$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft File: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json) Hash identifier: EY6iIkkTeVUSAdMYqrlqMV7CNIBhFmdb4VUF4le01rY= Subject key identifier: 1D:36:A7:F5:F1:2E:38:53:E9:30:AE:8E:A8:AC:AD:F8:C2:E3:9E:97 Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 Certificate issuer: /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Certificate serial: 02AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft Manifest number: 0298 Signing time: Mon 27 Jul 2026 03:04:18 +0000 Manifest this update: Mon 27 Jul 2026 03:04:18 +0000 Manifest next update: Mon 03 Aug 2026 03:04:18 +0000 Files and hashes: 1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: EggUWq2wDWNK4w53/oJzBvLmxktnudbiHRpncpoDacA=) 2: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: fbmqeqVKiqA0r2a2Diispb0Kfg/Ww32W2ewxBa+GSGg=) 3: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: qIJw0+FjxuTWluHNODsBUj7/4aX0PbanF96QaF1KBaA=) 4: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ZK4LGz9IH3YYiFptoI1UZ2KXhSWEWUkXq5JqqcwZNko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 686 (0x2ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9 Validity Not Before: Jul 27 03:04:18 2026 GMT Not After : Aug 3 03:04:18 2026 GMT Subject: CN=6a66cab2-85cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:c5:56:67:f3:56:28:f9:98:e3:4b:da:9a: 6e:92:66:be:7a:27:20:7b:e1:c4:2f:51:4b:91:08: 62:df:df:e5:1c:3c:5a:d6:1d:d3:b0:b3:73:e2:25: 24:9b:20:3b:df:04:24:68:45:48:ab:0e:ad:44:8c: 4e:f7:53:fc:ba:57:d8:01:0d:35:4c:fd:02:f9:02: 55:8d:81:83:bd:e4:0c:9b:c6:91:db:a2:4c:6d:02: bf:d6:49:65:ee:9c:a2:d4:ef:8f:41:db:e8:fc:47: 45:2b:a1:64:18:22:ba:c9:e0:3b:c3:26:7a:10:f7: 94:e8:35:d8:ea:00:87:52:b6:e2:00:45:5a:70:76: cb:bd:a3:9a:30:ed:c5:ea:15:fb:2b:da:8c:5b:bd: d2:86:3f:02:de:1e:77:39:f3:c0:31:7d:51:bc:8d: c8:85:43:c1:73:89:b7:ca:06:b8:25:6d:a0:36:a7: 7b:2d:26:69:56:25:fa:e5:f6:c8:c6:95:e2:1a:67: 0b:ff:5f:ef:e4:f9:7e:42:7f:02:a3:ff:20:71:02: 79:f3:04:49:74:f9:08:a0:4a:f6:7a:73:92:f4:25: ae:94:62:2a:4a:25:4b:13:11:f8:2f:e0:07:88:3a: 4a:45:cf:8a:1b:a8:9e:52:4a:c4:c9:f4:64:8d:4a: 6e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:36:A7:F5:F1:2E:38:53:E9:30:AE:8E:A8:AC:AD:F8:C2:E3:9E:97 X509v3 Authority Key Identifier: keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ad:d8:e3:87:25:9b:84:f4:13:11:67:52:48:52:36:f3:fb: ff:fe:4c:b6:d5:f3:f9:ee:84:9d:2d:3c:64:d8:83:35:66:bb: 1c:5b:62:52:32:1f:ab:e7:9f:19:ab:a1:ce:c7:d2:bc:6f:a7: 52:51:ca:d2:bc:c4:79:0c:11:48:4d:a8:86:fe:87:f0:62:51: 32:6f:e9:d9:1c:52:0a:79:2f:4f:22:bb:66:b4:ca:d6:e1:ec: 1b:fa:b9:72:f6:7e:81:df:6e:b5:31:16:54:f3:4f:0d:ee:7c: 8e:35:3e:af:74:e6:fc:22:b1:a1:82:63:d7:10:34:5c:05:f2: 45:38:a6:07:2b:06:a5:d9:c0:6a:3d:68:d3:a7:68:f2:1a:41: e4:fc:42:3b:37:76:6f:c5:15:ff:ec:f6:cd:57:e2:77:a8:e6: 06:6c:53:52:72:22:85:ca:d9:a2:94:7e:3c:18:1b:71:ff:3e: 94:85:cc:db:ad:48:6c:8e:f5:b4:ed:01:02:6c:18:bf:82:eb: 29:d5:89:33:07:a3:8c:e3:e6:9e:a4:f9:56:90:6d:6d:76:5b: a9:8b:98:30:0c:9c:8d:29:3e:ac:81:0e:52:44:6c:69:1f:d3: b5:cf:3d:81:46:63:25:1e:d3:4e:de:92:ad:48:91:13:eb:22: 73:b5:af:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE MkFBRUU0QjkwHhcNMjYwNzI3MDMwNDE4WhcNMjYwODAzMDMwNDE4WjAYMRYwFAYD VQQDEw02YTY2Y2FiMi04NWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulLFVmfzVij5mONL2ppukma+eicge+HEL1FLkQhi39/lHDxa1h3TsLNz4iUk myA73wQkaEVIqw6tRIxO91P8ulfYAQ01TP0C+QJVjYGDveQMm8aR26JMbQK/1kll 7pyi1O+PQdvo/EdFK6FkGCK6yeA7wyZ6EPeU6DXY6gCHUrbiAEVacHbLvaOaMO3F 6hX7K9qMW73Shj8C3h53OfPAMX1RvI3IhUPBc4m3yga4JW2gNqd7LSZpViX65fbI xpXiGmcL/1/v5Pl+Qn8Co/8gcQJ58wRJdPkIoEr2enOS9CWulGIqSiVLExH4L+AH iDpKRc+KG6ieUkrEyfRkjUpuvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB02p/Xx LjhT6TCujqisrfjC456XMB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2 MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1 TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD cDZIazJrc3NCdnJTcXU1TGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmq3Y44clm4T0ExFnUkhSNvP7//5MttXz+e6EnS08ZNiDNWa7HFtiUjIfq+ef GauhzsfSvG+nUlHK0rzEeQwRSE2ohv6H8GJRMm/p2RxSCnkvTyK7ZrTK1uHsG/q5 cvZ+gd9utTEWVPNPDe58jjU+r3Tm/CKxoYJj1xA0XAXyRTimBysGpdnAaj1o06do 8hpB5PxCOzd2b8UV/+z2zVfid6jmBmxTUnIihcrZopR+PBgbcf8+lIXM261IbI71 tO0BAmwYv4LrKdWJMwejjOPmnqT5VpBtbXZbqYuYMAycjSk+rIEOUkRsaR/Ttc89 gUZjJR7TTt6SrUiRE+sic7Wvgw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:27:37 2026 by rpki-client