$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: Cgs9DiYcRXW8K1XZB7moSBtvLR39tGxKga7eHm/zxbI= Subject key identifier: A2:04:A3:F9:2F:42:E1:8D:59:70:A8:BF:CA:70:2B:09:05:19:A1:03 Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0EEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0ECE Signing time: Tue 28 Jul 2026 17:49:15 +0000 Manifest this update: Tue 28 Jul 2026 17:49:15 +0000 Manifest next update: Tue 04 Aug 2026 17:49:15 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: WLbQAAS43vrBvo+mSycwm2wbaXXorMFt48ala7/fBCo=) 2: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 8cuyoSN28q4uL8xy1DF6fDKydmWDLPM+OObCbWczh0k=) 3: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: otCvD2+70hExeG7UwhAKqvYl8H+cUijlEBEY7BdlZms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3819 (0xeeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Jul 28 17:49:15 2026 GMT Not After : Aug 4 17:49:15 2026 GMT Subject: CN=6a68eb9b-56f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:a8:b9:0d:9b:cb:5f:73:8f:41:dc:3f:db: 06:7a:d9:d9:11:0e:26:76:ea:62:9b:7d:98:04:54: 05:d3:19:b5:1e:22:2f:5c:33:3a:52:04:64:74:be: e0:9e:ce:27:7b:91:d9:a3:f4:63:00:00:7d:6b:f1: b2:96:eb:10:0b:1f:e5:90:4f:00:fb:35:f0:b2:02: e9:b0:48:64:ca:28:1e:40:0a:0a:37:56:e8:fb:77: b7:31:48:1e:00:e4:7f:34:8c:07:9b:ee:e8:9a:2a: eb:be:0f:c3:16:2a:e9:74:ee:8f:50:cb:50:eb:df: 5d:65:39:70:20:29:25:47:53:32:f2:54:9e:66:34: dd:f5:ee:ab:d1:ed:68:48:9d:75:df:14:ca:5e:a1: e2:8c:4c:56:17:f6:c8:f0:ea:26:43:58:95:72:4a: 01:b0:0f:96:11:b9:33:c2:ac:5d:9d:77:cf:07:00: 8c:0e:40:de:77:52:fd:30:5f:0e:9a:97:92:70:ef: eb:5b:21:12:5d:48:16:fd:f1:b9:33:ea:64:6a:4c: a3:d7:b1:ce:df:e8:71:cf:8b:4e:ee:47:74:1d:b0: 84:fe:82:e4:7d:5b:7a:92:bb:70:a8:c9:d9:6e:b5: 8e:02:8f:4c:00:07:f4:c6:ec:96:a5:72:9d:02:b8: 05:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:04:A3:F9:2F:42:E1:8D:59:70:A8:BF:CA:70:2B:09:05:19:A1:03 X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:97:26:e3:fb:7e:a4:ed:1f:d6:cd:7b:72:a2:56:52:d1:05: 1b:6c:ca:6c:75:1e:1a:35:2b:d1:3c:1e:0f:bc:84:1e:22:5f: 17:2d:00:f2:17:02:71:23:57:4f:47:12:9f:b9:9d:e6:5a:c9: 60:e2:d6:fb:60:6f:3a:1e:df:ee:1c:1b:9f:b6:54:10:7c:8a: c3:77:31:38:ef:15:9a:07:6d:40:e7:c9:46:f1:c0:89:47:f9: 4b:f0:2a:e1:06:76:d4:d7:38:ee:f2:dc:fd:78:2f:2c:25:27: 96:ca:61:41:af:69:27:c1:a5:bf:de:5a:0b:56:2c:20:a9:f4: 7b:ca:cb:ab:65:77:98:69:cd:8f:81:c2:ff:d5:9d:2c:ed:31: d2:f1:73:60:7f:72:61:a2:cc:cf:ba:d4:1f:70:18:9c:4b:e6: 2a:ff:3f:62:6c:c9:3f:1c:b4:85:54:1b:c3:8b:88:53:f9:5f: 9c:c2:68:96:3c:2d:4b:08:5e:4e:dd:77:dd:3a:44:a4:0e:e6: b9:7b:70:63:9e:30:ba:07:48:1f:b0:28:90:7d:33:2e:27:e4: 0b:f7:c6:fd:7f:79:07:db:1b:b1:2d:87:ec:7a:ee:72:4d:7f: 53:9b:9d:d8:2b:3d:f4:c2:7d:a9:54:8c:f3:44:ac:16:d5:8e: 26:e4:75:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjYwNzI4MTc0OTE1WhcNMjYwODA0MTc0OTE1WjAYMRYwFAYD VQQDEw02YTY4ZWI5Yi01NmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufyouQ2by19zj0HcP9sGetnZEQ4mdupim32YBFQF0xm1HiIvXDM6UgRkdL7g ns4ne5HZo/RjAAB9a/GylusQCx/lkE8A+zXwsgLpsEhkyigeQAoKN1bo+3e3MUge AOR/NIwHm+7omirrvg/DFirpdO6PUMtQ699dZTlwICklR1My8lSeZjTd9e6r0e1o SJ113xTKXqHijExWF/bI8OomQ1iVckoBsA+WEbkzwqxdnXfPBwCMDkDed1L9MF8O mpeScO/rWyESXUgW/fG5M+pkakyj17HO3+hxz4tO7kd0HbCE/oLkfVt6krtwqMnZ brWOAo9MAAf0xuyWpXKdArgFuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIEo/kv QuGNWXCov8pwKwkFGaEDMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfJcm4/t+pO0f1s17cqJWUtEFG2zKbHUeGjUr0TweD7yEHiJfFy0A8hcCcSNX T0cSn7md5lrJYOLW+2BvOh7f7hwbn7ZUEHyKw3cxOO8VmgdtQOfJRvHAiUf5S/Aq 4QZ21Nc47vLc/XgvLCUnlsphQa9pJ8Glv95aC1YsIKn0e8rLq2V3mGnNj4HC/9Wd LO0x0vFzYH9yYaLMz7rUH3AYnEvmKv8/YmzJPxy0hVQbw4uIU/lfnMJoljwtSwhe Tt133TpEpA7muXtwY54wugdIH7AokH0zLifkC/fG/X95B9sbsS2H7Hruck1/U5ud 2Cs99MJ9qVSM80SsFtWOJuR1rg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:35:30 2026 by rpki-client