$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json) Hash identifier: HKoQI4XuxrQNo7QIesCpJ+QXZJG2ac2GFHu5e2dvILI= Subject key identifier: 8B:C8:FD:4F:FF:96:B5:F3:AC:AC:E4:9A:EB:1B:C3:F4:A2:77:9F:9F Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft Manifest number: 0198 Signing time: Mon 27 Jul 2026 06:08:25 +0000 Manifest this update: Mon 27 Jul 2026 06:08:24 +0000 Manifest next update: Mon 03 Aug 2026 06:08:24 +0000 Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: 9alkEwTFfOitSBrpqbUSFW7n4vXPBwEXR1Ug7hosbn0=) 2: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: U+JPeLwDFc/9KD5pjtuqdCZiF9ijWo40ru9xcuKUWDA=) 3: 6923942E252711EF948A5E18C4F9AE02.roa (hash: O1muA/0EJVSd9L8bh/HkeYxU93aOIw8GOb3fRQGF3F0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 06:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Jul 27 06:08:24 2026 GMT Not After : Aug 3 06:08:24 2026 GMT Subject: CN=6a66f5d9-7ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:74:0b:c8:36:52:a5:6a:d8:13:83:94:44:43: 96:b6:18:d6:a0:cf:93:10:68:cf:ed:25:ef:b2:a7: a9:1a:bd:0b:9c:86:80:a1:8b:db:61:72:37:cc:f1: 1c:d7:b3:ac:5f:5f:2d:46:98:90:e6:98:81:e3:de: 87:dc:7a:6c:5f:61:0e:fd:e8:46:37:55:dd:dc:56: 08:0d:9f:ea:36:cf:cd:59:d7:54:e2:38:ee:f3:2e: ef:79:e0:24:d5:a6:c8:c0:b0:18:85:3b:34:ea:88: e4:c8:f0:6b:c0:0c:74:a5:03:5e:10:26:97:d3:4f: bf:4c:b7:25:85:cb:67:4f:6a:67:c3:35:d2:9e:ce: 14:9b:ad:84:68:c9:1f:46:a7:1b:d3:9a:d0:ad:1e: b1:0e:af:77:5a:49:a2:10:0e:ea:23:7f:0b:4c:35: 9d:fa:71:c6:64:6b:c2:de:c9:15:7f:7c:87:c1:3f: c1:b2:82:bb:24:2d:05:36:34:cb:23:48:6d:5f:a2: b2:e1:9e:dd:90:a5:e9:50:3b:54:f1:3f:ab:b4:93: 55:47:9e:c1:85:e7:e7:e1:a6:11:4e:4c:ce:1a:50: 93:bc:5e:f5:75:2f:77:75:8a:cc:2d:15:cc:37:ce: 02:7a:14:aa:7c:8e:07:5f:cb:b1:fd:7d:75:fd:d6: 62:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C8:FD:4F:FF:96:B5:F3:AC:AC:E4:9A:EB:1B:C3:F4:A2:77:9F:9F X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:74:5e:5d:6f:c5:02:90:f6:2c:34:28:c2:f6:36:e4:8e:22: f2:90:0f:da:1f:85:02:b4:2c:99:69:93:7f:4c:01:8a:d4:b0: 65:2e:a7:90:44:61:c2:c5:c2:e2:b8:b1:dc:d6:6c:e1:7c:a1: 68:be:4d:20:2e:4c:bf:74:3f:7e:9f:ae:d8:a1:b9:d5:99:45: 84:b8:54:4d:19:56:6a:fe:5f:7c:7a:eb:0e:28:aa:04:ba:ac: f0:08:b4:e4:29:e1:28:e4:32:97:a1:f4:a4:8f:c9:40:77:bd: c0:2b:5d:3e:0e:da:8a:72:c7:b0:fd:71:c8:50:f0:93:79:d1: d7:13:02:e4:e8:c0:bd:b6:3e:92:9b:d1:00:7f:58:39:1e:fa: e0:98:f7:ba:f6:74:30:e3:38:9f:6a:ca:16:a2:99:f8:31:5f: d0:ad:31:c6:b0:87:58:0b:ae:c3:7a:00:30:7c:ad:ab:dc:a5: b4:7b:a2:e4:7b:18:82:ff:c8:37:30:08:d7:8a:0f:98:a4:fd: ca:92:b6:e1:31:70:9e:21:06:d6:26:6b:b0:a6:87:eb:ff:13: 17:1e:3f:dd:24:0d:b1:ce:3f:f7:3d:90:72:29:4b:69:a1:5c: 03:83:28:dc:b5:81:52:dc:a4:d6:b0:d7:7f:4e:e6:58:3c:4d: f3:33:91:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE OTRGNTBBMUEwHhcNMjYwNzI3MDYwODI0WhcNMjYwODAzMDYwODI0WjAYMRYwFAYD VQQDEw02YTY2ZjVkOS03ZWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHQLyDZSpWrYE4OUREOWthjWoM+TEGjP7SXvsqepGr0LnIaAoYvbYXI3zPEc 17OsX18tRpiQ5piB496H3HpsX2EO/ehGN1Xd3FYIDZ/qNs/NWddU4jju8y7veeAk 1abIwLAYhTs06ojkyPBrwAx0pQNeECaX00+/TLclhctnT2pnwzXSns4Um62EaMkf Rqcb05rQrR6xDq93WkmiEA7qI38LTDWd+nHGZGvC3skVf3yHwT/BsoK7JC0FNjTL I0htX6Ky4Z7dkKXpUDtU8T+rtJNVR57Bhefn4aYRTkzOGlCTvF71dS93dYrMLRXM N84CehSqfI4HX8ux/X11/dZi+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvI/U// lrXzrKzkmusbw/Sid5+fMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1 MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt bDdJb09hOGZwS3paVDFDaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfHReXW/FApD2LDQowvY25I4i8pAP2h+FArQsmWmTf0wBitSwZS6nkERhwsXC 4rix3NZs4XyhaL5NIC5Mv3Q/fp+u2KG51ZlFhLhUTRlWav5ffHrrDiiqBLqs8Ai0 5CnhKOQyl6H0pI/JQHe9wCtdPg7ainLHsP1xyFDwk3nR1xMC5OjAvbY+kpvRAH9Y OR764Jj3uvZ0MOM4n2rKFqKZ+DFf0K0xxrCHWAuuw3oAMHytq9yltHui5HsYgv/I NzAI14oPmKT9ypK24TFwniEG1iZrsKaH6/8TFx4/3SQNsc4/9z2QcilLaaFcA4Mo 3LWBUtyk1rDXf07mWDxN8zORbw== -----END CERTIFICATE-----Generated at Wed Jul 29 03:49:49 2026 by rpki-client