$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft File: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft (raw, json) Hash identifier: 641Y/q+MaQxCwE5ccUmtPovHyCYupMyUgEbyIey8G/Y= Subject key identifier: 64:98:11:4D:32:63:DD:36:22:00:2B:52:68:B0:F1:64:84:6C:E6:5E Authority key identifier: B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 Certificate issuer: /CN=A91CAE04/serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft Manifest number: 021C Signing time: Mon 27 Jul 2026 04:31:10 +0000 Manifest this update: Mon 27 Jul 2026 04:31:09 +0000 Manifest next update: Mon 03 Aug 2026 04:31:09 +0000 Files and hashes: 1: s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl (hash: bQi83ESR+uf1Ltk84yIcXQRhY8BrXpsc6QmezzUFxbw=) 2: 7E40FBBA09EF11EFAA24237EC4F9AE02.roa (hash: gNrtkZkKrQjv9VGO4d7icZehe6OSfQ3CzkQRSTsWYpg=) 3: ABA6DCF0030F11EFB12D8A18C4F9AE02.roa (hash: /BkRK1pd7XeoJPnuYhfXRxi+ZjaehytBLdeWASZ6S3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAE04, serialNumber=B362437AB67D290C5CDFEF2F62B77EDD8A9FFA44 Validity Not Before: Jul 27 04:31:09 2026 GMT Not After : Aug 3 04:31:09 2026 GMT Subject: CN=6a66df0e-9547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:92:86:e6:4d:0a:0d:b5:9e:27:82:d7:34:2c: e6:d8:4a:06:ad:1f:2a:9e:ce:7f:1d:1b:6e:f3:27: 7d:97:ca:11:f6:db:8a:fe:39:fc:db:b3:d9:ac:b3: 19:a0:26:58:10:87:92:63:83:5d:d7:0c:b0:a5:fb: 0f:6c:43:7e:e9:6e:2e:6c:fc:31:40:ae:fa:43:02: d4:aa:bb:5b:75:2d:07:4f:3d:10:9a:62:d9:90:1c: 66:b4:9b:ac:77:e3:77:4d:02:a8:4a:0c:79:e3:ba: 14:76:d3:55:a5:ab:28:f1:50:dc:12:95:f9:a5:18: a8:ae:e4:56:72:6b:e8:b9:b4:da:d7:10:74:d7:48: ca:3b:6f:19:0e:61:86:5d:35:c5:8c:66:cc:6a:cc: 0b:da:50:d1:6a:c5:8f:79:c7:25:57:cf:f6:c6:96: 8e:a8:e9:cb:30:79:97:ff:77:a7:b8:71:97:fa:f1: 55:79:a7:df:df:03:3f:d1:88:50:bd:09:b4:93:8f: 2d:7f:48:00:2d:d1:eb:05:1c:4d:4f:34:a9:53:3b: e1:72:75:c0:ed:9b:fb:c4:53:4b:2f:b8:7f:d4:8d: 3c:d9:91:80:de:e3:c0:10:01:9a:72:13:bc:82:48: 7d:44:9e:ac:40:0f:20:7f:f7:ef:18:34:99:14:9f: d2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:98:11:4D:32:63:DD:36:22:00:2B:52:68:B0:F1:64:84:6C:E6:5E X509v3 Authority Key Identifier: keyid:B3:62:43:7A:B6:7D:29:0C:5C:DF:EF:2F:62:B7:7E:DD:8A:9F:FA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAE04/9D8F772A5F9611EE83638F3EC4F9AE02/s2JDerZ9KQxc3-8vYrd-3Yqf-kQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:83:61:3c:d7:a4:73:38:14:fa:90:d1:2e:a3:e5:43:10:54: