$ rpki-client -vvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft File: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft (raw, json) Hash identifier: th35Tohez3WUgHq5H7S8lGhK9ZVjedcM8jmmMj6B12I= Subject key identifier: E5:6D:89:F2:2A:6F:A5:AA:15:F8:97:74:8D:77:39:3E:D8:16:E2:EC Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13 Certificate issuer: /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft Manifest number: 24 Signing time: Wed 29 Jul 2026 10:30:13 +0000 Manifest this update: Wed 29 Jul 2026 10:30:13 +0000 Manifest next update: Wed 05 Aug 2026 10:30:13 +0000 Files and hashes: 1: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl (hash: rW3xTqaoVBuPNTj3Z4OBcO6ECo4yE22SJI1V3qQg7ME=) 2: B3FF987E5B8211F19BF8DAE6A7833773.roa (hash: h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 10:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113 Validity Not Before: Jul 29 10:30:13 2026 GMT Not After : Aug 5 10:30:13 2026 GMT Subject: CN=6a69d635-d3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:61:f5:1f:3b:67:31:e4:97:17:d7:4a:53:f3: 85:24:54:51:58:71:84:79:45:d0:ba:29:60:6f:54: fb:70:a5:7e:84:04:84:4f:b8:ea:8a:93:e6:55:19: c9:8c:8a:68:97:18:85:1b:3c:a3:a7:b4:32:92:21: 35:c9:d4:4f:33:2d:b5:6d:3f:e7:d1:d3:9b:2d:42: 15:5e:01:fc:24:b8:e1:5a:39:ad:40:ba:60:cb:46: 2c:26:ce:55:88:1c:55:ee:39:c9:f2:09:3e:a4:c5: d1:75:8d:3a:75:1c:ba:84:f3:a8:0d:e8:7f:81:c8: f5:1f:95:88:98:5c:5a:07:54:f4:84:aa:4a:60:11: a8:4c:3e:6e:c3:d2:e6:55:7d:3b:8b:e2:4a:ce:30: 3e:c0:c6:3b:2b:d3:46:b3:7e:66:7a:df:d6:7b:92: 5f:0c:6c:7b:96:b2:a1:ab:c5:50:e4:17:66:c1:1c: c4:04:09:2e:10:7b:33:f8:58:f8:55:65:7c:ff:03: c5:23:00:c1:8a:7c:5b:bc:b2:c9:00:49:f9:ea:11: 8a:8c:de:2b:72:f1:e6:84:4e:6b:5d:db:d8:4c:13: de:08:ef:c1:d9:76:32:ca:85:fc:70:cb:5c:37:11: 0a:46:f1:fb:f6:0e:37:e4:68:bd:ae:c4:59:f8:10: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:6D:89:F2:2A:6F:A5:AA:15:F8:97:74:8D:77:39:3E:D8:16:E2:EC X509v3 Authority Key Identifier: keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:84:4d:09:13:a8:b5:51:bc:89:14:4d:6d:f0:48:fe:f4:5b: 6a:51:f3:81:76:6c:b5:99:90:d5:71:41:b9:3c:04:d2:db:22: c7:3e:5a:e6:2b:aa:33:ec:af:ea:b2:b4:b8:68:05:82:d4:df: e1:f4:1c:97:2d:65:f8:04:25:ce:66:3d:5c:d6:7b:1d:d7:e1: f4:47:5d:95:7d:1e:1f:86:52:0f:16:24:ff:79:ca:b7:ef:0b: be:99:0f:17:8d:2c:6e:86:f7:11:a7:96:31:4d:fc:19:98:84: 03:da:55:94:30:d7:cf:50:9d:e5:69:99:00:0e:aa:6c:00:d7: ed:ec:c8:0c:2c:cb:77:59:fb:68:34:62:b9:0b:4c:1c:4d:44: e2:53:8c:1a:c2:c4:78:d8:ee:b3:aa:e4:b7:4a:ce:c3:c7:67: e2:ba:da:22:06:50:c4:9b:2a:17:b0:94:3b:db:66:96:64:14: 9e:5f:a4:9d:1f:0b:27:c5:7a:21:d6:d0:28:c9:1a:b5:51:f2: 2c:e0:09:97:03:ea:71:e8:ee:28:d7:a1:cb:2c:b3:fe:e2:6d: 3b:c7:6b:72:3f:97:ec:6a:eb:6e:46:24:66:e8:53:3b:b8:61: db:05:e3:cb:10:ca:74:b1:46:1f:d0:bb:1d:5d:6a:a4:26:ab: cc:de:74:c1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDEzQTExMC8GA1UEBRMoQUYyRDkwNkUyNjREMkE4NjBCMDQ5MjAxRDUwRTE4NUVG MkFEQzExMzAeFw0yNjA3MjkxMDMwMTNaFw0yNjA4MDUxMDMwMTNaMBgxFjAUBgNV BAMTDTZhNjlkNjM1LWQzYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCIYfUfO2cx5JcX10pT84UkVFFYcYR5RdC6KWBvVPtwpX6EBIRPuOqKk+ZVGcmM imiXGIUbPKOntDKSITXJ1E8zLbVtP+fR05stQhVeAfwkuOFaOa1AumDLRiwmzlWI HFXuOcnyCT6kxdF1jTp1HLqE86gN6H+ByPUflYiYXFoHVPSEqkpgEahMPm7D0uZV fTuL4krOMD7Axjsr00azfmZ639Z7kl8MbHuWsqGrxVDkF2bBHMQECS4QezP4WPhV ZXz/A8UjAMGKfFu8sskASfnqEYqM3ity8eaETmtd29hME94I78HZdjLKhfxwy1w3 EQpG8fv2DjfkaL2uxFn4EEApAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU5W2J8ipv paoV+Jd0jXc5PtgW4uwwHwYDVR0jBBgwFoAUry2QbiZNKoYLBJIB1Q4YXvKtwRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMTNBLzg0NzUyRkQyNTgx ODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29ZTEJKSUIxUTRZWHZLdHdS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcnkyUWJpWk5Lb1lMQkpJQjFRNFlYdkt0d1JNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw MTNBLzg0NzUyRkQyNTgxODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29Z TEJKSUIxUTRZWHZLdHdSTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBKhE0JE6i1UbyJFE1t8Ej+9FtqUfOBdmy1mZDVcUG5PATS2yLHPlrmK6oz7K/q srS4aAWC1N/h9ByXLWX4BCXOZj1c1nsd1+H0R12VfR4fhlIPFiT/ecq37wu+mQ8X jSxuhvcRp5YxTfwZmIQD2lWUMNfPUJ3laZkADqpsANft7MgMLMt3WftoNGK5C0wc TUTiU4wawsR42O6zquS3Ss7Dx2fiutoiBlDEmyoXsJQ722aWZBSeX6SdHwsnxXoh 1tAoyRq1UfIs4AmXA+px6O4o16HLLLP+4m07x2tyP5fsautuRiRm6FM7uGHbBePL EMp0sUYf0LsdXWqkJqvM3nTB -----END CERTIFICATE-----Generated at Wed Jul 29 14:00:39 2026 by rpki-client