$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft File: 2itDzBg8qOD2qPbapUzdcwb4Yig.mft (raw, json) Hash identifier: movuOszIMo6cBilh1BzPAkbGQFlCI39rDNDFHwsl7fY= Subject key identifier: 05:38:F2:2B:3D:45:EA:A0:49:18:9D:ED:36:FC:F6:8E:C7:08:B5:41 Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0AF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft Manifest number: 0AD5 Signing time: Wed 22 Jul 2026 19:49:11 +0000 Manifest this update: Wed 22 Jul 2026 19:49:10 +0000 Manifest next update: Wed 29 Jul 2026 19:49:10 +0000 Files and hashes: 1: 2itDzBg8qOD2qPbapUzdcwb4Yig.crl (hash: MY4b5RCqOTXRFOuSQuBXxYsqJt5TgE+cYoKPz1QK+Qg=) 2: FD114232912711EFBCB4ED6EC4F9AE02.roa (hash: m31d9LY6Fb+rpx0iPU2nTzyFxPrcr/nSM8utNGuQQUI=) 3: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (hash: T6idJL8aHggzjv6s1JmSSpHwZuTbLSQAyDk/XLJrS3o=) 4: C8A0E422831611EA95762453C4F9AE02.roa (hash: zy8s2JOSWvYwBrRrmYSE0kwJEPoK1AaNF1yfDHC6Css=) 5: 0DBF860C6FB111F1A2CD02AE78A30FBC.roa (hash: HcbMw2rn7TZMWXGPZnCmUILsaTL6x9o/58aT8kV7J4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 19:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Jul 22 19:49:10 2026 GMT Not After : Jul 29 19:49:10 2026 GMT Subject: CN=6a611eb7-406a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7d:af:67:f3:ff:13:8c:38:58:30:07:18:26: d9:b0:02:4a:40:0a:12:1b:6a:44:0c:48:d4:ab:ce: 5e:eb:79:1f:30:1b:72:13:1f:4e:04:6d:d0:cf:87: a8:1c:a3:2a:8d:a6:29:d8:fa:3d:e9:68:03:03:3c: a2:e1:ef:f2:60:0b:16:73:34:d1:40:f1:20:1f:1a: 9b:4f:54:7c:6a:87:d1:21:7d:a6:98:9f:29:13:ab: 6b:b7:ba:f3:99:a6:b2:f2:3a:84:12:5b:5f:3d:31: 17:4d:79:98:ea:9f:d6:1f:b5:09:8f:e7:34:17:a7: 5d:0d:ae:65:f7:9f:fc:51:5c:1f:60:b2:8a:08:28: 06:55:2a:4d:e0:5a:2d:d8:69:b1:d4:24:58:d8:12: fe:9d:1a:57:5c:d5:d1:8a:67:8a:5c:12:3d:a7:f1: ae:a6:92:be:ec:e7:34:bb:a6:4d:13:77:1b:fd:57: b4:09:34:9d:cd:c7:1e:1b:5a:6d:55:92:62:fb:72: 79:d4:5f:22:00:b4:ef:11:9a:8f:b5:2c:c4:b9:1e: a7:ab:27:6e:3d:62:5e:cc:0b:d9:62:ab:a7:16:dc: 69:f9:da:43:46:5e:83:d5:08:97:b5:ea:ab:7c:65: f2:d6:17:45:a3:ab:27:b4:d7:6a:dd:ea:c3:05:d8: aa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:38:F2:2B:3D:45:EA:A0:49:18:9D:ED:36:FC:F6:8E:C7:08:B5:41 X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:60:5f:a5:91:be:3c:9f:80:d0:81:f2:a1:6c:af:06:9f:35: 23:ad:f0:30:aa:33:3a:7f:96:a4:5e:b7:45:c0:ae:0b:f3:79: 8f:e0:2f:46:b3:b1:12:05:86:3b:6b:5e:35:38:8d:82:c3:0f: 25:bc:4c:cc:80:c1:c5:64:e9:1b:5e:0d:73:7e:d2:f4:cd:00: 87:0b:a5:8c:4b:bc:3c:a1:5e:73:bc:f3:be:8b:0a:48:9a:eb: bf:f0:24:bd:68:7e:68:40:a8:ce:7a:64:01:3c:43:2e:fc:c3: 40:e1:7b:2f:d1:aa:e2:a1:63:3c:20:41:31:8b:fc:97:21:41: 29:54:72:a8:de:bd:04:df:da:a7:f3:94:0c:39:69:36:d5:c2: cb:8e:07:63:8d:a4:14:bd:09:5f:08:80:45:76:ee:ad:b0:d8: 3f:b7:7e:d2:c1:c0:7a:78:1f:70:c7:d4:8e:25:05:e7:de:80: a7:f6:ae:76:68:81:78:49:ed:bd:35:af:51:42:a1:8d:3c:b0: da:43:02:96:86:78:1b:a5:c0:e8:c8:70:ec:e5:f2:5c:cc:78: 79:62:9c:3d:b3:12:fc:97:b4:38:bf:aa:f0:38:7b:4c:b9:20: 82:9b:8a:16:ee:2b:07:33:f7:b5:4f:be:b9:51:e0:0b:fc:46: c7:cb:30:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjYwNzIyMTk0OTEwWhcNMjYwNzI5MTk0OTEwWjAYMRYwFAYD VQQDEw02YTYxMWViNy00MDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiH2vZ/P/E4w4WDAHGCbZsAJKQAoSG2pEDEjUq85e63kfMBtyEx9OBG3Qz4eo HKMqjaYp2Po96WgDAzyi4e/yYAsWczTRQPEgHxqbT1R8aofRIX2mmJ8pE6trt7rz maay8jqEEltfPTEXTXmY6p/WH7UJj+c0F6ddDa5l95/8UVwfYLKKCCgGVSpN4Fot 2Gmx1CRY2BL+nRpXXNXRimeKXBI9p/GuppK+7Oc0u6ZNE3cb/Ve0CTSdzcceG1pt VZJi+3J51F8iALTvEZqPtSzEuR6nqyduPWJezAvZYqunFtxp+dpDRl6D1QiXteqr fGXy1hdFo6sntNdq3erDBdiqYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAU48is9 ReqgSRid7Tb89o7HCLVBMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBFQy85OTFDRUY3RTc5NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFP RDJxUGJhcFV6ZGN3YjRZaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK2BfpZG+PJ+A0IHyoWyvBp81I63wMKozOn+WpF63RcCuC/N5j+AvRrOxEgWG O2teNTiNgsMPJbxMzIDBxWTpG14Nc37S9M0AhwuljEu8PKFec7zzvosKSJrrv/Ak vWh+aECoznpkATxDLvzDQOF7L9Gq4qFjPCBBMYv8lyFBKVRyqN69BN/ap/OUDDlp NtXCy44HY42kFL0JXwiARXburbDYP7d+0sHAengfcMfUjiUF596Ap/audmiBeEnt vTWvUUKhjTyw2kMCloZ4G6XA6Mhw7OXyXMx4eWKcPbMS/Je0OL+q8Dh7TLkggpuK Fu4rBzP3tU++uVHgC/xGx8swTQ== -----END CERTIFICATE-----Generated at Fri Jul 24 20:48:07 2026 by rpki-client