$ rpki-client -vvf rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft File: 2KPIZydtR_ptDvLogh8Ps9MZcb8.mft (raw, json) Hash identifier: 3SLbTnxf7yEPrPjQ4WKwUNpAsbjRMHx3TLkDkmhfYx0= Subject key identifier: 54:2C:9B:32:5D:D1:A4:37:88:2D:52:E5:0D:1D:46:B6:A1:56:70:68 Authority key identifier: D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF Certificate issuer: /CN=A91278E5/serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft Manifest number: 42 Signing time: Thu 23 Jul 2026 10:27:26 +0000 Manifest this update: Thu 23 Jul 2026 10:27:25 +0000 Manifest next update: Thu 30 Jul 2026 10:27:25 +0000 Files and hashes: 1: 2KPIZydtR_ptDvLogh8Ps9MZcb8.crl (hash: TOanJx3CI0wdyO+f034zoSoKCXcAE3Ad81kFyIXF990=) 2: 1C7AB64E21BE11F191732FC01B3D8C67.roa (hash: VkCR5thgem73gdzuOjRPxScIE5IryV7vWPHF+kNveak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91278E5, serialNumber=D8A3C867276D47FA6D0EF2E8821F0FB3D31971BF Validity Not Before: Jul 23 10:27:25 2026 GMT Not After : Jul 30 10:27:25 2026 GMT Subject: CN=6a61ec8e-b3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:9f:bc:c4:56:8e:73:0e:3a:91:6d:ce:68: f4:09:86:a3:81:9b:42:43:9f:64:60:38:06:fe:f1: ce:cb:7d:66:e4:4a:46:73:1d:c4:7a:7b:fd:e4:b2: ea:6a:b1:fe:a1:f7:91:a6:14:35:e8:9a:3c:5e:89: 42:87:bd:1e:fc:78:05:bf:cc:b7:95:99:87:2d:67: 2c:5e:d7:22:20:d2:1b:e8:70:a3:1e:5a:e7:b2:4d: f2:2d:ca:49:46:5e:b8:a4:fa:32:a5:5d:14:d2:eb: fc:8c:b2:e8:c8:95:d8:f6:64:bc:b8:4f:bc:4f:8a: 31:ea:76:e4:82:8c:04:fb:52:cd:44:4f:32:b2:87: 9a:87:ca:9b:0a:d8:b1:d4:10:b7:ef:7f:e0:55:dd: f5:57:29:d7:25:a4:b0:42:33:66:54:c5:7c:a9:bf: 56:21:44:c3:d0:94:f3:4a:67:2b:79:0b:e5:80:5d: 17:dd:5e:8f:c7:6f:74:85:92:65:84:ce:6c:97:31: 6d:04:e4:cd:ea:45:45:7a:93:7d:42:5a:59:6d:73: eb:0f:da:e2:01:43:f3:0a:51:af:d6:b2:83:16:bb: 61:98:5c:6d:00:d1:1b:9b:fe:92:1f:19:d4:99:1b: 70:fa:60:bb:63:0b:99:71:7b:30:22:be:84:3a:86: 4e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2C:9B:32:5D:D1:A4:37:88:2D:52:E5:0D:1D:46:B6:A1:56:70:68 X509v3 Authority Key Identifier: keyid:D8:A3:C8:67:27:6D:47:FA:6D:0E:F2:E8:82:1F:0F:B3:D3:19:71:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2KPIZydtR_ptDvLogh8Ps9MZcb8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278E5/CB2F8EA421BD11F1813164BE1B3D8C67/2KPIZydtR_ptDvLogh8Ps9MZcb8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7d:ac:63:af:6e:c1:8e:8b:87:7a:46:17:95:e0:e7:2a:d0: 