$ rpki-client -vvf rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft File: 2KPIZydtR_ptDvLogh8Ps9MZcb8.mft (raw, json) Hash identifier: ycPSk5lw1X/erdGbgtIJAf0oTLrWg6Dq9+q7T5LFtpE= Subject key identifier: E7:CD:64:AF:A4:60:DE:ED:9A:A4:08:3C:11:30:D4:2D:B7:8B:0F:3D Authority key identifier: D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF Certificate issuer: /CN=A91278E5/serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft Manifest number: 44 Signing time: Mon 27 Jul 2026 10:44:52 +0000 Manifest this update: Mon 27 Jul 2026 10:44:51 +0000 Manifest next update: Mon 03 Aug 2026 10:44:51 +0000 Files and hashes: 1: 2KPIZydtR_ptDvLogh8Ps9MZcb8.crl (hash: KrrVhtsakKhiuLGP439D+AOjhgfC3IVsGfxipbz7sag=) 2: 1C7AB64E21BE11F191732FC01B3D8C67.roa (hash: VkCR5thgem73gdzuOjRPxScIE5IryV7vWPHF+kNveak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278E5, serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF Validity Not Before: Jul 27 10:44:51 2026 GMT Not After : Aug 3 10:44:51 2026 GMT Subject: CN=6a6736a4-b99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:c4:f0:e9:93:bf:17:0f:df:41:b5:b0:54: 66:9b:b8:07:47:63:26:0f:82:9f:14:30:43:25:5f: cb:f5:6c:b9:4f:b2:29:2e:2e:d3:16:5a:48:5b:d5: f9:72:d8:70:a5:2b:5a:ab:65:e7:3b:41:58:02:bc: 1a:c6:07:fb:ad:dc:5b:18:60:4b:4b:8c:eb:98:dd: c6:c1:bf:fa:d1:39:c2:d4:dc:79:3a:36:d7:06:f5: 6d:52:81:10:3f:3e:67:34:b7:a9:5e:1c:13:4c:ee: 74:e8:24:ab:8b:26:e2:82:a3:c5:4f:0d:68:40:62: a9:3d:66:b0:d2:da:5f:7d:e8:4c:2f:2b:51:a3:ff: d3:31:c2:a5:cc:35:a0:f9:bc:35:c2:a9:46:0d:51: 34:c5:70:4d:55:5a:35:6b:3b:18:86:98:4c:6c:fe: 1d:8d:88:b1:4e:29:5a:f6:ee:59:2d:b3:08:68:34: b9:3e:e0:a5:81:17:ba:2b:3c:23:78:8b:5f:6f:8e: 88:24:eb:02:2b:fa:8c:01:bd:18:df:b6:d5:dc:a4: 48:82:ff:cf:75:2e:07:97:f5:eb:c1:37:a5:4c:fa: c4:e2:96:74:47:67:c8:55:74:78:2b:8e:23:5e:8a: 32:5b:b6:2c:84:e8:5a:9e:74:8c:43:27:9c:6f:f7: fd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CD:64:AF:A4:60:DE:ED:9A:A4:08:3C:11:30:D4:2D:B7:8B:0F:3D X509v3 Authority Key Identifier: keyid:D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:50:24:a0:37:ea:f9:5e:3a:27:29:0a:c3:23:e4:2c:29:1d: 4f:62:f9:54:13:55:42:25:d9:4d:b0:a4:07:d3:47:8c:2e:20: 27:c3:77:84:fc:3f:d1:81:0e:0f:f9:54:06:ff:57:93:28:66: bf:21:55:8a:77:b2:09:ee:57:be:a5:ba:44:4f:b9:f9:4d:b3: 42:d7:a8:61:3c:09:3c:20:f6:11:53:8c:f9:cd:3d:4a:58:c7: c2:f0:c8:6c:8f:b2:7d:4e:92:5a:89:92:26:01:bd:40:a3:44: 4b:f7:b8:2b:a0:53:c4:54:bb:3a:12:2a:b6:af:d2:fc:3b:62: b1:51:9a:72:fa:af:aa:c2:71:f1:b8:86:42:f6:b7:d1:c9:7c: 2b:a2:fc:db:a0:74:e4:8e:18:cc:1c:69:7c:a3:87:83:1e:3e: fa:82:31:01:28:59:85:45:36:72:54:a8:3e:5c:be:49:80:29: 36:63:3e:4d:32:e8:fb:95:91:68:eb:64:48:4e:e4:d2:08:7c: ec:d4:56:59:9b:32:a4:60:23:25:db:16:6a:55:14:e3:a3:2a: 67:9b:c7:e7:99:1a:33:d1:d1:98:72:12:26:5c:e7:ee:35:01: fc:b3:d8:cf:5f:5f:df:80:17:8b:65:ba:b9:ee:6c:23:43:a5: 3f:2f:d0:28 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzhFNTExMC8GA1UEBRMoRDhBM0M4NjcyNzZENDdGQTZEMEVGMkU4ODIxRjBGQjNE MzE5NzFCRjAeFw0yNjA3MjcxMDQ0NTFaFw0yNjA4MDMxMDQ0NTFaMBgxFjAUBgNV BAMTDTZhNjczNmE0LWI5OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYI8Tw6ZO/Fw/fQbWwVGabuAdHYyYPgp8UMEMlX8v1bLlPsikuLtMWWkhb1fly 2HClK1qrZec7QVgCvBrGB/ut3FsYYEtLjOuY3cbBv/rROcLU3Hk6NtcG9W1SgRA/ Pmc0t6leHBNM7nToJKuLJuKCo8VPDWhAYqk9ZrDS2l996EwvK1Gj/9MxwqXMNaD5 vDXCqUYNUTTFcE1VWjVrOxiGmExs/h2NiLFOKVr27lktswhoNLk+4KWBF7orPCN4 i19vjogk6wIr+owBvRjfttXcpEiC/891LgeX9evBN6VM+sTilnRHZ8hVdHgrjiNe ijJbtiyE6FqedIxDJ5xv9/0pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU581kr6Rg 3u2apAg8ETDULbeLDz0wHwYDVR0jBBgwFoAU2KPIZydtR/ptDvLogh8Ps9MZcb8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3OEU1L0NCMkY4RUE0MjFC RDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9wdER2TG9naDhQczlNWmNi OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMktQSVp5ZHRSX3B0RHZMb2doOFBzOU1aY2I4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 OEU1L0NCMkY4RUE0MjFCRDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9w dER2TG9naDhQczlNWmNiOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOUCSgN+r5XjonKQrDI+QsKR1PYvlUE1VCJdlNsKQH00eMLiAnw3eE/D/RgQ4P +VQG/1eTKGa/IVWKd7IJ7le+pbpET7n5TbNC16hhPAk8IPYRU4z5zT1KWMfC8Mhs j7J9TpJaiZImAb1Ao0RL97groFPEVLs6Eiq2r9L8O2KxUZpy+q+qwnHxuIZC9rfR yXwrovzboHTkjhjMHGl8o4eDHj76gjEBKFmFRTZyVKg+XL5JgCk2Yz5NMuj7lZFo 62RITuTSCHzs1FZZmzKkYCMl2xZqVRTjoypnm8fnmRoz0dGYchImXOfuNQH8s9jP X1/fgBeLZbq57mwjQ6U/L9Ao -----END CERTIFICATE-----Generated at Tue Jul 28 20:21:30 2026 by rpki-client