$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft File: cnTOXaBB8mCNjIJt7g5xWhhxUro.mft (raw, json) Hash identifier: enaLtemNpHtyH1UUfY2QJusulUkxxJu/9fW3Uw8KbBU= Subject key identifier: 28:FB:63:F0:9F:4A:2E:FD:51:E4:2B:18:87:3D:57:F0:D1:3A:F6:3F Authority key identifier: 72:74:CE:5D:A0:41:F2:60:8D:8C:82:6D:EE:0E:71:5A:18:71:52:BA Certificate issuer: /CN=A91A2FF9/serialNumber=7274CE5DA041F2608D8C826DEE0E715A187152BA Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft Manifest number: 2C Signing time: Thu 23 Jul 2026 10:46:49 +0000 Manifest this update: Thu 23 Jul 2026 10:46:48 +0000 Manifest next update: Thu 30 Jul 2026 10:46:48 +0000 Files and hashes: 1: cnTOXaBB8mCNjIJt7g5xWhhxUro.crl (hash: E7CFmrLGaQ0qA1DQnsJSssYOA0HKglIBuhGWhl42KP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.crl rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2FF9, serialNumber=7274CE5DA041F2608D8C826DEE0E715A187152BA Validity Not Before: Jul 23 10:46:48 2026 GMT Not After : Jul 30 10:46:48 2026 GMT Subject: CN=6a61f118-7cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cf:c5:be:96:ca:10:a0:e9:27:18:94:89:b3: 1a:e2:cb:d2:f2:e2:58:ab:66:a4:d6:94:e7:67:c8: a8:aa:bd:f2:ac:a3:bd:d4:3c:d8:fa:1d:07:a5:18: 43:93:04:17:33:2f:a9:35:a6:23:2e:99:24:87:bb: 3d:7a:d8:a3:02:2d:25:85:81:cd:3e:af:ec:01:d7: 9f:66:51:e5:7f:99:14:13:8b:b6:c7:f8:49:fb:79: f2:65:79:20:dd:2f:6d:f8:dc:a4:d7:ae:7c:e8:bd: 44:b9:76:38:9b:bd:c6:30:80:75:d6:60:c9:a0:d8: 6d:5b:08:fa:a4:04:47:3e:c1:5d:2d:3a:1e:19:b2: 56:42:af:19:31:29:06:97:a1:18:b4:07:c4:d2:af: c7:6d:10:7f:6d:41:9d:f5:0b:cf:e0:54:8f:e4:b4: 3f:6c:10:42:e4:2a:12:3f:24:3f:1e:cb:68:a4:44: 3b:96:a4:6b:0c:c3:b4:ee:5b:13:8c:0b:f8:c6:c6: 21:19:f6:d0:0a:ef:f5:a3:f0:6e:fd:9a:ab:44:1c: 15:7b:22:7c:0e:35:9b:99:ee:a6:79:67:8e:57:58: a0:5e:b0:3c:48:88:95:65:a8:d5:a9:59:cc:12:30: de:74:67:b1:01:7b:35:27:69:1b:2f:f9:fe:2b:8f: 5f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FB:63:F0:9F:4A:2E:FD:51:E4:2B:18:87:3D:57:F0:D1:3A:F6:3F X509v3 Authority Key Identifier: keyid:72:74:CE:5D:A0:41:F2:60:8D:8C:82:6D:EE:0E:71:5A:18:71:52:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnTOXaBB8mCNjIJt7g5xWhhxUro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2FF9/8B9369B042DC11F1A82C4355CB833773/cnTOXaBB8mCNjIJt7g5xWhhxUro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d8:67:e7:e1:1f:bb:e0:b2:af:7e:ab:19:5d:ab:f6:e3:12: 