$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json) Hash identifier: +nBtSRW90CzqdKc8Z2k7dwcrFMIwNvOuXw6x+keukx0= Subject key identifier: EC:2A:B0:8D:BF:08:5E:20:F0:E4:6A:67:14:B3:80:D1:F9:E1:54:94 Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Certificate serial: 0CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft Manifest number: 0C83 Signing time: Wed 22 Jul 2026 18:57:37 +0000 Manifest this update: Wed 22 Jul 2026 18:57:37 +0000 Manifest next update: Wed 29 Jul 2026 18:57:37 +0000 Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: EV8/HSlRlVl7TtPj4KRIHYhQQD1y7oaoF8Tbq8A+7mQ=) 2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: s0qB2iNNIUGZAV7Qs3yGnrF3Wpc6qo9NyC9+Hue+JMc=) 3: DAFD055806F811EC9558C827C4F9AE02.roa (hash: SIPUDEhwO81LNv9dhcibvLJQkdYFv/PIhTjKFY7R3oc=) 4: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: 2kqZ2ax/As32o8RRs0PQNYd+3fd0DLwwDpGPzi6gp20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Validity Not Before: Jul 22 18:57:37 2026 GMT Not After : Jul 29 18:57:37 2026 GMT Subject: CN=6a6112a1-71fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:b2:09:1f:84:7c:e1:5a:1f:70:18:3e:5c: eb:cd:9c:0c:0a:b0:65:f7:ec:97:73:99:dd:cc:d8: 64:a9:69:e9:a5:39:f0:57:40:ee:9e:1c:3b:13:89: 8f:07:b0:26:8d:d4:96:86:62:6f:b8:93:e1:24:16: 8f:9f:d1:3d:65:fd:66:0f:21:c4:9f:f9:68:73:fe: 2d:fa:ea:51:ed:0d:e7:a5:8a:8e:ec:5f:ea:ed:6e: d9:2e:5a:ef:cc:4e:db:d6:f7:97:47:88:8c:4d:ba: 6d:6b:51:cf:69:dd:9d:86:00:fb:ad:5b:e1:1f:c7: 16:76:3c:2c:c2:f5:eb:6e:97:9e:10:25:3a:5b:6e: 60:9b:79:bf:66:3b:42:18:2d:8f:ee:88:2b:f0:e7: c5:2d:d1:8b:03:6b:ee:cc:05:ba:ee:ea:e6:b4:7e: 3a:75:28:fe:a8:96:bb:3f:73:98:53:a6:58:5f:7f: ee:89:eb:12:5c:88:9a:48:14:fa:2c:49:14:31:2c: eb:bf:73:26:8d:2c:ed:f9:f5:33:82:65:d8:20:13: 01:1c:cc:8b:5b:59:c3:8d:48:f4:22:d1:13:7c:50: 2c:f7:25:d0:c8:fe:84:c9:45:ad:bb:aa:8d:ba:62: e0:ba:28:53:6e:30:74:da:22:86:e3:97:a1:6b:bd: ef:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2A:B0:8D:BF:08:5E:20:F0:E4:6A:67:14:B3:80:D1:F9:E1:54:94 X509v3 Authority Key Identifier: keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:91:bb:31:9b:92:ae:87:9d:c3:af:9f:7a:ca:e2:c4:27:c7: 3c:d0:be:70:b0:52:88:fd:94:63:a7:51:22:c5:5d:6d:13:a9: 2c:f7:4d:57:5a:a9:be:fa:a7:a8:63:b7:29:05:55:06:1a:aa: ce:b3:af:68:7c:88:64:0c:67:40:e6:45:48:a0:cc:a9:4d:bb: da:d0:ca:10:ec:55:8f:0f:dd:b3:6a:2e:ca:89:55:e5:8a:96: 5b:11:dd:a3:99:64:89:7c:08:fd:20:6b:7e:81:e0:00:f3:7a: 4b:64:d3:f2:30:5f:73:36:b2:f5:c0:ad:ff:c8:f6:29:5f:b2: e2:fe:7c:4f:7b:1e:cd:c3:6c:e5:1c:65:bf:98:d1:9a:75:b9: 1b:7c:58:f8:b7:1a:c9:03:f0:51:e1:f1:04:3f:4b:6d:1b:d5: f4:ca:f5:99:2a:66:02:77:01:98:69:4c:9e:ae:87:b4:89:3c: b5:78:6e:5f:4d:fb:b4:5e:c7:d9:6c:d4:45:58:4f:4f:77:ee: 76:96:57:b7:d4:84:a2:cb:fd:60:09:9d:8f:17:69:e0:00:39: 57:7a:3f:29:3f:84:af:4a:30:aa:65:70:c7:0a:ab:05:fd:ae: 26:e2:81:a3:2a:77:c8:3a:3f:23:61:fc:12:70:b4:9e:3c:4e: cd:33:b8:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD QTE2RDlDRDUwHhcNMjYwNzIyMTg1NzM3WhcNMjYwNzI5MTg1NzM3WjAYMRYwFAYD VQQDEw02YTYxMTJhMS03MWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfuyCR+EfOFaH3AYPlzrzZwMCrBl9+yXc5ndzNhkqWnppTnwV0Dunhw7E4mP B7AmjdSWhmJvuJPhJBaPn9E9Zf1mDyHEn/loc/4t+upR7Q3npYqO7F/q7W7ZLlrv zE7b1veXR4iMTbpta1HPad2dhgD7rVvhH8cWdjwswvXrbpeeECU6W25gm3m/ZjtC GC2P7ogr8OfFLdGLA2vuzAW67urmtH46dSj+qJa7P3OYU6ZYX3/uiesSXIiaSBT6 LEkUMSzrv3MmjSzt+fUzgmXYIBMBHMyLW1nDjUj0ItETfFAs9yXQyP6EyUWtu6qN umLguihTbjB02iKG45eha73vXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwqsI2/ CF4g8ORqZxSzgNH54VSUMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2 MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs cTAtYjlOcFN0dFhLRnRuTlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM5G7MZuSroedw6+fesrixCfHPNC+cLBSiP2UY6dRIsVdbROpLPdNV1qpvvqn qGO3KQVVBhqqzrOvaHyIZAxnQOZFSKDMqU272tDKEOxVjw/ds2ouyolV5YqWWxHd o5lkiXwI/SBrfoHgAPN6S2TT8jBfczay9cCt/8j2KV+y4v58T3sezcNs5Rxlv5jR mnW5G3xY+LcayQPwUeHxBD9LbRvV9Mr1mSpmAncBmGlMnq6HtIk8tXhuX037tF7H 2WzURVhPT3fudpZXt9SEosv9YAmdjxdp4AA5V3o/KT+Er0owqmVwxwqrBf2uJuKB oyp3yDo/I2H8EnC0njxOzTO4DA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:31:54 2026 by rpki-client