$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft File: PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json) Hash identifier: lZcEVl0efLNhXJL+78+p7l5tvL2/VMREZL9AESXKMjQ= Subject key identifier: 49:1D:CA:8B:CF:23:92:CB:74:6D:17:02:8E:ED:6A:6B:3D:00:F8:3C Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A Certificate issuer: /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Certificate serial: 0962 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft Manifest number: 0956 Signing time: Sun 26 Jul 2026 20:42:20 +0000 Manifest this update: Sun 26 Jul 2026 20:42:19 +0000 Manifest next update: Sun 02 Aug 2026 20:42:19 +0000 Files and hashes: 1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: GPSE8/sJgreAbPe45B/+2QUCc02TLSHSid0P2P/6cRM=) 2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: xiYVAwV4Hd8CI0pxe/FxOmue7CKhH9jCSO4x/aLBcjA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2402 (0x962) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A Validity Not Before: Jul 26 20:42:19 2026 GMT Not After : Aug 2 20:42:19 2026 GMT Subject: CN=6a66712c-4f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:75:61:81:1a:15:b1:a7:e8:5c:d6:d7:80: f9:85:4a:37:05:ae:b5:6e:24:f2:11:35:69:92:29: ec:31:a2:bf:a3:94:14:04:1d:67:14:65:21:15:e4: 2d:7f:d1:c2:af:c3:b7:24:57:af:0d:19:09:fd:81: e4:f3:2b:27:83:42:0f:30:20:1d:92:eb:9f:20:7d: f4:3a:17:d6:07:50:15:cf:85:d3:8f:e9:58:8c:75: 84:79:3d:a0:2d:b1:b5:33:71:7f:da:61:09:99:e3: a6:a7:2d:a9:88:df:16:fe:80:7d:7d:ce:5c:00:97: 1b:ab:ef:89:7e:69:cf:e3:48:05:cb:d1:3a:07:8e: ba:7e:bf:80:98:5c:20:5c:e2:57:68:b4:b9:06:27: 62:aa:e9:fc:68:cc:ee:e9:b4:fa:c9:be:a7:0e:ac: 25:a1:ac:14:a1:98:ee:b3:22:fc:7b:0b:b9:bc:11: fa:7c:4a:9d:47:aa:52:7a:6b:96:c4:ca:29:02:e5: 3d:a0:d3:f5:11:a7:10:5d:91:f9:4d:69:73:8d:2d: ce:4f:b9:67:28:69:6b:c7:ea:fb:10:5b:13:85:f6: d4:c6:4a:9d:df:37:b9:59:92:fc:5c:03:89:aa:f1: 66:f5:fa:d8:13:97:a7:93:98:ec:ad:db:b1:0f:e2: 81:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1D:CA:8B:CF:23:92:CB:74:6D:17:02:8E:ED:6A:6B:3D:00:F8:3C X509v3 Authority Key Identifier: keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:b5:05:cc:58:b7:4f:f2:0c:c9:7e:ee:12:c2:40:a9:58:fa: 7f:e1:34:8e:ee:52:f5:c6:65:94:39:2c:22:dd:d2:d2:c2:c8: 5c:3e:80:c9:c0:ca:4b:5a:21:5b:7d:76:02:3d:f8:f4:29:b0: e5:46:75:52:a1:6e:27:e8:db:31:6d:9d:0b:05:f7:54:b0:d4: ce:21:97:c6:d1:11:6a:a5:15:5f:fc:ae:72:d9:49:11:8e:15: 41:a7:63:40:1a:0f:41:55:62:cd:5c:61:71:77:ea:00:0e:a0: 1f:df:94:94:d4:5f:b4:d4:ef:aa:43:ac:cf:d2:66:0c:73:e6: fb:a4:42:85:ae:db:ed:d8:3c:e3:98:69:ed:cd:2d:60:a4:7a: 41:6a:b8:56:86:f2:29:3b:69:c5:f0:85:c1:8c:64:88:bd:21: 95:99:ee:6e:be:df:a1:fa:86:22:cd:b1:7a:02:a9:a8:8d:df: 19:32:5d:03:58:5e:9c:43:cf:9b:b8:f3:91:65:e7:a8:c2:b2: 8a:ab:19:5d:3f:bb:bc:2c:81:07:18:79:56:2b:36:7a:ea:05: 91:58:73:76:25:19:d0:db:e4:2f:34:5f:46:50:af:1c:ff:44: 39:af:ce:98:7a:e0:01:70:1a:34:e8:74:6b:6b:6d:4f:69:f3: f9:7a:57:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFQzIxMTAvBgNVBAUTKDNEMzg5MUE0NkNCQ0JBQjQ3NDc4REVBNDBEMjkwOEY2 N0NDRTNCMkEwHhcNMjYwNzI2MjA0MjE5WhcNMjYwODAyMjA0MjE5WjAYMRYwFAYD VQQDEw02YTY2NzEyYy00ZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxB1YYEaFbGn6FzW14D5hUo3Ba61biTyETVpkinsMaK/o5QUBB1nFGUhFeQt f9HCr8O3JFevDRkJ/YHk8ysng0IPMCAdkuufIH30OhfWB1AVz4XTj+lYjHWEeT2g LbG1M3F/2mEJmeOmpy2piN8W/oB9fc5cAJcbq++JfmnP40gFy9E6B466fr+AmFwg XOJXaLS5Bidiqun8aMzu6bT6yb6nDqwloawUoZjusyL8ewu5vBH6fEqdR6pSemuW xMopAuU9oNP1EacQXZH5TWlzjS3OT7lnKGlrx+r7EFsThfbUxkqd3ze5WZL8XAOJ qvFm9frYE5enk5jsrduxD+KBIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkdyovP I5LLdG0XAo7tams9APg8MB8GA1UdIwQYMBaAFD04kaRsvLq0dHjepA0pCPZ8zjsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVDMi8yRERERDI2Q0My QzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVyUjBlTjZrRFNrSTluek9P eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BUaVJwR3k4dXJSMGVONmtEU2tJOW56T095by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QUVDMi8yRERERDI2Q0MyQzAxMUVBOTNENTg1N0ZDNEY5QUUwMi9QVGlScEd5OHVy UjBlTjZrRFNrSTluek9PeW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbLUFzFi3T/IMyX7uEsJAqVj6f+E0ju5S9cZllDksIt3S0sLIXD6AycDKS1oh W312Aj349Cmw5UZ1UqFuJ+jbMW2dCwX3VLDUziGXxtERaqUVX/yuctlJEY4VQadj QBoPQVVizVxhcXfqAA6gH9+UlNRftNTvqkOsz9JmDHPm+6RCha7b7dg845hp7c0t YKR6QWq4VobyKTtpxfCFwYxkiL0hlZnubr7fofqGIs2xegKpqI3fGTJdA1henEPP m7jzkWXnqMKyiqsZXT+7vCyBBxh5Vis2euoFkVhzdiUZ0NvkLzRfRlCvHP9EOa/O mHrgAXAaNOh0a2ttT2nz+XpXGw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:06:37 2026 by rpki-client