$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft File: nr2hI9nugwlDBaEYDCoIBX_lQGo.mft (raw, json) Hash identifier: /v4s1llpEQhGfLsD+id8PT2omUTteVHaL/HqLReXDe0= Subject key identifier: DD:AC:0D:68:A8:4D:AC:9C:1D:DB:AC:D0:E1:FF:FA:FB:E8:57:E4:16 Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft Manifest number: C2 Signing time: Thu 23 Jul 2026 08:50:06 +0000 Manifest this update: Thu 23 Jul 2026 08:50:05 +0000 Manifest next update: Thu 30 Jul 2026 08:50:05 +0000 Files and hashes: 1: nr2hI9nugwlDBaEYDCoIBX_lQGo.crl (hash: OMH6xjFrDlyFa6vd/CTOCRPxIdWw304s9pVkWPFGY4I=) 2: 8C538C5AEFCF11F0889DE39E746F56BC.roa (hash: eiSYQZ4JbJxsufS9RcJajhzup1MJX6NMX/+qc2RSIq8=) 3: 224FBC52EFCF11F0A018F59D746F56BC.roa (hash: l6zP7eAxKoViI6F3M9uDYfZY33CWARrIielkD1703l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Jul 23 08:50:05 2026 GMT Not After : Jul 30 08:50:05 2026 GMT Subject: CN=6a61d5be-cec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:1f:b6:d6:21:dc:97:51:39:da:9f:65:a6: 97:43:75:5c:70:4a:f2:8f:13:20:25:25:c6:1a:14: 01:7b:5a:64:66:55:d1:f3:b1:b1:ee:89:63:06:5b: bd:48:f9:38:94:7b:a3:58:14:aa:2e:be:8a:66:d6: f5:c5:f7:9c:aa:a6:dd:af:33:25:19:05:cf:9c:28: cc:e3:19:7f:58:7d:21:0e:e9:f4:29:17:28:f1:f8: 68:88:ec:74:95:db:f2:c2:27:0a:22:83:e9:0d:a3: c1:07:84:7b:7b:11:78:44:12:02:03:5a:11:70:7e: e6:31:79:6e:9d:1e:87:af:b1:0b:81:a7:d5:22:55: e4:6e:ab:ac:38:79:6d:2b:c9:5e:24:06:d4:d0:98: 3d:c1:5a:35:7a:34:37:c0:df:33:a8:3f:6a:89:91: 1d:f4:5a:81:f1:6f:6e:81:15:c3:1e:6b:22:f7:ee: 86:31:b8:94:c5:1f:ca:cb:39:59:65:11:e6:a8:43: b3:9b:e5:a9:84:5d:e6:30:89:08:67:f3:8e:16:f8: c8:9f:fb:54:1c:13:c9:5d:a5:0e:ad:97:9e:50:1b: 9c:c0:a8:21:7b:40:96:d5:39:b4:e1:b5:07:4f:97: e9:d7:2b:ef:0d:ce:a8:92:42:e3:24:c1:a2:87:6a: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AC:0D:68:A8:4D:AC:9C:1D:DB:AC:D0:E1:FF:FA:FB:E8:57:E4:16 X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:fd:a0:71:5e:fe:f3:24:34:35:bd:8c:9a:c3:db:ab:cf:93: 7d:b6:64:77:c4:b3:35:6d:af:d7:9f:91:96:d7:41:63:7d:94: 97:bd:fb:35:f9:4c:5c:ca:a3:50:cd:81:e6:ff:9a:9b:ce:0b: 84:65:97:f3:70:d3:c9:a7:00:19:81:8f:c9:69:e5:98:af:52: fe:ab:f6:09:19:df:e8:28:f9:63:72:1f:41:c7:c8:0d:9a:30: 0f:de:f8:22:d8:6c:ac:9e:bf:93:1a:7b:12:bc:a4:9e:97:1f: bc:df:98:d8:d4:90:7a:45:3c:db:db:b8:22:57:d9:99:4a:ec: 6d:57:96:7a:3a:3d:31:13:d6:9c:53:9e:75:0d:d0:aa:cd:e6: 15:02:ec:4b:64:9d:74:1b:68:47:06:61:3d:2e:42:40:73:4c: b5:48:68:1f:0f:ce:42:77:06:65:d0:37:df:c2:df:7f:2a:36: 02:de:11:ef:89:ba:8e:15:44:ad:7f:53:de:f4:8e:47:be:97: 70:2b:6d:51:1f:8c:b9:cd:b1:0e:78:4f:c2:d7:04:38:02:89: f4:91:3f:c0:bf:96:88:a3:77:28:5d:97:00:09:a8:d3:94:9a: c2:8f:96:47:1a:f6:e3:57:97:91:73:c6:6f:33:36:97:47:77: 60:fc:e5:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI1QzMxMTAvBgNVBAUTKDlFQkRBMTIzRDlFRTgzMDk0MzA1QTExODBDMkEwODA1 N0ZFNTQwNkEwHhcNMjYwNzIzMDg1MDA1WhcNMjYwNzMwMDg1MDA1WjAYMRYwFAYD VQQDEw02YTYxZDViZS1jZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxAfttYh3JdROdqfZaaXQ3VccEryjxMgJSXGGhQBe1pkZlXR87Gx7oljBlu9 SPk4lHujWBSqLr6KZtb1xfecqqbdrzMlGQXPnCjM4xl/WH0hDun0KRco8fhoiOx0 ldvywicKIoPpDaPBB4R7exF4RBICA1oRcH7mMXlunR6Hr7ELgafVIlXkbqusOHlt K8leJAbU0Jg9wVo1ejQ3wN8zqD9qiZEd9FqB8W9ugRXDHmsi9+6GMbiUxR/KyzlZ ZRHmqEOzm+WphF3mMIkIZ/OOFvjIn/tUHBPJXaUOrZeeUBucwKghe0CW1Tm04bUH T5fp1yvvDc6okkLjJMGih2qDEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN2sDWio TaycHdus0OH/+vvoV+QWMB8GA1UdIwQYMBaAFJ69oSPZ7oMJQwWhGAwqCAV/5UBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjVDMy8yMzI2QzYzRTY2 MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3bERCYUVZRENvSUJYX2xR R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9ucjJoSTludWd3 bERCYUVZRENvSUJYX2xRR28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAof2gcV7+8yQ0Nb2MmsPbq8+TfbZkd8SzNW2v15+RltdBY32Ul737NflMXMqj UM2B5v+am84LhGWX83DTyacAGYGPyWnlmK9S/qv2CRnf6Cj5Y3IfQcfIDZowD974 IthsrJ6/kxp7EryknpcfvN+Y2NSQekU829u4IlfZmUrsbVeWejo9MRPWnFOedQ3Q qs3mFQLsS2SddBtoRwZhPS5CQHNMtUhoHw/OQncGZdA338Lffyo2At4R74m6jhVE rX9T3vSOR76XcCttUR+Muc2xDnhPwtcEOAKJ9JE/wL+WiKN3KF2XAAmo05Sawo+W Rxr241eXkXPGbzM2l0d3YPzltQ== -----END CERTIFICATE-----Generated at Fri Jul 24 05:39:47 2026 by rpki-client