$ rpki-client -vvf rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft File: 2QhrDfk0LcKwkbrobLd5_GJZvXs.mft (raw, json) Hash identifier: /7PkJCu0SLCKVVQlYle+yXr+x8ds9tcTb3TfoRjh8Dk= Subject key identifier: CE:35:04:57:C2:9E:9A:23:8E:11:EE:04:A9:B8:54:50:95:AE:25:01 Authority key identifier: D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B Certificate issuer: /CN=A914F2EC/serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B Certificate serial: 3572 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft Manifest number: 3567 Signing time: Wed 22 Jul 2026 15:00:56 +0000 Manifest this update: Wed 22 Jul 2026 15:00:56 +0000 Manifest next update: Wed 29 Jul 2026 15:00:56 +0000 Files and hashes: 1: 2QhrDfk0LcKwkbrobLd5_GJZvXs.crl (hash: RQzt2c5bAbe1NmjU30/PPDwfqcdiZtZB5tY1yiokrns=) 2: 588BD7269A1211E8B97A623AC4F9AE02.roa (hash: WIHf/g57A92kBt+M1v/6HUGwLpZi39D8KAuOlAkvShg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13682 (0x3572) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F2EC, serialNumber=D9086B0DF9342DC2B091BAE86CB779FC6259BD7B Validity Not Before: Jul 22 15:00:56 2026 GMT Not After : Jul 29 15:00:56 2026 GMT Subject: CN=6a60db28-3576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:38:8c:a0:5d:71:86:0f:99:3f:20:81:21:43: e9:19:cb:69:b0:07:ba:0c:45:e0:b4:9d:bb:f3:ad: ff:1d:84:08:74:ef:8c:53:ed:4e:06:2c:0b:c4:74: bf:60:6c:8e:74:ca:31:6f:62:08:05:13:50:07:c8: 63:79:e1:b8:4d:d6:05:35:43:92:68:75:04:80:02: 05:d3:88:41:cf:2a:85:4f:47:88:da:f3:fe:a6:4f: fc:26:17:c2:37:f7:50:fe:08:c3:3c:a8:cb:82:fb: 10:2e:37:6a:79:78:37:32:23:0a:b9:55:b7:1f:9e: 82:21:60:35:0a:a7:eb:78:f8:bd:b7:81:e4:4e:92: c9:cb:11:fa:cd:ed:b6:2a:9c:d4:c7:01:75:27:e7: 17:03:50:8a:69:30:fc:77:0f:54:9e:87:90:79:e9: 39:ce:4a:c7:e9:3c:50:df:4a:ad:b5:35:7d:4c:c5: ca:47:97:0b:4e:f9:85:15:24:1c:df:d4:63:0c:06: 83:42:98:f7:30:08:de:20:5f:68:7f:d1:03:32:41: f2:83:a6:d9:ad:39:1a:3c:b8:d6:fb:65:8f:df:80: 08:d3:de:fd:5a:48:d4:fa:39:74:4e:68:03:dd:8f: fa:4b:b7:f5:22:6f:1c:3f:3e:23:ce:26:c0:f4:3d: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:35:04:57:C2:9E:9A:23:8E:11:EE:04:A9:B8:54:50:95:AE:25:01 X509v3 Authority Key Identifier: keyid:D9:08:6B:0D:F9:34:2D:C2:B0:91:BA:E8:6C:B7:79:FC:62:59:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhrDfk0LcKwkbrobLd5_GJZvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F2EC/D58A226C1D9C11E29BC3B28B08B02CD2/2QhrDfk0LcKwkbrobLd5_GJZvXs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:33:b0:2d:ec:4d:dc:54:48:8a:f0:3d:d3:90:0e:36:10:c0: 