$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft File: nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json) Hash identifier: KQIbYKD+iIoF+Fcg9aQJNwkYKzt6vD2F+dtfUquPWvY= Subject key identifier: 97:C3:70:E5:E1:0E:E6:92:8F:AF:D1:45:EE:96:9A:40:85:0D:E4:71 Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft Manifest number: C5 Signing time: Wed 29 Jul 2026 08:23:21 +0000 Manifest this update: Wed 29 Jul 2026 08:23:21 +0000 Manifest next update: Wed 05 Aug 2026 08:23:21 +0000 Files and hashes: 1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: PRpm2X7nH733rHvRaSWgeex7RZ81hBYsxLps9NjxNak=) 2: 8C538C5AEFCF11F0889DE39E746F56BC.roa (hash: eiSYQZ4JbJxsufS9RcJajhzup1MJX6NMX/+qc2RSIq8=) 3: 224FBC52EFCF11F0A018F59D746F56BC.roa (hash: l6zP7eAxKoViI6F3M9uDYfZY33CWARrIielkD1703l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 08:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Jul 29 08:23:21 2026 GMT Not After : Aug 5 08:23:21 2026 GMT Subject: CN=6a69b879-2961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:91:f2:db:04:e4:c7:99:c2:bd:75:9f:6b: c1:0c:db:41:46:ed:f6:23:6d:b7:73:e4:98:12:ce: b3:77:8a:1d:44:5c:d1:d2:e0:91:8c:85:a0:d2:81: 23:5a:6e:27:82:8f:98:e1:8e:9e:61:46:03:d6:f7: c1:9c:3c:9d:77:f0:8a:0f:2d:2f:f5:ca:8c:fd:f4: 76:0e:de:2e:2b:0b:23:1c:98:fa:94:32:eb:b3:f4: 13:fc:91:fe:42:a6:a9:53:cd:6a:0c:32:26:7c:1d: 17:a9:9d:08:f5:c0:f0:15:7e:df:09:29:fc:03:61: 0e:7e:7c:e7:da:ec:1f:06:77:5c:a7:aa:e2:b1:90: 0b:ba:1c:5b:cb:8f:af:82:c3:89:b5:3e:c3:78:3c: de:43:e6:50:92:9a:9a:1a:c7:eb:eb:94:da:57:14: 9c:34:e1:12:fa:21:39:2f:3d:fe:1a:a4:5b:60:bc: 7b:69:f0:3b:7f:ce:c9:2f:42:a1:7f:6b:3e:7a:09: f8:2d:c3:f3:48:04:b9:69:68:15:e4:19:1f:c1:7f: 20:5a:d3:d5:c5:a9:b2:84:1d:bc:85:bf:47:1a:20: b4:53:8b:6f:8e:9f:ca:21:1a:33:04:a1:b0:56:3f: bb:88:84:a3:a4:d8:6b:53:74:03:aa:e5:65:cb:55: fd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C3:70:E5:E1:0E:E6:92:8F:AF:D1:45:EE:96:9A:40:85:0D:E4:71 X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:23:22:74:1a:e4:f9:28:f3:3b:04:62:fe:f3:3f:37:a2:06: 35:1c:84:4f:c4:ff:2f:9e:02:f5:d4:03:01:b4:5a:76:ca:21: 6a:2f:36:e9:c9:b4:ca:e6:20:37:e2:f0:07:3f:0e:21:77:ff: f5:64:dc:c9:54:e4:82:cd:1c:16:8e:3b:17:20:af:9a:eb:9a: 0f:9f:74:df:50:d6:5a:4f:f6:b7:01:c4:6d:44:e4:f8:ca:ae: e2:f2:fd:35:cc:fc:ad:ea:50:7e:b8:03:ec:96:82:33:72:39: 7f:b8:68:98:90:32:95:14:17:dd:4f:8f:0e:63:3a:c6:a5:93: 2f:34:19:4c:0f:e9:26:de:8c:93:fb:10:77:f2:4a:61:02:a2: 2a:fc:27:b5:26:4d:37:64:88:9f:e3:45:29:76:c2:47:22:2d: c4:48:5d:38:2e:89:cf:71:6c:f8:f4:d4:e0:09:6b:fa:c2:5e: 4c:f9:2c:73:11:45:f5:e9:40:7d:c3:3d:7b:37:d4:4c:6f:26: dc:ab:82:b3:91:0d:09:0d:e0:b7:0e:6a:97:27:d9:fc:59:57: e2:ab:b4:fa:71:96:40:38:d1:e0:b5:2a:51:99:38:98:45:37: d6:b4:46:45:95:60:48:09:5d:ff:c1:e3:37:d3:01:b9:6e:fb: 46:cc:59:1f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1QzMxMTAvBgNVBAUTKDlFQkRBMTIzRDlFRTgzMDk0MzA1QTExODBDMkEwODA1 N0ZFNTQwNkEwHhcNMjYwNzI5MDgyMzIxWhcNMjYwODA1MDgyMzIxWjAYMRYwFAYD VQQDEw02YTY5Yjg3OS0yOTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArN+R8tsE5MeZwr11n2vBDNtBRu32I223c+SYEs6zd4odRFzR0uCRjIWg0oEj Wm4ngo+Y4Y6eYUYD1vfBnDydd/CKDy0v9cqM/fR2Dt4uKwsjHJj6lDLrs/QT/JH+ QqapU81qDDImfB0XqZ0I9cDwFX7fCSn8A2EOfnzn2uwfBndcp6risZALuhxby4+v gsOJtT7DeDzeQ+ZQkpqaGsfr65TaVxScNOES+iE5Lz3+GqRbYLx7afA7f87JL0Kh f2s+egn4LcPzSAS5aWgV5BkfwX8gWtPVxamyhB28hb9HGiC0U4tvjp/KIRozBKGw Vj+7iISjpNhrU3QDquVly1X9UQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfDcOXh DuaSj6/RRe6WmkCFDeRxMB8GA1UdIwQYMBaAFJ69oSPZ7oMJQwWhGAwqCAV/5UBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yMzI2QzYzRTY2 MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3bERCYUVZRENvSUJYX2xR R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3 bERCYUVZRENvSUJYX2xRR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATiMidBrk+SjzOwRi/vM/N6IGNRyET8T/L54C9dQDAbRadsohai826cm0yuYg N+LwBz8OIXf/9WTcyVTkgs0cFo47FyCvmuuaD59031DWWk/2twHEbUTk+Mqu4vL9 Ncz8repQfrgD7JaCM3I5f7homJAylRQX3U+PDmM6xqWTLzQZTA/pJt6Mk/sQd/JK YQKiKvwntSZNN2SIn+NFKXbCRyItxEhdOC6Jz3Fs+PTU4Alr+sJeTPkscxFF9elA fcM9ezfUTG8m3KuCs5ENCQ3gtw5qlyfZ/FlX4qu0+nGWQDjR4LUqUZk4mEU31rRG RZVgSAld/8HjN9MBuW77RsxZHw== -----END CERTIFICATE-----Generated at Wed Jul 29 12:50:25 2026 by rpki-client