$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: 3NH0ioZRCacRqP9y0E3BtYdODko2pHK/hmZSCFBYCOk= Subject key identifier: 7D:6D:8E:9B:6B:FC:F4:B8:F2:07:7B:84:41:C8:E4:AA:A6:6F:E8:C8 Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 057C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 0543 Signing time: Wed 29 Jul 2026 00:08:18 +0000 Manifest this update: Wed 29 Jul 2026 00:08:18 +0000 Manifest next update: Wed 05 Aug 2026 00:08:18 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: 4im986eNsToMppiUHz3eHP7kncHk1sowlukAY9Vowek=) 2: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=) 3: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7xZPQJy4FlDqQRK4ZNxBOqn11xvYRCTnG5Hl+SBa0kA=) 4: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: dY+BZEOINurtJjOA3yhjmWQ4kx2Zua1d5uXKZrya/Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1404 (0x57c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Jul 29 00:08:18 2026 GMT Not After : Aug 5 00:08:18 2026 GMT Subject: CN=6a694472-6eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5b:61:72:b4:34:01:0d:bc:ad:43:62:56:d6: 3f:da:8d:71:bf:8e:e3:94:84:f1:4a:e8:9b:67:9a: e5:3e:e1:46:7e:db:0a:1b:f3:f3:5e:d6:5b:01:54: 44:b4:98:e8:0c:27:80:47:ab:5c:c4:72:17:bc:d7: fa:98:20:0e:91:66:f1:51:3c:62:8c:0f:91:81:5b: 6b:35:0c:46:12:68:24:bd:e7:70:37:9f:df:d1:7c: b4:3b:ad:9f:61:f5:65:15:45:25:d8:30:f4:79:e6: 43:5b:cc:8f:0d:7f:6d:a1:89:b6:95:83:26:d8:c4: 3b:61:59:5f:b9:0d:c1:9c:83:06:13:88:b3:6a:10: fc:5f:6b:77:dc:3a:f7:ff:1f:2e:ae:b4:fd:1c:e2: 8b:7a:34:5b:15:63:9a:60:bb:83:c2:da:c1:a4:7b: 59:3f:9f:07:cb:5a:56:a9:e6:a9:09:43:57:61:87: 78:22:e4:4a:30:3b:41:5f:02:f8:86:16:6e:2d:4d: 24:4b:fa:5f:29:8a:11:7b:21:3c:6c:fe:53:43:66: ee:15:4e:7e:55:63:81:6d:15:d0:3f:9c:44:c6:4d: 7b:3e:b2:c0:6e:24:67:87:f6:da:4c:38:cf:36:f7: 27:d7:8c:d4:eb:cc:3a:c6:95:19:d0:63:f5:17:9f: 11:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:6D:8E:9B:6B:FC:F4:B8:F2:07:7B:84:41:C8:E4:AA:A6:6F:E8:C8 X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:12:14:d5:ae:9b:9d:14:e2:34:e6:65:ee:69:8d:c9:f0:0f: 81:2b:9c:f8:a2:8e:0d:a7:54:30:67:9e:ef:f9:29:f3:f2:a8: d5:1b:26:32:e2:dc:2f:46:a2:7a:6c:59:39:8b:32:cc:95:21: 23:ca:d1:9c:ec:b6:3c:5b:1e:db:86:88:6a:13:44:ed:99:52: 26:20:9f:86:c9:6e:00:46:33:f1:15:8c:fa:9f:18:8d:52:b8: 4d:7c:7f:30:47:6e:78:92:cc:23:a7:37:ea:43:93:44:a3:5d: 7a:d9:ea:d7:60:08:0b:a0:22:b8:6a:39:6d:86:3c:94:31:92: 52:49:19:13:de:66:29:78:e4:19:46:f0:be:27:67:61:6f:74: fd:0f:27:71:e0:53:b4:d0:56:70:1e:f7:33:91:e8:7b:23:b7: 2e:98:7d:cb:0a:22:c8:ae:65:29:ad:44:cc:15:2c:ef:e3:28: 75:29:17:e2:33:2a:52:c0:48:a0:bc:9e:b7:10:35:4b:c9:88: 6d:56:23:48:6d:7f:20:8d:e9:7f:ba:7d:91:f5:37:61:95:e3: 9a:a5:41:c8:f7:43:af:fa:75:a0:d7:b7:04:ac:82:ed:a0:57: 85:84:4e:1b:4e:f8:3f:16:2c:bd:fd:78:14:7a:7c:5b:dd:d6: ad:a2:89:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYwNzI5MDAwODE4WhcNMjYwODA1MDAwODE4WjAYMRYwFAYD VQQDEw02YTY5NDQ3Mi02ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FthcrQ0AQ28rUNiVtY/2o1xv47jlITxSuibZ5rlPuFGftsKG/PzXtZbAVRE tJjoDCeAR6tcxHIXvNf6mCAOkWbxUTxijA+RgVtrNQxGEmgkvedwN5/f0Xy0O62f YfVlFUUl2DD0eeZDW8yPDX9toYm2lYMm2MQ7YVlfuQ3BnIMGE4izahD8X2t33Dr3 /x8urrT9HOKLejRbFWOaYLuDwtrBpHtZP58Hy1pWqeapCUNXYYd4IuRKMDtBXwL4 hhZuLU0kS/pfKYoReyE8bP5TQ2buFU5+VWOBbRXQP5xExk17PrLAbiRnh/baTDjP Nvcn14zU68w6xpUZ0GP1F58RKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH1tjptr /PS48gd7hEHI5Kqmb+jIMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmRIU1a6bnRTiNOZl7mmNyfAPgSuc+KKODadUMGee7/kp8/Ko1RsmMuLcL0ai emxZOYsyzJUhI8rRnOy2PFse24aIahNE7ZlSJiCfhsluAEYz8RWM+p8YjVK4TXx/ MEdueJLMI6c36kOTRKNdetnq12AIC6AiuGo5bYY8lDGSUkkZE95mKXjkGUbwvidn YW90/Q8nceBTtNBWcB73M5HoeyO3Lph9ywoiyK5lKa1EzBUs7+ModSkX4jMqUsBI oLyetxA1S8mIbVYjSG1/II3pf7p9kfU3YZXjmqVByPdDr/p1oNe3BKyC7aBXhYRO G074PxYsvf14FHp8W93WraKJmg== -----END CERTIFICATE-----Generated at Wed Jul 29 07:48:15 2026 by rpki-client