$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json) Hash identifier: QcIAzCQ2T932s4UjW6rhw6fK8antZVYE3vlsMu5+L4w= Subject key identifier: B7:28:B5:BD:A1:7A:03:DB:7A:C0:3E:1E:6C:39:66:4C:FB:63:E3:DD Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Certificate serial: 059D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft Manifest number: 058F Signing time: Wed 22 Jul 2026 23:59:19 +0000 Manifest this update: Wed 22 Jul 2026 23:59:18 +0000 Manifest next update: Wed 29 Jul 2026 23:59:18 +0000 Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: LRtgjKx/DZcBtkHG/8rJBtmAFqx5c9fdU7Lh2r78Ytg=) 2: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: KV+oymiCQ8SI81Nw8YLk5LKF58JCB1ujUEL9Z05HDyg=) 3: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: 5f9ml2EUZAGAD2c6U/Z9/PW0M3VyIhaGC3vHQZLyq8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 23:59:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1437 (0x59d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Validity Not Before: Jul 22 23:59:18 2026 GMT Not After : Jul 29 23:59:18 2026 GMT Subject: CN=6a615957-24d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e4:17:8f:2d:a5:57:01:23:eb:18:5e:79:30: c3:9c:6d:bd:0c:70:35:d9:a8:df:20:cb:fe:ac:40: c7:77:ad:0a:9c:8c:f4:a7:de:48:88:78:86:8e:82: 37:a7:05:24:4e:47:2d:ac:7f:f5:44:a4:67:42:51: 1b:8a:8e:02:33:7b:21:8b:57:ce:9e:42:5f:8b:8b: 5f:f2:83:4d:61:2a:ba:0b:81:6b:bd:a0:c9:e1:5a: 46:18:3e:82:84:e5:14:9d:ac:a6:7e:ab:4c:1a:e7: 22:42:04:5b:f1:4e:60:74:78:fa:22:89:f2:8e:e1: b4:d7:c1:37:cf:e7:71:f5:ba:d0:7a:51:bc:c7:5c: 17:cf:03:82:ae:ae:0d:6f:a4:7c:4f:87:7d:15:71: 17:e5:cb:fe:86:bb:cf:1e:77:e9:ff:1e:b6:3a:a9: f9:71:b3:c4:45:f4:f3:29:99:fe:11:04:c4:ec:60: fc:c5:c0:fa:5d:29:2b:05:5a:31:19:5a:df:6c:29: c9:97:3b:6a:99:28:c4:b0:05:f9:66:94:ec:50:d6: e3:79:e2:b4:ee:0f:10:72:e1:47:cc:60:4e:b1:9a: d4:15:e7:a2:c0:5a:a4:38:7c:36:4b:33:f1:57:ce: 08:03:9c:73:05:43:70:26:f6:98:78:f4:54:fa:ea: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:28:B5:BD:A1:7A:03:DB:7A:C0:3E:1E:6C:39:66:4C:FB:63:E3:DD X509v3 Authority Key Identifier: keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:9c:16:87:5d:46:03:d0:fb:78:dc:73:2b:7f:de:52:86:7b: 77:32:6d:0a:a8:ca:18:b9:db:06:57:5f:bc:4d:c0:3f:9e:97: cf:06:a6:e1:f2:f6:f1:63:65:bc:27:d7:fe:88:80:a0:1c:6c: 20:6c:08:b6:a7:37:0d:b2:b9:12:ac:90:c7:1e:71:77:e0:80: da:00:c5:8d:7c:34:82:e7:20:dc:9f:d1:ca:fb:9d:be:dd:7f: ee:3f:bb:4d:c4:dc:8b:d9:62:91:9b:59:b0:32:fd:7f:3f:de: 28:3c:1b:93:82:0c:59:cf:85:38:2d:41:ab:e9:80:5e:91:dd: 2e:72:48:17:5b:52:fc:2d:28:bb:62:1e:8a:31:1d:bb:93:d1: da:d8:e8:cc:0d:39:68:8f:2a:39:38:6a:12:f2:d6:57:51:0c: d4:29:68:3a:b9:67:57:4b:a3:2d:ef:15:c3:89:1c:43:ad:12: e8:2c:1f:b5:58:9d:94:d9:b0:5f:cb:69:b1:b0:e7:8b:c2:45: de:ae:e9:a3:7d:da:58:e2:d8:ba:a9:59:5f:dd:61:a5:33:1e: bf:1b:c6:c4:aa:f4:31:74:da:d2:58:08:16:d8:9b:20:ad:6c: 99:30:5c:90:91:05:e6:ed:76:68:c2:b5:00:4f:69:dd:68:f1: b9:13:1e:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDRUYxMTAvBgNVBAUTKEQ5NDVCNjBGMDA5Q0RGMTU1QzQyOUQ0MDg1QUVCNkNG RTA2QkNFMDAwHhcNMjYwNzIyMjM1OTE4WhcNMjYwNzI5MjM1OTE4WjAYMRYwFAYD VQQDEw02YTYxNTk1Ny0yNGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uQXjy2lVwEj6xheeTDDnG29DHA12ajfIMv+rEDHd60KnIz0p95IiHiGjoI3 pwUkTkctrH/1RKRnQlEbio4CM3shi1fOnkJfi4tf8oNNYSq6C4FrvaDJ4VpGGD6C hOUUnaymfqtMGuciQgRb8U5gdHj6IonyjuG018E3z+dx9brQelG8x1wXzwOCrq4N b6R8T4d9FXEX5cv+hrvPHnfp/x62Oqn5cbPERfTzKZn+EQTE7GD8xcD6XSkrBVox GVrfbCnJlztqmSjEsAX5ZpTsUNbjeeK07g8QcuFHzGBOsZrUFeeiwFqkOHw2SzPx V84IA5xzBUNwJvaYePRU+uoTqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLcotb2h egPbesA+Hmw5Zkz7Y+PdMB8GA1UdIwQYMBaAFNlFtg8AnN8VXEKdQIWuts/ga84A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNFRi9DNDAxOUQyNDJD MTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4VmNRcDFBaGE2MnotQnJ6 Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVzJEd0NjM3hWY1FwMUFoYTYyei1CcnpnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNFRi9DNDAxOUQyNDJDMTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4 VmNRcDFBaGE2MnotQnJ6Z0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABpwWh11GA9D7eNxzK3/eUoZ7dzJtCqjKGLnbBldfvE3AP56Xzwam4fL28WNl vCfX/oiAoBxsIGwItqc3DbK5EqyQxx5xd+CA2gDFjXw0gucg3J/Ryvudvt1/7j+7 TcTci9likZtZsDL9fz/eKDwbk4IMWc+FOC1Bq+mAXpHdLnJIF1tS/C0ou2IeijEd u5PR2tjozA05aI8qOThqEvLWV1EM1CloOrlnV0ujLe8Vw4kcQ60S6CwftVidlNmw X8tpsbDni8JF3q7po33aWOLYuqlZX91hpTMevxvGxKr0MXTa0lgIFtibIK1smTBc kJEF5u12aMK1AE9p3WjxuRMeCQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:35:40 2026 by rpki-client