$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft File: Ut5nj6808fJ7_XLOdS9c1X6ME84.mft (raw, json) Hash identifier: JVxOLgCiTm+Qsxi2POkDzWGh1NNOb/bG9tLKEN6l8uE= Subject key identifier: 1B:2A:DF:CB:BD:93:D1:AA:75:52:2E:78:70:4C:56:F5:9D:65:EE:E3 Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE Certificate issuer: /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft Manifest number: 02A2 Signing time: Mon 27 Jul 2026 02:56:34 +0000 Manifest this update: Mon 27 Jul 2026 02:56:34 +0000 Manifest next update: Mon 03 Aug 2026 02:56:34 +0000 Files and hashes: 1: Ut5nj6808fJ7_XLOdS9c1X6ME84.crl (hash: SJNpOnWuoy2WTAHYhcVY6uTeHDM38Y/tbTjmG2ZL6sk=) 2: F69540BA810811ED9EA03683C4F9AE02.roa (hash: 1ls87L8wFBI3susqrdOibbBBgEFKgSyseB64cHDFqj4=) 3: F5D6B6B8810811ED9EA03683C4F9AE02.roa (hash: YhFFk2hbxX7ipWmiEtRtt5VM5YND4GHLWqHWN4WPPew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE Validity Not Before: Jul 27 02:56:34 2026 GMT Not After : Aug 3 02:56:34 2026 GMT Subject: CN=6a66c8e2-7715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a1:77:8d:85:14:eb:99:79:a9:2f:01:60:db: 0b:74:5e:36:32:fe:fd:b7:19:96:cd:5d:1f:d7:07: fb:67:e5:8b:a7:b9:37:2b:6e:18:07:8c:b6:f5:e8: 6e:89:45:8d:2b:ac:1a:0d:2d:ef:a8:e8:c7:fa:e1: 4b:61:ad:9b:99:39:16:12:12:ae:b5:e4:c8:da:46: c4:4a:c6:f3:ad:6d:70:53:f8:04:01:2a:8c:85:1a: b5:0c:60:e1:cf:66:08:3c:a4:5e:a1:1e:d5:c5:3f: be:14:0f:ab:d6:43:ba:f5:4d:b8:35:0f:c6:8c:45: 93:8f:aa:6a:db:1a:65:4b:fd:83:e1:d2:f1:e8:e7: 25:f1:48:6f:71:e7:bf:a9:52:fc:33:b4:ad:6e:cf: 9d:98:e4:e0:8f:15:f2:58:26:22:b8:87:ba:7f:81: c7:46:5e:f7:16:d1:94:cc:75:43:b7:7c:49:f1:75: 41:4f:7a:24:4d:24:64:dd:55:fd:0d:8d:6a:1f:29: 0d:fb:1e:5a:1b:51:03:58:d6:4e:d5:d5:a5:4f:20: f4:cd:3c:8a:06:40:b3:3c:66:76:be:ab:e1:31:25: cd:ac:de:1f:b6:dd:1f:03:aa:9f:86:91:2a:09:be: cf:a8:01:76:b4:af:86:dc:39:d3:60:9c:2d:85:90: 58:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:2A:DF:CB:BD:93:D1:AA:75:52:2E:78:70:4C:56:F5:9D:65:EE:E3 X509v3 Authority Key Identifier: keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a9:26:08:e2:d0:0f:c5:c5:cb:dd:57:92:65:7b:32:4a:2a: fb:be:28:34:07:e6:06:a8:b1:73:75:3e:1d:54:a1:10:2d:ab: ae:7f:79:9b:7e:7c:b0:96:b7:b7:e4:4e:c5:54:e6:31:00:99: 91:21:c9:d9:2a:15:cb:d5:b2:ee:e3:35:9b:ed:6c:f0:e5:72: 45:30:aa:94:1a:ee:a6:01:a3:3f:ed:a2:fe:00:2a:96:20:40: 60:e3:fc:e7:6a:e7:b1:b3:75:a3:e5:63:c7:b1:f4:3a:33:68: a1:ee:d0:b9:d1:2a:81:20:b5:3a:9a:ad:81:86:d4:53:0d:69: a6:70:42:62:84:bd:32:82:c9:2d:dc:26:2b:fb:1a:82:c0:dd: c6:df:15:ef:e3:6e:66:58:d4:95:34:27:ff:d5:45:c4:4f:30: 92:57:6a:65:75:b3:08:90:be:31:c0:e8:d5:af:1b:c1:84:de: ee:0a:51:07:08:16:e6:25:ef:d2:f4:a4:b6:5a:25:a5:6a:3b: e7:2c:fe:49:bf:9d:c2:b9:1f:5e:fb:4c:ca:8e:fe:5a:e0:41: 1a:05:c4:ea:48:16:be:5f:88:a1:b0:67:4d:6e:14:64:35:16: 59:be:51:d3:b0:b4:05:00:2f:cf:4e:4c:da:de:30:ce:49:2e: 94:2a:04:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzgxQzAxMTAvBgNVBAUTKDUyREU2NzhGQUYzNEYxRjI3QkZENzJDRTc1MkY1Q0Q1 N0U4QzEzQ0UwHhcNMjYwNzI3MDI1NjM0WhcNMjYwODAzMDI1NjM0WjAYMRYwFAYD VQQDEw02YTY2YzhlMi03NzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxqF3jYUU65l5qS8BYNsLdF42Mv79txmWzV0f1wf7Z+WLp7k3K24YB4y29ehu iUWNK6waDS3vqOjH+uFLYa2bmTkWEhKuteTI2kbESsbzrW1wU/gEASqMhRq1DGDh z2YIPKReoR7VxT++FA+r1kO69U24NQ/GjEWTj6pq2xplS/2D4dLx6Ocl8Uhvcee/ qVL8M7Stbs+dmOTgjxXyWCYiuIe6f4HHRl73FtGUzHVDt3xJ8XVBT3okTSRk3VX9 DY1qHykN+x5aG1EDWNZO1dWlTyD0zTyKBkCzPGZ2vqvhMSXNrN4ftt0fA6qfhpEq Cb7PqAF2tK+G3DnTYJwthZBYKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBsq38u9 k9GqdVIueHBMVvWdZe7jMB8GA1UdIwQYMBaAFFLeZ4+vNPHye/1yznUvXNV+jBPO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODFDMC8yRjI4OUVENjgx MDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhmSjdfWExPZFM5YzFYNk1F ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V0NW5qNjgwOGZKN19YTE9kUzljMVg2TUU4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 ODFDMC8yRjI4OUVENjgxMDQxMUVEQkVDNjUwODdDNEY5QUUwMi9VdDVuajY4MDhm SjdfWExPZFM5YzFYNk1FODQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUqkmCOLQD8XFy91XkmV7Mkoq+74oNAfmBqixc3U+HVShEC2rrn95m358sJa3 t+ROxVTmMQCZkSHJ2SoVy9Wy7uM1m+1s8OVyRTCqlBrupgGjP+2i/gAqliBAYOP8 52rnsbN1o+Vjx7H0OjNooe7QudEqgSC1OpqtgYbUUw1ppnBCYoS9MoLJLdwmK/sa gsDdxt8V7+NuZljUlTQn/9VFxE8wkldqZXWzCJC+McDo1a8bwYTe7gpRBwgW5iXv 0vSktlolpWo75yz+Sb+dwrkfXvtMyo7+WuBBGgXE6kgWvl+IobBnTW4UZDUWWb5R 07C0BQAvz05M2t4wzkkulCoEDw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:07 2026 by rpki-client