$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: oDzXk3GKGZFTGkqupUCNG72rd7/9zqqCGGzGGDI1ywk= Subject key identifier: 12:12:44:F5:DE:2C:69:99:0A:1A:EB:7F:5C:42:31:C3:78:39:18:84 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 0310 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 0302 Signing time: Mon 27 Jul 2026 02:22:09 +0000 Manifest this update: Mon 27 Jul 2026 02:22:08 +0000 Manifest next update: Mon 03 Aug 2026 02:22:08 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: jFBFKf4Af3MbtLOvF+mOcDrl+lQ/zC06znN/2e83B2Q=) 2: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: e26HjI6IThHSTcyiS5wewUgNVLH1ZtA87nwKAQOfEN8=) 3: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo=) 4: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 784 (0x310) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Jul 27 02:22:08 2026 GMT Not After : Aug 3 02:22:08 2026 GMT Subject: CN=6a66c0d0-23e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:44:c6:c4:5f:ee:f5:81:ab:15:40:70:fd: 42:b7:7d:a6:ed:06:bb:a4:a9:e1:b0:f6:71:59:f8: d9:39:72:a9:23:9b:84:df:fc:eb:52:bd:89:ff:6a: 05:24:68:30:d0:1d:60:0a:a6:23:a2:7d:1f:67:8a: a5:c4:90:97:11:8a:dd:62:64:9a:e7:5b:a0:b0:88: f3:1b:ef:5d:8c:29:66:f5:ff:0b:3a:6b:4e:ad:09: 71:aa:e7:24:70:f4:17:04:b0:8a:ca:97:f3:f3:b5: 43:a5:5a:11:48:ee:72:60:76:e9:8d:5d:0c:a6:7e: 5d:00:07:93:5c:2a:eb:7b:6a:fd:d9:73:dc:5e:a0: 0a:57:64:93:54:6f:b2:8f:54:a0:3a:56:15:ad:ad: 8b:dc:44:9a:1c:90:d9:fc:c7:16:63:36:39:ba:d3: 78:0e:98:84:97:63:9e:41:5e:0e:d4:ea:23:a0:a4: 96:93:f2:da:43:a2:ef:ee:b1:39:06:54:ae:fe:f5: dd:bf:2b:2c:70:c5:ea:e6:62:2e:d7:98:37:66:0c: 23:2c:20:9b:2c:8f:88:6e:5c:80:5c:8d:fa:0a:74: e9:1b:66:a1:56:dd:36:e7:d8:96:d2:d6:9e:36:ea: 66:d9:1a:47:31:4e:61:eb:95:d3:ae:c0:bf:e8:9e: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:12:44:F5:DE:2C:69:99:0A:1A:EB:7F:5C:42:31:C3:78:39:18:84 X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:ce:49:be:71:78:14:67:67:cd:89:87:88:b1:d3:ab:25:83: 8c:88:9f:71:8e:5c:b6:73:4f:97:7b:67:a9:80:a6:1d:ee:51: 15:ea:a1:47:42:2c:52:32:a0:48:3d:8f:22:d3:83:a8:c8:8e: 7c:52:65:e0:c9:dc:20:94:f7:f7:39:e3:d3:ce:a3:bf:17:0f: 5c:5e:34:30:2d:50:7f:03:32:2f:73:b4:78:66:f4:a3:2e:5d: 33:22:6e:3c:02:1e:5f:14:ed:ce:35:45:d5:9f:e4:03:e0:e3: f4:6d:3a:c6:33:95:0e:ef:79:b5:98:3c:9a:52:1a:17:41:10: 56:9c:ac:3f:30:8a:48:80:04:f5:f9:5f:9c:36:ac:35:8b:7a: 42:46:21:d5:bd:db:ed:42:a9:96:fd:2b:af:e3:27:b0:fb:68: a5:53:40:33:5f:49:8c:01:da:6a:11:90:78:c5:ff:8d:eb:84: e8:5e:18:11:39:b7:de:e4:34:4e:dc:7d:b1:bc:c8:26:2a:24: 4a:c8:06:df:ca:c9:f0:0d:0d:d6:9e:db:3b:a1:9d:4f:0e:b9: 61:a1:80:15:f7:ea:cf:b6:66:f1:8a:28:6c:d6:10:31:03:8b: 07:d9:92:f6:ed:98:28:2b:bd:f9:c6:1b:5f:54:e5:b5:c0:e2: 38:5d:87:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYwNzI3MDIyMjA4WhcNMjYwODAzMDIyMjA4WjAYMRYwFAYD VQQDEw02YTY2YzBkMC0yM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOBExsRf7vWBqxVAcP1Ct32m7Qa7pKnhsPZxWfjZOXKpI5uE3/zrUr2J/2oF JGgw0B1gCqYjon0fZ4qlxJCXEYrdYmSa51ugsIjzG+9djClm9f8LOmtOrQlxquck cPQXBLCKypfz87VDpVoRSO5yYHbpjV0Mpn5dAAeTXCrre2r92XPcXqAKV2STVG+y j1SgOlYVra2L3ESaHJDZ/McWYzY5utN4DpiEl2OeQV4O1OojoKSWk/LaQ6Lv7rE5 BlSu/vXdvysscMXq5mIu15g3ZgwjLCCbLI+IblyAXI36CnTpG2ahVt0259iW0tae Nupm2RpHMU5h65XTrsC/6J6PBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBISRPXe LGmZChrrf1xCMcN4ORiEMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyM5JvnF4FGdnzYmHiLHTqyWDjIifcY5ctnNPl3tnqYCmHe5RFeqhR0IsUjKg SD2PItODqMiOfFJl4MncIJT39znj086jvxcPXF40MC1QfwMyL3O0eGb0oy5dMyJu PAIeXxTtzjVF1Z/kA+Dj9G06xjOVDu95tZg8mlIaF0EQVpysPzCKSIAE9flfnDas NYt6QkYh1b3b7UKplv0rr+MnsPtopVNAM19JjAHaahGQeMX/jeuE6F4YETm33uQ0 Ttx9sbzIJiokSsgG38rJ8A0N1p7bO6GdTw65YaGAFffqz7Zm8YoobNYQMQOLB9mS 9u2YKCu9+cYbX1TltcDiOF2HWA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:08:59 2026 by rpki-client