$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: p0C7K6FfL1IuZRbOJDVvB5ZhyIb8IjqplK5j4mZp7uw= Subject key identifier: AB:31:FA:6E:AA:0D:A5:C2:D3:6D:31:F0:81:A4:8A:18:E9:32:16:11 Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 028E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 0285 Signing time: Mon 27 Jul 2026 03:15:53 +0000 Manifest this update: Mon 27 Jul 2026 03:15:52 +0000 Manifest next update: Mon 03 Aug 2026 03:15:52 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: 0dycc+VZGw/uI1l7iarnhi9pWZCeog6jPcy7Oil4Fv0=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: PvZuO5e4GchVGqAm1QbEBiq8YBp2L+bhbVxt20o+A5E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 654 (0x28e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Jul 27 03:15:52 2026 GMT Not After : Aug 3 03:15:52 2026 GMT Subject: CN=6a66cd69-70e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7d:77:ea:71:7a:e1:fd:07:33:10:39:90:85: 18:af:90:80:54:c1:1b:2a:be:8a:41:96:dc:c7:08: fb:3e:92:d1:4f:0b:d6:db:89:80:29:ec:1d:8a:09: 3c:20:f2:f1:22:90:1c:b5:f3:ab:a2:ac:0f:04:da: b5:a5:28:8c:4b:fb:97:ad:16:58:3a:0c:63:c6:82: 48:a2:75:24:b7:8b:1e:9f:83:3d:e7:3d:db:96:d4: 01:21:d2:d7:71:7d:8a:e6:f1:81:72:d7:7b:b5:c0: 5b:c2:37:7e:ca:78:21:2c:b0:d1:10:be:ca:14:1f: 94:32:dd:53:37:74:fc:96:18:17:70:7f:e7:27:05: a5:4f:ec:b3:79:1a:ff:f1:d3:f5:61:e2:15:8b:32: 6b:de:00:fb:a1:59:8e:9b:ae:d2:7f:11:63:af:f2: 95:e9:6f:b0:b5:b2:ba:0a:0e:da:0a:b6:a0:32:b6: ed:49:0f:ae:95:25:ad:65:4d:74:a4:b0:cf:5c:97: cc:ec:8d:28:cb:d3:4f:ab:0b:a7:98:cb:d4:75:7a: d1:d9:34:9a:94:14:21:db:ff:22:14:98:ff:72:df: 04:1b:fc:1b:28:f9:d9:8c:27:58:7f:8e:86:48:76: 03:ce:9a:97:0a:a2:91:c4:f4:24:54:73:7b:1c:c7: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:31:FA:6E:AA:0D:A5:C2:D3:6D:31:F0:81:A4:8A:18:E9:32:16:11 X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:86:c4:4b:d4:c3:b0:20:c6:c9:a4:ee:cd:44:ed:17:8f:49: 35:4e:dc:9d:f0:fe:72:ce:65:d6:ec:95:3a:5a:dc:dd:0b:bc: 4e:33:d9:50:ce:88:65:0f:e8:8a:7e:9f:c5:e4:67:48:2e:df: c6:d5:f5:3f:db:fb:92:49:4f:53:16:df:d6:8e:12:02:66:c4: 92:81:cc:b0:5d:2c:4c:87:e2:7b:fc:57:e2:0e:7b:03:a6:30: 1a:d3:29:fb:f7:68:4e:4f:10:d9:5f:17:ab:20:5a:6b:e4:e4: c3:27:35:5a:12:a7:68:53:a5:f1:d0:da:1e:65:fd:ae:15:b0: 87:90:98:54:c6:b4:ef:05:3f:b2:67:ce:ed:59:1f:0d:d3:de: 83:30:93:33:6d:c0:50:f0:35:2e:a1:e9:04:2d:0c:40:bb:d5: 54:d2:f3:23:e3:4c:aa:71:aa:05:6c:6f:3c:f2:62:a5:88:9f: 0e:3f:98:33:74:9a:1f:9a:4a:e2:99:07:27:41:94:63:d6:af: 78:c4:01:d0:97:cf:63:28:60:ad:99:92:30:d0:ae:11:a1:af: e3:b4:67:78:00:4a:ee:26:7d:c2:58:29:02:9c:12:d9:ad:ab: bf:e3:20:26:1d:6b:6e:6e:48:32:0b:44:65:f0:43:12:61:61: 06:13:63:4b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjYwNzI3MDMxNTUyWhcNMjYwODAzMDMxNTUyWjAYMRYwFAYD VQQDEw02YTY2Y2Q2OS03MGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3n136nF64f0HMxA5kIUYr5CAVMEbKr6KQZbcxwj7PpLRTwvW24mAKewdigk8 IPLxIpActfOroqwPBNq1pSiMS/uXrRZYOgxjxoJIonUkt4sen4M95z3bltQBIdLX cX2K5vGBctd7tcBbwjd+ynghLLDREL7KFB+UMt1TN3T8lhgXcH/nJwWlT+yzeRr/ 8dP1YeIVizJr3gD7oVmOm67SfxFjr/KV6W+wtbK6Cg7aCragMrbtSQ+ulSWtZU10 pLDPXJfM7I0oy9NPqwunmMvUdXrR2TSalBQh2/8iFJj/ct8EG/wbKPnZjCdYf46G SHYDzpqXCqKRxPQkVHN7HMfL8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKsx+m6q DaXC020x8IGkihjpMhYRMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV4bES9TDsCDGyaTuzUTtF49JNU7cnfD+cs5l1uyVOlrc3Qu8TjPZUM6IZQ/o in6fxeRnSC7fxtX1P9v7kklPUxbf1o4SAmbEkoHMsF0sTIfie/xX4g57A6YwGtMp +/doTk8Q2V8XqyBaa+Tkwyc1WhKnaFOl8dDaHmX9rhWwh5CYVMa07wU/smfO7Vkf DdPegzCTM23AUPA1LqHpBC0MQLvVVNLzI+NMqnGqBWxvPPJipYifDj+YM3SaH5pK 4pkHJ0GUY9aveMQB0JfPYyhgrZmSMNCuEaGv47RneABK7iZ9wlgpApwS2a2rv+Mg Jh1rbm5IMgtEZfBDEmFhBhNjSw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:29:16 2026 by rpki-client