo7MKjizmO2le+yttg4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:33:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ECC24, serialNumber=F497D17169276D43C585215C198331C33C225A75 Validity Not Before: Jul 21 02:33:11 2026 GMT Not After : Jul 28 02:33:11 2026 GMT Subject: CN=6a5eda68-3e8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:06:a7:ee:81:1d:02:58:04:46:be:ae:ec:58: 4a:b7:e0:b2:b1:26:f6:7d:07:c5:3b:d2:f3:ab:ff: 8c:88:47:24:eb:e3:b9:10:94:fc:35:4c:65:8c:26: c1:62:ce:52:6a:b7:72:9c:9d:49:33:fb:6e:ca:23: 21:e8:28:a0:4b:04:8a:65:18:e4:52:5e:86:45:df: 3b:ad:31:78:e9:9d:96:1a:86:a4:f8:cb:1c:1e:bf: 28:0a:02:14:a6:cb:1c:f3:ed:82:00:c1:25:b5:70: 33:a5:ba:05:f8:62:db:35:24:14:23:11:be:3d:91: ad:43:19:02:30:8e:f9:27:23:94:33:d9:90:5c:c9: 4a:4a:3b:79:14:cd:e5:22:55:b5:51:2b:31:ab:f4: c7:1d:7b:b1:80:50:2d:6e:2b:50:87:e8:ff:8c:44: 19:83:75:56:bc:21:8e:6f:36:0b:07:2b:a4:1a:55: 54:89:c3:c9:5b:78:67:9f:c9:6e:6e:29:67:bd:c3: 0d:8a:6e:d5:c3:60:86:2a:4d:f4:6b:8b:e3:4f:b2: 35:44:7b:31:d3:ed:37:3b:f4:b6:22:a9:89:38:9f: 3e:92:92:2a:a5:94:f3:0c:19:6b:3f:6e:7a:7c:46: ed:2d:77:89:82:e0:87:cc:a4:e1:f4:3a:37:1c:5c: cc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AF:86:FC:70:11:10:47:F5:DB:3D:59:2B:67:B6:1E:FB:0B:83:4D X509v3 Authority Key Identifier: keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:33:bc:4b:5b:ae:a5:bd:ce:27:37:75:ea:13:e0:cb:fb:d9: 28:b1:3a:47:6a:58:a6:ec:c4:1a:38:cf:b6:bb:d9:82:2f:08: 41:90:92:9a:08:9b:5d:5b:90:4c:0c:30:ad:8a:3b:51:cb:d1: 2c:06:c6:5d:4e:36:53:38:dc:59:83:12:6a:5b:e8:6c:89:ec: b2:a8:d6:28:9e:13:b7:cc:32:8d:a9:2c:f6:53:ec:e1:5f:1d: f1:38:d2:74:fa:70:3d:21:b5:2f:82:8c:ee:36:26:29:a8:bb: 8a:5c:c7:b5:5e:7e:c4:47:e2:57:4f:20:00:79:5b:22:dc:7c: 89:3d:6b:03:6b:b8:d7:e3:d9:64:de:bd:51:42:a7:e5:29:c2: c9:26:f9:61:fc:f2:64:d5:48:93:fe:61:5f:da:db:58:8d:f2: fa:98:d2:45:27:aa:e7:02:9e:84:a9:40:31:97:3c:a0:d6:62: 7e:17:e6:b7:53:bd:46:16:d5:29:6e:f6:0e:c9:e1:ce:11:24: 9e:42:80:d4:7b:a8:45:41:2f:ee:d1:66:e7:ac:88:0f:3c:e8: c7:c4:ce:9b:bc:ad:bb:f9:50:01:02:96:37:df:d7:e3:c5:5e: 10:e8:81:cf:b3:8c:51:dd:fc:1b:1b:82:2b:ec:fc:54:d5:76: b0:89:ce:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUNDMjQxMTAvBgNVBAUTKEY0OTdEMTcxNjkyNzZENDNDNTg1MjE1QzE5ODMzMUMz M0MyMjVBNzUwHhcNMjYwNzIxMDIzMzExWhcNMjYwNzI4MDIzMzExWjAYMRYwFAYD VQQDEw02YTVlZGE2OC0zZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQan7oEdAlgERr6u7FhKt+CysSb2fQfFO9Lzq/+MiEck6+O5EJT8NUxljCbB Ys5SardynJ1JM/tuyiMh6CigSwSKZRjkUl6GRd87rTF46Z2WGoak+MscHr8oCgIU pssc8+2CAMEltXAzpboF+GLbNSQUIxG+PZGtQxkCMI75JyOUM9mQXMlKSjt5FM3l IlW1USsxq/THHXuxgFAtbitQh+j/jEQZg3VWvCGObzYLByukGlVUicPJW3hnn8lu bilnvcMNim7Vw2CGKk30a4vjT7I1RHsx0+03O/S2IqmJOJ8+kpIqpZTzDBlrP256 fEbtLXeJguCHzKTh9Do3HFzMiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIqvhvxw ERBH9ds9WStnth77C4NNMB8GA1UdIwQYMBaAFPSX0XFpJ21DxYUhXBmDMcM8Ilp1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0MyNC8xNkM2MTMxNjZB RkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJVUEZoU0ZjR1lNeHd6d2lX blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlKZlJjV2tuYlVQRmhTRmNHWU14d3p3aVduVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Q0MyNC8xNkM2MTMxNjZBRkExMUVEQjcwNkZGM0NDNEY5QUUwMi85SmZSY1drbmJV UEZoU0ZjR1lNeHd6d2lXblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAETO8S1uupb3OJzd16hPgy/vZKLE6R2pYpuzEGjjPtrvZgi8IQZCSmgibXVuQ TAwwrYo7UcvRLAbGXU42UzjcWYMSalvobInssqjWKJ4Tt8wyjaks9lPs4V8d8TjS dPpwPSG1L4KM7jYmKai7ilzHtV5+xEfiV08gAHlbItx8iT1rA2u41+PZZN69UUKn 5SnCySb5YfzyZNVIk/5hX9rbWI3y+pjSRSeq5wKehKlAMZc8oNZifhfmt1O9RhbV KW72DsnhzhEknkKA1HuoRUEv7tFm56yIDzzox8TOm7ytu/lQAQKWN9/X48VeEOiB z7OMUd38GxuCK+z8VNV2sInObQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:32:46 2026 by rpki-client