$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft File: 2j9P_11GRonTiYj1-yL2VVCz7_g.mft (raw, json) Hash identifier: afCH3Ye/l6j5KTjrnKxu0zafO6J1t88yXe9AH6WbA5k= Subject key identifier: 44:E3:60:F7:5F:1B:82:33:88:C5:4E:62:1C:2E:66:1B:34:0F:C7:8D Authority key identifier: DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 Certificate issuer: /CN=A91A3FFF/serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Certificate serial: 0579 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft Manifest number: 0540 Signing time: Thu 23 Jul 2026 00:17:08 +0000 Manifest this update: Thu 23 Jul 2026 00:17:07 +0000 Manifest next update: Thu 30 Jul 2026 00:17:07 +0000 Files and hashes: 1: 2j9P_11GRonTiYj1-yL2VVCz7_g.crl (hash: pPkB43QfRUAta1ksvndILbcDNYwRqIkwyEZ77Az151E=) 2: 952AA4424DAF11EC86ED5273C4F9AE02.roa (hash: dY+BZEOINurtJjOA3yhjmWQ4kx2Zua1d5uXKZrya/Kk=) 3: AC63C4A4A62E11ECBDD6843FC4F9AE02.roa (hash: EOMIe0WcNYmNc20xtvF1NWvgi2RMO6+OBmsDK/hEYoY=) 4: 75426BC6A8C511EC8F560C42C4F9AE02.roa (hash: 7xZPQJy4FlDqQRK4ZNxBOqn11xvYRCTnG5Hl+SBa0kA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1401 (0x579) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FFF, serialNumber=DA3F4FFF5D464689D38988F5FB22F65550B3EFF8 Validity Not Before: Jul 23 00:17:07 2026 GMT Not After : Jul 30 00:17:07 2026 GMT Subject: CN=6a615d83-1b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:25:4d:b1:87:bf:8c:ac:73:0f:b2:9f:b3:2b: 78:28:8b:14:a4:72:73:05:81:93:fd:b4:ed:dc:96: 4c:65:f8:25:cc:3c:8d:ef:88:94:0d:d2:4e:fa:1e: d8:f3:14:9d:08:30:80:f7:e6:5a:47:47:43:38:b7: f1:26:f8:25:80:4e:dd:2c:4c:9c:1d:98:5c:11:df: 47:1f:8f:42:f8:c3:89:d3:a0:bb:a2:3f:17:8e:9e: dc:a7:3c:ab:52:e7:3a:84:19:8b:ad:cf:40:d6:e6: da:01:68:76:20:3e:1d:14:44:bf:9c:f5:ec:33:a7: 37:46:23:05:42:a2:fb:e2:66:ff:6f:80:85:1b:13: 3e:24:c2:0c:7c:a5:a6:51:be:16:a5:62:55:40:7e: e6:f1:dd:bb:c0:b8:c0:70:ce:99:78:45:7b:12:b8: 4b:a2:66:76:ff:53:27:1d:4b:fd:ad:10:4c:fb:3f: eb:c1:ef:16:1d:86:8e:fa:83:33:0f:19:5f:c2:4e: 0e:54:8a:cc:8e:65:22:0a:09:05:e6:53:e6:d5:e3: 5d:4c:e4:be:54:ab:80:90:b4:4d:86:3f:b3:da:1f: d8:95:0d:0d:26:97:ae:a0:3e:bf:94:5a:f2:5c:fa: 0d:31:32:9a:e8:ad:a5:78:f7:3e:17:e1:c5:08:00: 37:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E3:60:F7:5F:1B:82:33:88:C5:4E:62:1C:2E:66:1B:34:0F:C7:8D X509v3 Authority Key Identifier: