$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft File: 2udQjRHkcijaH-ADJZe70p91iQw.mft (raw, json) Hash identifier: b71GhbP2t2i22KoqtzjPbveAYZBj1ICaZHMyFoLIeTA= Subject key identifier: 3D:0B:68:E7:0E:59:3A:04:18:61:11:CE:7C:DA:95:D1:8E:93:39:24 Authority key identifier: DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C Certificate issuer: /CN=A91912DD/serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C Certificate serial: 17B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft Manifest number: 1786 Signing time: Tue 28 Jul 2026 16:41:17 +0000 Manifest this update: Tue 28 Jul 2026 16:41:17 +0000 Manifest next update: Tue 04 Aug 2026 16:41:17 +0000 Files and hashes: 1: 2udQjRHkcijaH-ADJZe70p91iQw.crl (hash: 4f+pS0cfWP1ci+T/zAfgup/+IDJ7kQE/yozVtSIu6H8=) 2: DCF1073E26B211E9B0DD0155C4F9AE02.roa (hash: fDbYr0EVY0HHpg82DdAQ+a/vYfR5r/kAjpAM5PF5EpE=) 3: 2E0A645AD3B211EF83FA102FC4F9AE02.roa (hash: WMKhPELFr7sydQirrifvcLQGLjTAgGeSRNjGOKEEwqU=) 4: 2FFD1298AC5A11EDA8C03215C4F9AE02.roa (hash: 9GgRZxqaQZcejhwB/9pJZ8cfO+FzBiNgy3V+3DIT4ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6065 (0x17b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91912DD, serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C Validity Not Before: Jul 28 16:41:17 2026 GMT Not After : Aug 4 16:41:17 2026 GMT Subject: CN=6a68dbad-d92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ff:4d:bb:5e:69:bb:91:97:ad:1a:44:b1:6f: 11:43:75:65:58:6f:f8:d9:b2:e5:1b:4c:b7:54:60: e0:af:63:70:88:80:34:33:31:dc:ac:84:30:c3:78: c7:0f:86:fe:61:4a:e1:42:0d:98:94:d6:4c:87:80: 26:ca:3c:b7:e4:7c:2a:9e:c2:80:46:df:35:57:51: 33:46:13:d6:e2:05:5a:e3:c0:8e:b0:f1:69:74:8e: d6:84:64:7d:46:db:84:13:46:ba:11:f3:4b:c9:bc: 4a:f8:d1:7f:20:95:8e:e8:81:84:20:1e:25:73:6e: fa:33:e3:8a:e0:99:51:6f:6f:ca:57:13:eb:83:3d: da:52:84:8d:17:9c:c7:cb:18:14:6d:41:42:33:04: 6c:6d:fe:20:b5:bd:e2:53:93:20:65:a4:7d:77:e2: 9d:54:2a:0d:80:bd:35:61:88:5e:00:9f:30:47:13: 95:77:d4:1f:f2:37:18:8e:ac:72:46:f1:31:c4:00: 00:b4:53:7f:0a:8f:50:29:4a:6f:b0:43:95:4d:6b: 50:ef:85:76:20:f1:eb:50:79:c7:89:f4:40:f8:84: bf:86:f9:a2:d3:eb:1a:8a:2c:c1:95:3e:ca:fb:bf: 19:2b:09:7a:b6:ca:67:fe:59:4e:59:41:b0:b6:9f: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0B:68:E7:0E:59:3A:04:18:61:11:CE:7C:DA:95:D1:8E:93:39:24 X509v3 Authority Key Identifier: keyid:DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:d1:fc:65:2f:b4:31:68:cb:23:1d:b3:e2:f6:75:e4:65:4c: