$ rpki-client -vvf rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft File: 2WQZRdW0z31j_JExr89yeuNtkCA.mft (raw, json) Hash identifier: D2R/rpSZ0C0cM4hA5IxGPXwcEfH3V0xflNvqcZfZloM= Subject key identifier: FA:6B:CE:64:67:E2:63:2D:13:94:B3:3E:DC:3F:4B:1B:FF:2D:24:EC Authority key identifier: D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20 Certificate issuer: /CN=A911F316/serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft Manifest number: 02A9 Signing time: Thu 23 Jul 2026 02:38:33 +0000 Manifest this update: Thu 23 Jul 2026 02:38:32 +0000 Manifest next update: Thu 30 Jul 2026 02:38:32 +0000 Files and hashes: 1: 2WQZRdW0z31j_JExr89yeuNtkCA.crl (hash: mMmR0E7lWkHPh+K2nk/behvcBGRc/hb3zcmoD4lJZFg=) 2: 77490C9A792F11EEBF849942C4F9AE02.roa (hash: MpcjQVs1Jc1cjgEQDQ1xjrNe8yr/lbGI3mI0RqgvaQ8=) 3: 15714ED2776A11ED98AF7341C4F9AE02.roa (hash: GVyHO9aPtU+XPsp7j3IVen2mhZWFCWup91n2kBUjWV8=) 4: 590A6A9A792E11EEA5AAB840C4F9AE02.roa (hash: /sj3JZ3p1665YJRvSUXz4i11ey7ZoPynVcwKSHS8SnQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F316, serialNumber=D9641945D5B4CF7D63FC9131AFCF727AE36D9020 Validity Not Before: Jul 23 02:38:32 2026 GMT Not After : Jul 30 02:38:32 2026 GMT Subject: CN=6a617ea8-219a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ab:bb:03:1e:3a:bc:e8:33:06:4e:ee:83:58: e4:ef:9a:38:e1:44:e0:9e:a2:42:cd:b0:7d:61:1a: f4:34:dd:90:ff:b2:45:71:76:0a:db:b4:31:ce:48: 0d:50:b7:a6:d4:75:09:6e:b0:95:3b:69:89:fb:44: 0c:a7:60:0b:4e:79:5f:95:d5:9f:75:c0:5a:42:56: 61:ff:55:29:fa:80:35:a7:f3:0a:ea:bb:35:af:7d: 35:54:94:d1:15:47:0f:4a:7f:ea:cc:cc:33:2e:e7: d0:6e:02:29:fa:7a:c6:ec:53:c0:c5:6d:95:e1:3c: 81:4a:50:71:cc:0a:86:97:40:37:7b:02:1c:7e:6d: 8f:69:47:83:e2:50:06:40:24:81:f1:ff:30:cc:d5: 87:f4:b9:6b:b1:95:b5:1f:4a:2c:21:dd:a4:30:07: 45:58:50:83:1b:7c:32:2e:78:ea:51:7e:99:48:05: 39:a0:53:01:83:d1:cb:1d:b0:6f:94:d7:67:de:d5: 2e:09:68:98:d4:b9:8d:c7:b8:6c:f3:46:73:a9:47: d8:74:3e:e0:92:44:26:f2:a8:59:51:23:1b:5e:fe: 34:51:a1:f8:4d:7d:a5:92:6a:7a:7b:7b:05:db:5d: 95:bb:8c:99:3d:23:4c:f9:fa:d3:e5:b1:f5:62:e5: 1f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6B:CE:64:67:E2:63:2D:13:94:B3:3E:DC:3F:4B:1B:FF:2D:24:EC X509v3 Authority Key Identifier: keyid:D9:64:19:45:D5:B4:CF:7D:63:FC:91:31:AF:CF:72:7A:E3:6D:90:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2WQZRdW0z31j_JExr89yeuNtkCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F316/A1DF1520774C11EDB826BC0BC4F9AE02/2WQZRdW0z31j_JExr89yeuNtkCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:de:b5:0d:81:ed:a4:85:42:53:1d:29:b5:08:56:ec:80:f2: 