$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft File: 2QDd8konYiv5ZDdX7byv-u4yHDc.mft (raw, json) Hash identifier: DX0ditLA1+FKjS5hGVsES1dhVBSXexBNX3RLFpuymSI= Subject key identifier: 99:32:24:63:24:D2:66:31:1C:73:13:73:A8:B8:7C:EF:F3:33:38:29 Authority key identifier: D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 Certificate issuer: /CN=A91C7773/serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Certificate serial: 0F42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft Manifest number: 0F24 Signing time: Wed 22 Jul 2026 17:46:56 +0000 Manifest this update: Wed 22 Jul 2026 17:46:55 +0000 Manifest next update: Wed 29 Jul 2026 17:46:55 +0000 Files and hashes: 1: 2QDd8konYiv5ZDdX7byv-u4yHDc.crl (hash: 2MnGMoxVOVPtBF6lUwzv5ofQBviPd54AV8xtSa0/Y14=) 2: A47D2EC84C1E11EEBA8CDB4BC4F9AE02.roa (hash: CNBlKRGQG6AMZt4K1SNsAWQxw9T+WIEHof1S1C1ZbKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3906 (0xf42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7773, serialNumber=D900DDF24A27622BF9643757EDBCAFFAEE321C37 Validity Not Before: Jul 22 17:46:55 2026 GMT Not After : Jul 29 17:46:55 2026 GMT Subject: CN=6a610210-4d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:dd:bd:a4:9d:b6:1f:f0:e6:56:ca:91:38: ec:f5:d9:a0:20:08:db:d2:4c:57:c8:7b:7f:69:41: 9c:74:0b:e3:e0:20:5c:a9:25:62:8e:e4:3f:53:f5: d4:07:c2:9a:4e:46:b5:4e:7f:9f:9b:fc:4d:83:da: bf:5b:04:dd:32:c9:2f:a8:ee:fb:ad:52:d7:ab:e2: 31:43:86:a5:ab:7d:67:44:c1:c7:ec:44:63:da:23: ff:a7:d7:8b:8f:aa:8c:c2:71:74:35:69:18:bc:82: 14:d4:a7:a9:ca:a8:29:11:e3:74:b9:97:ab:1d:bd: 50:fc:14:78:5e:03:17:66:38:bf:cd:e1:0b:3b:ef: 40:89:0e:80:63:dd:4d:74:b0:d0:b0:08:3e:cf:15: c9:88:9b:ce:1f:d4:ea:35:52:8f:18:27:d2:ed:82: 75:2e:f7:e1:4a:17:7d:f8:4c:4b:9c:e7:33:bd:14: 09:ed:7f:4e:e2:82:13:86:fc:05:df:28:46:0a:b6: 33:fa:95:b1:35:ee:fa:1a:69:2d:04:c2:86:ba:62: cb:89:c3:ef:6e:ca:8d:14:43:a4:50:50:d2:bf:cd: 40:66:0d:2c:fd:a7:af:a3:e3:71:8c:3a:c7:6a:45: 94:37:0b:63:5f:5b:2d:93:d6:8a:6d:09:f7:7d:44: 22:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:32:24:63:24:D2:66:31:1C:73:13:73:A8:B8:7C:EF:F3:33:38:29 X509v3 Authority Key Identifier: keyid:D9:00:DD:F2:4A:27:62:2B:F9:64:37:57:ED:BC:AF:FA:EE:32:1C:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QDd8konYiv5ZDdX7byv-u4yHDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7773/AD32237CA2E811E9BAE78D47C4F9AE02/2QDd8konYiv5ZDdX7byv-u4yHDc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:24:72:44:74:41:8c:96:d9:1f:72:23:b0:28:4f:55:08:a6: 