$ rpki-client -vvf rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft File: MOI2HN2l66cF86ay--vl232vEPE.mft (raw, json) Hash identifier: VSi7CaCmbJbHYfPlFjQXJPgBGGuX7nvmsvYuGIsgBg8= Subject key identifier: 0C:A7:5A:77:E7:90:A7:5F:7B:F6:28:A9:DA:D2:CE:B2:D5:0F:59:BE Authority key identifier: 30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1 Certificate issuer: /CN=A91386E8/serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1 Certificate serial: 06F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft Manifest number: 06EB Signing time: Sun 26 Jul 2026 23:03:01 +0000 Manifest this update: Sun 26 Jul 2026 23:03:01 +0000 Manifest next update: Sun 02 Aug 2026 23:03:01 +0000 Files and hashes: 1: MOI2HN2l66cF86ay--vl232vEPE.crl (hash: BIm4rPMHyMjarfKpf4xeUB3aWVOCBB4IWBX5vUeAKOo=) 2: 65C6DD42E15211EC8EEE9668C4F9AE02.roa (hash: UOYuzO+ZfFS4K1/Mm8Vt4itIcJTcKoKeJ7BaPumjJT8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 23:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91386E8, serialNumber=30E2361CDDA5EBA705F3A6B2FBEBE5DB7DAF10F1 Validity Not Before: Jul 26 23:03:01 2026 GMT Not After : Aug 2 23:03:01 2026 GMT Subject: CN=6a669225-90c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:39:d2:58:63:f2:e4:6f:9d:b8:d4:26:ff:c3: 6c:84:4b:7b:6c:5f:24:ff:83:53:86:2d:ba:1d:9c: b0:a7:43:f5:b5:11:95:79:e2:ed:c3:52:e1:11:ad: 70:ba:cf:58:80:0a:24:1a:a9:e7:b2:ab:8c:4c:57: fe:df:4e:4e:8a:9f:4c:b4:49:ed:26:11:b6:5c:74: 02:e9:30:7d:2e:29:34:77:89:17:c6:e9:2e:2e:dc: 5e:2d:c6:d0:78:eb:09:45:99:63:90:8b:bd:e1:b6: 36:85:9a:4d:ab:22:bd:b7:ec:f7:c0:71:7e:61:b4: dc:98:f0:96:cc:46:5f:f4:ec:0a:3c:b4:eb:e3:19: 58:cf:fd:f1:f4:f7:53:8d:e7:2b:8d:f6:65:5c:c8: f5:d5:88:d1:0e:5a:a8:2e:70:a6:fc:56:1d:e3:ea: 97:3c:46:3a:c7:00:05:d9:fd:4a:10:ef:e5:55:ca: 67:cd:6e:63:08:75:72:29:1e:f2:be:94:7f:e7:8d: ed:e4:37:0c:24:89:80:43:94:3b:5f:22:8b:92:45: be:38:d9:2b:cf:94:8c:b9:6e:b6:5e:13:2d:f1:68: 57:5c:b3:89:17:31:5f:82:3a:51:79:0d:31:32:4b: 6f:dd:80:48:ca:c9:01:a9:f5:56:10:cc:d0:07:86: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A7:5A:77:E7:90:A7:5F:7B:F6:28:A9:DA:D2:CE:B2:D5:0F:59:BE X509v3 Authority Key Identifier: keyid:30:E2:36:1C:DD:A5:EB:A7:05:F3:A6:B2:FB:EB:E5:DB:7D:AF:10:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOI2HN2l66cF86ay--vl232vEPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91386E8/4889594EA80011EB90650A15C4F9AE02/MOI2HN2l66cF86ay--vl232vEPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:11:db:75:db:eb:26:67:2f:49:2d:1a:aa:6b:3b:80:0a:b6: