$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: NOJYbOTc7OmH/CZw/HV54vGnkosNsM/BVNEEtfj2Z78= Subject key identifier: 65:E7:8F:70:CF:A5:07:7A:8A:1D:EF:86:FA:FF:6B:42:DE:3F:4B:EF Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0C58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0BE4 Signing time: Sun 26 Jul 2026 19:32:46 +0000 Manifest this update: Sun 26 Jul 2026 19:32:45 +0000 Manifest next update: Sun 02 Aug 2026 19:32:45 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: YGzuZiqcdaFAbRiIPUmSSC+n57j1aMApYfxsEOi196Q=) 2: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: dL/b9kFR/fDDp+1b1nZMcsVPe3aqtduJg9+GzU7pUT4=) 3: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: MsOEzeKC3wQWVNmqxzfHjUDeGAqxXFvTMRBM7uQm94k=) 4: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: Ds4m30JNX7VD0YAwlidc5p6ZJQmsCh5FAge2wZckos0=) 5: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: rs5DeAiXJUjkmk87XhQXy9eavqmolXmi42NXBuxe1D8=) 6: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: x0qoqY3+7NzxsMKW0qJM37L/2r2psmq486dVg8v0Nmc=) 7: B66F0C58817111EFB121970CC4F9AE02.roa (hash: ouZu/jn5ZKmwfIcE3ghEaFkVLB6My1iKKzR3gtO189k=) 8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: jHzcYJ90DjGoipsCrkdoqarlimj3fDzkOjXCClEv3uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 19:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3160 (0xc58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Jul 26 19:32:45 2026 GMT Not After : Aug 2 19:32:45 2026 GMT Subject: CN=6a6660de-05f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:66:f6:83:dc:02:7c:8c:92:22:25:2f:9c: 47:c4:c5:51:ad:38:47:70:62:c6:0e:f9:34:53:ec: 91:03:eb:e3:a3:3b:f0:3b:59:9b:aa:a6:ab:e8:30: de:c2:b4:c6:cd:30:7d:f5:cb:fd:4e:b5:24:4f:a4: ca:4b:99:ae:64:7f:8e:de:30:c1:0d:2c:73:04:8f: f4:0a:fd:ef:3c:3f:e3:ef:ca:72:98:72:0c:87:b5: 56:3e:31:f8:fc:28:d1:a9:4a:78:f2:82:98:91:fa: 14:a9:fc:78:97:4c:b0:87:ae:d6:40:ff:e8:cd:4a: e5:58:a9:83:68:fb:5c:32:c7:78:34:18:80:d5:0d: b6:ee:ee:11:0b:bf:cc:2b:15:a2:1e:e0:58:26:67: 1a:ec:e8:59:53:a2:bc:4c:1f:83:16:36:1c:32:32: 47:8b:e6:b0:68:50:a1:52:07:7e:e5:60:23:1f:be: 79:ff:cc:ae:a2:fe:b4:e3:ad:e5:d2:92:5d:50:7a: 53:cc:b7:04:17:79:40:61:f5:13:38:10:c0:c3:6f: 03:d0:41:49:f9:1f:e9:4c:8f:a6:9c:72:bb:df:b7: 8d:8d:ff:82:c3:b0:f8:93:6d:42:20:30:bc:81:04: 20:7c:cf:43:01:7d:ed:b0:26:f9:b3:3b:45:b8:7b: d9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E7:8F:70:CF:A5:07:7A:8A:1D:EF:86:FA:FF:6B:42:DE:3F:4B:EF X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b8:fd:a9:45:0a:d4:ac:4e:5e:ac:a6:7d:57:06:23:3b:a1: 4f:fb:ef:ae:9d:ff:af:08:6b:08:76:52:2a:14:10:76:fe:13: 44:fd:5d:e1:84:84:86:43:62:ae:2e:fb:0f:0a:00:e2:5b:28: 3e:da:ab:ef:67:0c:77:50:41:f4:8a:f1:fa:c3:a1:da:ba:94: fd:44:0a:de:51:56:18:31:21:91:b6:74:18:9c:e4:a9:06:46: 52:df:9a:6b:54:58:ae:4d:12:e3:b0:ca:63:9e:b6:40:b9:ce: da:31:d6:04:3b:88:f2:36:fc:81:c3:9f:ec:9a:1a:1b:f5:7f: a6:de:65:e7:cd:bb:b4:91:8a:be:da:38:5c:1f:e5:d4:5d:66: 9e:41:19:4d:e3:87:ad:ab:c2:2b:c9:0b:a7:69:0a:25:41:68: 3e:e5:7b:09:a1:9a:dd:f5:64:5e:11:6e:54:18:09:b0:2e:94: b5:09:b6:e1:16:bc:1f:ff:be:78:8c:a3:4d:e1:f8:e5:c1:77: b0:62:76:73:96:d1:06:ca:07:aa:ec:1d:7d:1e:d3:92:3f:2e: 34:27:58:ed:87:d3:3b:60:2b:36:e2:1b:38:e4:5f:7b:d3:4f: a3:b3:e7:66:90:51:e6:08:48:6f:de:5f:23:41:c2:50:3f:1a: 3a:51:a0:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDFgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjYwNzI2MTkzMjQ1WhcNMjYwODAyMTkzMjQ1WjAYMRYwFAYD VQQDEw02YTY2NjBkZS0wNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvINm9oPcAnyMkiIlL5xHxMVRrThHcGLGDvk0U+yRA+vjozvwO1mbqqar6DDe wrTGzTB99cv9TrUkT6TKS5muZH+O3jDBDSxzBI/0Cv3vPD/j78pymHIMh7VWPjH4 /CjRqUp48oKYkfoUqfx4l0ywh67WQP/ozUrlWKmDaPtcMsd4NBiA1Q227u4RC7/M KxWiHuBYJmca7OhZU6K8TB+DFjYcMjJHi+awaFChUgd+5WAjH755/8yuov60463l 0pJdUHpTzLcEF3lAYfUTOBDAw28D0EFJ+R/pTI+mnHK737eNjf+Cw7D4k21CIDC8 gQQgfM9DAX3tsCb5sztFuHvZQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGXnj3DP pQd6ih3vhvr/a0LeP0vvMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnbj9qUUK1KxOXqymfVcGIzuhT/vvrp3/rwhrCHZSKhQQdv4TRP1d4YSEhkNi ri77DwoA4lsoPtqr72cMd1BB9Irx+sOh2rqU/UQK3lFWGDEhkbZ0GJzkqQZGUt+a a1RYrk0S47DKY562QLnO2jHWBDuI8jb8gcOf7JoaG/V/pt5l5827tJGKvto4XB/l 1F1mnkEZTeOHravCK8kLp2kKJUFoPuV7CaGa3fVkXhFuVBgJsC6UtQm24Ra8H/++ eIyjTeH45cF3sGJ2c5bRBsoHquwdfR7Tkj8uNCdY7YfTO2ArNuIbOORfe9NPo7Pn ZpBR5ghIb95fI0HCUD8aOlGgaw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:21:49 2026 by rpki-client