$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: srnNiK5vTwBc7YkV3TXqB/KNp3DLtiIJkIZplH0xo1Q= Subject key identifier: 6F:25:F4:F6:BB:64:0B:89:D5:D7:28:E0:26:9B:72:63:A2:D2:E4:07 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2B1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2AEB Signing time: Wed 22 Jul 2026 15:38:46 +0000 Manifest this update: Wed 22 Jul 2026 15:38:45 +0000 Manifest next update: Wed 29 Jul 2026 15:38:45 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: hjB5fzkV/dq9aOPYRkndSOcNIHzRBCGkqCHukp6AKzQ=) 2: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: URyChyU6OU774yRjtt526A9274JruEe4SeiRssUYwtQ=) 3: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: mi5Z8QiyFyePXfXFb5bmVuyq1rksFrDBMyBn1iuDnTA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11036 (0x2b1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Jul 22 15:38:45 2026 GMT Not After : Jul 29 15:38:45 2026 GMT Subject: CN=6a60e406-78f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:39:89:7f:d2:bd:bb:82:cb:92:e9:b7:02:b3: 9c:b7:f8:22:f5:24:41:08:56:05:64:78:cd:8b:1e: 01:ed:e4:a9:3a:2c:34:37:19:cd:23:a8:9c:ee:ad: 53:e9:f9:f9:18:9c:e4:c8:61:6b:bd:9c:5f:9e:c3: 26:d7:af:3d:bb:00:70:0a:91:44:b7:0d:99:68:f3: d3:f2:d5:11:fc:0a:30:da:60:d7:d9:54:63:20:9f: 3e:df:c6:58:b8:e4:d6:76:44:73:2e:de:97:d6:5d: 6f:ac:4f:30:61:97:94:73:2d:70:df:eb:41:c1:c5: 74:f6:4b:2b:0b:3e:3a:78:78:14:b2:f0:45:4b:0d: 4b:fe:f6:6b:c6:db:78:6f:4c:53:78:e7:36:97:83: d6:10:94:0e:bf:e0:8d:56:29:c8:73:96:cd:ce:54: d9:83:ab:c1:97:0c:93:af:42:07:60:21:05:da:07: 53:6c:1a:6e:30:09:e0:6f:0f:cc:76:e7:e7:3e:b5: 56:d6:e0:2b:d9:7d:b5:b4:13:57:c6:89:94:f1:ee: ed:aa:0c:5a:89:fd:9a:02:c1:35:38:64:8e:b6:1d: f8:8f:36:58:25:78:e3:f7:7d:50:8f:df:b5:dc:3d: 04:bf:3d:31:72:65:3c:72:a7:a1:9b:29:03:b2:b6: c8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:25:F4:F6:BB:64:0B:89:D5:D7:28:E0:26:9B:72:63:A2:D2:E4:07 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b1:d0:ce:4c:fd:97:fa:27:74:90:ed:aa:b9:c7:f3:2e:b0: 10:d0:59:2e:74:2d:2e:f1:9f:f2:07:04:29:4f:af:de:31:47: 04:a4:3d:fb:c9:f7:bb:36:d5:c9:ac:9a:9d:f0:d0:2c:65:cd: 1a:bd:c5:ad:ef:80:41:d3:b0:4b:ad:30:38:dc:aa:8c:5a:93: 35:b6:5d:39:b6:05:95:95:94:33:fa:0c:2e:85:60:f7:58:19: ea:dd:25:61:f6:94:b5:22:84:52:32:9e:d1:e7:51:ed:c9:04: 9e:86:e2:64:24:71:18:de:a0:68:43:41:a9:c3:5b:f9:54:c1: dd:08:98:22:a1:d3:f3:5a:4a:73:13:3d:43:c7:d3:1f:f1:67: 34:96:9e:02:85:1f:ef:32:8f:5c:5f:4d:07:2c:62:33:cd:37: 2b:04:0d:ad:73:fc:15:96:9f:5e:7c:92:45:de:2e:86:05:b8: 8d:17:2d:c6:c5:a1:57:65:2b:e7:c8:ff:1c:09:65:53:6a:04: 59:3c:52:2e:fb:20:2b:7d:bc:a5:eb:d8:e6:31:7f:40:a2:7c: 6c:c4:39:16:17:41:76:76:89:dd:c2:18:f2:dd:83:28:79:c6: 0b:ea:98:e2:b5:7c:d0:0c:82:9f:2d:79:36:26:a4:80:d7:05: 81:4b:65:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKxwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjYwNzIyMTUzODQ1WhcNMjYwNzI5MTUzODQ1WjAYMRYwFAYD VQQDEw02YTYwZTQwNi03OGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmjmJf9K9u4LLkum3ArOct/gi9SRBCFYFZHjNix4B7eSpOiw0NxnNI6ic7q1T 6fn5GJzkyGFrvZxfnsMm1689uwBwCpFEtw2ZaPPT8tUR/Aow2mDX2VRjIJ8+38ZY uOTWdkRzLt6X1l1vrE8wYZeUcy1w3+tBwcV09ksrCz46eHgUsvBFSw1L/vZrxtt4 b0xTeOc2l4PWEJQOv+CNVinIc5bNzlTZg6vBlwyTr0IHYCEF2gdTbBpuMAngbw/M dufnPrVW1uAr2X21tBNXxomU8e7tqgxaif2aAsE1OGSOth34jzZYJXjj931Qj9+1 3D0Evz0xcmU8cqehmykDsrbIhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG8l9Pa7 ZAuJ1dco4CabcmOi0uQHMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH7HQzkz9l/ondJDtqrnH8y6wENBZLnQtLvGf8gcEKU+v3jFHBKQ9+8n3uzbV yayanfDQLGXNGr3Fre+AQdOwS60wONyqjFqTNbZdObYFlZWUM/oMLoVg91gZ6t0l YfaUtSKEUjKe0edR7ckEnobiZCRxGN6gaENBqcNb+VTB3QiYIqHT81pKcxM9Q8fT H/FnNJaeAoUf7zKPXF9NByxiM803KwQNrXP8FZafXnySRd4uhgW4jRctxsWhV2Ur 58j/HAllU2oEWTxSLvsgK328pevY5jF/QKJ8bMQ5FhdBdnaJ3cIY8t2DKHnGC+qY 4rV80AyCny15NiakgNcFgUtlew== -----END CERTIFICATE-----Generated at Fri Jul 24 14:09:51 2026 by rpki-client