$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft File: Sr2iSte9no2c77NZONCoeIBMYuQ.mft (raw, json) Hash identifier: L0qo5bpuzN6qesJJ/jrehbbv+bdGlxenvV6W/rRKXTU= Subject key identifier: 67:8E:4A:60:9E:DD:FF:2E:4D:DC:71:CD:ED:43:A0:75:7B:FA:8D:70 Authority key identifier: 4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 Certificate issuer: /CN=A91BE096/serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Certificate serial: 117A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft Manifest number: 115D Signing time: Wed 22 Jul 2026 17:21:07 +0000 Manifest this update: Wed 22 Jul 2026 17:21:07 +0000 Manifest next update: Wed 29 Jul 2026 17:21:07 +0000 Files and hashes: 1: Sr2iSte9no2c77NZONCoeIBMYuQ.crl (hash: L+MOhcGlPNIXlD49QAOkI+1XXp8QS0Zf8tgcwqyaq1A=) 2: 60E695B6C52A11EE80D54071C4F9AE02.roa (hash: 3o6dj/XokqZdrY5E0NL8+hP2E/G8Ccuo1K+sm8MmmjY=) 3: WaFbwQxbOyD3Ef8DwUKf0uYIGOk.asa (hash: WmkKwCyoLkelYdHTogcqdSeu/IFs1eCzpqo1emK/ZUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:21:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4474 (0x117a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE096, serialNumber=4ABDA24AD7BD9E8D9CEFB35938D0A878804C62E4 Validity Not Before: Jul 22 17:21:07 2026 GMT Not After : Jul 29 17:21:07 2026 GMT Subject: CN=6a60fc03-c4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b8:58:7b:b1:fb:df:6f:51:3c:d5:7d:c3:4d: b0:a3:f7:58:7b:1c:15:3a:d1:be:32:77:af:6e:dc: 47:3c:5a:3a:49:28:3f:4e:82:d9:3a:87:76:78:ca: 77:2a:7a:b8:5e:f2:d0:3f:82:59:0e:6f:35:c1:05: e9:90:81:96:9a:8f:79:a6:64:60:bb:45:0c:a8:3e: 04:82:ea:a3:b2:9a:94:15:81:40:fe:22:81:ba:a4: 7a:e5:56:f2:7b:6a:db:0d:21:41:78:90:db:e4:39: 5a:8e:89:02:32:89:70:e1:5c:4e:13:69:04:5a:ea: df:04:bf:5d:0d:da:74:09:97:71:50:14:39:95:b7: de:30:ee:27:7e:82:88:65:49:3d:9f:61:dd:89:9d: 9f:a3:f5:6c:1d:67:6b:e7:08:d2:d7:a9:b1:c4:8e: 87:fe:76:20:72:0b:f6:ac:c8:21:6d:a5:2e:7f:69: e8:ab:fe:5b:05:27:53:ad:39:be:0b:8b:ca:26:49: 2d:81:82:f9:5a:25:70:e9:89:0b:68:79:50:4d:fc: 03:23:2d:18:19:f6:87:7b:61:e7:4c:20:7d:dc:b1: b0:99:45:8e:70:00:b4:3d:62:45:73:a5:45:0b:66: 2a:fe:d2:a7:7e:a7:f8:8b:64:52:1e:4d:3d:8a:d5: 98:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8E:4A:60:9E:DD:FF:2E:4D:DC:71:CD:ED:43:A0:75:7B:FA:8D:70 X509v3 Authority Key Identifier: keyid:4A:BD:A2:4A:D7:BD:9E:8D:9C:EF:B3:59:38:D0:A8:78:80:4C:62:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sr2iSte9no2c77NZONCoeIBMYuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE096/2FBB440E334511E998C5673BC4F9AE02/Sr2iSte9no2c77NZONCoeIBMYuQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:5c:2e:f7:80:6e:80:46:6e:0e:16:d7:87:e2:03:7b:82:d3: 