e4:6f:3d:5d:1e:5b:f5:f3:69:55:63:f6:9f:8f:dc:5c:4b:07: 35:6a:35:0e:fc:fb:be:47:17:47:33:79:00:76:3b:e4:b1:7c: 9a:9e:1b:72:20:fb:c5:18:d3:a5:89:40:51:fa:7a:11:89:c1: 41:65:f0:57:c6:ff:31:2a:a7:4d:0a:86:04:6e:f7:0c:b1:66: 5a:17:cd:a8:8f:f2:14:b1:d4:91:2a:9b:30:81:43:db:c1:4d: 8c:a1:6d:66:3d:f8:4c:7c:ce:d5:e4:ce:34:16:bc:1f:e2:15: 76:d3:58:a2:2f:96:c7:9d:c5:cf:0d:59:35:4f:a0:73:ad:ca: 21:4d:d0:4a:50:03:02:68:78:dc:2b:04:12:65:aa:08:a3:e5: dc:3c:34:f7:d3:32:3b:48:c8:fc:72:cf:7c:c9:be:79:d9:8a: 99:eb:b5:81:40:78:18:1f:2f:ee:60:58:23:20:f0:66:58:bf: fa:3c:92:98:e0:da:15:bc:fe:e2:46:9e:93:08:a7:aa:5b:85: 90:07:7c:0c:c2:08:90:7a:c4:94:16:d6:ac:48:99:1b:bd:b5: 6a:d0:95:61:fe:3a:26:52:a6:b8:89:e3:78:03:2c:28:de:a9: f8:b1:f2:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg2RTgxMTAvBgNVBAUTKDMwRTIzNjFDRERBNUVCQTcwNUYzQTZCMkZCRUJFNURC N0RBRjEwRjEwHhcNMjYwNzI2MjMwMzAxWhcNMjYwODAyMjMwMzAxWjAYMRYwFAYD VQQDEw02YTY2OTIyNS05MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjnSWGPy5G+duNQm/8NshEt7bF8k/4NThi26HZywp0P1tRGVeeLtw1LhEa1w us9YgAokGqnnsquMTFf+305Oip9MtEntJhG2XHQC6TB9Lik0d4kXxukuLtxeLcbQ eOsJRZljkIu94bY2hZpNqyK9t+z3wHF+YbTcmPCWzEZf9OwKPLTr4xlYz/3x9PdT jecrjfZlXMj11YjRDlqoLnCm/FYd4+qXPEY6xwAF2f1KEO/lVcpnzW5jCHVyKR7y vpR/543t5DcMJImAQ5Q7XyKLkkW+ONkrz5SMuW62XhMt8WhXXLOJFzFfgjpReQ0x Mktv3YBIyskBqfVWEMzQB4ayEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAynWnfn kKdfe/YoqdrSzrLVD1m+MB8GA1UdIwQYMBaAFDDiNhzdpeunBfOmsvvr5dt9rxDx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODZFOC80ODg5NTk0RUE4 MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2Y0Y4NmF5LS12bDIzMnZF UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PSTJITjJsNjZjRjg2YXktLXZsMjMydkVQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODZFOC80ODg5NTk0RUE4MDAxMUVCOTA2NTBBMTVDNEY5QUUwMi9NT0kySE4ybDY2 Y0Y4NmF5LS12bDIzMnZFUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOxHbddvrJmcvSS0aqms7gAq25G89XR5b9fNpVWP2n4/cXEsHNWo1Dvz7vkcX RzN5AHY75LF8mp4bciD7xRjTpYlAUfp6EYnBQWXwV8b/MSqnTQqGBG73DLFmWhfN qI/yFLHUkSqbMIFD28FNjKFtZj34THzO1eTONBa8H+IVdtNYoi+Wx53Fzw1ZNU+g c63KIU3QSlADAmh43CsEEmWqCKPl3Dw099MyO0jI/HLPfMm+edmKmeu1gUB4GB8v 7mBYIyDwZli/+jySmODaFbz+4kaekwinqluFkAd8DMIIkHrElBbWrEiZG721atCV Yf46JlKmuInjeAMsKN6p+LHyeg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:40:25 2026 by rpki-client