17:44:bb:c7:db:41:36:67:24:01:53:ac:c8:a8:e6:c9:fc:28: 5f:86:34:ac:9c:2e:d0:63:91:1e:23:3e:d1:9f:dd:bd:36:0e: 3c:66:45:c0:ee:10:a2:d3:65:72:7e:7a:08:24:22:29:dc:0f: 5d:22:0e:8a:20:9b:47:ed:6a:bb:b7:8b:9f:de:04:39:1b:e3: 6a:68:80:36:fa:43:26:8e:4c:40:ff:c5:59:8a:07:43:08:c3: 3d:7d:12:3a:06:0e:2c:10:80:c9:5e:b1:9b:65:fc:87:84:a5: 71:e1:67:42:61:46:d4:91:ae:f8:03:8e:7f:50:fc:a6:f8:f5: 9b:8d:35:60:f7:81:d2:53:2c:1b:e5:81:7d:d5:06:42:ac:2d: 0c:dd:a2:9c:f8:4f:e1:bf:3f:cc:1b:94:fe:cf:95:7e:95:e5: 64:0c:66:f9:87:23:9e:e3:43:13:48:d0:79:12:bd:61:ef:ff: 05:3c:90:da:fe:a0:08:e4:3b:65:c7:52:2a:9d:ce:73:68:ba: 57:b6:27:40:92:36:42:17:59:58:c5:66:f5:da:8e:af:88:d8: ca:81:20:6f:34:76:52:82:fd:b7:76:20:f2:0f:75:65:a4:75: 7d:d6:0e:44 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc3NzMxMTAvBgNVBAUTKEQ5MDBEREYyNEEyNzYyMkJGOTY0Mzc1N0VEQkNBRkZB RUUzMjFDMzcwHhcNMjYwNzIyMTc0NjU1WhcNMjYwNzI5MTc0NjU1WjAYMRYwFAYD VQQDEw02YTYxMDIxMC00ZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTndvaSdth/w5lbKkTjs9dmgIAjb0kxXyHt/aUGcdAvj4CBcqSVijuQ/U/XU B8KaTka1Tn+fm/xNg9q/WwTdMskvqO77rVLXq+IxQ4alq31nRMHH7ERj2iP/p9eL j6qMwnF0NWkYvIIU1KepyqgpEeN0uZerHb1Q/BR4XgMXZji/zeELO+9AiQ6AY91N dLDQsAg+zxXJiJvOH9TqNVKPGCfS7YJ1LvfhShd9+ExLnOczvRQJ7X9O4oIThvwF 3yhGCrYz+pWxNe76GmktBMKGumLLicPvbsqNFEOkUFDSv81AZg0s/aevo+NxjDrH akWUNwtjX1stk9aKbQn3fUQivwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJkyJGMk 0mYxHHMTc6i4fO/zMzgpMB8GA1UdIwQYMBaAFNkA3fJKJ2Ir+WQ3V+28r/ruMhw3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzc3My9BRDMyMjM3Q0Ey RTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllpdjVaRGRYN2J5di11NHlI RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRRGQ4a29uWWl2NVpEZFg3Ynl2LXU0eUhEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzc3My9BRDMyMjM3Q0EyRTgxMUU5QkFFNzhENDdDNEY5QUUwMi8yUURkOGtvbllp djVaRGRYN2J5di11NHlIRGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAySRyRHRBjJbZH3IjsChPVQimF0S7x9tBNmckAVOsyKjmyfwoX4Y0rJwu0GOR HiM+0Z/dvTYOPGZFwO4QotNlcn56CCQiKdwPXSIOiiCbR+1qu7eLn94EORvjamiA NvpDJo5MQP/FWYoHQwjDPX0SOgYOLBCAyV6xm2X8h4SlceFnQmFG1JGu+AOOf1D8 pvj1m401YPeB0lMsG+WBfdUGQqwtDN2inPhP4b8/zBuU/s+VfpXlZAxm+YcjnuND E0jQeRK9Ye//BTyQ2v6gCOQ7ZcdSKp3Oc2i6V7YnQJI2QhdZWMVm9dqOr4jYyoEg bzR2UoL9t3Yg8g91ZaR1fdYORA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:47:59 2026 by rpki-client