$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: +D3Tr2BVxfXwifq5NMr1gHgTsdLuXmqn7N4wagryRps= Subject key identifier: 85:D9:62:D6:B9:E3:18:85:9D:25:9B:A8:5C:70:BC:E4:32:47:27:06 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0A84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0A5E Signing time: Wed 22 Jul 2026 20:07:22 +0000 Manifest this update: Wed 22 Jul 2026 20:07:21 +0000 Manifest next update: Wed 29 Jul 2026 20:07:21 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: X2nEQ4mEv+RgPdxzRrwgKBttbmSJ7B546Us7Ou7A3/4=) 2: 013B99DA986011F08FA4AB86C4F9AE02.roa (hash: SGPYvzHeLCeVexbh9lAx6+ESCRM1l3c2pzV/QopMYDM=) 3: 5AEF27A42ECD11F1AE5BE4D1C4833773.roa (hash: pJrOfhLTXJrzDjh1PttmKiJG9g18KY+/mTy+A26VFpE=) 4: 92B2469A90D411F09BC0A564C4F9AE02.roa (hash: BkbQUsKXIX52vzOm2/vANASw4HXX+/0xUFcUl5+7lq8=) 5: 41622F82F82E11F0BC7D9928396F56BC.roa (hash: BOsXgTgRuoFK1Abqu9y4jRVX+t+6P8y+y8+yHdVIkmA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2692 (0xa84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Jul 22 20:07:21 2026 GMT Not After : Jul 29 20:07:21 2026 GMT Subject: CN=6a6122fa-d95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:67:4f:a9:32:14:0b:01:70:af:f5:73:2f:fa: 17:ff:42:ce:2b:0a:d8:74:fc:f8:bd:73:d8:33:7c: 69:4a:d0:b3:90:d8:bf:a9:da:9c:5a:f4:2a:8f:83: 5c:de:25:97:11:31:6a:d6:5d:e0:c5:42:3a:d2:c4: 5c:96:c9:86:6a:38:ba:0b:26:46:13:48:75:98:ab: bf:bc:4b:98:cf:f1:3b:0f:e9:2d:03:f3:3a:13:53: bc:dc:5a:d0:fd:a9:12:ea:66:e3:87:02:0e:d6:85: b6:60:16:7a:87:c3:85:c6:c4:42:11:ba:04:2b:c4: 4d:7d:14:8e:68:bf:65:aa:09:c0:98:b6:82:ec:b5: 3c:e2:5f:39:79:e1:2b:9a:1b:44:01:f2:eb:62:29: b9:d4:d0:0c:f5:5b:34:23:dc:62:f3:d6:69:73:a5: ae:86:ea:10:fa:4e:b1:84:e4:2f:16:57:87:50:a1: e4:94:af:d7:8f:59:76:09:63:6e:ac:0d:31:41:a6: 44:a1:23:da:9c:5a:48:81:35:96:46:98:cb:ab:ef: ab:e9:43:b5:3a:e2:99:af:03:0a:af:a1:65:d3:fd: 68:60:5e:f5:2b:ee:d8:3c:53:45:0f:a3:fc:d2:19: 81:cf:fc:85:4e:47:06:01:2d:b1:11:64:e0:4b:91: 5e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D9:62:D6:B9:E3:18:85:9D:25:9B:A8:5C:70:BC:E4:32:47:27:06 X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bb:a3:f3:0b:74:71:fb:a3:f4:91:82:9a:e3:aa:1c:1f:3e: cc:2f:6c:27:ad:25:f2:ec:3a:4a:ea:db:37:67:fb:0d:8a:04: ce:f5:b1:a6:c5:9f:e8:86:b0:7f:18:92:1b:2c:63:ea:33:e5: b5:15:45:3d:c6:40:c4:69:58:b1:89:6d:81:01:e0:63:cd:bf: 05:a2:b6:da:74:ba:5e:97:7e:40:ca:53:4b:44:8e:43:75:0c: 0e:49:c3:d8:c5:3e:01:b9:bb:be:34:c7:34:e9:e0:0e:71:45: b8:fa:48:65:03:58:c2:38:86:32:97:1a:50:68:eb:e3:6b:c3: 65:8c:14:80:3b:4d:9e:60:8e:11:9b:c9:1a:ff:2f:2f:a5:2c: b8:5e:75:ec:96:1a:2b:84:b6:c2:89:8f:df:21:28:0e:a5:5c: 39:b2:c0:59:7a:9e:bc:d0:e5:9c:70:2f:e9:b2:26:7e:c6:a5: 5f:d2:b1:79:df:17:45:4a:bf:ef:d6:14:1e:19:03:7c:79:b5: 3c:77:4f:cb:d5:b5:ca:12:5c:c3:40:2e:b1:51:50:42:5f:57: e3:fe:37:31:2d:d5:d0:2e:9d:d5:d2:3a:1e:81:6f:fa:4b:8f: 10:ee:00:8e:f5:28:d1:8f:0f:07:76:50:bb:c1:28:97:af:6c: 37:e7:b9:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjYwNzIyMjAwNzIxWhcNMjYwNzI5MjAwNzIxWjAYMRYwFAYD VQQDEw02YTYxMjJmYS1kOTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mdPqTIUCwFwr/VzL/oX/0LOKwrYdPz4vXPYM3xpStCzkNi/qdqcWvQqj4Nc 3iWXETFq1l3gxUI60sRclsmGaji6CyZGE0h1mKu/vEuYz/E7D+ktA/M6E1O83FrQ /akS6mbjhwIO1oW2YBZ6h8OFxsRCEboEK8RNfRSOaL9lqgnAmLaC7LU84l85eeEr mhtEAfLrYim51NAM9Vs0I9xi89Zpc6WuhuoQ+k6xhOQvFleHUKHklK/Xj1l2CWNu rA0xQaZEoSPanFpIgTWWRpjLq++r6UO1OuKZrwMKr6Fl0/1oYF71K+7YPFNFD6P8 0hmBz/yFTkcGAS2xEWTgS5FepwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIXZYta5 4xiFnSWbqFxwvOQyRycGMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL7uj8wt0cfuj9JGCmuOqHB8+zC9sJ60l8uw6SurbN2f7DYoEzvWxpsWf6Iaw fxiSGyxj6jPltRVFPcZAxGlYsYltgQHgY82/BaK22nS6Xpd+QMpTS0SOQ3UMDknD 2MU+Abm7vjTHNOngDnFFuPpIZQNYwjiGMpcaUGjr42vDZYwUgDtNnmCOEZvJGv8v L6UsuF517JYaK4S2womP3yEoDqVcObLAWXqevNDlnHAv6bImfsalX9Kxed8XRUq/ 79YUHhkDfHm1PHdPy9W1yhJcw0AusVFQQl9X4/43MS3V0C6d1dI6HoFv+kuPEO4A jvUo0Y8PB3ZQu8Eol69sN+e5zw== -----END CERTIFICATE-----Generated at Fri Jul 24 07:41:25 2026 by rpki-client