9c:aa:13:28:ad:0f:5c:a7:24:9d:53:cb:77:9f:5c:b8:a3:1e: 4a:d9:f5:1c:21:6c:5a:fe:45:04:30:9b:59:02:cd:9d:17:a3: f5:b1:1c:0a:ed:af:9f:22:ff:fc:fb:e7:0a:bd:e5:75:4a:69: ce:3e:46:e5:46:da:6d:af:f0:9c:65:a5:e7:97:07:f0:1a:9f: 29:de:c8:3c:de:42:6c:98:b6:2c:cb:cc:5a:8a:dd:e0:c3:44: b3:42:13:e9:33:7c:62:a6:a2:d2:a9:19:13:34:dc:34:d2:b2: c4:b2:72:84:8b:d2:17:e4:ba:14:96:7f:8b:2b:23:ac:0b:b8: 11:a0:5d:04:a5:dd:39:88:60:bf:a0:ad:fd:5b:fd:b6:8d:87: e5:bd:43:77:b0:0f:53:8d:4a:a7:30:13:5c:3b:4a:fd:f8:7d: 0c:90:2a:de:3a:2f:39:e2:49:b9:3c:1e:e1:8a:81:7a:7b:63: a9:5f:2c:51:e4:c5:6d:b8:f7:64:57:d1:ef:15:41:0b:88:5b: d5:36:2f:96:83:f0:0e:99:0d:d8:cd:53:ea:24:28:09:30:57: 40:d2:d1:6f:30:3c:76:90:28:f9:09:e0:20:e3:e2:dd:92:42: 21:29:d9:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYzMTYxMTAvBgNVBAUTKEQ5NjQxOTQ1RDVCNENGN0Q2M0ZDOTEzMUFGQ0Y3MjdB RTM2RDkwMjAwHhcNMjYwNzIzMDIzODMyWhcNMjYwNzMwMDIzODMyWjAYMRYwFAYD VQQDEw02YTYxN2VhOC0yMTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq6u7Ax46vOgzBk7ug1jk75o44UTgnqJCzbB9YRr0NN2Q/7JFcXYK27QxzkgN ULem1HUJbrCVO2mJ+0QMp2ALTnlfldWfdcBaQlZh/1Up+oA1p/MK6rs1r301VJTR FUcPSn/qzMwzLufQbgIp+nrG7FPAxW2V4TyBSlBxzAqGl0A3ewIcfm2PaUeD4lAG QCSB8f8wzNWH9LlrsZW1H0osId2kMAdFWFCDG3wyLnjqUX6ZSAU5oFMBg9HLHbBv lNdn3tUuCWiY1LmNx7hs80ZzqUfYdD7gkkQm8qhZUSMbXv40UaH4TX2lkmp6e3sF 212Vu4yZPSNM+frT5bH1YuUf3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPprzmRn 4mMtE5SzPtw/Sxv/LSTsMB8GA1UdIwQYMBaAFNlkGUXVtM99Y/yRMa/PcnrjbZAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjMxNi9BMURGMTUyMDc3 NEMxMUVEQjgyNkJDMEJDNEY5QUUwMi8yV1FaUmRXMHozMWpfSkV4cjg5eWV1TnRr Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXUVpSZFcwejMxal9KRXhyODl5ZXVOdGtDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjMxNi9BMURGMTUyMDc3NEMxMUVEQjgyNkJDMEJDNEY5QUUwMi8yV1FaUmRXMHoz MWpfSkV4cjg5eWV1TnRrQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD961DYHtpIVCUx0ptQhW7IDynKoTKK0PXKcknVPLd59cuKMeStn1HCFsWv5F BDCbWQLNnRej9bEcCu2vnyL//PvnCr3ldUppzj5G5Ubaba/wnGWl55cH8BqfKd7I PN5CbJi2LMvMWord4MNEs0IT6TN8Yqai0qkZEzTcNNKyxLJyhIvSF+S6FJZ/iysj rAu4EaBdBKXdOYhgv6Ct/Vv9to2H5b1Dd7APU41KpzATXDtK/fh9DJAq3jovOeJJ uTwe4YqBentjqV8sUeTFbbj3ZFfR7xVBC4hb1TYvloPwDpkN2M1T6iQoCTBXQNLR bzA8dpAo+QngIOPi3ZJCISnZTw== -----END CERTIFICATE-----Generated at Fri Jul 24 07:51:13 2026 by rpki-client