$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: L+dgXZ9FuZhBW3xM5BRxzSngVetmr3w/sBcJgdqGOgI= Subject key identifier: 05:C0:41:99:A9:75:D2:4A:88:8D:22:F7:76:8C:B8:B1:34:41:05:4A Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 16C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 16B4 Signing time: Wed 22 Jul 2026 16:47:05 +0000 Manifest this update: Wed 22 Jul 2026 16:47:04 +0000 Manifest next update: Wed 29 Jul 2026 16:47:04 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: yh/V9H2HeS4mdoj8JhuWSV5aFMvEIWg/UE9P5Vc6kuk=) 2: D0240AB83E2611F19FC5B98DB5833773.roa (hash: g8YadsOEwLn+f1jtfBYb7qkcejvbvgg/WAXaJDEKgy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5832 (0x16c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Jul 22 16:47:04 2026 GMT Not After : Jul 29 16:47:04 2026 GMT Subject: CN=6a60f409-cba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:1e:35:05:42:4f:cf:83:49:3a:45:42:d0: 15:a1:39:51:a9:6c:56:0b:89:91:e6:1d:70:ca:06: ac:4f:b3:80:25:22:b4:3b:16:06:98:a8:3c:d3:6b: d8:4f:ef:90:1a:72:19:cd:94:82:b2:85:91:1d:de: 56:38:ea:10:d6:e6:af:e2:28:63:5d:c9:4d:d7:c8: 1c:b9:98:af:eb:b9:8a:81:e8:d7:61:46:c2:c7:8d: e1:c9:41:26:5e:0e:d6:cc:2a:51:54:dc:5c:2a:79: 35:55:c0:ff:2d:7d:b2:8a:b4:0f:c7:3d:d8:de:48: 72:a8:37:6a:6c:dd:da:67:5b:cf:ac:ae:56:94:28: 5a:9c:ac:48:54:e5:aa:26:cd:d7:7b:1d:51:7b:db: 34:4b:a6:af:16:4a:bf:96:1e:2c:d5:99:6f:77:33: fc:71:44:ef:41:61:11:d2:17:3e:7c:25:c0:1f:a2: 8a:b5:d9:a6:e8:6c:ab:10:65:b9:c2:d2:b2:df:a7: 8b:da:d7:ac:0a:ae:1d:55:25:59:58:c7:ee:c3:92: 32:ca:13:e5:3c:10:05:c5:74:9f:93:a2:20:dd:b0: 27:3c:b7:59:38:df:56:28:70:53:07:af:33:e1:2b: 71:0d:29:7c:a9:f4:6f:b4:1a:9a:e3:58:a8:c2:2d: 44:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C0:41:99:A9:75:D2:4A:88:8D:22:F7:76:8C:B8:B1:34:41:05:4A X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:df:1a:92:84:86:fc:df:c7:b0:1f:17:af:2f:30:07:94:ca: 6c:81:0b:b6:88:c7:82:c9:66:d3:75:c7:0c:42:ff:50:a1:5e: 40:09:74:ad:61:a2:3f:c3:9e:df:a4:e9:68:ee:c5:51:d2:92: 4c:f7:16:36:ba:f1:9b:90:6e:d2:86:e0:b6:44:50:d4:0b:fe: 46:a2:1e:48:bf:ef:86:94:ac:5d:43:e0:93:42:ca:e6:cf:16: a8:86:75:dd:24:e2:3f:5b:da:78:00:f3:f3:7a:eb:34:4f:a2: b7:f7:fb:d4:8b:1c:b5:ff:5c:d5:ca:5b:8f:cd:03:8a:b6:c5: 2f:6c:5c:39:28:f9:2e:f4:78:a7:35:f0:ee:4d:01:c9:d2:80: e0:92:3d:b1:b4:4a:02:4f:a9:96:a4:26:40:b6:7a:91:e3:75: f6:ca:73:44:30:02:b5:ce:df:88:89:50:6d:32:fa:10:57:be: a4:b4:cf:9f:b2:3f:78:cb:2b:1b:e0:90:9b:c9:c8:56:4c:49: d9:8a:3d:02:21:43:a7:a9:eb:e1:cb:81:c5:97:7e:61:c3:b0: 2d:22:e8:2f:07:cc:e3:29:44:2c:b1:49:1d:c1:6f:63:3b:bd: 3c:cf:25:c2:f9:d1:21:a3:47:fd:75:d1:a8:5c:5f:c7:bc:c2: 68:27:09:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjYwNzIyMTY0NzA0WhcNMjYwNzI5MTY0NzA0WjAYMRYwFAYD VQQDEw02YTYwZjQwOS1jYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6geNQVCT8+DSTpFQtAVoTlRqWxWC4mR5h1wygasT7OAJSK0OxYGmKg802vY T++QGnIZzZSCsoWRHd5WOOoQ1uav4ihjXclN18gcuZiv67mKgejXYUbCx43hyUEm Xg7WzCpRVNxcKnk1VcD/LX2yirQPxz3Y3khyqDdqbN3aZ1vPrK5WlChanKxIVOWq Js3Xex1Re9s0S6avFkq/lh4s1ZlvdzP8cUTvQWER0hc+fCXAH6KKtdmm6GyrEGW5 wtKy36eL2tesCq4dVSVZWMfuw5IyyhPlPBAFxXSfk6Ig3bAnPLdZON9WKHBTB68z 4StxDSl8qfRvtBqa41iowi1ETQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXAQZmp ddJKiI0i93aMuLE0QQVKMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgd8akoSG/N/HsB8Xry8wB5TKbIELtojHgslm03XHDEL/UKFeQAl0rWGiP8Oe 36TpaO7FUdKSTPcWNrrxm5Bu0obgtkRQ1Av+RqIeSL/vhpSsXUPgk0LK5s8WqIZ1 3STiP1vaeADz83rrNE+it/f71Isctf9c1cpbj80DirbFL2xcOSj5LvR4pzXw7k0B ydKA4JI9sbRKAk+plqQmQLZ6keN19spzRDACtc7fiIlQbTL6EFe+pLTPn7I/eMsr G+CQm8nIVkxJ2Yo9AiFDp6nr4cuBxZd+YcOwLSLoLwfM4ylELLFJHcFvYzu9PM8l wvnRIaNH/XXRqFxfx7zCaCcJWA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:10:44 2026 by rpki-client