$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json) Hash identifier: 0zOKDByt+moLewgCRP9QLJLSNfWeceUNaU6c35ImxYs= Subject key identifier: 58:CD:C4:7A:0D:30:09:06:3D:05:78:92:39:89:DE:36:3B:2C:83:86 Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 0831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft Manifest number: 2EDC Signing time: Tue 28 Jul 2026 16:28:16 +0000 Manifest this update: Tue 28 Jul 2026 16:28:16 +0000 Manifest next update: Tue 04 Aug 2026 16:28:16 +0000 Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: 3FjINiXfCEFaoQqFU6QenDvqarCfBONjYoLzhzO9OnY=) 2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: 5xZOfUroHpeE/D4uGz1bEl15IcZj3gdTHW1LZL25guE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2097 (0x831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: Jul 28 16:28:16 2026 GMT Not After : Aug 4 16:28:16 2026 GMT Subject: CN=6a68d8a0-cbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ba:a4:b2:89:59:76:c1:0b:a9:0d:e0:28:9d: 1f:c0:ef:08:ed:63:35:38:d7:b0:eb:61:39:63:6c: ad:c9:7b:2c:9c:38:a7:9b:89:f8:fa:5e:2b:c8:71: 25:1d:b3:1b:a4:40:6a:52:cf:cc:21:4f:e7:d6:9b: 42:1a:87:2c:8b:d8:4a:b1:c3:e7:01:88:22:fd:1c: 3b:4e:c4:7e:cb:a4:59:df:eb:35:8b:5d:7e:02:0d: 19:2a:31:63:7f:64:8b:08:d3:4d:ae:48:66:18:9a: df:98:3c:a9:b8:b9:a0:f4:b4:5c:ac:53:39:45:3f: c1:33:ce:0b:2b:d9:9e:78:f6:12:f7:1b:54:d2:c7: 26:bb:77:c8:d8:09:b9:bf:3e:ed:f5:7f:d2:15:48: 00:0c:ff:d7:9e:03:c0:b1:de:28:5a:39:ac:25:97: ff:58:12:0f:66:bc:ce:9d:d1:46:44:0b:16:48:dc: 3e:b2:f3:10:ba:c0:1e:a6:ec:c1:73:04:ac:dd:15: f6:3c:bd:89:63:93:06:bd:72:39:d9:73:5e:f2:0d: 0e:e7:c2:a3:0d:68:d9:03:42:56:77:a9:95:e3:ca: 46:44:99:bb:69:32:92:1b:4f:ce:8b:45:e2:15:45: 3a:7c:64:b1:12:93:40:9b:e4:75:19:1a:43:b8:08: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:C4:7A:0D:30:09:06:3D:05:78:92:39:89:DE:36:3B:2C:83:86 X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b4:90:0b:f0:56:25:eb:62:ee:9f:e3:01:e5:96:e1:b8:89: bc:6b:52:83:9c:10:a2:e8:e6:fd:14:1e:60:7a:4b:57:1f:98: 8e:2c:b9:6b:87:88:a9:cb:8a:1f:3e:38:8d:78:b4:90:da:da: 5c:85:bc:ca:e6:0c:38:b7:5e:84:97:ad:8c:be:5b:7e:cf:b3: 01:27:85:ab:a3:e8:db:0b:51:cc:8c:15:7d:c8:e7:97:c0:ac: c6:32:89:ac:dd:68:16:f3:81:62:ea:c6:f4:2a:cd:84:c8:61: 15:d1:65:b6:d2:93:97:37:12:ee:19:e1:b0:eb:bb:23:b4:5b: 38:6a:fa:88:e1:de:d5:95:06:60:c4:ec:49:59:e0:a9:a6:d2: 37:7c:e1:b0:a4:3b:11:15:c0:17:3f:0d:04:ac:eb:43:c2:d3: d2:f0:10:ec:a8:95:12:22:f2:c7:b0:48:35:a1:fb:3e:2c:66: 65:c3:31:d5:60:35:2e:17:7e:37:0b:b4:b2:da:d7:21:94:9e: 13:63:c3:15:54:9e:e7:5f:91:bb:09:e3:44:cb:c0:9c:76:4c: 02:09:0a:a4:e5:d6:87:75:bc:ab:14:04:cc:89:a9:8d:2e:5d: 22:b7:9a:23:1c:d5:d7:3a:f5:40:75:2b:c3:cd:5e:18:56:62: e1:78:cd:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjYwNzI4MTYyODE2WhcNMjYwODA0MTYyODE2WjAYMRYwFAYD VQQDEw02YTY4ZDhhMC1jYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rqksolZdsELqQ3gKJ0fwO8I7WM1ONew62E5Y2ytyXssnDinm4n4+l4ryHEl HbMbpEBqUs/MIU/n1ptCGocsi9hKscPnAYgi/Rw7TsR+y6RZ3+s1i11+Ag0ZKjFj f2SLCNNNrkhmGJrfmDypuLmg9LRcrFM5RT/BM84LK9meePYS9xtU0scmu3fI2Am5 vz7t9X/SFUgADP/XngPAsd4oWjmsJZf/WBIPZrzOndFGRAsWSNw+svMQusAepuzB cwSs3RX2PL2JY5MGvXI52XNe8g0O58KjDWjZA0JWd6mV48pGRJm7aTKSG0/Oi0Xi FUU6fGSxEpNAm+R1GRpDuAgGnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjNxHoN MAkGPQV4kjmJ3jY7LIOGMB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1 Y3JZcTRGdmkwYU8wRzAwalUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGLSQC/BWJeti7p/jAeWW4biJvGtSg5wQoujm/RQeYHpLVx+Yjiy5a4eIqcuK Hz44jXi0kNraXIW8yuYMOLdehJetjL5bfs+zASeFq6Po2wtRzIwVfcjnl8CsxjKJ rN1oFvOBYurG9CrNhMhhFdFlttKTlzcS7hnhsOu7I7RbOGr6iOHe1ZUGYMTsSVng qabSN3zhsKQ7ERXAFz8NBKzrQ8LT0vAQ7KiVEiLyx7BINaH7PixmZcMx1WA1Lhd+ Nwu0strXIZSeE2PDFVSe51+RuwnjRMvAnHZMAgkKpOXWh3W8qxQEzImpjS5dIrea IxzV1zr1QHUrw81eGFZi4XjN9A== -----END CERTIFICATE-----Generated at Tue Jul 28 23:48:25 2026 by rpki-client