$ rpki-client -vvf rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft File: rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft (raw, json) Hash identifier: EnDpAdYKjgo8EKjP0xZv3OdxBaKShlyv3RwW3D0dBfg= Subject key identifier: BB:D0:03:4F:A8:A1:71:20:CC:EB:D2:EF:4E:B3:E2:61:17:2D:40:B5 Authority key identifier: AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 Certificate issuer: /CN=A91B97DB/serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Certificate serial: 0CF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft Manifest number: 0CE8 Signing time: Wed 22 Jul 2026 18:40:34 +0000 Manifest this update: Wed 22 Jul 2026 18:40:33 +0000 Manifest next update: Wed 29 Jul 2026 18:40:33 +0000 Files and hashes: 1: rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl (hash: TcYIh0FcfLTm92sJ9m6JPgNQfaoPc/gC846SzhFwK4w=) 2: 5A0FAE220F7011EAB8E21167C4F9AE02.roa (hash: P3cA4Ey/V8rl3zAePZZSJQ01VWq57x0zCe1ptcZIm4Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:40:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3316 (0xcf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B97DB, serialNumber=AD3D8703850B1271E8F31AE03E3CC9AC4660D942 Validity Not Before: Jul 22 18:40:33 2026 GMT Not After : Jul 29 18:40:33 2026 GMT Subject: CN=6a610ea1-c112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:32:10:e3:0a:88:64:97:3c:85:e0:17:bf: 0f:05:cc:4d:3c:d1:bb:db:29:6b:25:7b:14:b0:f3: a1:a1:63:60:b0:71:82:8c:f5:3b:70:79:d1:26:9d: ce:5c:8f:f2:76:b5:92:56:a4:df:ac:fc:2f:5c:98: c0:0a:6f:79:d7:f6:e6:25:a4:1f:aa:cb:de:2e:54: 7b:99:2b:6d:6b:aa:ad:f0:62:e8:5a:27:1f:23:a0: 89:4c:6c:a7:c5:b9:00:fe:5e:be:1d:df:cf:aa:52: bd:cd:95:85:8c:1f:b1:7e:54:82:62:9a:f6:8e:ed: 24:db:e5:4c:42:6b:72:74:9c:86:7f:23:fa:9e:11: 4b:51:1d:24:b3:e6:5d:32:8b:52:61:a8:dc:3c:d7: dd:23:c8:d0:88:d6:11:6f:e0:fb:68:54:42:91:60: a3:69:4c:b9:4a:94:ae:68:9d:22:88:12:88:6f:e2: 33:1f:cc:38:a1:5a:6e:b9:91:75:f6:c6:a1:fc:da: a4:87:30:6c:d9:6c:eb:6b:9b:f2:37:10:de:25:51: 45:ee:07:56:2e:f2:f8:92:0e:28:68:aa:08:c3:09: 89:ff:f7:db:5e:b0:15:f4:01:b0:2b:db:ea:50:de: 8b:52:a7:43:a5:f0:03:d6:05:78:60:30:27:51:a4: dd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D0:03:4F:A8:A1:71:20:CC:EB:D2:EF:4E:B3:E2:61:17:2D:40:B5 X509v3 Authority Key Identifier: keyid:AD:3D:87:03:85:0B:12:71:E8:F3:1A:E0:3E:3C:C9:AC:46:60:D9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rT2HA4ULEnHo8xrgPjzJrEZg2UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B97DB/4E410ACE0F6F11EAAB0ADB64C4F9AE02/rT2HA4ULEnHo8xrgPjzJrEZg2UI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:fa:75:ba:9e:00:a5:6d:1c:49:e6:80:2b:9d:e2:f8:b7:5a: a9:30:51:b3:33:7c:40:03:c8:7c:43:fd:d1:f8:7e:58:43:43: ba:a9:3e:ff:d5:ed:bf:c0:2e:79:36:0a:94:80:20:f2:b3:23: 51:39:0f:39:b7:b4:35:37:1e:80:7e:5e:6f:ee:00:79:13:b9: 4b:6f:60:f3:f9:8b:db:f5:d3:f2:bd:a6:11:b1:7b:7f:2d:ea: a5:c8:25:11:1f:5f:c5:a4:cb:54:af:b8:9e:e7:2d:0e:1b:5d: 82:9f:e7:66:70:99:51:f5:d4:3c:02:62:6a:95:09:1b:92:0d: a2:c4:0b:a3:33:d4:ef:2d:18:05:89:c3:bc:10:9d:de:52:4c: a5:da:96:e0:8d:67:db:c4:f2:cd:39:36:8c:cf:0b:61:d4:d0: 32:0c:aa:ac:42:6b:e7:0a:b8:90:0b:22:53:cb:7e:22:51:a3: 4a:1e:08:77:90:68:12:c6:f4:cb:ee:40:eb:89:6b:6e:04:ce: 04:fc:b2:51:34:9e:90:76:16:83:4a:72:2b:58:81:e8:a4:0e: 5e:97:3b:fa:2c:c1:91:58:87:94:1d:07:ca:c5:a6:a9:e9:18: e0:1e:fc:13:43:be:00:38:83:4b:05:b9:6e:ce:ed:4e:ee:03: 36:2c:0f:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3REIxMTAvBgNVBAUTKEFEM0Q4NzAzODUwQjEyNzFFOEYzMUFFMDNFM0NDOUFD NDY2MEQ5NDIwHhcNMjYwNzIyMTg0MDMzWhcNMjYwNzI5MTg0MDMzWjAYMRYwFAYD VQQDEw02YTYxMGVhMS1jMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5IyEOMKiGSXPIXgF78PBcxNPNG72ylrJXsUsPOhoWNgsHGCjPU7cHnRJp3O XI/ydrWSVqTfrPwvXJjACm951/bmJaQfqsveLlR7mStta6qt8GLoWicfI6CJTGyn xbkA/l6+Hd/PqlK9zZWFjB+xflSCYpr2ju0k2+VMQmtydJyGfyP6nhFLUR0ks+Zd MotSYajcPNfdI8jQiNYRb+D7aFRCkWCjaUy5SpSuaJ0iiBKIb+IzH8w4oVpuuZF1 9sah/NqkhzBs2Wzra5vyNxDeJVFF7gdWLvL4kg4oaKoIwwmJ//fbXrAV9AGwK9vq UN6LUqdDpfAD1gV4YDAnUaTdXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLvQA0+o oXEgzOvS706z4mEXLUC1MB8GA1UdIwQYMBaAFK09hwOFCxJx6PMa4D48yaxGYNlC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTdEQi80RTQxMEFDRTBG NkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVuSG84eHJnUGp6SnJFWmcy VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUMkhBNFVMRW5Ibzh4cmdQanpKckVaZzJVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTdEQi80RTQxMEFDRTBGNkYxMUVBQUIwQURCNjRDNEY5QUUwMi9yVDJIQTRVTEVu SG84eHJnUGp6SnJFWmcyVUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgfp1up4ApW0cSeaAK53i+LdaqTBRszN8QAPIfEP90fh+WENDuqk+/9Xtv8Au eTYKlIAg8rMjUTkPObe0NTcegH5eb+4AeRO5S29g8/mL2/XT8r2mEbF7fy3qpcgl ER9fxaTLVK+4nuctDhtdgp/nZnCZUfXUPAJiapUJG5INosQLozPU7y0YBYnDvBCd 3lJMpdqW4I1n28TyzTk2jM8LYdTQMgyqrEJr5wq4kAsiU8t+IlGjSh4Id5BoEsb0 y+5A64lrbgTOBPyyUTSekHYWg0pyK1iB6KQOXpc7+izBkViHlB0HysWmqekY4B78 E0O+ADiDSwW5bs7tTu4DNiwPpA== -----END CERTIFICATE-----Generated at Fri Jul 24 06:15:14 2026 by rpki-client