9f:ee:88:cb:d2:36:ce:30:71:28:cc:68:31:75:83:dd:45:3c: e9:37:66:0c:7f:ff:f5:8d:77:44:87:c1:bc:84:e4:c8:99:83: 66:87:10:11:ae:ca:c0:ec:2d:99:63:4e:e5:80:ce:56:31:bd: 88:24:50:5b:a8:ad:ed:cc:a8:85:08:7e:58:49:08:95:da:49: 78:4b:7a:11:ed:1c:c5:25:42:55:b8:63:bf:39:78:4b:43:75: 86:99:2a:82:b2:99:07:46:e6:4e:01:e8:e8:80:ca:eb:db:58: df:b1:a3:31:78:29:21:90:ad:d4:cb:b0:02:44:3f:b0:da:b0: 6f:b7:da:a6:9a:04:18:72:dd:d0:20:54:dd:c6:ad:8e:fc:ac: f3:a1:02:38:02:f3:d0:21:57:ab:e2:75:de:27:9a:b1:3b:47: c9:26:ce:af:35:1a:d6:ad:2c:72:4d:d9:71:5a:4e:e9:d4:b2: 02:b3:79:cb:e9:1b:54:65:ec:2f:b6:63:60:85:78:2d:b1:98: ff:76:7b:51:35:dd:f5:e6:98:f0:9f:68:8f:b8:ec:f2:82:8c: 1e:80:08:64:d4:b4:1e:02:66:e5:61:e6:fa:f1:b1:c0:ea:f0: b3:d8:41:b6 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NzhFNTExMC8GA1UEBRMoRDhBM0M4NjcyNzZENDdGQTZEMEVGMkU4ODIxRjBGQjNE MzE5NzFCRjAeFw0yNjA3MjMxMDI3MjVaFw0yNjA3MzAxMDI3MjVaMBgxFjAUBgNV BAMTDTZhNjFlYzhlLWIzZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDG5+8xFaOcw46kW3OaPQJhqOBm0JDn2RgOAb+8c7LfWbkSkZzHcR6e/3ksupq sf6h95GmFDXomjxeiUKHvR78eAW/zLeVmYctZyxe1yIg0hvocKMeWueyTfItyklG Xrik+jKlXRTS6/yMsujIldj2ZLy4T7xPijHqduSCjAT7Us1ETzKyh5qHypsK2LHU ELfvf+BV3fVXKdclpLBCM2ZUxXypv1YhRMPQlPNKZyt5C+WAXRfdXo/Hb3SFkmWE zmyXMW0E5M3qRUV6k31CWlltc+sP2uIBQ/MKUa/WsoMWu2GYXG0A0Rub/pIfGdSZ G3D6YLtjC5lxezAivoQ6hk7JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUVCybMl3R pDeILVLlDR1GtqFWcGgwHwYDVR0jBBgwFoAU2KPIZydtR/ptDvLogh8Ps9MZcb8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3OEU1L0NCMkY4RUE0MjFC RDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9wdER2TG9naDhQczlNWmNi OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMktQSVp5ZHRSX3B0RHZMb2doOFBzOU1aY2I4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3 OEU1L0NCMkY4RUE0MjFCRDExRjE4MTMxNjRCRTFCM0Q4QzY3LzJLUElaeWR0Ul9w dER2TG9naDhQczlNWmNiOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA/faxjr27BjouHekYXleDnKtCf7ojL0jbOMHEozGgxdYPdRTzpN2YMf//1jXdE h8G8hOTImYNmhxARrsrA7C2ZY07lgM5WMb2IJFBbqK3tzKiFCH5YSQiV2kl4S3oR 7RzFJUJVuGO/OXhLQ3WGmSqCspkHRuZOAejogMrr21jfsaMxeCkhkK3Uy7ACRD+w 2rBvt9qmmgQYct3QIFTdxq2O/KzzoQI4AvPQIVer4nXeJ5qxO0fJJs6vNRrWrSxy TdlxWk7p1LICs3nL6RtUZewvtmNghXgtsZj/dntRNd315pjwn2iPuOzygowegAhk 1LQeAmblYeb68bHA6vCz2EG2 -----END CERTIFICATE-----Generated at Fri Jul 24 03:13:28 2026 by rpki-client