$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json) Hash identifier: TSdbQEQBjqp7DTwKW+C+nrAVHAvcPETCgPbSjxl3m0c= Subject key identifier: 72:4F:37:FD:3D:89:96:D9:3B:9D:37:CB:C0:A2:0F:D3:61:F6:4E:97 Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft Manifest number: 1B10 Signing time: Wed 22 Jul 2026 16:22:49 +0000 Manifest this update: Wed 22 Jul 2026 16:22:48 +0000 Manifest next update: Wed 29 Jul 2026 16:22:48 +0000 Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: sFKF5J2Z7fcSSbQZDInyHyVlZtSjr6ZEppSsba6MySw=) 2: C443D86A55A311E7896BED09C4F9AE02.roa (hash: hkXxeNyW6zU7R/3tjUaDIgOzon4gIXx8opB7l3LzhSA=) 3: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: p4+NsJe4a3MSde9nMZiDmlNln2JEYVPGVaWpxC5fnk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 16:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6962 (0x1b32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Jul 22 16:22:48 2026 GMT Not After : Jul 29 16:22:48 2026 GMT Subject: CN=6a60ee59-3519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6d:82:66:b0:72:99:32:0e:69:c8:c7:a5:5e: 7b:4d:e0:3c:90:60:a7:c2:14:e9:88:35:76:eb:80: da:bf:4b:8b:55:67:3d:8c:7c:31:f4:cd:96:54:1d: 5f:54:4a:dc:7c:b7:1f:da:a9:dd:c1:ef:9f:d3:8c: a7:bb:1d:78:64:73:68:81:1d:57:67:95:10:38:a2: 16:cb:d6:52:78:80:d7:0f:90:89:ba:99:d1:72:5e: e9:77:8a:f0:4b:92:8b:03:d9:9a:c0:07:c6:ec:5a: 41:55:a6:31:c9:28:34:ae:19:c4:bf:2e:e6:6b:30: 32:d5:05:a4:c5:03:1b:ea:af:a2:f8:b9:e1:60:12: 53:3c:2d:49:7c:0a:79:7f:8d:2c:0c:72:2b:42:8a: 24:6d:4d:c5:84:3e:cb:9d:3f:59:31:17:ee:20:3a: b9:dc:99:4f:f2:a6:b1:9f:b0:37:88:48:62:9f:3a: 9d:e9:89:2b:b9:b4:d2:60:81:76:41:09:db:ae:56: 7e:e2:e3:2f:2c:63:99:1d:a1:b7:8f:84:04:37:45: d4:fe:43:1b:c1:02:fe:76:3b:ce:2c:01:e6:14:eb: 3a:79:94:f0:3c:41:aa:c9:55:a3:25:35:cb:3f:e1: 6d:29:77:a8:ad:8a:86:c4:4c:7b:ef:0c:d8:66:d3: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4F:37:FD:3D:89:96:D9:3B:9D:37:CB:C0:A2:0F:D3:61:F6:4E:97 X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:dd:76:f7:1f:81:50:52:37:2e:74:27:8b:8e:ca:8f:c0:c8: 5e:cf:c1:84:40:0e:6c:34:32:74:2d:00:50:c4:2c:4a:da:67: 6d:b2:23:37:51:45:17:f1:ce:5c:93:ba:ef:f3:90:b2:0b:c1: 5d:0f:6d:b2:7f:99:70:4a:20:f1:aa:96:7d:3d:19:a6:c1:39: e1:a9:77:35:3a:0a:3e:72:f3:20:b0:91:dd:eb:de:aa:27:93: b7:ef:f7:f1:e8:ef:f6:76:ad:9a:d1:1a:93:dc:a0:fb:f0:28: b3:45:87:a7:7a:85:53:db:eb:c8:67:1e:07:5a:27:39:3c:92: 6d:e6:75:ac:40:84:6c:5d:8f:76:1f:1f:67:a6:b2:73:3f:ac: df:ee:ae:7a:7f:8a:3c:4b:6c:df:8d:74:9c:95:2a:fb:f0:65: 6d:68:ed:4d:aa:22:c8:0f:fe:a1:7e:f2:f8:89:94:43:10:f7: 14:3f:09:2b:90:90:f6:83:37:c3:11:94:b0:3a:d7:9d:6d:43: a7:ea:87:e4:48:f9:0b:dd:97:69:f3:60:0c:3b:0c:39:7f:61: e0:17:53:8f:35:62:27:e6:52:3d:9a:e3:38:74:53:f3:10:00: b7:1e:00:ec:e2:9a:bf:0e:5e:fe:9f:5b:4e:bc:cd:22:5b:73: 2c:ad:80:c6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjYwNzIyMTYyMjQ4WhcNMjYwNzI5MTYyMjQ4WjAYMRYwFAYD VQQDEw02YTYwZWU1OS0zNTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw22CZrBymTIOacjHpV57TeA8kGCnwhTpiDV264Dav0uLVWc9jHwx9M2WVB1f VErcfLcf2qndwe+f04ynux14ZHNogR1XZ5UQOKIWy9ZSeIDXD5CJupnRcl7pd4rw S5KLA9mawAfG7FpBVaYxySg0rhnEvy7mazAy1QWkxQMb6q+i+LnhYBJTPC1JfAp5 f40sDHIrQookbU3FhD7LnT9ZMRfuIDq53JlP8qaxn7A3iEhinzqd6YkrubTSYIF2 QQnbrlZ+4uMvLGOZHaG3j4QEN0XU/kMbwQL+djvOLAHmFOs6eZTwPEGqyVWjJTXL P+FtKXeorYqGxEx77wzYZtMwOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHJPN/09 iZbZO503y8CiD9Nh9k6XMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBNS8yNTgwQThENjRCNjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVH eHBtbGFiRWdPRWtKV0tveTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmd129x+BUFI3LnQni47Kj8DIXs/BhEAObDQydC0AUMQsStpnbbIjN1FFF/HO XJO67/OQsgvBXQ9tsn+ZcEog8aqWfT0ZpsE54al3NToKPnLzILCR3eveqieTt+/3 8ejv9natmtEak9yg+/Aos0WHp3qFU9vryGceB1onOTySbeZ1rECEbF2Pdh8fZ6ay cz+s3+6uen+KPEts3410nJUq+/BlbWjtTaoiyA/+oX7y+ImUQxD3FD8JK5CQ9oM3 wxGUsDrXnW1Dp+qH5Ej5C92XafNgDDsMOX9h4BdTjzViJ+ZSPZrjOHRT8xAAtx4A 7OKavw5e/p9bTrzNIltzLK2Axg== -----END CERTIFICATE-----Generated at Fri Jul 24 16:57:27 2026 by rpki-client