3c:25:60:61:ee:88:9e:2c:08:e8:c3:5f:a4:94:8e:5e:1a:d2: 48:f6:61:d4:80:07:4d:5a:e0:8c:38:e9:a6:73:66:75:77:2f: c6:bf:1f:17:d2:94:8f:11:69:5d:ef:fd:00:e1:29:e9:a4:f9: 32:61:38:af:22:dd:82:52:b8:e7:29:5b:f9:30:fa:77:b8:ef: fe:f3:4e:bd:cf:fa:e4:39:03:27:61:b6:85:12:1b:aa:99:9e: 8e:36:77:87:7c:1d:58:94:f4:27:63:e5:5c:71:34:8d:da:9e: 16:d5:fb:d8:61:2f:9a:0c:15:17:53:e7:1e:95:12:09:ef:35: 58:f3:de:4c:74:5b:bc:bc:5a:3c:b4:bd:37:c8:d0:fb:22:f6: 1f:26:bf:0b:74:e9:66:a9:32:80:ab:aa:68:77:3a:96:12:5c: ba:f3:7c:39:70:14:0d:a9:09:3d:ed:16:d8:54:93:48:cd:75: 73:f0:fb:7f:75:b6:75:aa:b2:b2:6b:9b:d4:49:df:0d:eb:8d: 1d:ca:4b:c2:d7:13:e6:85:62:41:fb:2b:e2:0f:84:fb:be:39: aa:69:ff:4d:20:45:16:9c:d1:be:3b:43:19:d4:61:bc:91:4b: 3d:72:e1:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEYyRUMxMTAvBgNVBAUTKEQ5MDg2QjBERjkzNDJEQzJCMDkxQkFFODZDQjc3OUZD NjI1OUJEN0IwHhcNMjYwNzIyMTUwMDU2WhcNMjYwNzI5MTUwMDU2WjAYMRYwFAYD VQQDEw02YTYwZGIyOC0zNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkziMoF1xhg+ZPyCBIUPpGctpsAe6DEXgtJ27863/HYQIdO+MU+1OBiwLxHS/ YGyOdMoxb2IIBRNQB8hjeeG4TdYFNUOSaHUEgAIF04hBzyqFT0eI2vP+pk/8JhfC N/dQ/gjDPKjLgvsQLjdqeXg3MiMKuVW3H56CIWA1CqfrePi9t4HkTpLJyxH6ze22 KpzUxwF1J+cXA1CKaTD8dw9UnoeQeek5zkrH6TxQ30qttTV9TMXKR5cLTvmFFSQc 39RjDAaDQpj3MAjeIF9of9EDMkHyg6bZrTkaPLjW+2WP34AI0979WkjU+jl0TmgD 3Y/6S7f1Im8cPz4jzibA9D11qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM41BFfC npojjhHuBKm4VFCVriUBMB8GA1UdIwQYMBaAFNkIaw35NC3CsJG66Gy3efxiWb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjJFQy9ENThBMjI2QzFE OUMxMUUyOUJDM0IyOEIwOEIwMkNEMi8yUWhyRGZrMExjS3drYnJvYkxkNV9HSlp2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaHJEZmswTGNLd2ticm9iTGQ1X0dKWnZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjJFQy9ENThBMjI2QzFEOUMxMUUyOUJDM0IyOEIwOEIwMkNEMi8yUWhyRGZrMExj S3drYnJvYkxkNV9HSlp2WHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARzOwLexN3FRIivA905AONhDAPCVgYe6IniwI6MNfpJSOXhrSSPZh1IAHTVrg jDjppnNmdXcvxr8fF9KUjxFpXe/9AOEp6aT5MmE4ryLdglK45ylb+TD6d7jv/vNO vc/65DkDJ2G2hRIbqpmejjZ3h3wdWJT0J2PlXHE0jdqeFtX72GEvmgwVF1PnHpUS Ce81WPPeTHRbvLxaPLS9N8jQ+yL2Hya/C3TpZqkygKuqaHc6lhJcuvN8OXAUDakJ Pe0W2FSTSM11c/D7f3W2daqysmub1EnfDeuNHcpLwtcT5oViQfsr4g+E+745qmn/ TSBFFpzRvjtDGdRhvJFLPXLhSA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:03:12 2026 by rpki-client