$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: WOB8qi43jm1h4m6wphq/+DlIdvcTalXkN87Rq1REe6w= Subject key identifier: 7A:21:44:36:71:DE:09:72:B9:DA:A4:7D:ED:80:C5:A5:F3:19:88:09 Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0EE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0ECB Signing time: Wed 22 Jul 2026 17:52:54 +0000 Manifest this update: Wed 22 Jul 2026 17:52:54 +0000 Manifest next update: Wed 29 Jul 2026 17:52:54 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: Oi8uInk/I43n5/qRfo6E/KEcLNcSvdPIK5LaarDL+OE=) 2: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 8cuyoSN28q4uL8xy1DF6fDKydmWDLPM+OObCbWczh0k=) 3: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: otCvD2+70hExeG7UwhAKqvYl8H+cUijlEBEY7BdlZms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3816 (0xee8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Jul 22 17:52:54 2026 GMT Not After : Jul 29 17:52:54 2026 GMT Subject: CN=6a610376-9564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8c:07:ad:cd:22:f7:88:f4:95:a6:21:15:68: 01:e9:90:63:fc:9f:02:41:bc:57:fd:66:54:f1:64: 68:19:71:02:c0:f6:bb:36:59:3c:3e:d3:9f:ed:6e: 10:f1:7d:d2:59:b4:74:1f:0a:83:82:38:f4:2c:a6: ba:bc:58:73:46:e1:f8:ae:93:37:16:be:d4:80:07: 3a:22:fa:de:c1:7d:84:a5:52:48:fe:79:96:10:54: 26:fa:77:be:75:9a:6b:ad:5b:04:9c:85:70:a1:ef: 45:cd:cf:80:37:4f:69:5b:19:67:c7:d6:18:65:84: 5f:6a:14:2a:60:dd:15:a3:4c:61:21:c8:52:c3:59: 80:e9:86:44:0c:a1:7c:75:db:eb:b2:44:aa:33:2b: f7:a8:45:10:40:5e:ee:ad:7c:d2:ea:44:86:1f:55: 14:5c:95:3f:77:79:79:66:d1:d7:e6:87:dc:dc:da: 97:03:b9:2f:0d:d5:91:08:e7:25:01:51:85:da:9e: 85:98:24:6c:91:a5:85:59:72:79:0d:82:4f:68:99: a8:3f:6b:94:81:1d:e2:fb:f4:ae:c1:1a:ef:e7:29: d2:86:48:88:40:b6:be:c8:96:12:21:da:c7:fc:73: d7:c4:38:e1:31:c5:05:8a:85:f3:73:b4:a9:ed:70: 53:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:21:44:36:71:DE:09:72:B9:DA:A4:7D:ED:80:C5:A5:F3:19:88:09 X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:0e:e8:df:45:d0:13:88:f8:1a:9a:64:83:d5:09:0d:f1:eb: 40:50:a7:d1:71:29:5d:0e:94:03:ae:db:4e:06:30:46:b6:65: 8e:5a:51:81:09:b7:06:1d:46:36:39:34:f7:fb:26:b2:e9:ca: d0:1e:b1:ad:d9:78:2a:af:a9:28:e9:d8:47:6e:d7:7e:20:94: 3a:1a:28:2d:f3:02:49:2b:4b:ff:45:17:ea:65:64:12:22:39: 58:60:4b:83:3c:ce:e5:54:46:b2:66:a1:19:78:a0:75:93:9b: 58:11:0c:49:57:4e:5e:cb:aa:13:be:e5:f9:97:07:ee:c0:62: 81:0b:39:8b:eb:83:8a:bf:e1:0d:4a:31:82:bc:eb:19:e8:b8: 33:b7:15:e8:e8:c7:d8:56:52:73:27:c6:6c:d3:64:ce:ed:7b: 43:92:81:0e:39:c8:cb:74:b8:e3:06:b3:1d:9e:af:34:49:94: c7:a7:76:d2:ce:e5:56:cf:86:f1:2d:d4:f3:42:a4:04:01:0e: 6c:14:9b:a1:96:4d:f5:9b:22:21:c9:2f:1d:61:4c:7f:41:0d: 1a:01:11:c1:6b:0d:2e:c8:48:d2:46:e8:53:34:2a:70:3f:b0: 0c:13:0c:88:98:b6:56:35:73:1c:e8:03:5a:bc:58:1d:df:b4: 5c:12:b9:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDugwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjYwNzIyMTc1MjU0WhcNMjYwNzI5MTc1MjU0WjAYMRYwFAYD VQQDEw02YTYxMDM3Ni05NTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvowHrc0i94j0laYhFWgB6ZBj/J8CQbxX/WZU8WRoGXECwPa7Nlk8PtOf7W4Q 8X3SWbR0HwqDgjj0LKa6vFhzRuH4rpM3Fr7UgAc6IvrewX2EpVJI/nmWEFQm+ne+ dZprrVsEnIVwoe9Fzc+AN09pWxlnx9YYZYRfahQqYN0Vo0xhIchSw1mA6YZEDKF8 ddvrskSqMyv3qEUQQF7urXzS6kSGH1UUXJU/d3l5ZtHX5ofc3NqXA7kvDdWRCOcl AVGF2p6FmCRskaWFWXJ5DYJPaJmoP2uUgR3i+/SuwRrv5ynShkiIQLa+yJYSIdrH /HPXxDjhMcUFioXzc7Sp7XBToQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHohRDZx 3glyudqkfe2AxaXzGYgJMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVQ7o30XQE4j4Gppkg9UJDfHrQFCn0XEpXQ6UA67bTgYwRrZljlpRgQm3Bh1G Njk09/smsunK0B6xrdl4Kq+pKOnYR27XfiCUOhooLfMCSStL/0UX6mVkEiI5WGBL gzzO5VRGsmahGXigdZObWBEMSVdOXsuqE77l+ZcH7sBigQs5i+uDir/hDUoxgrzr Gei4M7cV6OjH2FZScyfGbNNkzu17Q5KBDjnIy3S44wazHZ6vNEmUx6d20s7lVs+G 8S3U80KkBAEObBSboZZN9ZsiIckvHWFMf0ENGgERwWsNLshI0kboUzQqcD+wDBMM iJi2VjVzHOgDWrxYHd+0XBK54g== -----END CERTIFICATE-----Generated at Fri Jul 24 02:59:08 2026 by rpki-client