$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft File: 2QDd8konYiv5ZDdX7byv-u4yHDc.mft (raw, json) Hash identifier: fX9a+VcrZflmeHy4fcamXLlxzOOKoNHCZbnu8Z5A0+A= Subject key identifier: 30:8C:79:A0:37:C6:7E:BE:A9:D3:96:0E:7A:B8:F7:F5:6C:36:CA:15 Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Certificate serial: 0F45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft Manifest number: 0F27 Signing time: Tue 28 Jul 2026 17:43:30 +0000 Manifest this update: Tue 28 Jul 2026 17:43:29 +0000 Manifest next update: Tue 04 Aug 2026 17:43:29 +0000 Files and hashes: 1: 2QDd8konYiv5ZDdX7byv-u4yHDc.crl (hash: COwVP8kYemzp7ocNuwQmXd8si8FswTan4tcWMQzlDzE=) 2: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (hash: CNBlKRGQG6AMZt4K1SNsAWQxw9T+WIEHof1S1C1ZbKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3909 (0xf45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7773, serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Validity Not Before: Jul 28 17:43:29 2026 GMT Not After : Aug 4 17:43:29 2026 GMT Subject: CN=6a68ea42-85a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:43:4b:a8:2b:4c:f8:94:e5:66:fa:b9:5c: be:70:50:92:15:79:0c:2e:f2:09:84:56:92:5c:6a: 2d:f1:25:a7:54:fc:0c:92:a6:ed:cf:d5:09:9a:54: a7:54:bd:5c:11:b2:7d:75:94:d5:25:0c:80:38:45: fb:5b:e0:7d:f0:e0:4f:7b:ac:0f:d5:6a:d3:d1:5b: 4f:d2:83:07:39:bb:de:e4:61:ec:43:2d:16:ae:1c: 0b:3f:f8:c8:84:13:e5:8b:53:a8:ee:03:1b:77:36: 7a:14:ae:5a:81:8c:01:8f:a8:b1:88:42:7f:88:cf: 20:66:21:7c:0c:99:46:35:7a:02:64:a0:86:c0:dd: d5:5a:b0:25:fc:41:aa:68:07:59:21:59:12:eb:af: ee:71:59:82:cc:62:e3:81:99:e9:d8:d6:a2:9a:f1: 47:a9:df:3b:a0:86:0a:71:4f:26:b7:e8:54:b9:a6: ff:50:91:e7:3d:2e:ff:06:49:2a:12:45:bf:1b:e1: df:01:9f:7c:5a:f5:7d:d6:d2:20:ae:11:6c:1f:a6: a5:6d:54:73:46:c8:92:b0:48:4c:0e:9a:ea:f8:49: 4e:4c:ea:a2:f2:c0:7a:42:66:d7:1d:52:b2:74:44: 19:cd:5c:a3:89:7e:ad:44:fb:74:e7:86:42:3c:65: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8C:79:A0:37:C6:7E:BE:A9:D3:96:0E:7A:B8:F7:F5:6C:36:CA:15 X509v3 Authority Key Identifier: keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:78:b7:8c:87:96:90:0f:74:2f:ae:89:d5:c2:69:04:be:73: 30:95:e9:bb:e9:32:f6:97:63:2b:56:28:53:11:4b:ec:af:cb: a7:5e:cd:c2:8b:40:b0:06:d5:ec:64:c9:bc:23:f7:2d:d1:ba: 2a:ea:d1:52:f0:27:5d:50:22:e4:fb:3f:6a:28:19:36:67:a9: e9:7b:c1:a2:99:04:af:6d:b9:9d:75:26:6e:e1:2a:4b:1a:fa: c0:68:32:64:94:4b:a0:1e:91:50:d3:34:b3:20:4d:e3:a7:a3: 7c:50:f0:9e:4b:a9:2c:5d:2a:29:0c:6b:c7:ec:1f:63:df:ad: 4a:17:a4:c8:6d:f6:40:ce:bd:f0:d7:61:05:95:e8:74:d4:33: cd:18:9a:1c:4b:f6:75:88:de:44:97:34:4f:fe:14:24:56:57: 18:ae:a2:6d:42:f8:59:e1:fb:37:81:11:5b:ca:95:fa:47:33: ba:bc:fd:1b:27:3c:85:ba:4d:a2:a3:35:21:e3:c3:d0:2c:44: 1b:80:e5:5e:dd:24:63:13:ef:a7:93:ff:f7:02:fa:d9:46:ab: 82:f7:f0:bc:5e:60:74:cf:4b:b6:01:36:23:54:29:91:ec:d7: 22:78:a2:5b:d0:61:87:79:6a:9a:c1:31:6b:ff:e0:4c:92:11: da:a9:db:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB RUUzMjFDMzcwHhcNMjYwNzI4MTc0MzI5WhcNMjYwODA0MTc0MzI5WjAYMRYwFAYD VQQDEw02YTY4ZWE0Mi04NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq5DS6grTPiU5Wb6uVy+cFCSFXkMLvIJhFaSXGot8SWnVPwMkqbtz9UJmlSn VL1cEbJ9dZTVJQyAOEX7W+B98OBPe6wP1WrT0VtP0oMHObve5GHsQy0WrhwLP/jI hBPli1Oo7gMbdzZ6FK5agYwBj6ixiEJ/iM8gZiF8DJlGNXoCZKCGwN3VWrAl/EGq aAdZIVkS66/ucVmCzGLjgZnp2NaimvFHqd87oIYKcU8mt+hUuab/UJHnPS7/Bkkq EkW/G+HfAZ98WvV91tIgrhFsH6albVRzRsiSsEhMDprq+ElOTOqi8sB6QmbXHVKy dEQZzVyjiX6tRPt054ZCPGUF2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDCMeaA3 xn6+qdOWDnq49/VsNsoVMB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc3My9BRDMyMjM3Q0EyRTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllp djVaRGRYN2J5di11NHlIRGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALXi3jIeWkA90L66J1cJpBL5zMJXpu+ky9pdjK1YoUxFL7K/Lp17NwotAsAbV 7GTJvCP3LdG6KurRUvAnXVAi5Ps/aigZNmep6XvBopkEr225nXUmbuEqSxr6wGgy ZJRLoB6RUNM0syBN46ejfFDwnkupLF0qKQxrx+wfY9+tShekyG32QM698NdhBZXo dNQzzRiaHEv2dYjeRJc0T/4UJFZXGK6ibUL4WeH7N4ERW8qV+kczurz9Gyc8hbpN oqM1IePD0CxEG4DlXt0kYxPvp5P/9wL62UargvfwvF5gdM9LtgE2I1QpkezXInii W9Bhh3lqmsExa//gTJIR2qnb8Q== -----END CERTIFICATE-----Generated at Wed Jul 29 00:51:46 2026 by rpki-client