$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft File: 2gE-F4NYyzWot2XJvAkK6c8cT74.mft (raw, json) Hash identifier: UHhCbNS8WBf7eeqAgO21sxPZwHWr6/071F1YjzgiROg= Subject key identifier: AF:CB:1E:3C:03:F3:55:DF:9F:F6:CE:91:77:B8:C9:71:9F:3D:FB:47 Authority key identifier: DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE Certificate issuer: /CN=A91B2C88/serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Certificate serial: 071D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft Manifest number: 0711 Signing time: Sun 26 Jul 2026 22:52:59 +0000 Manifest this update: Sun 26 Jul 2026 22:52:59 +0000 Manifest next update: Sun 02 Aug 2026 22:52:59 +0000 Files and hashes: 1: 2gE-F4NYyzWot2XJvAkK6c8cT74.crl (hash: Aq/+Qd72opl5qHSyEtFAnH9HZYv1uYWo9evXO7yB5hU=) 2: 3C5E55F041A411ECA73C8C0EC4F9AE02.roa (hash: w5l5bzdUBbOiymqqgIFAis/HyOoUZwKfNyUgPTXlOrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1821 (0x71d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C88, serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Validity Not Before: Jul 26 22:52:59 2026 GMT Not After : Aug 2 22:52:59 2026 GMT Subject: CN=6a668fcb-1663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:83:07:34:e8:1a:4e:21:d9:e1:1e:3f:64:5b: 21:df:e2:43:2e:fa:0b:37:85:10:b7:52:b0:6b:55: 42:05:29:31:43:bc:e9:1d:8d:d6:64:0a:db:3a:6e: c4:d8:25:17:47:39:dd:20:d9:a5:c3:15:8b:60:b9: 53:04:94:46:44:0c:89:46:dd:3f:8d:45:d6:bd:c1: d7:95:88:07:d5:c9:8a:36:38:e7:28:41:ed:27:84: db:ac:46:1e:8c:fe:37:71:95:b4:44:f6:7a:a4:11: 4b:74:6a:b3:8a:c7:e3:29:2b:c3:32:4f:aa:42:ee: 5e:59:c2:e2:90:f5:14:14:6e:f0:07:dd:52:ed:fb: 36:50:63:67:f4:fa:4b:31:a7:59:4a:53:9b:b4:33: 5c:e4:ff:5b:ac:d4:f0:02:b1:e4:f6:fe:ae:c4:06: e6:1b:28:72:3e:8e:e2:90:f3:80:a4:58:ae:35:79: 43:42:80:b2:d3:0b:5f:36:c1:86:71:1f:48:7e:d4: dc:d5:1f:d3:d9:14:0e:ca:98:63:89:63:85:4f:2a: 00:ad:25:65:7b:38:80:e2:17:f3:cd:38:cb:65:33: 17:2c:4b:a5:45:be:f4:45:9b:cb:9b:d1:4c:6f:fe: 20:90:db:d1:5c:3f:2c:61:5b:88:c1:38:9b:3b:e9: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CB:1E:3C:03:F3:55:DF:9F:F6:CE:91:77:B8:C9:71:9F:3D:FB:47 X509v3 Authority Key Identifier: keyid:DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:59:2a:bf:7a:1d:ae:d5:cc:ee:cb:f3:a5:a9:f6:1a:17:63: 1e:ff:29:5c:73:da:13:4e:6c:c1:36:a9:78:b5:c5:03:2e:32: 90:c1:79:11:f2:78:18:3a:ed:ec:47:7f:21:a5:80:38:4e:a7: 43:83:3f:46:63:6d:3a:91:0e:d1:a1:7d:bf:4f:71:71:bb:2d: 78:19:70:f6:ed:c0:98:d0:c5:95:63:51:c1:70:a2:9d:36:18: c2:33:6f:12:fa:58:f2:23:01:84:c4:43:65:87:a8:e6:9e:4d: c8:a6:1e:00:59:2d:9c:3d:8e:a6:de:a4:f8:db:92:59:ec:c4: 60:25:d4:ae:8e:4a:cc:16:ef:b8:57:f2:cf:af:66:da:7a:51: 47:24:ae:00:0a:f7:9e:5a:00:14:d8:3e:ed:7f:10:e3:b5:b9: 08:45:60:e5:4c:e9:ae:97:ce:11:4f:30:5e:40:69:40:1d:f9: a8:49:af:41:6f:72:2e:c6:20:2a:d3:8d:07:14:cc:2a:d9:2c: bc:1c:b8:e6:ea:98:a2:45:b7:5a:59:92:7e:22:3d:8c:64:03: f5:10:6c:e1:11:ab:4a:77:d8:51:a2:bc:d2:3f:8b:fe:e6:3e: 0e:16:de:38:c9:9d:ae:df:14:83:44:e2:c4:f6:f5:e9:38:73: 9e:22:24:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDODgxMTAvBgNVBAUTKERBMDEzRTE3ODM1OENCMzVBOEI3NjVDOUJDMDkwQUU5 Q0YxQzRGQkUwHhcNMjYwNzI2MjI1MjU5WhcNMjYwODAyMjI1MjU5WjAYMRYwFAYD VQQDEw02YTY2OGZjYi0xNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIMHNOgaTiHZ4R4/ZFsh3+JDLvoLN4UQt1Kwa1VCBSkxQ7zpHY3WZArbOm7E 2CUXRzndINmlwxWLYLlTBJRGRAyJRt0/jUXWvcHXlYgH1cmKNjjnKEHtJ4TbrEYe jP43cZW0RPZ6pBFLdGqzisfjKSvDMk+qQu5eWcLikPUUFG7wB91S7fs2UGNn9PpL MadZSlObtDNc5P9brNTwArHk9v6uxAbmGyhyPo7ikPOApFiuNXlDQoCy0wtfNsGG cR9IftTc1R/T2RQOyphjiWOFTyoArSVleziA4hfzzTjLZTMXLEulRb70RZvLm9FM b/4gkNvRXD8sYVuIwTibO+ksyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK/LHjwD 81Xfn/bOkXe4yXGfPftHMB8GA1UdIwQYMBaAFNoBPheDWMs1qLdlybwJCunPHE++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM4OC8yNDI5OURDQTk3 OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6V290MlhKdkFrSzZjOGNU NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRS1GNE5ZeXpXb3QyWEp2QWtLNmM4Y1Q3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM4OC8yNDI5OURDQTk3OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6 V290MlhKdkFrSzZjOGNUNzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAh1kqv3odrtXM7svzpan2GhdjHv8pXHPaE05swTapeLXFAy4ykMF5EfJ4GDrt 7Ed/IaWAOE6nQ4M/RmNtOpEO0aF9v09xcbsteBlw9u3AmNDFlWNRwXCinTYYwjNv EvpY8iMBhMRDZYeo5p5NyKYeAFktnD2Opt6k+NuSWezEYCXUro5KzBbvuFfyz69m 2npRRySuAAr3nloAFNg+7X8Q47W5CEVg5UzprpfOEU8wXkBpQB35qEmvQW9yLsYg KtONBxTMKtksvBy45uqYokW3WlmSfiI9jGQD9RBs4RGrSnfYUaK80j+L/uY+Dhbe OMmdrt8Ug0TixPb16ThzniIkMA== -----END CERTIFICATE-----Generated at Tue Jul 28 22:30:30 2026 by rpki-client