$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft File: 2h2yzTH0VPaVYdhmXck--BLzl7A.mft (raw, json) Hash identifier: Eq6sdfHgbOaZ1dtXyaIX/tnF0+59WEjFWU985ThW2Ek= Subject key identifier: 58:7F:24:72:3E:B3:B8:AB:82:84:B0:E1:94:6F:90:02:92:E2:B0:F0 Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft Manifest number: 01FE Signing time: Thu 23 Jul 2026 04:30:02 +0000 Manifest this update: Thu 23 Jul 2026 04:30:02 +0000 Manifest next update: Thu 30 Jul 2026 04:30:02 +0000 Files and hashes: 1: 2h2yzTH0VPaVYdhmXck--BLzl7A.crl (hash: +T2uQYxLbHDKTIHHC8UBRNUkMvQK5PgdaJnalzwBBAI=) 2: E71AB92A7F7D11EE8C183162C4F9AE02.roa (hash: FExGseTOnvr3aPoCSxnG4oP3qMLxtEfz5diPyHkwwjM=) 3: 4317395081E611EE9EFE132BC4F9AE02.roa (hash: IUu7tuCQnOn20gjKX4EGAdKOaWEy3Jn4yItME/O1HD4=) 4: 730B201A81E911EEAEFE7735C4F9AE02.roa (hash: n9a6GC1PPfM4Od1umHXXBpOit75pzAoxltMx72LHRVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A7CA, serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Validity Not Before: Jul 23 04:30:02 2026 GMT Not After : Jul 30 04:30:02 2026 GMT Subject: CN=6a6198ca-b1fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:96:17:13:83:f0:ac:db:4a:0d:4f:b1:5b: f2:60:db:91:55:98:4f:c4:2e:ad:ae:a5:63:9d:e0: 05:e9:59:3b:6f:73:70:4c:21:a4:ee:a0:bc:43:2b: fd:19:79:f5:91:64:0a:2b:33:40:51:2d:64:54:2d: 24:9f:6f:18:d1:ec:f6:dc:5a:18:04:65:d5:76:64: 65:10:55:aa:3a:f3:f7:59:3f:6d:d5:92:c6:d5:83: fe:0f:28:d1:ad:c0:af:f6:be:27:f8:a1:75:70:50: 58:18:5a:c7:12:1d:52:f3:13:5a:c6:98:4c:81:b2: 1f:3a:91:c2:3e:0e:ee:db:e8:f0:31:72:37:9f:62: 1b:7f:86:76:1e:c9:67:33:ed:f0:03:9d:05:a8:b1: 58:0f:fd:15:64:dd:40:2d:0e:2d:44:f1:a9:56:55: 27:a6:02:11:77:2f:8f:d9:2f:3b:4e:8d:97:da:7f: 6a:b7:36:45:51:2e:da:c0:f3:a3:5c:3e:1a:41:4d: 8c:89:e7:0b:f2:b8:35:e4:ab:82:f3:d9:d8:aa:ec: d1:00:34:8b:c2:56:6a:8d:ed:f1:d0:49:9f:bb:b8: 1d:b9:c0:51:a8:3d:7b:21:62:88:16:43:4b:28:db: 61:c5:9c:e0:2a:7d:e6:0c:6b:3d:05:93:6c:35:4f: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:7F:24:72:3E:B3:B8:AB:82:84:B0:E1:94:6F:90:02:92:E2:B0:F0 X509v3 Authority Key Identifier: keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:d8:5e:45:b9:29:db:d6:67:da:5a:1f:1d:5d:80:a2:a6:84: b2:8e:8f:12:9a:01:dd:2b:c4:7c:1f:95:ee:c8:4f:e4:d8:01: 