$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json) Hash identifier: ZnHbNXZi76AFwGPrK9tRUVXQ/aOKTrZH6tbhTGyZOhg= Subject key identifier: AD:2C:20:CA:94:41:12:0F:69:B0:08:08:C1:C8:D1:45:9F:B2:ED:D6 Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft Manifest number: 0CEB Signing time: Tue 28 Jul 2026 18:34:26 +0000 Manifest this update: Tue 28 Jul 2026 18:34:25 +0000 Manifest next update: Tue 04 Aug 2026 18:34:25 +0000 Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: bYXPFr9QfRTTROj6cvaEo2dyLcWpl7UagBrCtNOjTHs=) 2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: P3cA4Ey/V8rl3zAePZZSJQ01VWq57x0zCe1ptcZIm4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Jul 28 18:34:25 2026 GMT Not After : Aug 4 18:34:25 2026 GMT Subject: CN=6a68f632-4ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:11:8d:87:43:eb:4c:2f:61:46:e5:32:0f:f0: e6:90:2e:e9:d4:2c:88:77:71:8a:ad:b7:9f:58:a8: 4f:c9:cb:7b:18:9d:80:1b:c6:b9:55:6c:7c:cc:d0: 91:f9:d2:f8:5c:15:c6:3e:c7:4e:12:2f:82:77:90: e6:50:54:e3:af:b1:bb:9d:77:0b:5b:f4:28:35:1d: 51:b5:fb:79:cb:df:4c:9c:d6:c5:5a:06:1e:24:87: 02:da:f3:22:ae:bd:bb:ca:01:bd:f3:94:d7:5f:f7: ea:89:04:06:e5:49:47:83:14:1b:41:ea:9c:93:f6: 47:51:9c:eb:3c:1f:c0:fd:2b:cc:f3:e7:ad:9d:03: e0:f8:8c:1e:02:c6:a6:9b:b9:eb:0e:80:fd:25:8f: 4c:d0:b9:ca:7b:0d:93:8d:43:a6:d1:02:b2:15:de: 2d:a7:83:a9:2e:b5:59:d9:5b:a9:90:47:98:65:75: cb:88:cf:29:03:25:73:e0:06:ba:31:d6:01:ef:a0: c2:95:b2:00:89:3b:86:95:52:c1:57:93:7a:c2:b1: e8:7a:4c:0d:7d:05:0a:1c:c5:86:ac:c6:5e:13:98: bd:a7:3a:57:d5:56:5e:c5:3a:bf:30:40:1e:d0:f6: d1:de:86:7b:3c:df:cc:f7:05:59:69:96:17:1e:86: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2C:20:CA:94:41:12:0F:69:B0:08:08:C1:C8:D1:45:9F:B2:ED:D6 X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:7e:e2:47:f0:b7:b4:77:4f:7d:a0:21:d0:9c:cc:0a:49:d0: 02:a2:94:fc:53:29:cf:65:10:f1:f7:fa:7d:e4:a9:21:c3:29: b4:50:53:dd:13:79:8c:bd:bc:b7:f4:4c:c5:9a:0d:a7:d9:64: a8:c8:b5:fa:dd:3d:cf:71:17:ab:f8:6e:e9:12:c9:15:da:1b: e1:51:37:e9:ec:7b:2b:2e:2f:56:be:3b:a0:9b:ab:0f:a6:22: fb:fa:fa:b1:fb:b3:d5:3b:ab:9e:15:13:5e:46:86:37:c5:0d: 2c:ca:cd:5b:a5:7e:34:3c:d0:92:77:87:ad:44:24:32:e2:75: 8d:12:80:b0:b8:5c:55:d0:65:56:8e:ca:35:7d:9f:14:f3:98: 21:7d:64:99:d5:37:4a:20:4b:7e:dc:9d:f2:06:19:7d:90:a1: a2:f3:01:f5:7a:0e:15:59:84:a0:e8:8a:18:d9:86:1d:bd:a6: 1e:d1:6e:f8:b8:0b:c9:b9:0b:dc:47:17:89:b7:fa:1c:f7:ef: 6e:7d:29:8a:21:6b:ee:a1:50:9f:f0:3a:7c:88:e9:05:35:68: 2e:69:89:74:0f:d1:76:6f:2b:42:a1:b2:ac:26:cb:9a:d2:01: 4f:49:b4:01:ee:aa:ca:52:af:35:9a:15:0b:00:51:cc:2c:8f: 2d:16:1e:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjYwNzI4MTgzNDI1WhcNMjYwODA0MTgzNDI1WjAYMRYwFAYD VQQDEw02YTY4ZjYzMi00ZWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BGNh0PrTC9hRuUyD/DmkC7p1CyId3GKrbefWKhPyct7GJ2AG8a5VWx8zNCR +dL4XBXGPsdOEi+Cd5DmUFTjr7G7nXcLW/QoNR1Rtft5y99MnNbFWgYeJIcC2vMi rr27ygG985TXX/fqiQQG5UlHgxQbQeqck/ZHUZzrPB/A/SvM8+etnQPg+IweAsam m7nrDoD9JY9M0LnKew2TjUOm0QKyFd4tp4OpLrVZ2VupkEeYZXXLiM8pAyVz4Aa6 MdYB76DClbIAiTuGlVLBV5N6wrHoekwNfQUKHMWGrMZeE5i9pzpX1VZexTq/MEAe 0PbR3oZ7PN/M9wVZaZYXHoYbmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0sIMqU QRIPabAICMHI0UWfsu3WMB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTdEQi80RTQxMEFDRTBGNkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVu SG84eHJnUGp6SnJFWmcyVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAH7iR/C3tHdPfaAh0JzMCknQAqKU/FMpz2UQ8ff6feSpIcMptFBT3RN5jL28 t/RMxZoNp9lkqMi1+t09z3EXq/hu6RLJFdob4VE36ex7Ky4vVr47oJurD6Yi+/r6 sfuz1TurnhUTXkaGN8UNLMrNW6V+NDzQkneHrUQkMuJ1jRKAsLhcVdBlVo7KNX2f FPOYIX1kmdU3SiBLftyd8gYZfZChovMB9XoOFVmEoOiKGNmGHb2mHtFu+LgLybkL 3EcXibf6HPfvbn0piiFr7qFQn/A6fIjpBTVoLmmJdA/Rdm8rQqGyrCbLmtIBT0m0 Ae6qylKvNZoVCwBRzCyPLRYeqw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:43:31 2026 by rpki-client