$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json) Hash identifier: 0h0witiHZqMLsl4eSrpTQ6PMXutdx1NSboCVUinT70g= Subject key identifier: 99:CC:20:85:BA:7B:04:F1:36:6C:3D:15:90:3A:78:AB:90:36:7C:C4 Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft Manifest number: 0409 Signing time: Mon 27 Jul 2026 01:27:16 +0000 Manifest this update: Mon 27 Jul 2026 01:27:15 +0000 Manifest next update: Mon 03 Aug 2026 01:27:15 +0000 Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: Klp++3TOFAjBaoTa+A9H4IBx+8ZX7LYylnfZ2NJkKa8=) 2: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: 6ChvL5bIW0nd/LEwk1GkYjUq9x3wU+NsnqxaoPxGr+c=) 3: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: SAmq2qut5svZXJTr/IN8K0rrvVU2RQUex9B9Y/hGwvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: Jul 27 01:27:15 2026 GMT Not After : Aug 3 01:27:15 2026 GMT Subject: CN=6a66b3f4-bebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:86:c9:16:df:28:fe:2f:4d:bf:d7:42:a5:27: a8:da:75:07:59:b1:45:c2:57:6d:a5:47:25:e6:4d: b4:77:ea:ba:7b:fc:86:8f:a1:67:36:21:17:5e:e3: 19:1d:62:45:69:27:28:c6:8f:85:47:c2:09:56:98: 27:e1:10:7d:9a:c7:68:f5:bd:92:11:62:e8:ab:9c: e0:c5:58:8a:cf:5f:e8:5a:cf:1b:31:34:8c:f0:fe: 88:9c:3b:16:dd:80:02:6f:39:59:62:08:4c:86:4f: 63:3e:97:72:44:60:2d:fb:d1:cc:99:1f:e7:e9:28: c8:7d:64:63:bc:e6:e1:9d:62:69:39:ba:cc:2a:eb: 71:a3:38:91:12:2f:45:76:13:77:94:dd:01:1f:37: 2c:dc:a7:00:ab:e0:38:76:47:f7:0a:cb:b5:1b:67: 97:de:f5:3e:4c:46:62:06:2b:02:76:7f:f7:8d:75: 00:00:84:9e:8a:b4:08:bf:a1:47:2a:c6:51:07:80: 2d:f1:37:a8:5e:14:0b:c1:44:c2:02:e1:35:3f:55: ea:e3:41:7d:6f:80:eb:c4:45:d8:7b:19:50:c1:40: e4:a8:71:c3:f1:c0:7b:e0:47:66:99:13:0a:96:fe: 25:14:16:2d:1c:d2:88:37:38:4e:a3:d2:a6:45:6c: 64:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CC:20:85:BA:7B:04:F1:36:6C:3D:15:90:3A:78:AB:90:36:7C:C4 X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:e4:51:3b:20:cd:18:49:34:11:06:55:93:63:cb:81:30:13: 77:98:2e:6f:0c:9d:75:c0:29:02:1c:f1:cb:e9:fd:71:84:1a: 4a:b6:02:0d:f5:0f:a9:7d:58:f9:2a:f1:39:f6:00:99:ec:8f: 6b:d4:ee:9a:fc:23:33:38:d8:b8:c2:16:e4:9b:ae:fa:ad:06: 95:a7:b2:56:8d:c9:34:4f:a8:1b:93:9e:2d:8e:6e:43:d9:80: 05:d8:c1:20:80:37:fb:aa:53:6e:e4:2b:0c:83:43:a6:1d:21: da:ce:bd:d2:4a:b5:c6:86:ac:f4:a9:75:9a:77:71:32:5a:0d: 41:e5:96:26:00:04:fa:05:a9:39:19:90:f5:c6:34:5b:ec:1b: 5b:90:7b:1a:30:0d:5a:05:6f:b4:a3:85:1c:80:9f:fe:83:d7: f8:5c:d0:39:51:65:e8:1e:f2:64:ae:73:7e:e3:7e:9c:21:01: 93:09:02:1e:b1:f8:1f:95:31:7b:e4:eb:1f:9e:ff:d3:1c:e3: 92:fa:87:83:61:f7:95:c4:19:28:56:6b:e4:34:02:75:4a:ec: 8a:1c:c4:dc:67:c5:8d:46:c5:50:c7:0f:41:e7:81:13:46:fa: 6d:fd:53:94:7b:b7:97:5d:af:42:68:7a:31:ed:5d:44:be:df: b4:7e:dc:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjYwNzI3MDEyNzE1WhcNMjYwODAzMDEyNzE1WjAYMRYwFAYD VQQDEw02YTY2YjNmNC1iZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIbJFt8o/i9Nv9dCpSeo2nUHWbFFwldtpUcl5k20d+q6e/yGj6FnNiEXXuMZ HWJFaScoxo+FR8IJVpgn4RB9msdo9b2SEWLoq5zgxViKz1/oWs8bMTSM8P6InDsW 3YACbzlZYghMhk9jPpdyRGAt+9HMmR/n6SjIfWRjvObhnWJpObrMKutxoziREi9F dhN3lN0BHzcs3KcAq+A4dkf3Csu1G2eX3vU+TEZiBisCdn/3jXUAAISeirQIv6FH KsZRB4At8TeoXhQLwUTCAuE1P1Xq40F9b4DrxEXYexlQwUDkqHHD8cB74EdmmRMK lv4lFBYtHNKINzhOo9KmRWxkXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJnMIIW6 ewTxNmw9FZA6eKuQNnzEMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDAwQy9DQUE4ODYxRUM2MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1v akZBTTM4T3VIaV9xQko5UlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANuRROyDNGEk0EQZVk2PLgTATd5gubwyddcApAhzxy+n9cYQaSrYCDfUPqX1Y +SrxOfYAmeyPa9TumvwjMzjYuMIW5Juu+q0GlaeyVo3JNE+oG5OeLY5uQ9mABdjB IIA3+6pTbuQrDINDph0h2s690kq1xoas9Kl1mndxMloNQeWWJgAE+gWpORmQ9cY0 W+wbW5B7GjANWgVvtKOFHICf/oPX+FzQOVFl6B7yZK5zfuN+nCEBkwkCHrH4H5Ux e+TrH57/0xzjkvqHg2H3lcQZKFZr5DQCdUrsihzE3GfFjUbFUMcPQeeBE0b6bf1T lHu3l12vQmh6Me1dRL7ftH7cyw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:31:52 2026 by rpki-client