$ rpki-client -vvf rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft File: h2Q49-A2DORsAHz91IHDH05WCHs.mft (raw, json) Hash identifier: PQX3x/Aw2TptCFfeLEccE2QSg9YtEGFNwdbHKHmNTtI= Subject key identifier: 1C:B7:41:88:9B:63:5A:7A:00:1E:28:F0:E2:8A:6B:61:6D:1B:10:D2 Authority key identifier: 87:64:38:F7:E0:36:0C:E4:6C:00:7C:FD:D4:81:C3:1F:4E:56:08:7B Certificate issuer: /CN=A917286F/serialNumber=876438F7E0360CE46C007CFDD481C31F4E56087B Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2Q49-A2DORsAHz91IHDH05WCHs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft Manifest number: 22 Signing time: Thu 23 Jul 2026 10:56:11 +0000 Manifest this update: Thu 23 Jul 2026 10:56:11 +0000 Manifest next update: Thu 30 Jul 2026 10:56:11 +0000 Files and hashes: 1: h2Q49-A2DORsAHz91IHDH05WCHs.crl (hash: kTBNJaCIMUKguO9XBKhqXbGwVwArROcR91d89jT20j4=) 2: 5257F21E53C211F19F1FA923BC833773.roa (hash: CKg/cSeBRG6ufQaILezJ2kDTbCeuVdt5eddE5iZ+RX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.crl rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2Q49-A2DORsAHz91IHDH05WCHs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917286F, serialNumber=876438F7E0360CE46C007CFDD481C31F4E56087B Validity Not Before: Jul 23 10:56:11 2026 GMT Not After : Jul 30 10:56:11 2026 GMT Subject: CN=6a61f34b-7b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:c7:51:12:23:77:7d:95:69:ad:6d:40:d2: cd:c1:c2:f8:50:31:af:39:22:70:89:16:ca:72:c8: b7:31:e0:dd:14:87:ab:d2:62:d6:11:87:64:d7:67: 42:3d:d4:88:08:06:ec:2a:b2:9d:a2:ef:f5:b9:35: b1:d9:7c:1e:f0:2f:2f:63:c8:5e:4c:81:c1:43:26: 46:2e:cf:6d:27:17:e5:75:e8:f1:f6:59:a8:c4:9d: 9e:d2:e5:ce:03:d5:2f:bc:24:29:ce:9e:43:8f:72: de:98:32:97:54:81:19:5b:b6:87:72:f2:82:26:ce: e0:36:58:62:f5:77:5a:ff:2d:cd:c3:8d:07:a2:57: 8a:aa:17:f2:e5:52:a4:ec:87:1b:14:21:d6:36:f1: a6:68:c3:2e:9c:42:91:11:77:bf:56:65:83:09:5c: 3a:91:37:9a:de:7a:26:87:7c:d0:04:7d:5d:1e:58: 84:0f:c1:4b:6d:06:61:ed:82:72:ee:9c:4a:7b:7d: 62:04:8e:16:0a:20:51:55:49:77:20:38:7a:c2:68: ca:da:0c:5a:e3:6b:1a:fb:bc:b9:a7:62:f6:4b:82: 4f:44:ec:af:1f:1b:db:8f:e0:63:dd:c5:44:aa:ee: c2:ab:7d:9c:25:9c:4a:0c:04:4a:64:cb:d1:d2:3c: ea:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B7:41:88:9B:63:5A:7A:00:1E:28:F0:E2:8A:6B:61:6D:1B:10:D2 X509v3 Authority Key Identifier: keyid:87:64:38:F7:E0:36:0C:E4:6C:00:7C:FD:D4:81:C3:1F:4E:56:08:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2Q49-A2DORsAHz91IHDH05WCHs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917286F/14272A8C53BD11F1B6592A56B9833773/h2Q49-A2DORsAHz91IHDH05WCHs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a7:b6:f2:e2:f0:63:66:1c:7c:d4:5a:8f:e0:7f:c0:6d:01: 