$ rpki-client -vvf rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft File: r2oY2zoHHvGMylvos1Qz31RPD7I.mft (raw, json) Hash identifier: gcyZ93ClTl2Qby+r22WgEA76g5OOXC4An7XZG4/sx7c= Subject key identifier: 05:09:2C:BA:99:59:C1:8C:CE:44:DD:AB:E0:3D:A9:F8:B3:11:80:EE Authority key identifier: AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2 Certificate issuer: /CN=A918E20E/serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2 Certificate serial: 0C9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft Manifest number: 0C95 Signing time: Tue 28 Jul 2026 18:47:24 +0000 Manifest this update: Tue 28 Jul 2026 18:47:24 +0000 Manifest next update: Tue 04 Aug 2026 18:47:24 +0000 Files and hashes: 1: r2oY2zoHHvGMylvos1Qz31RPD7I.crl (hash: JIm0F4/DQimjMANuT517b0oJvcIYbYTsCULR2ceXT8g=) 2: BFA3B5F81FC911EA8CF04E61C4F9AE02.roa (hash: MmjI1qOgCQW0MQsR9FuyWf1ShP4bmGGOftpuFS2VuLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3231 (0xc9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E20E, serialNumber=AF6A18DB3A071EF18CCA5BE8B35433DF544F0FB2 Validity Not Before: Jul 28 18:47:24 2026 GMT Not After : Aug 4 18:47:24 2026 GMT Subject: CN=6a68f93c-23ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:60:0e:45:e4:d1:83:97:04:1e:b9:70:4d:68: ad:b5:e9:05:dc:97:98:3c:db:ae:22:ba:4d:0a:ac: c5:68:1f:74:be:f9:32:9c:3d:cd:13:71:25:ff:de: 98:39:b4:e7:70:ff:df:73:56:80:fc:d4:20:07:59: 42:a7:0a:34:f7:fc:4c:b1:a2:7d:3a:46:70:b4:f1: 74:e6:17:a8:b0:a4:e2:42:25:35:5e:5f:d5:c1:68: 79:0b:92:65:f6:5a:e7:f5:71:e2:c5:ae:76:82:1b: f4:de:20:31:b2:d2:ae:a3:4b:14:48:b6:5c:55:3c: 9f:e4:02:d1:88:c5:26:d5:7e:54:0e:db:f9:e9:18: 83:0c:e8:f2:28:a3:50:47:8c:cc:78:2a:b2:0c:4c: ae:03:03:5f:10:4b:43:f6:1f:21:1d:1c:01:a4:fa: 27:27:e1:c7:71:5a:02:34:f0:b4:32:78:48:2c:88: 4c:5a:f7:a5:03:d4:3a:77:60:80:a1:6a:98:45:0e: b5:c0:ce:73:1d:af:84:d3:2b:52:d3:09:fc:bb:94: 95:77:1a:00:8f:c8:41:ef:1c:9a:75:d4:30:2d:4b: 60:08:7c:c4:f0:ed:2a:56:73:7e:4a:69:30:da:dc: 9d:b1:c5:45:bd:ed:46:90:0a:8d:38:4b:dc:7a:98: 34:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:09:2C:BA:99:59:C1:8C:CE:44:DD:AB:E0:3D:A9:F8:B3:11:80:EE X509v3 Authority Key Identifier: keyid:AF:6A:18:DB:3A:07:1E:F1:8C:CA:5B:E8:B3:54:33:DF:54:4F:0F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2oY2zoHHvGMylvos1Qz31RPD7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E20E/23AAD98E1FC811EA84594F5EC4F9AE02/r2oY2zoHHvGMylvos1Qz31RPD7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:66:0e:c7:96:b0:30:40:09:e4:bd:08:c6:5b:7d:f6:04:9e: be:e9:69:71:9c:7c:97:32:dd:1e:f5:3d:dd:fb:2d:2f:92:33: de:6a:28:5f:b1:7f:63:bc:80:59:66:a0:54:44:52:2d:a8:68: db:85:c5:c7:1c:bd:54:45:49:ea:83:5b:70:c7:4e:5d:1c:d4: e0:96:63:1c:3a:90:87:7d:44:21:bb:63:07:df:f4:97:ba:86: 77:5a:4b:ac:54:3b:d0:7d:4c:8d:18:29:90:e8:d7:d3:57:2a: 19:0f:5c:df:01:fb:63:d2:c1:e3:1f:26:03:96:a3:e7:c5:9d: 8e:ea:07:31:01:2e:9b:f3:d8:4d:4d:20:83:30:09:20:f2:98: 9d:7f:f1:9f:1e:cf:45:d9:32:88:70:f4:ff:89:64:2c:b6:1b: 8b:f2:b7:83:02:16:75:07:1b:f9:46:0d:6c:5e:ce:36:08:97: d1:71:c0:5d:b3:91:5a:7d:6b:9c:82:75:47:3e:c5:6c:d8:50: 4c:36:65:82:12:51:cc:0e:91:f9:f3:00:ef:2b:8f:4a:b2:6c: e1:61:31:93:ba:97:38:49:56:d2:fa:9b:2b:a9:11:2c:75:45: c4:78:2f:c7:40:ca:6d:3a:f1:bf:fa:5b:63:f0:c1:08:dc:fc: 89:7a:99:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUyMEUxMTAvBgNVBAUTKEFGNkExOERCM0EwNzFFRjE4Q0NBNUJFOEIzNTQzM0RG NTQ0RjBGQjIwHhcNMjYwNzI4MTg0NzI0WhcNMjYwODA0MTg0NzI0WjAYMRYwFAYD VQQDEw02YTY4ZjkzYy0yM2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9WAOReTRg5cEHrlwTWittekF3JeYPNuuIrpNCqzFaB90vvkynD3NE3El/96Y ObTncP/fc1aA/NQgB1lCpwo09/xMsaJ9OkZwtPF05heosKTiQiU1Xl/VwWh5C5Jl 9lrn9XHixa52ghv03iAxstKuo0sUSLZcVTyf5ALRiMUm1X5UDtv56RiDDOjyKKNQ R4zMeCqyDEyuAwNfEEtD9h8hHRwBpPonJ+HHcVoCNPC0MnhILIhMWvelA9Q6d2CA oWqYRQ61wM5zHa+E0ytS0wn8u5SVdxoAj8hB7xyaddQwLUtgCHzE8O0qVnN+Smkw 2tydscVFve1GkAqNOEvcepg02QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAUJLLqZ WcGMzkTdq+A9qfizEYDuMB8GA1UdIwQYMBaAFK9qGNs6Bx7xjMpb6LNUM99UTw+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTIwRS8yM0FBRDk4RTFG QzgxMUVBODQ1OTRGNUVDNEY5QUUwMi9yMm9ZMnpvSEh2R015bHZvczFRejMxUlBE N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Iyb1kyem9ISHZHTXlsdm9zMVF6MzFSUEQ3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTIwRS8yM0FBRDk4RTFGQzgxMUVBODQ1OTRGNUVDNEY5QUUwMi9yMm9ZMnpvSEh2 R015bHZvczFRejMxUlBEN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADmYOx5awMEAJ5L0Ixlt99gSevulpcZx8lzLdHvU93fstL5Iz3mooX7F/Y7yA WWagVERSLaho24XFxxy9VEVJ6oNbcMdOXRzU4JZjHDqQh31EIbtjB9/0l7qGd1pL rFQ70H1MjRgpkOjX01cqGQ9c3wH7Y9LB4x8mA5aj58WdjuoHMQEum/PYTU0ggzAJ IPKYnX/xnx7PRdkyiHD0/4lkLLYbi/K3gwIWdQcb+UYNbF7ONgiX0XHAXbORWn1r nIJ1Rz7FbNhQTDZlghJRzA6R+fMA7yuPSrJs4WExk7qXOElW0vqbK6kRLHVFxHgv x0DKbTrxv/pbY/DBCNz8iXqZkg== -----END CERTIFICATE-----Generated at Tue Jul 28 21:44:15 2026 by rpki-client