$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json) Hash identifier: z1LiYXlHl25PJQMVVEw6Rup7ilgtKDYcrn5ef0YHYog= Subject key identifier: 0C:FF:B7:A3:AE:4D:5A:F5:A8:80:28:3A:6E:62:BE:15:62:82:64:BB Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft Manifest number: 0133 Signing time: Thu 23 Jul 2026 07:15:46 +0000 Manifest this update: Thu 23 Jul 2026 07:15:45 +0000 Manifest next update: Thu 30 Jul 2026 07:15:45 +0000 Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: 3eVTy6bmYKsk8xdNRPZ2wWcIhezNVOajlFeSBqoUUD4=) 2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: zIvaOMrJj6tNY8+g0C9uE13uNUrzvq9Y4fdiG+e+9uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Validity Not Before: Jul 23 07:15:45 2026 GMT Not After : Jul 30 07:15:45 2026 GMT Subject: CN=6a61bfa2-2f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:25:1d:fd:34:bb:08:5d:8c:cc:de:43:c9:9f: f4:37:5d:00:28:35:fb:3d:46:8d:a4:21:64:70:6a: 77:31:d0:71:5a:3b:d6:2d:76:56:94:87:db:d5:33: 09:4f:19:af:30:5d:dc:c1:ff:22:87:de:de:2f:fc: 13:11:90:57:3b:02:08:69:3d:e4:2e:fb:35:83:cb: c8:cc:1e:a1:5b:52:c6:51:9c:db:f2:48:fe:29:c5: 8c:81:c0:80:d7:73:e6:e5:ab:b8:6d:39:37:03:5a: c7:f4:b9:f4:45:74:5c:9a:42:9c:23:dd:7a:d2:66: 7b:e8:30:06:17:96:57:18:80:a4:19:26:05:91:72: 10:9d:47:00:f5:63:77:9f:87:45:bc:91:a0:03:23: ab:ae:3b:aa:ce:55:42:3c:3c:53:7d:7c:cb:5f:b5: 6d:d8:d6:31:d8:89:34:48:5a:77:66:cd:97:e8:f5: bf:c7:8f:14:c1:45:dc:82:aa:0a:4a:74:b8:fc:84: 26:56:6d:2d:c5:47:da:0a:e7:4a:31:37:cc:c8:9a: a0:2e:56:b7:aa:20:04:91:07:84:60:56:bc:67:82: 71:94:ce:b7:b2:39:f6:95:dc:b4:a8:c2:36:ff:44: b2:62:80:a8:6c:2f:c7:fd:47:3c:29:a3:8c:32:e5: e3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FF:B7:A3:AE:4D:5A:F5:A8:80:28:3A:6E:62:BE:15:62:82:64:BB X509v3 Authority Key Identifier: keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:7c:8e:f2:b6:e4:b6:c4:44:33:80:f4:99:51:bf:35:d6:d6: 53:b6:f2:e1:16:a0:17:19:8b:be:4f:04:a3:a0:d0:c4:b0:39: 40:30:ab:80:92:b3:3d:e7:18:4e:24:3a:14:77:b3:80:23:1f: 5b:02:6c:c9:1f:55:88:ed:19:df:03:14:bd:2f:0a:98:1f:e9: 97:93:97:ab:3e:bc:1d:78:7c:f7:a7:ee:0c:1f:01:fe:d0:ad: 62:f2:e5:89:c8:22:28:d0:d8:b2:97:f9:c1:70:56:24:dd:e0: 5d:e1:02:d6:2a:f7:5b:2f:a1:b9:fa:69:25:c6:c7:5b:da:6f: ee:c0:de:f4:d9:38:be:37:30:4e:d0:43:7a:54:a1:74:75:83: 7d:7d:4f:52:08:29:e4:f8:2d:ea:bb:77:39:63:8a:9c:51:78: 3c:ec:ca:a0:e5:91:89:85:8f:32:4b:47:29:39:a9:4f:9c:b3: 3d:4f:47:6b:75:ba:ed:d8:9f:15:95:b6:7c:5b:41:92:84:71: 8d:dc:e8:b9:99:d4:c1:f9:c6:56:be:53:f0:57:ea:6c:50:cc: 24:a6:31:20:4c:98:e7:f7:12:91:ef:fe:bc:fa:dd:ae:d8:85: 51:dd:90:c1:85:32:25:e7:74:4f:5e:d0:17:1f:08:a2:f8:b7: 8c:29:06:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZBOTYxMTAvBgNVBAUTKERBRUZBNTQzNThGNEJDQzBEODQ3Q0M2REM5Q0FGNzhC QzVFMDk5NkUwHhcNMjYwNzIzMDcxNTQ1WhcNMjYwNzMwMDcxNTQ1WjAYMRYwFAYD VQQDEw02YTYxYmZhMi0yZjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6SUd/TS7CF2MzN5DyZ/0N10AKDX7PUaNpCFkcGp3MdBxWjvWLXZWlIfb1TMJ TxmvMF3cwf8ih97eL/wTEZBXOwIIaT3kLvs1g8vIzB6hW1LGUZzb8kj+KcWMgcCA 13Pm5au4bTk3A1rH9Ln0RXRcmkKcI9160mZ76DAGF5ZXGICkGSYFkXIQnUcA9WN3 n4dFvJGgAyOrrjuqzlVCPDxTfXzLX7Vt2NYx2Ik0SFp3Zs2X6PW/x48UwUXcgqoK SnS4/IQmVm0txUfaCudKMTfMyJqgLla3qiAEkQeEYFa8Z4JxlM63sjn2ldy0qMI2 /0SyYoCobC/H/Uc8KaOMMuXjowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAz/t6Ou TVr1qIAoOm5ivhVigmS7MB8GA1UdIwQYMBaAFNrvpUNY9LzA2EfMbcnK94vF4Jlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkE5Ni84QTM1MDkwQ0I1 RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZNRFlSOHh0eWNyM2k4WGdt VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ1LWxRMWowdk1EWVI4eHR5Y3IzaThYZ21XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkE5Ni84QTM1MDkwQ0I1RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZN RFlSOHh0eWNyM2k4WGdtVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV3yO8rbktsREM4D0mVG/NdbWU7by4RagFxmLvk8Eo6DQxLA5QDCrgJKzPecY TiQ6FHezgCMfWwJsyR9ViO0Z3wMUvS8KmB/pl5OXqz68HXh896fuDB8B/tCtYvLl icgiKNDYspf5wXBWJN3gXeEC1ir3Wy+hufppJcbHW9pv7sDe9Nk4vjcwTtBDelSh dHWDfX1PUggp5Pgt6rt3OWOKnFF4POzKoOWRiYWPMktHKTmpT5yzPU9Ha3W67dif FZW2fFtBkoRxjdzouZnUwfnGVr5T8FfqbFDMJKYxIEyY5/cSke/+vPrdrtiFUd2Q wYUyJed0T17QFx8Iovi3jCkG1A== -----END CERTIFICATE-----Generated at Fri Jul 24 18:42:24 2026 by rpki-client