70:ba:6b:19:1b:97:12:3c:d9:3f:1a:33:4f:20:54:b8:8c:7a: 46:b2:42:0d:ca:c3:b8:11:ef:85:a8:c3:da:5b:23:c7:9c:3a: f5:70:9a:39:9b:f0:26:7e:de:ba:87:7e:95:9b:7c:4a:37:f1: 03:6b:fc:71:3a:aa:95:f4:a9:91:69:71:78:d3:de:b6:92:a4: 01:2f:0f:6e:02:b6:69:2c:e2:15:1c:08:e7:53:1c:ad:79:47: 72:1e:1d:e0:d9:8c:d7:86:18:02:ac:b9:84:91:f7:2d:1d:f3: 0e:eb:94:19:07:46:2c:7b:24:cb:9a:ef:41:4a:8a:7e:7a:fb: af:cc:67:db:34:fa:e0:86:53:8d:0a:b5:16:da:af:50:39:37: 68:4f:61:01:77:34:c8:2d:24:4f:81:e0:34:08:ce:e1:f1:c4: f1:bc:5d:48:a6:c5:8b:f9:5c:5f:53:1a:91:bf:6f:c5:db:41: cb:4e:a9:a5:c7:4e:00:d3:04:ee:5a:a8:e2:f2:14:0d:58:e6: 57:33:55:17:1b:55:9e:57:f8:39:d9:6b:ab:26:3a:01:e6:c6: 4f:6e:0b:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3Q0ExMTAvBgNVBAUTKERBMURCMkNEMzFGNDU0RjY5NTYxRDg2NjVEQzkzRUY4 MTJGMzk3QjAwHhcNMjYwNzIzMDQzMDAyWhcNMjYwNzMwMDQzMDAyWjAYMRYwFAYD VQQDEw02YTYxOThjYS1iMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrKWFxOD8KzbSg1PsVvyYNuRVZhPxC6trqVjneAF6Vk7b3NwTCGk7qC8Qyv9 GXn1kWQKKzNAUS1kVC0kn28Y0ez23FoYBGXVdmRlEFWqOvP3WT9t1ZLG1YP+DyjR rcCv9r4n+KF1cFBYGFrHEh1S8xNaxphMgbIfOpHCPg7u2+jwMXI3n2Ibf4Z2Hsln M+3wA50FqLFYD/0VZN1ALQ4tRPGpVlUnpgIRdy+P2S87To2X2n9qtzZFUS7awPOj XD4aQU2MiecL8rg15KuC89nYquzRADSLwlZqje3x0Emfu7gducBRqD17IWKIFkNL KNthxZzgKn3mDGs9BZNsNU/aowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFh/JHI+ s7irgoSw4ZRvkAKS4rDwMB8GA1UdIwQYMBaAFNodss0x9FT2lWHYZl3JPvgS85ew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTdDQS80Q0Y3RjE1ODdF QjcxMUVFOTYyM0U5MUFDNEY5QUUwMi8yaDJ5elRIMFZQYVZZZGhtWGNrLS1CTHps N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJoMnl6VEgwVlBhVllkaG1YY2stLUJMemw3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTdDQS80Q0Y3RjE1ODdFQjcxMUVFOTYyM0U5MUFDNEY5QUUwMi8yaDJ5elRIMFZQ YVZZZGhtWGNrLS1CTHpsN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcdheRbkp29Zn2lofHV2AoqaEso6PEpoB3SvEfB+V7shP5NgBcLprGRuXEjzZ PxozTyBUuIx6RrJCDcrDuBHvhajD2lsjx5w69XCaOZvwJn7euod+lZt8SjfxA2v8 cTqqlfSpkWlxeNPetpKkAS8PbgK2aSziFRwI51McrXlHch4d4NmM14YYAqy5hJH3 LR3zDuuUGQdGLHsky5rvQUqKfnr7r8xn2zT64IZTjQq1FtqvUDk3aE9hAXc0yC0k T4HgNAjO4fHE8bxdSKbFi/lcX1Makb9vxdtBy06ppcdOANME7lqo4vIUDVjmVzNV FxtVnlf4OdlrqyY6AebGT24Lbw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:41:25 2026 by rpki-client