$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json) Hash identifier: /7QybFIBrNs0CDtUNSxwp1kF/Dt3a1IFY65VysnDN+k= Subject key identifier: E9:2F:09:B7:1B:31:57:CD:6D:F5:8C:20:65:7D:6D:7F:AD:CB:D5:97 Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft Manifest number: 01A8 Signing time: Mon 27 Jul 2026 05:51:29 +0000 Manifest this update: Mon 27 Jul 2026 05:51:29 +0000 Manifest next update: Mon 03 Aug 2026 05:51:29 +0000 Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: qFxAnl/IxhMc4fWsANwjcKfRZY1NvzFyTHbfJ/vm/f4=) 2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=) 3: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: i2+AU5JC1CnIuV2WebgbR1MhXzhp17jyG1HTb2dIKP0=) 4: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Jul 27 05:51:29 2026 GMT Not After : Aug 3 05:51:29 2026 GMT Subject: CN=6a66f1e1-b9e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:da:07:ce:df:8c:2b:39:08:1c:c5:3e:b9: 3a:2c:b3:10:0f:be:ee:de:4d:f3:10:42:7a:fd:ff: b5:04:f5:f6:23:a7:5a:90:4f:bd:ad:9c:f8:64:59: cd:4a:4d:8f:ab:8f:25:de:43:af:87:18:ea:e2:eb: 52:a3:1a:ae:59:26:02:7e:a5:6e:d3:b8:45:6f:c9: b2:b0:28:80:09:06:ff:c2:b6:41:7a:3a:a2:d1:f1: 76:f1:af:ca:1c:a0:57:9a:70:5e:2d:15:f6:6b:f5: 89:42:56:fd:2c:71:c3:8f:f1:e6:1a:7a:a4:b6:44: cc:94:b9:7e:dc:e2:32:8a:f0:cf:9d:48:fd:16:18: c4:6e:77:65:24:98:19:00:d9:1e:77:56:c3:80:20: 30:c7:a2:9b:8e:e3:a1:89:87:ce:3e:ab:57:13:59: 03:57:a0:ae:ba:22:0f:a4:6d:ef:55:24:d3:75:d6: 80:a5:08:5c:34:ed:f5:6a:a8:47:13:33:bc:fa:ec: 4c:b2:6c:6f:90:13:b1:ce:6c:23:fa:b3:27:ff:84: 8e:45:12:78:89:9c:57:d2:f1:85:73:eb:88:76:ba: a9:f9:a6:58:f8:0e:64:39:5f:96:92:18:20:99:15: 3d:5b:c8:9b:50:e4:c5:95:be:18:8a:df:dd:d4:97: 27:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2F:09:B7:1B:31:57:CD:6D:F5:8C:20:65:7D:6D:7F:AD:CB:D5:97 X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:cc:75:31:1e:be:58:dd:0d:4d:37:26:90:bf:b6:86:a8:21: 8c:00:16:a9:af:d2:77:7c:70:d6:dd:ab:db:2a:c1:15:b9:17: 82:5b:fb:10:19:cf:2f:0f:4f:e0:95:ce:60:15:78:e5:4c:f4: 6d:39:f1:f6:2c:95:19:19:6e:8d:bb:9b:c0:f9:10:f0:7a:42: 15:f4:70:64:2f:d4:1f:e0:bc:5a:fa:e0:b8:80:5f:e1:16:da: 5f:e6:49:ca:14:37:77:31:87:67:47:ae:30:e8:be:65:5a:05: 81:4c:67:b1:45:4e:b9:8d:7e:95:2f:ca:3b:66:6d:e1:5a:98: 7f:54:8f:0b:f4:d9:7a:16:27:41:ac:c4:d1:21:bf:2b:de:8a: fe:9a:00:7d:44:59:e2:28:15:56:e8:92:e0:cf:3d:0b:81:01: 84:62:df:0c:aa:01:c5:11:86:d1:1f:06:73:7e:47:91:1f:ed: ef:f8:94:60:a4:1a:3c:ff:99:0e:73:a3:5b:77:73:bd:7c:71: 66:c2:14:dc:95:e5:80:9e:d2:11:1f:eb:aa:79:7c:07:82:53: 0e:cf:a4:e0:1f:e7:67:fa:a3:9e:55:98:44:b7:5e:1a:f2:5b: df:c1:24:b6:3a:2d:61:a3:bd:0f:36:c2:dd:b3:24:87:bd:c8: 80:89:c1:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG MERDNTkzM0QwHhcNMjYwNzI3MDU1MTI5WhcNMjYwODAzMDU1MTI5WjAYMRYwFAYD VQQDEw02YTY2ZjFlMS1iOWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgzaB87fjCs5CBzFPrk6LLMQD77u3k3zEEJ6/f+1BPX2I6dakE+9rZz4ZFnN Sk2Pq48l3kOvhxjq4utSoxquWSYCfqVu07hFb8mysCiACQb/wrZBejqi0fF28a/K HKBXmnBeLRX2a/WJQlb9LHHDj/HmGnqktkTMlLl+3OIyivDPnUj9FhjEbndlJJgZ ANked1bDgCAwx6KbjuOhiYfOPqtXE1kDV6CuuiIPpG3vVSTTddaApQhcNO31aqhH EzO8+uxMsmxvkBOxzmwj+rMn/4SORRJ4iZxX0vGFc+uIdrqp+aZY+A5kOV+Wkhgg mRU9W8ibUOTFlb4Yit/d1Jcn5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkvCbcb MVfNbfWMIGV9bX+ty9WXMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF QWJ6eURVdklERVB3M0ZrejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApsx1MR6+WN0NTTcmkL+2hqghjAAWqa/Sd3xw1t2r2yrBFbkXglv7EBnPLw9P 4JXOYBV45Uz0bTnx9iyVGRlujbubwPkQ8HpCFfRwZC/UH+C8WvrguIBf4RbaX+ZJ yhQ3dzGHZ0euMOi+ZVoFgUxnsUVOuY1+lS/KO2Zt4VqYf1SPC/TZehYnQazE0SG/ K96K/poAfURZ4igVVuiS4M89C4EBhGLfDKoBxRGG0R8Gc35HkR/t7/iUYKQaPP+Z DnOjW3dzvXxxZsIU3JXlgJ7SER/rqnl8B4JTDs+k4B/nZ/qjnlWYRLdeGvJb38Ek tjotYaO9DzbC3bMkh73IgInBMQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:57:26 2026 by rpki-client