$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft File: D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft (raw, json) Hash identifier: Qmy2J0AABo7VnN9uD6lU0VcaOyBe9Wizdt/f71WFhDI= Subject key identifier: 1F:FE:1D:CD:D7:FE:13:0E:9C:E3:6B:3B:E2:89:B5:90:87:5A:9B:94 Authority key identifier: 0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34 Certificate issuer: /CN=A91A7C68/serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34 Certificate serial: 02AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft Manifest number: 02A0 Signing time: Mon 27 Jul 2026 03:04:58 +0000 Manifest this update: Mon 27 Jul 2026 03:04:57 +0000 Manifest next update: Mon 03 Aug 2026 03:04:57 +0000 Files and hashes: 1: D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl (hash: +rFu7EkUGXynmiu6KshErYB8AmbOTpmTrUatzKyZ+34=) 2: BC72661A972911ED8CBCA476C4F9AE02.roa (hash: ijHVWHANYsNS9d5u+2L0OG/TAcPXhYDdTjzMH7Olj0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 687 (0x2af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7C68, serialNumber=0F626A3264D6FECCCBFEB2D99B1DBF8AFFEC3B34 Validity Not Before: Jul 27 03:04:57 2026 GMT Not After : Aug 3 03:04:57 2026 GMT Subject: CN=6a66cad9-19e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:41:90:02:1b:47:bb:e2:9c:51:16:ff:a5:2f: 9e:8b:9e:77:f1:f3:37:a8:3f:cf:1c:0e:df:94:59: 1d:ed:df:8b:98:40:1c:8b:e6:54:a8:94:f5:dd:f6: ad:9c:4c:9d:6a:8e:b1:36:3a:1a:0d:6e:68:66:0b: 61:fb:88:68:8d:5f:ee:95:29:c9:75:d5:c6:33:76: 7a:82:51:77:8e:1c:a8:c2:27:ad:61:79:9d:4e:b9: a1:89:d8:bc:10:cc:ff:5e:e5:83:0c:a8:0a:6a:98: 03:d9:f2:98:1d:71:db:a2:e9:57:25:c1:ac:8a:8f: 36:f1:18:23:ac:d8:3d:6f:7f:1a:0d:bf:62:77:17: 94:de:e2:5e:8d:99:b0:e6:ff:24:07:ba:f2:2b:db: 3c:e5:92:a3:20:9c:18:b1:95:99:34:d2:16:86:72: 1e:9d:22:8b:27:df:ae:32:b1:57:16:f7:2d:37:c0: d1:d1:8b:4d:25:94:95:cd:a3:40:0b:02:f7:75:15: c8:32:44:3c:8f:63:42:a6:b9:15:e5:8c:19:71:11: 6a:b4:49:4f:1a:80:e6:ed:65:c9:63:76:29:b2:bf: 46:17:0b:87:01:44:8a:06:79:ba:3c:3c:c3:75:ef: 3a:fe:05:da:f3:cb:44:39:51:1a:1c:46:3f:8d:3e: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FE:1D:CD:D7:FE:13:0E:9C:E3:6B:3B:E2:89:B5:90:87:5A:9B:94 X509v3 Authority Key Identifier: keyid:0F:62:6A:32:64:D6:FE:CC:CB:FE:B2:D9:9B:1D:BF:8A:FF:EC:3B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D2JqMmTW_szL_rLZmx2_iv_sOzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7C68/423986F6972111EDA2E02251C4F9AE02/D2JqMmTW_szL_rLZmx2_iv_sOzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ad:a8:25:fb:9e:c0:77:84:b1:ba:6d:a1:54:40:50:d5:69: 