$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft File: RITQfaaNUwUM3PaxPAwFReZFfOU.mft (raw, json) Hash identifier: zGqfuLVWDJlFdeylmsdui8rv/vWO6UORSnIfdMzVEt4= Subject key identifier: 24:8E:84:5B:03:01:90:4E:82:2A:C1:01:BF:EF:AE:52:EE:2A:CD:FC Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft Manifest number: 02B5 Signing time: Thu 23 Jul 2026 02:28:59 +0000 Manifest this update: Thu 23 Jul 2026 02:28:58 +0000 Manifest next update: Thu 30 Jul 2026 02:28:58 +0000 Files and hashes: 1: RITQfaaNUwUM3PaxPAwFReZFfOU.crl (hash: aJHdkUmA8oABNKQ+ttB3o+R2JVK/q5WG+/tK+GguSXE=) 2: B3795CBC64F211ED9AEC046FC4F9AE02.roa (hash: WcWgzJGh0m7kjX3X0vlH0++NcJ8zb8A6kxhRMuoMb8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 02:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Validity Not Before: Jul 23 02:28:58 2026 GMT Not After : Jul 30 02:28:58 2026 GMT Subject: CN=6a617c6a-06c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:76:b5:c6:70:24:fc:a3:7e:a4:c7:e5:93: 7b:f0:97:94:a6:ff:1e:8c:91:eb:b3:ef:bd:7a:44: c8:88:20:19:78:76:c9:05:29:9f:47:93:44:cd:94: 22:a3:e7:b4:5f:ad:5d:1f:40:40:e9:70:a4:1f:dd: 33:ee:00:45:94:7f:ce:d5:17:0c:03:cf:2e:0b:0a: 26:08:dc:6f:8e:cd:2f:db:82:4d:7d:af:82:23:94: 09:68:97:97:5c:4b:03:4e:bb:1d:6b:8d:dd:fa:8a: 22:c0:a5:e5:73:f0:4a:e2:d7:a3:a7:b9:22:3e:43: b1:33:81:1a:6a:11:8b:1c:8e:d8:b7:a0:09:27:16: 37:5a:43:49:9b:f7:a6:f2:b1:b0:54:40:3f:fa:ad: 53:74:5b:e7:8b:c3:db:ba:31:fd:d4:07:ac:e7:cf: 41:62:b9:49:1b:f6:de:f9:33:ce:b6:a0:5f:db:4d: 92:29:f1:6f:dc:71:85:4b:7c:5c:f8:5a:65:6f:87: b0:e7:a4:76:06:7f:a0:dd:c7:52:0d:1c:21:77:ab: b2:b9:52:cb:92:49:0a:bc:6a:ba:89:41:13:19:66: b2:f2:7b:1b:7d:af:ab:c9:6d:e5:0e:e1:06:31:3a: 94:a7:1a:40:fa:6d:57:02:5d:bb:0a:c8:11:0e:c7: 82:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8E:84:5B:03:01:90:4E:82:2A:C1:01:BF:EF:AE:52:EE:2A:CD:FC X509v3 Authority Key Identifier: keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:3a:0f:4f:77:63:a2:13:67:59:15:7d:13:43:89:8c:76:e7: c3:d6:7e:cb:1d:45:be:9c:36:80:8d:f9:90:5d:6c:1c:62:d3: bb:75:0a:1d:7e:27:bc:17:21:d9:8a:0e:e3:51:ff:28:a3:d8: d8:67:c5:19:51:c2:b2:47:1c:89:2e:6d:1b:ac:43:38:c3:0e: 35:41:b7:39:5e:1d:bc:ca:04:02:7f:bb:38:c8:06:83:67:65: 88:dc:16:fe:8f:eb:11:22:66:ad:13:aa:de:f4:f6:20:23:c0: 47:00:a3:e6:b4:bb:18:d1:10:b5:66:4a:23:bd:7c:6b:6c:f3: 99:81:80:0c:bb:af:d3:55:99:24:7e:e9:08:50:ce:8c:5a:f5: 52:34:39:e7:0e:2d:04:ab:fe:68:93:ac:46:f9:08:5a:ca:3c: 09:78:8d:13:09:a0:a9:ce:22:50:f4:4c:fe:df:17:92:c6:c0: 2f:3c:f4:71:bb:be:0d:28:51:80:58:cd:8a:d1:83:fd:5d:9f: aa:d4:97:f6:9f:c6:37:e1:4e:14:32:fa:55:35:77:1d:ea:a3: 31:60:78:a2:4b:f0:c5:c8:40:db:e0:aa:89:15:da:d4:d6:8c: 5c:d8:8c:58:e7:1e:52:c0:b2:3b:13:19:39:3c:21:ef:f0:c5: 94:6c:ab:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKDQ0ODREMDdEQTY4RDUzMDUwQ0RDRjZCMTNDMEMwNTQ1 RTY0NTdDRTUwHhcNMjYwNzIzMDIyODU4WhcNMjYwNzMwMDIyODU4WjAYMRYwFAYD VQQDEw02YTYxN2M2YS0wNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqjx2tcZwJPyjfqTH5ZN78JeUpv8ejJHrs++9ekTIiCAZeHbJBSmfR5NEzZQi o+e0X61dH0BA6XCkH90z7gBFlH/O1RcMA88uCwomCNxvjs0v24JNfa+CI5QJaJeX XEsDTrsda43d+ooiwKXlc/BK4tejp7kiPkOxM4EaahGLHI7Yt6AJJxY3WkNJm/em 8rGwVEA/+q1TdFvni8PbujH91Aes589BYrlJG/be+TPOtqBf202SKfFv3HGFS3xc +Fplb4ew56R2Bn+g3cdSDRwhd6uyuVLLkkkKvGq6iUETGWay8nsbfa+ryW3lDuEG MTqUpxpA+m1XAl27CsgRDseCcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCSOhFsD AZBOgirBAb/vrlLuKs38MB8GA1UdIwQYMBaAFESE0H2mjVMFDNz2sTwMBUXmRXzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8xRjYzQTU2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3VU0zUGF4UEF3RlJlWkZm T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JJVFFmYWFOVXdVTTNQYXhQQXdGUmVaRmZPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8xRjYzQTU2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3 VU0zUGF4UEF3RlJlWkZmT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOToPT3djohNnWRV9E0OJjHbnw9Z+yx1Fvpw2gI35kF1sHGLTu3UKHX4nvBch 2YoO41H/KKPY2GfFGVHCskcciS5tG6xDOMMONUG3OV4dvMoEAn+7OMgGg2dliNwW /o/rESJmrROq3vT2ICPARwCj5rS7GNEQtWZKI718a2zzmYGADLuv01WZJH7pCFDO jFr1UjQ55w4tBKv+aJOsRvkIWso8CXiNEwmgqc4iUPRM/t8XksbALzz0cbu+DShR gFjNitGD/V2fqtSX9p/GN+FOFDL6VTV3HeqjMWB4okvwxchA2+CqiRXa1NaMXNiM WOceUsCyOxMZOTwh7/DFlGyriw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:51:15 2026 by rpki-client