db:ea:5a:14:ad:32:bb:ad:96:b1:30:25:61:dd:91:cd:ef:36: 03:af:be:fc:8a:ab:63:94:6d:a0:5a:bf:3a:75:62:2f:b7:e1: c9:70:1d:9d:b8:c7:18:c5:aa:8e:5f:bf:7f:93:a6:07:07:45: 5a:52:20:b3:48:44:d1:ee:37:a1:67:40:6b:c6:eb:8e:cf:db: 6a:db:1e:45:84:ba:49:3f:a5:ac:e8:2b:ca:24:c8:38:1d:c5: 6c:f1:70:26:9e:fb:ec:c0:fb:d9:92:b2:ac:2f:8d:3f:fa:c3: ed:5a:f1:30:39:81:53:7d:5e:e8:34:ad:d8:5c:40:5f:1e:a8: 97:66:8f:86:7e:f1:ef:b4:4c:ae:ed:72:12:af:cf:bb:d1:dd: 83:47:7d:bf:a2:08:ea:24:15:9d:c4:5d:80:3e:8c:0d:9b:b1: 57:54:68:b8:2e:ae:89:53:c4:57:28:a6:84:b1:4c:97:7a:3a: c9:76:30:95:b8:2c:c2:e9:ee:35:25:2b:e0:35:9e:09:3b:a8: b1:47:b6:6c:79:4a:97:f8:d8:fb:0d:57:b9:68:99:92:1f:98: 68:49:48:cc:80:e4:5d:7d:c3:32:a1:91:c9:a2:f4:7e:80:e8: f8:6e:0b:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0FFMDQxMTAvBgNVBAUTKEIzNjI0MzdBQjY3RDI5MEM1Q0RGRUYyRjYyQjc3RURE OEE5RkZBNDQwHhcNMjYwNzI3MDQzMTA5WhcNMjYwODAzMDQzMTA5WjAYMRYwFAYD VQQDEw02YTY2ZGYwZS05NTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJKG5k0KDbWeJ4LXNCzm2EoGrR8qns5/HRtu8yd9l8oR9tuK/jn827PZrLMZ oCZYEIeSY4Nd1wywpfsPbEN+6W4ubPwxQK76QwLUqrtbdS0HTz0QmmLZkBxmtJus d+N3TQKoSgx547oUdtNVpaso8VDcEpX5pRioruRWcmvoubTa1xB010jKO28ZDmGG XTXFjGbMaswL2lDRasWPecclV8/2xpaOqOnLMHmX/3enuHGX+vFVeaff3wM/0YhQ vQm0k48tf0gALdHrBRxNTzSpUzvhcnXA7Zv7xFNLL7h/1I082ZGA3uPAEAGachO8 gkh9RJ6sQA8gf/fvGDSZFJ/SIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGSYEU0y Y902IgArUmiw8WSEbOZeMB8GA1UdIwQYMBaAFLNiQ3q2fSkMXN/vL2K3ft2Kn/pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQUUwNC85RDhGNzcyQTVG OTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtReGMzLTh2WXJkLTNZcWYt a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MySkRlclo5S1F4YzMtOHZZcmQtM1lxZi1rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QUUwNC85RDhGNzcyQTVGOTYxMUVFODM2MzhGM0VDNEY5QUUwMi9zMkpEZXJaOUtR eGMzLTh2WXJkLTNZcWYta1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAoNhPNekczgU+pDRLqPlQxBU2+paFK0yu62WsTAlYd2Rze82A6++/IqrY5Rt oFq/OnViL7fhyXAdnbjHGMWqjl+/f5OmBwdFWlIgs0hE0e43oWdAa8brjs/batse RYS6ST+lrOgryiTIOB3FbPFwJp777MD72ZKyrC+NP/rD7VrxMDmBU31e6DSt2FxA Xx6ol2aPhn7x77RMru1yEq/Pu9Hdg0d9v6II6iQVncRdgD6MDZuxV1RouC6uiVPE VyimhLFMl3o6yXYwlbgswunuNSUr4DWeCTuosUe2bHlKl/jY+w1XuWiZkh+YaElI zIDkXX3DMqGRyaL0foDo+G4LeQ== -----END CERTIFICATE-----Generated at Wed Jul 29 03:24:37 2026 by rpki-client