$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json) Hash identifier: 7/qxu9yq9MUzspv3iOINy9i8Dg/lwtktGGNIvKkNR8Q= Subject key identifier: 7A:8A:28:AA:15:BD:17:45:85:00:84:7A:01:FA:BC:46:44:FA:16:92 Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 0413 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft Manifest number: 0407 Signing time: Thu 23 Jul 2026 01:16:59 +0000 Manifest this update: Thu 23 Jul 2026 01:16:58 +0000 Manifest next update: Thu 30 Jul 2026 01:16:58 +0000 Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: mPKt0xv4TWNBpsrItPigxMVRSw784YKAN93voFPrf4Q=) 2: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: 6ChvL5bIW0nd/LEwk1GkYjUq9x3wU+NsnqxaoPxGr+c=) 3: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: SAmq2qut5svZXJTr/IN8K0rrvVU2RQUex9B9Y/hGwvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1043 (0x413) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: Jul 23 01:16:58 2026 GMT Not After : Jul 30 01:16:58 2026 GMT Subject: CN=6a616b8a-6228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0a:e3:b1:63:36:e8:d9:0f:69:14:ef:9a:06: 31:36:40:62:34:5d:da:ee:d9:1f:27:d8:f8:e5:c1: e1:72:59:36:d1:31:bb:1c:47:0f:25:62:28:65:da: 1b:48:13:8e:7c:21:18:26:42:e0:63:d6:cb:21:a3: a0:7e:8c:02:ca:65:b4:46:e5:ea:e4:43:1b:80:01: 89:af:86:01:ce:32:ec:18:c1:6e:9f:ca:37:d7:a3: b0:2a:42:7b:ba:18:23:da:94:89:dd:df:f3:09:b1: 05:d2:e8:b5:3e:8c:e6:6c:dd:2a:a5:e9:5b:d9:d6: 25:73:d6:0f:cc:17:7b:7e:4b:29:67:2a:0a:cd:a2: b7:1c:2c:dc:2c:67:78:32:b1:9a:c7:e8:9e:26:46: 12:d6:dd:96:94:27:1d:db:b7:43:8e:ac:5e:4c:67: 01:75:02:1d:dc:4b:53:2e:07:d7:36:7d:20:01:a7: 6b:e5:bd:34:b8:33:d4:55:4e:3f:0c:3e:31:2f:93: 66:fc:34:1b:6b:47:fb:1e:6c:ce:6b:13:bf:5b:a2: 0c:d8:38:67:cb:28:a5:ff:a7:ba:fd:29:55:9b:01: a6:1e:86:40:e7:37:85:fd:d2:3e:37:ab:be:71:7e: db:5c:82:f2:f4:10:09:1a:b0:19:90:62:93:33:a1: 84:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8A:28:AA:15:BD:17:45:85:00:84:7A:01:FA:BC:46:44:FA:16:92 X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:8b:ec:53:0e:71:c0:67:21:2c:4a:09:56:2d:f3:a7:01:b9: 1a:50:18:b9:fc:43:41:36:d9:93:91:d9:15:84:6c:89:95:13: d7:0f:75:1c:b6:1a:78:dd:d0:05:c0:06:bf:5a:88:50:20:5e: c8:57:23:76:a9:cc:36:6c:d9:43:f0:36:d1:23:ee:76:0b:ce: 7e:65:b6:74:d2:72:b7:56:cb:51:c4:2c:dc:0f:39:d6:bf:ae: 77:8a:a2:23:2e:21:67:d8:f4:34:8d:36:3d:7e:5c:dd:02:3b: e7:51:4e:17:40:4b:ea:66:19:41:88:77:57:61:66:7d:a0:04: 65:0c:04:d2:d5:2a:53:0e:5c:52:e3:44:97:23:4a:58:ed:6a: 91:83:20:7d:ca:e6:2f:77:0d:e1:82:52:c1:f5:40:a3:3d:7e: 67:78:c1:bc:8e:15:72:18:63:45:7a:2a:d0:8d:4e:f6:a5:66: b6:35:70:85:67:7c:2a:10:f3:e6:e8:02:d3:6c:08:2e:ba:6f: 23:e8:eb:f6:62:38:c0:b3:1c:1a:e2:79:08:ce:19:b4:73:27: 03:33:09:84:78:40:6b:08:28:27:7b:d9:51:db:b0:72:d6:35: 89:eb:1f:b9:99:5a:59:c0:17:72:10:87:7e:91:2f:1c:9f:63: 52:c2:7e:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjYwNzIzMDExNjU4WhcNMjYwNzMwMDExNjU4WjAYMRYwFAYD VQQDEw02YTYxNmI4YS02MjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvArjsWM26NkPaRTvmgYxNkBiNF3a7tkfJ9j45cHhclk20TG7HEcPJWIoZdob SBOOfCEYJkLgY9bLIaOgfowCymW0RuXq5EMbgAGJr4YBzjLsGMFun8o316OwKkJ7 uhgj2pSJ3d/zCbEF0ui1PozmbN0qpelb2dYlc9YPzBd7fkspZyoKzaK3HCzcLGd4 MrGax+ieJkYS1t2WlCcd27dDjqxeTGcBdQId3EtTLgfXNn0gAadr5b00uDPUVU4/ DD4xL5Nm/DQba0f7HmzOaxO/W6IM2Dhnyyil/6e6/SlVmwGmHoZA5zeF/dI+N6u+ cX7bXILy9BAJGrAZkGKTM6GE+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHqKKKoV vRdFhQCEegH6vEZE+haSMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDAwQy9DQUE4ODYxRUM2MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1v akZBTTM4T3VIaV9xQko5UlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsYvsUw5xwGchLEoJVi3zpwG5GlAYufxDQTbZk5HZFYRsiZUT1w91HLYaeN3Q BcAGv1qIUCBeyFcjdqnMNmzZQ/A20SPudgvOfmW2dNJyt1bLUcQs3A851r+ud4qi Iy4hZ9j0NI02PX5c3QI751FOF0BL6mYZQYh3V2FmfaAEZQwE0tUqUw5cUuNElyNK WO1qkYMgfcrmL3cN4YJSwfVAoz1+Z3jBvI4VchhjRXoq0I1O9qVmtjVwhWd8KhDz 5ugC02wILrpvI+jr9mI4wLMcGuJ5CM4ZtHMnAzMJhHhAawgoJ3vZUduwctY1iesf uZlaWcAXchCHfpEvHJ9jUsJ+bQ== -----END CERTIFICATE-----Generated at Fri Jul 24 06:55:15 2026 by rpki-client