$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft File: 2itDzBg8qOD2qPbapUzdcwb4Yig.mft (raw, json) Hash identifier: FdL+O0Dq1wd0Swl6/5qyBcVgbFQGrTl7WkWSYnqFIig= Subject key identifier: F3:78:9D:A5:E5:72:8A:D4:77:96:8D:52:11:99:42:98:64:CD:FD:2E Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft Manifest number: 0AD8 Signing time: Tue 28 Jul 2026 19:43:57 +0000 Manifest this update: Tue 28 Jul 2026 19:43:56 +0000 Manifest next update: Tue 04 Aug 2026 19:43:56 +0000 Files and hashes: 1: 2itDzBg8qOD2qPbapUzdcwb4Yig.crl (hash: Xw3XloqC/ZKg54VesfdSJJ1NArosr7lhBYHFDQT811k=) 2: 0DBF860C6FB111F1A2CD02AE78A30FBC.roa (hash: HcbMw2rn7TZMWXGPZnCmUILsaTL6x9o/58aT8kV7J4E=) 3: C8A0E422831611EA95762453C4F9AE02.roa (hash: zy8s2JOSWvYwBrRrmYSE0kwJEPoK1AaNF1yfDHC6Css=) 4: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (hash: T6idJL8aHggzjv6s1JmSSpHwZuTbLSQAyDk/XLJrS3o=) 5: FD114232912711EFBCB4ED6EC4F9AE02.roa (hash: m31d9LY6Fb+rpx0iPU2nTzyFxPrcr/nSM8utNGuQQUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Jul 28 19:43:56 2026 GMT Not After : Aug 4 19:43:56 2026 GMT Subject: CN=6a69067d-45b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:b1:74:39:c7:8b:39:c0:8a:ea:03:b1:17: ca:79:57:4a:0b:c6:11:0b:ba:ca:2f:5f:19:e9:3a: 74:ae:b8:0f:6f:16:0a:4e:fb:c8:1d:05:19:77:64: be:73:a1:82:48:8b:e0:62:cf:d7:ab:bc:2c:9d:a2: a2:45:be:ee:15:d7:f8:f4:b5:ac:05:e4:30:6c:39: 33:9a:00:54:32:2d:10:11:ff:60:11:a1:8e:43:f3: e5:6b:74:a8:e1:fa:4c:d4:64:5c:d7:a0:b4:68:7b: 22:43:7a:6a:88:72:6d:94:6a:8d:a8:19:a2:b5:70: ee:98:be:b7:ec:f9:a2:53:69:7b:2b:3c:fb:51:27: 79:5e:36:0d:5e:a1:1e:4c:cd:c7:92:61:ff:2a:37: 3d:00:a4:fe:8d:9c:df:ab:2f:cd:34:47:5d:cf:a1: ad:72:68:cc:9e:4b:1a:28:5e:5a:10:f8:71:af:06: b0:cb:3c:e1:ab:7e:5f:ac:96:dc:24:2e:56:84:da: 69:05:ac:cd:78:f7:96:d7:03:1b:5f:71:20:14:39: c5:23:3b:d5:25:db:c3:08:8d:7b:a6:43:b8:5e:2b: 5e:f5:f2:08:87:18:1c:d1:15:b1:28:a6:2a:78:55: 3c:78:ea:ed:77:70:de:b0:6d:cd:5d:49:24:ed:2f: 29:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:78:9D:A5:E5:72:8A:D4:77:96:8D:52:11:99:42:98:64:CD:FD:2E X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:db:08:c4:d7:15:09:da:6a:31:db:ea:e7:6c:9d:8f:f2:27: 77:5e:7c:48:0d:43:d9:ab:01:6d:97:49:55:fe:41:b2:50:e6: a3:8b:14:1d:38:aa:88:dd:a5:b8:db:e8:36:76:c5:0e:8e:56: 34:d7:14:e3:97:36:0b:1f:5f:bd:11:21:93:ff:71:43:33:a6: 8f:43:bd:41:cb:7b:9c:a5:3b:0d:04:1f:b7:e6:40:29:a7:5a: 57:c9:96:bf:64:18:0d:13:36:b9:63:fe:d6:83:3d:8a:48:2a: a3:5a:04:83:9c:de:ac:ed:29:8d:34:4b:53:9a:58:ad:05:51: 02:16:5c:77:50:71:af:a8:cd:5f:9e:7d:cf:ca:32:74:be:68: ef:83:85:10:50:07:eb:1f:c1:4a:44:98:9b:1c:3f:9b:87:37: a1:5e:3a:ee:a3:11:7b:08:23:c3:14:54:b1:84:19:1d:30:58: 1b:63:64:f4:02:11:4f:5e:bf:97:69:a0:f0:11:bc:15:a8:b3: d1:38:ec:f9:15:9b:d2:69:d2:d9:14:e3:c3:3c:f1:5a:13:b0: a5:d3:ad:60:1f:e7:31:e9:3c:d9:82:a1:14:13:03:7f:fe:18: 85:3e:78:22:21:6d:d2:e9:0a:84:1e:02:de:b6:07:0c:61:93: 12:e3:91:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjYwNzI4MTk0MzU2WhcNMjYwODA0MTk0MzU2WjAYMRYwFAYD VQQDEw02YTY5MDY3ZC00NWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2qxdDnHiznAiuoDsRfKeVdKC8YRC7rKL18Z6Tp0rrgPbxYKTvvIHQUZd2S+ c6GCSIvgYs/Xq7wsnaKiRb7uFdf49LWsBeQwbDkzmgBUMi0QEf9gEaGOQ/Pla3So 4fpM1GRc16C0aHsiQ3pqiHJtlGqNqBmitXDumL637PmiU2l7Kzz7USd5XjYNXqEe TM3HkmH/Kjc9AKT+jZzfqy/NNEddz6GtcmjMnksaKF5aEPhxrwawyzzhq35frJbc JC5WhNppBazNePeW1wMbX3EgFDnFIzvVJdvDCI17pkO4Xite9fIIhxgc0RWxKKYq eFU8eOrtd3DesG3NXUkk7S8puwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPN4naXl corUd5aNUhGZQphkzf0uMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBFQy85OTFDRUY3RTc5NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFP RDJxUGJhcFV6ZGN3YjRZaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS9sIxNcVCdpqMdvq52ydj/Ind158SA1D2asBbZdJVf5BslDmo4sUHTiqiN2l uNvoNnbFDo5WNNcU45c2Cx9fvREhk/9xQzOmj0O9Qct7nKU7DQQft+ZAKadaV8mW v2QYDRM2uWP+1oM9ikgqo1oEg5zerO0pjTRLU5pYrQVRAhZcd1Bxr6jNX559z8oy dL5o74OFEFAH6x/BSkSYmxw/m4c3oV467qMRewgjwxRUsYQZHTBYG2Nk9AIRT16/ l2mg8BG8Faiz0Tjs+RWb0mnS2RTjwzzxWhOwpdOtYB/nMek82YKhFBMDf/4YhT54 IiFt0ukKhB4C3rYHDGGTEuOR8Q== -----END CERTIFICATE-----Generated at Wed Jul 29 02:12:30 2026 by rpki-client