$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft File: RITQfaaNUwUM3PaxPAwFReZFfOU.mft (raw, json) Hash identifier: KDcFqgIZXRydVg1L36uMIcwzxOFJ1MiquzKMghi9X4M= Subject key identifier: EB:F7:CD:E2:13:35:85:06:C4:09:D6:35:FF:4D:4B:2C:FD:6B:8C:65 Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Certificate serial: 02BD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft Manifest number: 02B7 Signing time: Mon 27 Jul 2026 02:42:03 +0000 Manifest this update: Mon 27 Jul 2026 02:42:03 +0000 Manifest next update: Mon 03 Aug 2026 02:42:03 +0000 Files and hashes: 1: RITQfaaNUwUM3PaxPAwFReZFfOU.crl (hash: l4WlqgCN4W3YI9lI5aezycmzLCTzY/3Snxa25xPmM8U=) 2: B3795CBC64F211ED9AEC046FC4F9AE02.roa (hash: WcWgzJGh0m7kjX3X0vlH0++NcJ8zb8A6kxhRMuoMb8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 701 (0x2bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Validity Not Before: Jul 27 02:42:03 2026 GMT Not After : Aug 3 02:42:03 2026 GMT Subject: CN=6a66c57b-2e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:85:fb:70:4c:89:98:72:81:d7:49:ee:e6: a6:56:c9:7e:21:4f:3c:ed:12:9c:90:60:6a:df:4b: 8f:68:25:26:3e:9a:96:a8:aa:30:8e:ff:2b:49:34: 2e:e1:bf:0e:6f:c2:8e:17:bf:20:c6:b6:ca:ca:50: e4:22:18:31:25:67:85:ab:38:ba:bb:1b:6e:c4:a4: ff:f6:5b:fd:c1:47:d3:96:c2:6f:6b:9f:68:d6:15: 19:5d:70:13:0a:9f:2d:83:d8:75:74:e2:c3:55:1d: 75:88:1e:61:46:14:0d:a5:b6:15:75:b9:82:5f:52: b7:f5:b0:5b:47:ef:d9:82:ed:ad:3e:aa:eb:3f:4f: b1:23:e6:80:42:3e:2d:e2:f2:37:d0:c8:1c:fb:bd: 7d:a5:4f:ac:98:4f:e9:aa:14:b3:f2:93:a5:d5:19: 68:52:ba:be:99:c2:6a:57:c7:81:b6:39:17:51:85: e8:68:be:e3:04:a6:ba:d6:51:00:7f:cd:4c:22:8a: 4b:25:e3:b1:e6:72:37:8d:10:bd:82:cd:21:b4:06: 38:04:7f:54:7b:d1:00:c3:e1:cb:c9:ca:71:31:35: bd:75:fb:87:bf:4c:b2:db:66:7b:7a:74:c3:f0:9a: c9:12:74:3c:6c:0f:7d:42:8a:eb:f4:c4:1c:b0:5b: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F7:CD:E2:13:35:85:06:C4:09:D6:35:FF:4D:4B:2C:FD:6B:8C:65 X509v3 Authority Key Identifier: keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:92:79:e2:42:14:34:0c:c5:15:c8:6f:31:ee:7f:68:c4:57: 12:b6:4f:4b:6f:c9:c7:95:83:b5:b7:6b:5f:4c:9c:a6:52:d0: 94:c5:55:0f:92:a3:1c:5c:65:b7:d5:44:76:fd:5f:9b:69:d0: c4:e8:22:00:df:9f:f8:cc:1e:f2:01:84:6d:4e:bd:5d:18:1b: 43:24:5a:e7:56:0b:e4:a0:55:8f:e9:e2:62:08:69:f0:c8:f0: dc:d7:a0:12:a9:17:44:3e:cc:83:8a:18:62:7b:2e:a7:3c:31: 5c:1e:f9:16:cc:2e:1c:eb:3d:ae:92:0a:3a:31:2c:a9:cc:c2: cf:9b:a7:fc:63:38:a3:1b:25:42:1c:77:aa:87:ac:fe:5e:f7: 8b:31:97:7c:c2:57:ad:3a:bc:80:88:6b:d3:6c:fb:10:89:74: c3:d1:b1:2b:c5:ff:90:0d:8d:af:d9:55:1e:39:00:06:e7:7a: 3b:70:ec:3f:31:d8:33:e4:0c:a5:ef:6f:af:ce:32:57:0a:74: 8a:cc:d5:6e:bd:0c:c3:59:81:d6:da:8b:a5:92:53:d8:0a:57: 06:96:6d:54:b8:23:52:d2:d9:32:db:b3:4e:8a:ad:fb:ff:65: d5:88:6b:21:20:1d:b8:e7:93:6b:3a:4f:2a:56:94:c1:ae:8d: 68:64:ec:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKDQ0ODREMDdEQTY4RDUzMDUwQ0RDRjZCMTNDMEMwNTQ1 RTY0NTdDRTUwHhcNMjYwNzI3MDI0MjAzWhcNMjYwODAzMDI0MjAzWjAYMRYwFAYD VQQDEw02YTY2YzU3Yi0yZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLOF+3BMiZhygddJ7uamVsl+IU887RKckGBq30uPaCUmPpqWqKowjv8rSTQu 4b8Ob8KOF78gxrbKylDkIhgxJWeFqzi6uxtuxKT/9lv9wUfTlsJva59o1hUZXXAT Cp8tg9h1dOLDVR11iB5hRhQNpbYVdbmCX1K39bBbR+/Zgu2tPqrrP0+xI+aAQj4t 4vI30Mgc+719pU+smE/pqhSz8pOl1RloUrq+mcJqV8eBtjkXUYXoaL7jBKa61lEA f81MIopLJeOx5nI3jRC9gs0htAY4BH9Ue9EAw+HLycpxMTW9dfuHv0yy22Z7enTD 8JrJEnQ8bA99Qorr9MQcsFv2TwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOv3zeIT NYUGxAnWNf9NSyz9a4xlMB8GA1UdIwQYMBaAFESE0H2mjVMFDNz2sTwMBUXmRXzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8xRjYzQTU2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3VU0zUGF4UEF3RlJlWkZm T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JJVFFmYWFOVXdVTTNQYXhQQXdGUmVaRmZPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8xRjYzQTU2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3 VU0zUGF4UEF3RlJlWkZmT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtpJ54kIUNAzFFchvMe5/aMRXErZPS2/Jx5WDtbdrX0ycplLQlMVVD5KjHFxl t9VEdv1fm2nQxOgiAN+f+Mwe8gGEbU69XRgbQyRa51YL5KBVj+niYghp8Mjw3Neg EqkXRD7Mg4oYYnsupzwxXB75FswuHOs9rpIKOjEsqczCz5un/GM4oxslQhx3qoes /l73izGXfMJXrTq8gIhr02z7EIl0w9GxK8X/kA2Nr9lVHjkABud6O3DsPzHYM+QM pe9vr84yVwp0iszVbr0Mw1mB1tqLpZJT2ApXBpZtVLgjUtLZMtuzToqt+/9l1Yhr ISAduOeTazpPKlaUwa6NaGTs1Q== -----END CERTIFICATE-----Generated at Tue Jul 28 19:28:22 2026 by rpki-client