29:2b:3a:77:67:9e:29:e9:83:b6:0d:4d:3e:da:62:64:86:8d: 7e:b6:72:65:98:55:02:72:1a:79:d5:22:b8:97:6b:04:95:22: 7f:3f:f0:21:ed:f2:47:6b:44:5d:88:61:57:00:ad:3b:e6:9b: ac:92:88:96:ae:5e:8a:d1:cd:f6:ca:5c:8a:4e:d4:42:c3:4f: 0e:28:05:b9:3a:5f:68:21:03:12:73:39:e2:54:85:e3:c4:90: a6:17:bf:a8:84:5e:10:32:46:1c:2d:dc:d8:84:e3:29:03:67: 10:c8:09:57:f3:7a:10:59:6c:66:05:ab:ca:0d:ea:85:ea:d2: 0e:40:74:76:10:dd:6c:c4:8d:67:e8:d3:34:15:12:c9:4b:16: 22:09:a9:8c:61:07:8b:91:b6:5b:6f:88:e1:26:a3:30:76:98: b6:80:16:3e:94:4a:7a:6a:d4:b3:2f:b8:cd:cc:75:e3:40:ef: 8c:ca:97:08:07:0f:85:c0:ab:21:d5:4b:fa:e2:5c:16:01:60: 82:f5:57:cb:94:09:13:99:c1:10:b9:3a:6b:ae:2c:29:4c:bb: df:65:f7:d0:12:6d:62:32:7d:18:d0:95:97:df:84:bb:28:27: 60:b6:74:9e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdDNjgxMTAvBgNVBAUTKDBGNjI2QTMyNjRENkZFQ0NDQkZFQjJEOTlCMURCRjhB RkZFQzNCMzQwHhcNMjYwNzI3MDMwNDU3WhcNMjYwODAzMDMwNDU3WjAYMRYwFAYD VQQDEw02YTY2Y2FkOS0xOWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UGQAhtHu+KcURb/pS+ei5538fM3qD/PHA7flFkd7d+LmEAci+ZUqJT13fat nEydao6xNjoaDW5oZgth+4hojV/ulSnJddXGM3Z6glF3jhyowietYXmdTrmhidi8 EMz/XuWDDKgKapgD2fKYHXHboulXJcGsio828RgjrNg9b38aDb9idxeU3uJejZmw 5v8kB7ryK9s85ZKjIJwYsZWZNNIWhnIenSKLJ9+uMrFXFvctN8DR0YtNJZSVzaNA CwL3dRXIMkQ8j2NCprkV5YwZcRFqtElPGoDm7WXJY3Ypsr9GFwuHAUSKBnm6PDzD de86/gXa88tEOVEaHEY/jT7C6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB/+Hc3X /hMOnONrO+KJtZCHWpuUMB8GA1UdIwQYMBaAFA9iajJk1v7My/6y2Zsdv4r/7Ds0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0M2OC80MjM5ODZGNjk3 MjExMUVEQTJFMDIyNTFDNEY5QUUwMi9EMkpxTW1UV19zekxfckxabXgyX2l2X3NP elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0QySnFNbVRXX3N6TF9yTFpteDJfaXZfc096US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0M2OC80MjM5ODZGNjk3MjExMUVEQTJFMDIyNTFDNEY5QUUwMi9EMkpxTW1UV19z ekxfckxabXgyX2l2X3NPelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW62oJfuewHeEsbptoVRAUNVpKSs6d2eeKemDtg1NPtpiZIaNfrZyZZhVAnIa edUiuJdrBJUifz/wIe3yR2tEXYhhVwCtO+abrJKIlq5eitHN9spcik7UQsNPDigF uTpfaCEDEnM54lSF48SQphe/qIReEDJGHC3c2ITjKQNnEMgJV/N6EFlsZgWryg3q herSDkB0dhDdbMSNZ+jTNBUSyUsWIgmpjGEHi5G2W2+I4SajMHaYtoAWPpRKemrU sy+4zcx140DvjMqXCAcPhcCrIdVL+uJcFgFggvVXy5QJE5nBELk6a64sKUy732X3 0BJtYjJ9GNCVl9+EuygnYLZ0ng== -----END CERTIFICATE-----Generated at Tue Jul 28 22:12:11 2026 by rpki-client