$ rpki-client -vvf rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft File: 2UVIdZZlg2gUctzDnfIkqtSon6o.mft (raw, json) Hash identifier: RMSOqY3Fk6U/F6wbu8YAcykjlZQiKayNLSdAaoY9hKE= Subject key identifier: 82:A1:4A:F3:FA:55:C9:66:16:4E:CC:3C:0C:C5:57:56:09:7A:5D:C8 Authority key identifier: D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA Certificate issuer: /CN=A91352D1/serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft Manifest number: 85 Signing time: Thu 23 Jul 2026 09:30:43 +0000 Manifest this update: Thu 23 Jul 2026 09:30:42 +0000 Manifest next update: Thu 30 Jul 2026 09:30:42 +0000 Files and hashes: 1: 2UVIdZZlg2gUctzDnfIkqtSon6o.crl (hash: S+GomwHfpmPkcRNnN7lrmAIo3qWnFq7jWsZ8wn3hS8M=) 2: 63AFC09EC10C11F08F1AFF7FC4F9AE02.roa (hash: qoQvhlZYfW1wf6kMzBPQtPbBr/Oim0Lh0bB1O4IEF6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91352D1, serialNumber=D9454875966583681472DCC39DF224AAD4A89FAA Validity Not Before: Jul 23 09:30:42 2026 GMT Not After : Jul 30 09:30:42 2026 GMT Subject: CN=6a61df42-4f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:5a:3d:a5:4e:5d:16:95:99:0f:06:31:b1: 0b:1d:8f:88:95:37:d5:54:60:85:c6:16:da:07:92: 24:2c:69:fb:0f:bb:f0:0a:53:a9:3e:3f:c9:bb:bc: 9c:3d:c5:07:9f:f1:05:f8:6a:71:1c:62:1f:55:04: 2f:05:31:f9:6a:c9:d1:00:5f:6d:b8:83:ce:44:89: db:c6:6d:c1:9c:5b:9d:05:2f:d5:c3:9b:39:09:3d: 35:d5:b5:04:11:fe:ea:42:ee:07:80:42:66:eb:e6: 21:74:c4:72:85:dd:35:d0:28:cd:b1:a8:ff:a3:e2: f2:54:2c:42:8b:59:0d:2a:73:f9:24:35:b5:f4:a3: 57:c8:95:fc:32:ca:dd:57:25:ae:95:12:7c:6e:76: 6c:1a:f5:a2:98:46:81:8a:46:6d:2d:2d:5f:dc:e4: d2:98:67:ab:96:53:85:90:e9:6e:81:d3:e1:74:44: 9e:8e:bb:5d:16:c7:73:15:ba:37:61:a2:a6:d8:79: fb:5b:09:75:65:c8:d4:b2:6d:19:63:63:c1:5d:a5: 7a:85:31:18:08:20:a5:56:7f:8e:5f:89:38:38:b3: d9:74:78:fc:8e:9b:7b:b2:a0:6f:a0:12:7c:99:f7: 86:eb:c3:ce:44:75:70:28:b5:dc:01:d6:c8:f7:e2: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A1:4A:F3:FA:55:C9:66:16:4E:CC:3C:0C:C5:57:56:09:7A:5D:C8 X509v3 Authority Key Identifier: keyid:D9:45:48:75:96:65:83:68:14:72:DC:C3:9D:F2:24:AA:D4:A8:9F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UVIdZZlg2gUctzDnfIkqtSon6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91352D1/DDF4226CC04111F0BC256F15C4F9AE02/2UVIdZZlg2gUctzDnfIkqtSon6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:55:ef:ba:64:6f:e0:4e:9e:19:d4:b9:06:08:52:28:33:80: 