$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft File: K2gwqzfLNO8nOiCi8ugmQplgE9o.mft (raw, json) Hash identifier: BeqA04lOCx2k0OOEhWPDtCnJtJpxU+6v2449nbu6JrU= Subject key identifier: 84:B1:B4:C6:91:2E:0A:24:49:60:F9:7B:D9:0E:2D:2E:AF:2C:71:D5 Authority key identifier: 2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA Certificate issuer: /CN=A91E3E80/serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Certificate serial: CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft Manifest number: CF Signing time: Mon 27 Jul 2026 08:51:19 +0000 Manifest this update: Mon 27 Jul 2026 08:51:19 +0000 Manifest next update: Mon 03 Aug 2026 08:51:19 +0000 Files and hashes: 1: K2gwqzfLNO8nOiCi8ugmQplgE9o.crl (hash: h58yxNnCcPcJf+RGicgOfCPU6blsw9DmkfWTmLb53EM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 207 (0xcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=2B6830AB37CB34EF273A20A2F2E82642996013DA Validity Not Before: Jul 27 08:51:19 2026 GMT Not After : Aug 3 08:51:19 2026 GMT Subject: CN=6a671c07-eda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:17:71:39:8c:56:74:4c:65:70:df:38:0c:a9: 2a:d0:3c:44:14:93:63:4d:6f:b4:78:1c:55:55:69: 2c:a9:41:97:3b:e4:6e:14:32:1a:81:b6:5e:fe:5a: d0:e7:cf:68:9a:99:cd:51:8c:88:5b:54:da:d8:0c: 34:2b:7e:55:3f:1a:20:e5:64:48:2e:8a:9d:ef:44: a2:f7:9f:dd:25:60:2a:8b:f1:28:8f:2a:3b:25:a0: 48:e3:e4:3f:47:c0:05:39:59:56:06:9d:6e:86:0b: 95:76:ba:f1:11:4d:d8:77:5b:36:02:c4:bf:30:91: 8d:00:23:29:c9:a3:de:ad:f7:19:9f:f9:c3:08:2e: d8:3c:d9:0e:5f:c7:36:37:29:d7:cc:3a:62:cb:4e: 9f:17:22:32:19:a4:56:5f:09:34:62:a7:8f:f5:5f: 55:92:25:6e:3a:4c:92:45:39:5a:59:1c:b2:37:4a: 93:a8:09:66:64:ec:65:81:8a:69:8b:25:64:30:d9: 62:84:8c:c5:e7:ad:b3:7e:ac:c5:c6:00:73:bf:f8: 2a:81:1f:1f:8f:02:03:9c:7d:34:9f:40:84:ca:51: 92:5b:d2:15:aa:13:32:cb:d0:86:a5:c2:b4:05:c1: cb:63:49:6b:bb:87:6b:92:ac:40:85:f7:d9:25:af: 15:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B1:B4:C6:91:2E:0A:24:49:60:F9:7B:D9:0E:2D:2E:AF:2C:71:D5 X509v3 Authority Key Identifier: keyid:2B:68:30:AB:37:CB:34:EF:27:3A:20:A2:F2:E8:26:42:99:60:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K2gwqzfLNO8nOiCi8ugmQplgE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/3E402AEA4B6611F0B8852439C4F9AE02/K2gwqzfLNO8nOiCi8ugmQplgE9o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:a9:ff:4d:b1:d3:04:ba:6b:3e:4b:2d:c3:c3:92:96:0d:fe: a5:bb:b2:e7:56:97:db:f8:f1:fb:71:cd:5e:fa:4b:ce:58:ba: 7c:aa:b9:93:71:59:0c:8c:b0:76:06:63:83:27:36:f8:98:6a: fb:17:dd:0b:1f:f9:3d:02:98:a7:43:88:7a:62:e3:ad:a4:f0: 0a:5e:12:b8:06:4c:21:4f:5a:5d:f8:df:2d:68:1a:64:01:a9: 3b:0a:39:ad:3a:53:88:62:b2:fd:24:48:64:91:7b:9f:57:43: 9d:a8:d0:a2:68:19:92:cc:34:08:d3:c8:c9:53:a3:f3:c9:ba: 4b:b5:83:24:a0:29:62:f6:f9:bf:12:3c:8f:3c:54:34:df:7f: a7:ea:03:50:f3:48:2b:19:18:d4:7a:a9:8b:4a:7f:0b:83:b4: 8c:f1:a3:4f:22:11:94:3d:5d:81:48:58:d0:a2:ef:3d:19:8a: 99:4c:a7:84:1c:87:a7:32:4d:e5:f5:d5:af:55:47:2b:94:cf: 75:7a:20:42:96:65:d3:47:36:4d:19:c8:d0:4b:af:ed:62:33: d0:33:5c:e0:3a:fb:7f:a2:04:37:88:f0:23:70:a7:54:7a:bd: c7:99:93:af:d9:9d:2f:70:d0:2d:13:d0:15:53:47:68:32:22: 01:03:5d:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFODAxMTAvBgNVBAUTKDJCNjgzMEFCMzdDQjM0RUYyNzNBMjBBMkYyRTgyNjQy OTk2MDEzREEwHhcNMjYwNzI3MDg1MTE5WhcNMjYwODAzMDg1MTE5WjAYMRYwFAYD VQQDEw02YTY3MWMwNy1lZGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRdxOYxWdExlcN84DKkq0DxEFJNjTW+0eBxVVWksqUGXO+RuFDIagbZe/lrQ 589ompnNUYyIW1Ta2Aw0K35VPxog5WRILoqd70Si95/dJWAqi/Eojyo7JaBI4+Q/ R8AFOVlWBp1uhguVdrrxEU3Yd1s2AsS/MJGNACMpyaPerfcZn/nDCC7YPNkOX8c2 NynXzDpiy06fFyIyGaRWXwk0YqeP9V9VkiVuOkySRTlaWRyyN0qTqAlmZOxlgYpp iyVkMNlihIzF562zfqzFxgBzv/gqgR8fjwIDnH00n0CEylGSW9IVqhMyy9CGpcK0 BcHLY0lru4drkqxAhffZJa8VRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFISxtMaR LgokSWD5e9kOLS6vLHHVMB8GA1UdIwQYMBaAFCtoMKs3yzTvJzogovLoJkKZYBPa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0U4MC8zRTQwMkFFQTRC NjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9LMmd3cXpmTE5POG5PaUNpOHVnbVFwbGdF OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0syZ3dxemZMTk84bk9pQ2k4dWdtUXBsZ0U5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0U4MC8zRTQwMkFFQTRCNjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9LMmd3cXpmTE5P OG5PaUNpOHVnbVFwbGdFOW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABqn/TbHTBLprPkstw8OSlg3+pbuy51aX2/jx+3HNXvpLzli6fKq5k3FZDIyw dgZjgyc2+Jhq+xfdCx/5PQKYp0OIemLjraTwCl4SuAZMIU9aXfjfLWgaZAGpOwo5 rTpTiGKy/SRIZJF7n1dDnajQomgZksw0CNPIyVOj88m6S7WDJKApYvb5vxI8jzxU NN9/p+oDUPNIKxkY1Hqpi0p/C4O0jPGjTyIRlD1dgUhY0KLvPRmKmUynhByHpzJN 5fXVr1VHK5TPdXogQpZl00c2TRnI0Euv7WIz0DNc4Dr7f6IEN4jwI3CnVHq9x5mT r9mdL3DQLRPQFVNHaDIiAQNdxQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:14:56 2026 by rpki-client