$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: Ge12E7s0le0fdPYTa61sT8q6fxpitkERloP0eL6i5q4= Subject key identifier: F5:C1:87:85:1A:40:9C:87:32:51:21:B9:E2:F7:01:B7:8D:7A:35:14 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 0311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 0303 Signing time: Wed 29 Jul 2026 02:01:47 +0000 Manifest this update: Wed 29 Jul 2026 02:01:47 +0000 Manifest next update: Wed 05 Aug 2026 02:01:47 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: ORWFS+KQ/JjVzbtvPTjR4hCXGYuDqOU31TqzU69KN5M=) 2: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8=) 3: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo=) 4: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: e26HjI6IThHSTcyiS5wewUgNVLH1ZtA87nwKAQOfEN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 02:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Jul 29 02:01:47 2026 GMT Not After : Aug 5 02:01:47 2026 GMT Subject: CN=6a695f0b-b990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:3b:02:75:0a:86:7f:27:83:9a:84:5a:d8: 99:fb:0b:a7:5f:6d:ef:0f:3d:c8:65:83:4e:cb:e7: 3a:43:bc:c2:1c:67:2a:f9:77:c4:97:45:31:82:73: f4:2f:fc:fc:94:b8:23:3c:d0:dc:22:5c:14:ad:27: 04:7f:52:00:49:21:07:ff:7b:e1:9e:b4:a5:08:39: 32:f9:12:48:9b:48:d5:94:1b:a1:ca:98:d2:d7:17: 8c:18:a3:d9:bb:4e:2e:6b:7e:a5:94:1a:85:7b:85: e2:de:63:03:61:a6:c3:c8:d9:6a:ed:22:99:cb:6f: 53:d9:83:07:3d:b1:97:76:a3:59:46:9f:06:78:05: d0:f1:ad:6d:87:ac:2d:68:43:b3:a5:78:a9:80:03: 65:b5:7e:9a:11:e1:11:9c:00:f9:58:dd:26:8b:16: 7d:6a:1a:78:61:91:34:14:fa:01:68:0c:b9:37:87: 20:0b:b6:d9:ab:24:80:a6:2d:51:5b:c9:a1:5a:2c: 48:5a:2c:98:77:b3:28:5f:22:0c:a5:67:66:1f:a7: eb:0c:f4:3a:7c:53:5e:ee:34:e1:ac:94:83:cb:2f: 3e:5b:c0:31:73:e6:0a:a4:9b:3d:81:09:04:76:33: 69:9a:01:0d:16:39:ca:c8:57:67:18:b4:1a:7c:28: f2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C1:87:85:1A:40:9C:87:32:51:21:B9:E2:F7:01:B7:8D:7A:35:14 X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:e2:a2:52:1c:6a:90:b0:3c:31:26:f1:50:88:28:54:fc:4a: e4:b9:02:c1:9e:8c:a5:48:56:b5:e3:31:fa:8d:6d:85:1e:d8: b4:11:9c:6d:74:da:32:3e:04:3d:01:34:bb:bb:c6:93:b8:40: 05:25:ae:d4:85:84:23:33:32:8b:f9:c7:5f:73:5b:8f:51:90: e7:64:e4:f8:80:ad:4f:7d:77:a5:b2:ce:56:2c:66:f6:37:75: 73:62:6c:dc:5a:64:ac:41:8a:c9:17:c1:ea:be:0c:a5:71:e5: 96:66:de:8f:c4:64:09:db:10:50:7b:d7:03:d0:88:a9:d9:3a: 08:fb:9e:bf:46:4a:c6:a7:be:4b:f6:df:a5:8f:46:27:3c:de: 1d:18:e2:f7:9b:7b:50:7e:1e:b8:73:40:30:71:f7:c7:5c:75: e3:73:f8:c2:05:54:97:d7:12:21:a6:07:8e:3e:a4:9b:97:54: 8e:ee:41:d9:b5:d3:cc:b4:bc:7c:00:bd:d8:83:43:88:69:54: f3:4a:c1:0b:f2:b1:40:5a:b7:b0:13:d6:f4:d2:69:72:1e:a8: ec:2a:c4:f5:aa:aa:e5:20:e3:ec:81:02:ee:98:77:67:69:59: cd:3e:39:18:e1:3a:1a:f7:c3:29:18:3f:66:cf:9c:e2:dc:e0: 3d:91:92:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYwNzI5MDIwMTQ3WhcNMjYwODA1MDIwMTQ3WjAYMRYwFAYD VQQDEw02YTY5NWYwYi1iOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjqY7AnUKhn8ng5qEWtiZ+wunX23vDz3IZYNOy+c6Q7zCHGcq+XfEl0UxgnP0 L/z8lLgjPNDcIlwUrScEf1IASSEH/3vhnrSlCDky+RJIm0jVlBuhypjS1xeMGKPZ u04ua36llBqFe4Xi3mMDYabDyNlq7SKZy29T2YMHPbGXdqNZRp8GeAXQ8a1th6wt aEOzpXipgANltX6aEeERnAD5WN0mixZ9ahp4YZE0FPoBaAy5N4cgC7bZqySApi1R W8mhWixIWiyYd7MoXyIMpWdmH6frDPQ6fFNe7jThrJSDyy8+W8Axc+YKpJs9gQkE djNpmgENFjnKyFdnGLQafCjy1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPXBh4Ua QJyHMlEhueL3AbeNejUUMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzeKiUhxqkLA8MSbxUIgoVPxK5LkCwZ6MpUhWteMx+o1thR7YtBGcbXTaMj4E PQE0u7vGk7hABSWu1IWEIzMyi/nHX3Nbj1GQ52Tk+ICtT313pbLOVixm9jd1c2Js 3FpkrEGKyRfB6r4MpXHllmbej8RkCdsQUHvXA9CIqdk6CPuev0ZKxqe+S/bfpY9G JzzeHRji95t7UH4euHNAMHH3x1x143P4wgVUl9cSIaYHjj6km5dUju5B2bXTzLS8 fAC92INDiGlU80rBC/KxQFq3sBPW9NJpch6o7CrE9aqq5SDj7IEC7ph3Z2lZzT45 GOE6GvfDKRg/Zs+c4tzgPZGS6A== -----END CERTIFICATE-----Generated at Wed Jul 29 05:42:22 2026 by rpki-client