77:ee:ae:62:f7:20:ed:be:0b:36:d7:6d:a9:9b:62:a5:d8:f4: 48:ba:ef:85:f5:ce:7b:b0:ec:5e:2e:2f:80:1d:bd:5a:a0:3e: e2:b6:cd:0d:54:12:56:7d:88:fe:b9:63:2d:20:1f:44:bf:c3: ab:4f:bd:fa:29:58:a3:10:06:cc:38:9e:2c:01:a9:58:41:7b: 22:27:87:66:e8:70:a6:14:7e:22:5f:2b:a2:de:b2:4e:2f:b5: b3:27:d6:8f:cd:6d:32:48:4d:81:aa:4d:4c:f0:5b:1f:7d:9b: 6a:5a:bc:6f:9b:66:ca:45:a1:c3:3b:fb:68:90:34:0d:80:02: 30:5c:f0:18:7e:29:6f:c4:88:e5:41:de:66:4f:26:df:ef:c9: 8c:60:de:5c:d3:84:65:7d:a9:b0:95:ee:2b:c1:3e:3b:fe:7a: 8f:52:ec:2f:75:a8:42:97:56:f4:95:35:86:c4:bb:c9:80:b4: b5:12:86:c4:38:82:26:f7:09:20:b5:81:5b:98:0c:f9:f0:b0: ae:23:f7:b9:c5:0e:09:4d:62:46:db:88:cb:c8:2a:cc:ee:ff: f6:ea:74:13:3e:58:e6:82:0e:3f:ae:b4:a6:72:08:aa:62:a7: 8e:6d:db:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUyRDExMTAvBgNVBAUTKEQ5NDU0ODc1OTY2NTgzNjgxNDcyRENDMzlERjIyNEFB RDRBODlGQUEwHhcNMjYwNzIzMDkzMDQyWhcNMjYwNzMwMDkzMDQyWjAYMRYwFAYD VQQDEw02YTYxZGY0Mi00ZjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcFaPaVOXRaVmQ8GMbELHY+IlTfVVGCFxhbaB5IkLGn7D7vwClOpPj/Ju7yc PcUHn/EF+GpxHGIfVQQvBTH5asnRAF9tuIPORInbxm3BnFudBS/Vw5s5CT011bUE Ef7qQu4HgEJm6+YhdMRyhd010CjNsaj/o+LyVCxCi1kNKnP5JDW19KNXyJX8Msrd VyWulRJ8bnZsGvWimEaBikZtLS1f3OTSmGerllOFkOlugdPhdESejrtdFsdzFbo3 YaKm2Hn7Wwl1ZcjUsm0ZY2PBXaV6hTEYCCClVn+OX4k4OLPZdHj8jpt7sqBvoBJ8 mfeG68PORHVwKLXcAdbI9+KwgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIKhSvP6 VclmFk7MPAzFV1YJel3IMB8GA1UdIwQYMBaAFNlFSHWWZYNoFHLcw53yJKrUqJ+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTJEMS9EREY0MjI2Q0Mw NDExMUYwQkMyNTZGMTVDNEY5QUUwMi8yVVZJZFpabGcyZ1VjdHpEbmZJa3F0U29u Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVklkWlpsZzJnVWN0ekRuZklrcXRTb242by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTJEMS9EREY0MjI2Q0MwNDExMUYwQkMyNTZGMTVDNEY5QUUwMi8yVVZJZFpabGcy Z1VjdHpEbmZJa3F0U29uNm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPFXvumRv4E6eGdS5BghSKDOAd+6uYvcg7b4LNtdtqZtipdj0SLrvhfXOe7Ds Xi4vgB29WqA+4rbNDVQSVn2I/rljLSAfRL/Dq0+9+ilYoxAGzDieLAGpWEF7IieH ZuhwphR+Il8rot6yTi+1syfWj81tMkhNgapNTPBbH32balq8b5tmykWhwzv7aJA0 DYACMFzwGH4pb8SI5UHeZk8m3+/JjGDeXNOEZX2psJXuK8E+O/56j1LsL3WoQpdW 9JU1hsS7yYC0tRKGxDiCJvcJILWBW5gM+fCwriP3ucUOCU1iRtuIy8gqzO7/9up0 Ez5Y5oIOP660pnIIqmKnjm3bxw== -----END CERTIFICATE-----Generated at Fri Jul 24 00:57:55 2026 by rpki-client