2f:14:5e:22:7f:b9:2e:e7:5c:62:39:9e:e6:08:9c:6e:c5:22: f0:3f:54:71:06:0b:6f:9b:cc:69:ab:b3:5f:dc:0a:67:7b:53: 48:d1:bb:a6:2e:f0:bc:07:f9:3d:98:6b:c3:75:b3:dc:c5:a5: b2:07:67:72:17:82:53:c2:ef:b1:ae:9b:8a:d1:12:d3:8c:7d: 95:fb:9d:51:a1:ad:16:ca:ac:f8:62:7e:fd:8f:4f:46:30:52: 64:4a:22:34:81:fd:2f:c4:0b:04:31:d4:dc:c1:96:ed:a6:c4: 26:6d:e9:eb:58:9e:1e:5c:ca:c9:11:03:bc:09:56:61:41:c0: 19:0d:06:1b:9d:83:94:c4:6e:4f:b9:d8:6d:b2:8c:71:ef:a2: 03:ee:3f:b4:fe:9f:32:c4:22:77:05:22:33:c9:f8:95:19:07: 2f:3a:7d:ad:5f:21:f4:61:21:d4:1d:cb:15:bf:e4:ab:7c:a5: cb:aa:3c:fe:29:68:06:f4:df:38:a3:9f:03:15:91:dd:05:8b: 28:97:f5:02:ec:71:d3:36:5e:6c:f2:c5:c2:b6:7d:54:55:88: 5b:a7:13:94:b7:ec:c3:9c:c2:a1:cf:a6:01:94:72:ab:4e:0e: 2b:ad:d8:44 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Mjg2RjExMC8GA1UEBRMoODc2NDM4RjdFMDM2MENFNDZDMDA3Q0ZERDQ4MUMzMUY0 RTU2MDg3QjAeFw0yNjA3MjMxMDU2MTFaFw0yNjA3MzAxMDU2MTFaMBgxFjAUBgNV BAMTDTZhNjFmMzRiLTdiOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC30cdREiN3fZVprW1A0s3BwvhQMa85InCJFspyyLcx4N0Uh6vSYtYRh2TXZ0I9 1IgIBuwqsp2i7/W5NbHZfB7wLy9jyF5MgcFDJkYuz20nF+V16PH2WajEnZ7S5c4D 1S+8JCnOnkOPct6YMpdUgRlbtody8oImzuA2WGL1d1r/Lc3DjQeiV4qqF/LlUqTs hxsUIdY28aZowy6cQpERd79WZYMJXDqRN5reeiaHfNAEfV0eWIQPwUttBmHtgnLu nEp7fWIEjhYKIFFVSXcgOHrCaMraDFrjaxr7vLmnYvZLgk9E7K8fG9uP4GPdxUSq 7sKrfZwlnEoMBEpky9HSPOo9AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHLdBiJtj WnoAHijw4oprYW0bENIwHwYDVR0jBBgwFoAUh2Q49+A2DORsAHz91IHDH05WCHsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyODZGLzE0MjcyQThDNTNC RDExRjFCNjU5MkE1NkI5ODMzNzczL2gyUTQ5LUEyRE9Sc0FIejkxSUhESDA1V0NI cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaDJRNDktQTJET1JzQUh6OTFJSERIMDVXQ0hzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcy ODZGLzE0MjcyQThDNTNCRDExRjFCNjU5MkE1NkI5ODMzNzczL2gyUTQ5LUEyRE9S c0FIejkxSUhESDA1V0NIcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBup7by4vBjZhx81FqP4H/AbQEvFF4if7ku51xiOZ7mCJxuxSLwP1RxBgtvm8xp q7Nf3Apne1NI0bumLvC8B/k9mGvDdbPcxaWyB2dyF4JTwu+xrpuK0RLTjH2V+51R oa0Wyqz4Yn79j09GMFJkSiI0gf0vxAsEMdTcwZbtpsQmbenrWJ4eXMrJEQO8CVZh QcAZDQYbnYOUxG5Pudhtsoxx76ID7j+0/p8yxCJ3BSIzyfiVGQcvOn2tXyH0YSHU HcsVv+SrfKXLqjz+KWgG9N84o58DFZHdBYsol/UC7HHTNl5s8sXCtn1UVYhbpxOU t+zDnMKhz6YBlHKrTg4rrdhE -----END CERTIFICATE-----Generated at Fri Jul 24 23:07:09 2026 by rpki-client