$ rpki-client -vvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft File: 2WQZRdW0z31j_JExr89yeuNtkCA.mft (raw, json) Hash identifier: deOWMMT3l/NJEQPYWfnWhL605GPpSyk/LwRW0N0i6Ug= Subject key identifier: 28:0F:85:B1:AE:C6:BA:15:FB:A2:0C:80:95:BD:1E:0B:44:3D:C6:EB Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20 Certificate issuer: /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020 Certificate serial: 02BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft Manifest number: 02AC Signing time: Wed 29 Jul 2026 02:30:14 +0000 Manifest this update: Wed 29 Jul 2026 02:30:13 +0000 Manifest next update: Wed 05 Aug 2026 02:30:13 +0000 Files and hashes: 1: 2WQZRdW0z31j_JExr89yeuNtkCA.crl (hash: o980iQAQu+W6R464ZG2fIGeT0S4uaH7aycQmyJyHAAE=) 2: 590A6A9A792E11EEA5AAB840C4F9AE02.roa (hash: /sj3JZ3p1665YJRvSUXz4i11ey7ZoPynVcwKSHS8SnQ=) 3: 77490C9A792F11EEBF849942C4F9AE02.roa (hash: MpcjQVs1Jc1cjgEQDQ1xjrNe8yr/lbGI3mI0RqgvaQ8=) 4: 15714ED2776A11ED98AF7341C4F9AE02.roa (hash: GVyHO9aPtU+XPsp7j3IVen2mhZWFCWup91n2kBUjWV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 02:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 700 (0x2bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F316, serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020 Validity Not Before: Jul 29 02:30:13 2026 GMT Not After : Aug 5 02:30:13 2026 GMT Subject: CN=6a6965b6-5903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:29:27:4a:55:63:49:f6:d4:f7:55:c7:90:a9: 37:95:42:86:55:26:eb:af:60:61:b9:b2:d8:5b:ec: ba:55:64:c9:f9:3f:12:6a:29:bb:3f:93:6c:a7:42: 2c:50:2b:8a:04:6d:0f:55:46:cd:0f:e4:43:30:34: a5:c8:4b:79:58:e4:6c:b7:91:5b:ca:cf:50:51:fa: d2:bd:f9:ec:e7:60:d1:5e:1d:1e:11:b5:df:43:df: 43:b2:2c:1a:90:19:d3:00:80:bb:70:75:73:6e:b8: 91:27:5f:3e:d7:00:88:a4:dd:0d:61:cb:82:eb:dc: e4:34:8a:b7:27:a2:85:36:c6:45:6f:f1:d2:3b:74: de:d4:bc:6a:c2:30:ec:8e:07:d6:ac:f5:37:ec:54: 67:82:0d:25:49:59:ca:3e:b9:18:08:89:ad:d8:85: 11:da:b4:c2:47:5d:31:3b:b4:c3:61:b6:57:9d:a2: 1e:ee:ef:1b:a4:aa:5d:ed:ae:11:23:e0:98:c3:e1: 91:a6:4b:de:01:13:e6:33:f2:91:60:68:c2:03:7a: fb:88:99:a3:a1:30:cb:d9:4d:f1:2b:5c:67:f8:ba: 86:40:48:f3:bf:3c:da:9a:37:4d:da:ae:39:84:86: b6:e6:e6:27:c2:99:90:6c:fb:c1:72:ea:63:1e:5b: e3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0F:85:B1:AE:C6:BA:15:FB:A2:0C:80:95:BD:1E:0B:44:3D:C6:EB X509v3 Authority Key Identifier: keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:01:dc:81:b7:ea:bc:b6:0d:b9:b8:65:1d:e2:11:da:ad:fe: e7:58:69:9b:e0:8f:2c:a0:02:05:a9:a0:28:1a:cc:d4:ab:cd: c6:6b:88:2f:93:33:53:b2:da:f9:73:aa:12:c1:0d:53:1c:f6: 9d:d4:60:2f:c8:2f:2a:60:ef:39:3c:bf:f6:f3:32:5a:59:d7: 99:fb:8a:e4:39:20:32:68:9f:35:cd:5e:47:07:23:6d:da:58: 15:b1:99:9f:dc:70:34:1f:df:ae:bf:40:3e:0a:e7:6c:a9:99: 46:3a:2c:2e:2b:f4:da:64:7d:0a:17:bd:45:c6:ed:ee:c0:e5: f8:3d:a9:9e:60:b0:f3:33:9d:6e:c4:29:18:43:72:26:7a:71: bc:1d:89:4e:98:e9:c9:fa:29:00:f0:11:24:34:3d:ad:02:5b: 89:bc:3b:77:eb:26:dc:38:f5:0b:89:27:1c:64:c1:a6:2d:b8: b5:2b:9b:b5:c7:7f:40:03:21:1d:4b:36:d1:5a:e1:79:42:4d: a2:8f:46:d5:4e:cc:96:7b:1a:a1:ef:60:9f:ef:51:88:9d:73: 37:c0:f9:fa:c4:1c:df:39:03:53:7e:b0:dd:3e:03:89:02:47: 7c:67:9c:9b:e8:43:0e:06:34:f9:9a:61:12:69:6d:ff:7b:ac: 5b:cc:1a:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYzMTYxMTAvBgNVBAUTKEQ5NjQxOTQ1RDVCNENGN0Q2M0ZDOTEzMUFGQ0Y3MjdB RTM2RDkwMjAwHhcNMjYwNzI5MDIzMDEzWhcNMjYwODA1MDIzMDEzWjAYMRYwFAYD VQQDEw02YTY5NjViNi01OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSknSlVjSfbU91XHkKk3lUKGVSbrr2BhubLYW+y6VWTJ+T8Saim7P5Nsp0Is UCuKBG0PVUbND+RDMDSlyEt5WORst5Fbys9QUfrSvfns52DRXh0eEbXfQ99Dsiwa kBnTAIC7cHVzbriRJ18+1wCIpN0NYcuC69zkNIq3J6KFNsZFb/HSO3Te1LxqwjDs jgfWrPU37FRngg0lSVnKPrkYCImt2IUR2rTCR10xO7TDYbZXnaIe7u8bpKpd7a4R I+CYw+GRpkveARPmM/KRYGjCA3r7iJmjoTDL2U3xK1xn+LqGQEjzvzzamjdN2q45 hIa25uYnwpmQbPvBcupjHlvjqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCgPhbGu xroV+6IMgJW9HgtEPcbrMB8GA1UdIwQYMBaAFNlkGUXVtM99Y/yRMa/PcnrjbZAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjMxNi9BMURGMTUyMDc3 NEMxMUVEQjgyNkJDMEJDNEY5QUUwMi8yV1FaUmRXMHozMWpfSkV4cjg5eWV1TnRr Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXUVpSZFcwejMxal9KRXhyODl5ZXVOdGtDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjMxNi9BMURGMTUyMDc3NEMxMUVEQjgyNkJDMEJDNEY5QUUwMi8yV1FaUmRXMHoz MWpfSkV4cjg5eWV1TnRrQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIQHcgbfqvLYNubhlHeIR2q3+51hpm+CPLKACBamgKBrM1KvNxmuIL5MzU7La +XOqEsENUxz2ndRgL8gvKmDvOTy/9vMyWlnXmfuK5DkgMmifNc1eRwcjbdpYFbGZ n9xwNB/frr9APgrnbKmZRjosLiv02mR9Che9Rcbt7sDl+D2pnmCw8zOdbsQpGENy JnpxvB2JTpjpyfopAPARJDQ9rQJbibw7d+sm3Dj1C4knHGTBpi24tSubtcd/QAMh HUs20VrheUJNoo9G1U7Mlnsaoe9gn+9RiJ1zN8D5+sQc3zkDU36w3T4DiQJHfGec m+hDDgY0+ZphEmlt/3usW8wabg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:20:55 2026 by rpki-client