$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: uFc533D6dmdfCYkYfmqNzcW72ZSA49a42m0LXO5QM5c= Subject key identifier: 63:2B:D1:1E:02:6A:79:9E:63:5D:E0:39:45:63:0C:C1:86:6E:06:54 Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 0498 Signing time: Mon 27 Jul 2026 00:59:13 +0000 Manifest this update: Mon 27 Jul 2026 00:59:12 +0000 Manifest next update: Mon 03 Aug 2026 00:59:12 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: 2GeENa8XF8j8wzPK9KAj2qiN555cg0YXhS16gnY7Wgk=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: lRK5hM0+Ajz1Iu+TnpLxwj4NeRvEETgFEYDFPhqxkGM=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: SzKheHkyXGhCU9L9E9bj5O9UK/QqaZCVghpUUMIvziw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 00:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Jul 27 00:59:12 2026 GMT Not After : Aug 3 00:59:12 2026 GMT Subject: CN=6a66ad60-b0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:86:e7:ff:3b:8e:b6:d5:60:63:28:54:31: b6:c0:23:f3:a2:49:2a:eb:17:4a:1f:eb:ff:0e:75: c3:69:9c:a6:87:08:ea:b1:64:a2:6e:0d:19:aa:c4: c6:a1:be:77:cf:2c:8c:8f:fb:4a:10:1f:7a:39:d0: 63:2a:08:70:8e:eb:7b:fd:4a:e0:e8:d1:56:7f:46: bc:b3:c8:a3:69:49:93:c8:8e:fb:6a:99:cb:d6:70: a5:71:c2:24:54:8d:e0:41:99:14:41:b2:11:22:26: 2e:22:91:08:60:2e:27:37:dc:fd:83:9c:fc:bd:dd: 7f:52:17:b1:11:b6:e8:36:f3:e1:c6:21:9f:bf:26: 04:32:c8:82:f6:98:aa:51:07:68:e7:56:87:d5:6f: b2:da:a4:bf:38:9f:d8:92:68:5f:05:73:21:d8:37: 40:83:0b:8d:2b:34:58:dc:49:1a:9e:7d:9d:be:73: dc:05:c2:b6:7a:fb:6d:fe:3d:f0:96:ff:e0:9a:af: 29:de:d5:f5:43:7a:47:f7:63:d0:29:14:8c:7a:f4: 88:49:87:84:b8:c0:2a:49:e3:fb:25:b3:25:65:9a: 79:fd:e6:aa:75:51:26:25:8f:f1:1f:6b:00:c6:11: eb:51:7a:db:34:87:0e:06:ce:41:9d:9a:f4:a9:1d: 9a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2B:D1:1E:02:6A:79:9E:63:5D:E0:39:45:63:0C:C1:86:6E:06:54 X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:09:1e:76:fc:64:0a:83:62:e5:af:ee:3d:a3:a6:32:8a:d5: 68:43:23:30:97:7f:c5:49:4e:1f:3d:7f:b7:86:13:c1:12:1f: ab:ed:2b:b3:60:07:48:0d:39:59:f5:d5:89:a4:35:d4:cb:ea: 6a:7c:7c:df:b3:8a:7d:db:97:0d:80:21:d1:48:d2:d2:8e:5e: c8:be:2d:04:ea:55:27:f5:be:fa:2f:44:86:08:95:4c:65:5a: 10:77:29:5b:43:d3:0b:3d:89:12:37:61:8a:19:9b:2b:ce:e1: e3:fc:46:51:bf:57:07:17:8f:52:b1:e0:b0:68:08:7f:c6:28: dc:f2:f6:37:5f:83:31:1a:d4:ab:2e:91:39:b3:f6:30:ac:92: 47:24:d7:11:bb:9c:96:a4:3e:7c:b2:29:c1:23:e2:3a:58:e7: 42:2e:3b:49:6f:4b:a7:06:f8:1e:5c:c9:6b:14:2d:aa:6b:e8: a7:e0:61:a3:fc:02:2f:e5:e1:52:cb:17:42:08:91:a2:d5:86: f8:24:e1:59:17:8c:47:ec:7e:9a:d2:2a:bc:0c:f8:f0:3f:56: 00:cb:25:23:23:b5:aa:af:d1:75:88:83:fb:f2:65:4b:c2:79: e5:c5:c4:62:45:94:90:ac:ff:04:b0:40:58:c4:6e:5f:53:6c: 80:a0:3e:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjYwNzI3MDA1OTEyWhcNMjYwODAzMDA1OTEyWjAYMRYwFAYD VQQDEw02YTY2YWQ2MC1iMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0u+G5/87jrbVYGMoVDG2wCPzokkq6xdKH+v/DnXDaZymhwjqsWSibg0ZqsTG ob53zyyMj/tKEB96OdBjKghwjut7/Urg6NFWf0a8s8ijaUmTyI77apnL1nClccIk VI3gQZkUQbIRIiYuIpEIYC4nN9z9g5z8vd1/UhexEbboNvPhxiGfvyYEMsiC9piq UQdo51aH1W+y2qS/OJ/YkmhfBXMh2DdAgwuNKzRY3Ekann2dvnPcBcK2evtt/j3w lv/gmq8p3tX1Q3pH92PQKRSMevSISYeEuMAqSeP7JbMlZZp5/eaqdVEmJY/xH2sA xhHrUXrbNIcOBs5BnZr0qR2aPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGMr0R4C anmeY13gOUVjDMGGbgZUMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhgkedvxkCoNi5a/uPaOmMorVaEMjMJd/xUlOHz1/t4YTwRIfq+0rs2AHSA05 WfXViaQ11Mvqanx837OKfduXDYAh0UjS0o5eyL4tBOpVJ/W++i9EhgiVTGVaEHcp W0PTCz2JEjdhihmbK87h4/xGUb9XBxePUrHgsGgIf8Yo3PL2N1+DMRrUqy6RObP2 MKySRyTXEbuclqQ+fLIpwSPiOljnQi47SW9Lpwb4HlzJaxQtqmvop+Bho/wCL+Xh UssXQgiRotWG+CThWReMR+x+mtIqvAz48D9WAMslIyO1qq/RdYiD+/JlS8J55cXE YkWUkKz/BLBAWMRuX1NsgKA+NA== -----END CERTIFICATE-----Generated at Wed Jul 29 00:32:53 2026 by rpki-client