keyid:DA:3F:4F:FF:5D:46:46:89:D3:89:88:F5:FB:22:F6:55:50:B3:EF:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2j9P_11GRonTiYj1-yL2VVCz7_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FFF/82AD377A4DAB11EC9214F521C4F9AE02/2j9P_11GRonTiYj1-yL2VVCz7_g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:94:46:c8:7d:8a:0b:5a:b8:28:8e:c0:62:16:12:db:70:51: 1a:d1:35:74:3c:57:b3:70:9a:1c:51:18:aa:73:46:ac:10:93: 01:c5:20:1f:ed:fb:9e:9a:33:66:7e:b9:3c:cf:88:7a:08:5b: 91:40:8b:13:64:c0:ca:42:39:6e:87:51:de:b3:d4:11:59:1f: 7a:a8:47:37:7a:58:99:c0:af:c2:72:79:1a:57:ad:c4:f8:37: e4:55:8a:23:db:64:88:2a:17:39:ba:2e:e3:4f:fd:0e:f6:c2: 0e:41:f6:a4:99:73:89:b0:97:3a:17:79:10:53:36:f5:d3:7d: 69:bf:a6:20:95:cf:e3:49:e6:fa:bb:3a:19:ed:19:f3:04:b0: 13:f8:38:97:ec:af:b5:96:c1:d4:6b:f5:22:76:bc:7a:8f:af: a7:75:b4:67:14:57:a1:c5:bb:ae:fa:f0:b5:0c:9b:81:54:0c: 9d:3c:48:0c:74:0c:49:9a:ad:6e:4d:31:08:0c:eb:1a:d6:86: 98:76:f7:35:d0:55:12:94:16:9d:57:04:50:fc:7c:8d:9e:ba: 63:96:40:0b:af:b2:fc:c5:02:3a:63:5e:3a:40:0a:d8:e8:05: 3e:9c:57:aa:df:01:c4:b6:d6:4b:94:cd:f4:a5:c0:d6:e9:1d: 37:f3:9a:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRkYxMTAvBgNVBAUTKERBM0Y0RkZGNUQ0NjQ2ODlEMzg5ODhGNUZCMjJGNjU1 NTBCM0VGRjgwHhcNMjYwNzIzMDAxNzA3WhcNMjYwNzMwMDAxNzA3WjAYMRYwFAYD VQQDEw02YTYxNWQ4My0xYjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtyVNsYe/jKxzD7Kfsyt4KIsUpHJzBYGT/bTt3JZMZfglzDyN74iUDdJO+h7Y 8xSdCDCA9+ZaR0dDOLfxJvglgE7dLEycHZhcEd9HH49C+MOJ06C7oj8Xjp7cpzyr Uuc6hBmLrc9A1ubaAWh2ID4dFES/nPXsM6c3RiMFQqL74mb/b4CFGxM+JMIMfKWm Ub4WpWJVQH7m8d27wLjAcM6ZeEV7ErhLomZ2/1MnHUv9rRBM+z/rwe8WHYaO+oMz Dxlfwk4OVIrMjmUiCgkF5lPm1eNdTOS+VKuAkLRNhj+z2h/YlQ0NJpeuoD6/lFry XPoNMTKa6K2lePc+F+HFCAA3JQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETjYPdf G4IziMVOYhwuZhs0D8eNMB8GA1UdIwQYMBaAFNo/T/9dRkaJ04mI9fsi9lVQs+/4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZGRi84MkFEMzc3QTRE QUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1JvblRpWWoxLXlMMlZWQ3o3 X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqOVBfMTFHUm9uVGlZajEteUwyVlZDejdfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB M0ZGRi84MkFEMzc3QTREQUIxMUVDOTIxNEY1MjFDNEY5QUUwMi8yajlQXzExR1Jv blRpWWoxLXlMMlZWQ3o3X2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAopRGyH2KC1q4KI7AYhYS23BRGtE1dDxXs3CaHFEYqnNGrBCTAcUgH+37npoz Zn65PM+IeghbkUCLE2TAykI5bodR3rPUEVkfeqhHN3pYmcCvwnJ5GletxPg35FWK I9tkiCoXObou40/9DvbCDkH2pJlzibCXOhd5EFM29dN9ab+mIJXP40nm+rs6Ge0Z 8wSwE/g4l+yvtZbB1Gv1Ina8eo+vp3W0ZxRXocW7rvrwtQybgVQMnTxIDHQMSZqt bk0xCAzrGtaGmHb3NdBVEpQWnVcEUPx8jZ66Y5ZAC6+y/MUCOmNeOkAK2OgFPpxX qt8BxLbWS5TN9KXA1ukdN/OaRg== -----END CERTIFICATE-----Generated at Fri Jul 24 11:45:26 2026 by rpki-client