28:ba:59:78:df:95:4c:e4:01:e2:50:1d:3c:e1:eb:af:56:65: 49:40:a8:de:d4:05:0c:84:b4:00:2a:96:4a:6c:1a:c3:01:0e: bb:87:57:25:ba:8d:af:3e:41:9b:05:11:bc:5d:5a:24:64:d7: 8a:3c:42:7e:9d:c9:c0:29:30:c0:5a:e0:8d:20:39:94:1b:12: 20:29:57:86:ed:1e:7b:15:2e:7f:1c:db:43:c3:a2:f2:87:e0: 5e:87:a2:7c:6b:0a:0c:b7:16:47:6d:37:1d:5e:52:4a:bf:2b: 3a:78:56:85:41:9a:7e:89:52:a7:43:44:26:53:5c:bf:ba:f0: 7a:d8:0d:6b:0b:5f:c5:15:d1:ee:26:a9:1f:6a:34:d1:d0:14: 50:1c:20:1b:c1:33:f0:0f:be:f2:58:e5:6d:9f:26:f4:40:a2: 63:f8:31:fd:50:17:5d:3a:28:85:63:26:0e:52:46:fa:c8:85: f8:d2:2a:47:e2:0c:7c:d5:90:94:07:5c:8b:1b:30:0e:81:21: 51:3c:cd:ca:3e:e0:84:94:f0:e6:36:8f:5f:49:c3:46:f1:80: 3a:29:f9:84:cb:2f:7a:6c:0d:ed:79:9b:95:db:cf:b2:1b:3a: 46:42:83:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUwOTYxMTAvBgNVBAUTKDRBQkRBMjRBRDdCRDlFOEQ5Q0VGQjM1OTM4RDBBODc4 ODA0QzYyRTQwHhcNMjYwNzIyMTcyMTA3WhcNMjYwNzI5MTcyMTA3WjAYMRYwFAYD VQQDEw02YTYwZmMwMy1jNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAorhYe7H7329RPNV9w02wo/dYexwVOtG+MnevbtxHPFo6SSg/ToLZOod2eMp3 Knq4XvLQP4JZDm81wQXpkIGWmo95pmRgu0UMqD4EguqjspqUFYFA/iKBuqR65Vby e2rbDSFBeJDb5DlajokCMolw4VxOE2kEWurfBL9dDdp0CZdxUBQ5lbfeMO4nfoKI ZUk9n2HdiZ2fo/VsHWdr5wjS16mxxI6H/nYgcgv2rMghbaUuf2noq/5bBSdTrTm+ C4vKJkktgYL5WiVw6YkLaHlQTfwDIy0YGfaHe2HnTCB93LGwmUWOcAC0PWJFc6VF C2Yq/tKnfqf4i2RSHk09itWYGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGeOSmCe 3f8uTdxxze1DoHV7+o1wMB8GA1UdIwQYMBaAFEq9okrXvZ6NnO+zWTjQqHiATGLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA5Ni8yRkJCNDQwRTMz NDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5vMmM3N05aT05Db2VJQk1Z dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NyMmlTdGU5bm8yYzc3TlpPTkNvZUlCTVl1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTA5Ni8yRkJCNDQwRTMzNDUxMUU5OThDNTY3M0JDNEY5QUUwMi9TcjJpU3RlOW5v MmM3N05aT05Db2VJQk1ZdVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApFwu94BugEZuDhbXh+IDe4LTKLpZeN+VTOQB4lAdPOHrr1ZlSUCo3tQFDIS0 ACqWSmwawwEOu4dXJbqNrz5BmwURvF1aJGTXijxCfp3JwCkwwFrgjSA5lBsSIClX hu0eexUufxzbQ8Oi8ofgXoeifGsKDLcWR203HV5SSr8rOnhWhUGafolSp0NEJlNc v7rwetgNawtfxRXR7iapH2o00dAUUBwgG8Ez8A++8ljlbZ8m9ECiY/gx/VAXXToo hWMmDlJG+siF+NIqR+IMfNWQlAdcixswDoEhUTzNyj7ghJTw5jaPX0nDRvGAOin5 hMsvemwN7XmbldvPshs6RkKDlA== -----END CERTIFICATE-----Generated at Thu Jul 23 19:04:31 2026 by rpki-client