54:06:10:b8:cf:b0:c9:7d:8b:83:3d:94:a0:60:a9:b4:1c:fd: 9d:7e:6d:fa:82:15:9d:1b:b1:41:4c:65:bb:a3:9b:0c:dd:c6: 5c:e9:80:97:31:5b:95:fc:82:d9:4d:29:8d:97:ae:7f:3f:b8: 3a:f7:68:71:62:b9:90:d0:fd:47:4a:16:08:85:8b:9d:5b:c5: 01:39:27:13:52:8f:a6:ed:89:de:b1:4a:6c:c3:13:82:56:e1: b9:05:ba:5e:4e:7d:67:07:dc:61:8a:01:c7:a4:ff:a3:38:fd: 62:ff:47:05:43:30:fb:45:71:eb:61:b1:ab:ab:10:be:c3:bc: c7:5b:ff:23:b3:de:1e:16:6e:30:6f:60:7b:11:05:82:7a:7f: cb:7c:1b:32:f8:73:86:89:93:48:b9:d7:12:d4:d2:0d:53:41: 81:41:fb:a3:f5:75:22:c2:a4:13:4b:ea:80:f4:6f:04:c7:3d: 0c:98:aa:6e:5c:ce:74:86:7e:8a:ca:59:bf:13:30:83:79:0f: 6b:0c:56:53:db:db:a5:da:83:c9:92:6c:6f:f2:d7:85:64:e4: 7a:cd:d2:90:d4:b3:5d:87:b0:39:10:26:18:62:a4:62:a4:79: be:cb:e3:92 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MkZGOTExMC8GA1UEBRMoNzI3NENFNURBMDQxRjI2MDhEOEM4MjZERUUwRTcxNUEx ODcxNTJCQTAeFw0yNjA3MjMxMDQ2NDhaFw0yNjA3MzAxMDQ2NDhaMBgxFjAUBgNV BAMTDTZhNjFmMTE4LTdjZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfz8W+lsoQoOknGJSJsxriy9Ly4lirZqTWlOdnyKiqvfKso73UPNj6HQelGEOT BBczL6k1piMumSSHuz162KMCLSWFgc0+r+wB159mUeV/mRQTi7bH+En7efJleSDd L2343KTXrnzovUS5djibvcYwgHXWYMmg2G1bCPqkBEc+wV0tOh4ZslZCrxkxKQaX oRi0B8TSr8dtEH9tQZ31C8/gVI/ktD9sEELkKhI/JD8ey2ikRDuWpGsMw7TuWxOM C/jGxiEZ9tAK7/Wj8G79mqtEHBV7InwONZuZ7qZ5Z45XWKBesDxIiJVlqNWpWcwS MN50Z7EBezUnaRsv+f4rj1/nAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKPtj8J9K Lv1R5CsYhz1X8NE69j8wHwYDVR0jBBgwFoAUcnTOXaBB8mCNjIJt7g5xWhhxUrow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyRkY5LzhCOTM2OUIwNDJE QzExRjFBODJDNDM1NUNCODMzNzczL2NuVE9YYUJCOG1DTmpJSnQ3ZzV4V2hoeFVy by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY25UT1hhQkI4bUNOaklKdDdnNXhXaGh4VXJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEy RkY5LzhCOTM2OUIwNDJEQzExRjFBODJDNDM1NUNCODMzNzczL2NuVE9YYUJCOG1D TmpJSnQ3ZzV4V2hoeFVyby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAd2Gfn4R+74LKvfqsZXav24xJUBhC4z7DJfYuDPZSgYKm0HP2dfm36ghWdG7FB TGW7o5sM3cZc6YCXMVuV/ILZTSmNl65/P7g692hxYrmQ0P1HShYIhYudW8UBOScT Uo+m7YnesUpswxOCVuG5BbpeTn1nB9xhigHHpP+jOP1i/0cFQzD7RXHrYbGrqxC+ w7zHW/8js94eFm4wb2B7EQWCen/LfBsy+HOGiZNIudcS1NINU0GBQfuj9XUiwqQT S+qA9G8Exz0MmKpuXM50hn6Kylm/EzCDeQ9rDFZT29ul2oPJkmxv8teFZOR6zdKQ 1LNdh7A5ECYYYqRipHm+y+OS -----END CERTIFICATE-----Generated at Fri Jul 24 13:28:55 2026 by rpki-client