ad:58:36:6b:fa:04:6f:69:ce:fc:94:11:66:f9:1b:98:24:b4: 77:0e:d0:f3:e7:62:f5:39:e5:0f:c2:17:32:a4:cf:18:3b:ed: 7f:ea:c7:4c:41:f9:7d:7a:5d:50:dd:60:07:0f:23:06:1f:b2: 9b:77:56:bc:e9:ea:01:3b:9d:fd:53:e6:5b:ec:de:d0:f9:2c: 99:b4:24:5b:4a:81:6f:a7:1a:15:65:a7:be:26:0e:ab:81:54: 55:f1:ed:11:ac:c0:b3:c5:b9:34:99:c4:33:b5:69:66:26:77: eb:e8:8e:be:35:fe:bd:69:e7:51:63:e8:b6:1e:5f:90:95:53: 91:bf:a7:67:22:ce:0c:e4:59:09:3c:1f:da:f3:8a:2b:3c:bf: 9a:e4:b7:5a:04:39:54:75:b0:b0:11:fb:57:98:d0:f6:d7:18: 3d:df:e2:be:3f:9f:49:de:c5:f3:62:86:42:1c:eb:53:72:54: 21:ea:0b:4f:31:a8:d9:fb:96:ab:1a:42:cc:15:bc:e9:1d:ad: a5:d0:d5:db:30:70:bd:87:58:b6:e6:3f:72:fc:d0:5b:2e:f6: bc:88:2d:a1:a6:8a:69:5a:99:45:39:b9:2b:4c:c5:23:a9:d2: ce:4e:de:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICF7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTEyREQxMTAvBgNVBAUTKERBRTc1MDhEMTFFNDcyMjhEQTFGRTAwMzI1OTdCQkQy OUY3NTg5MEMwHhcNMjYwNzI4MTY0MTE3WhcNMjYwODA0MTY0MTE3WjAYMRYwFAYD VQQDEw02YTY4ZGJhZC1kOTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsf9Nu15pu5GXrRpEsW8RQ3VlWG/42bLlG0y3VGDgr2NwiIA0MzHcrIQww3jH D4b+YUrhQg2YlNZMh4Amyjy35HwqnsKARt81V1EzRhPW4gVa48COsPFpdI7WhGR9 RtuEE0a6EfNLybxK+NF/IJWO6IGEIB4lc276M+OK4JlRb2/KVxPrgz3aUoSNF5zH yxgUbUFCMwRsbf4gtb3iU5MgZaR9d+KdVCoNgL01YYheAJ8wRxOVd9Qf8jcYjqxy RvExxAAAtFN/Co9QKUpvsEOVTWtQ74V2IPHrUHnHifRA+IS/hvmi0+saiizBlT7K +78ZKwl6tspn/llOWUGwtp+n3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0LaOcO WToEGGERznzaldGOkzkkMB8GA1UdIwQYMBaAFNrnUI0R5HIo2h/gAyWXu9KfdYkM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTJERC80NjI4QkVDNDAw RDgxMUU4OTA2MTA2MzdDNEY5QUUwMi8ydWRRalJIa2NpamFILUFESlplNzBwOTFp UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ1ZFFqUkhrY2lqYUgtQURKWmU3MHA5MWlRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MTJERC80NjI4QkVDNDAwRDgxMUU4OTA2MTA2MzdDNEY5QUUwMi8ydWRRalJIa2Np amFILUFESlplNzBwOTFpUXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACNH8ZS+0MWjLIx2z4vZ15GVMrVg2a/oEb2nO/JQRZvkbmCS0dw7Q8+di9Tnl D8IXMqTPGDvtf+rHTEH5fXpdUN1gBw8jBh+ym3dWvOnqATud/VPmW+ze0PksmbQk W0qBb6caFWWnviYOq4FUVfHtEazAs8W5NJnEM7VpZiZ36+iOvjX+vWnnUWPoth5f kJVTkb+nZyLODORZCTwf2vOKKzy/muS3WgQ5VHWwsBH7V5jQ9tcYPd/ivj+fSd7F 82KGQhzrU3JUIeoLTzGo2fuWqxpCzBW86R2tpdDV2zBwvYdYtuY/cvzQWy72vIgt oaaKaVqZRTm5K0zFI6nSzk7esg== -----END CERTIFICATE-----Generated at Wed Jul 29 02:43:16 2026 by rpki-client