$ rpki-client -vvf rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft File: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft (raw, json) Hash identifier: AkBAlC5IBEGBUMtct02l7No3rmklpfUpDPWFvObxv4s= Subject key identifier: AB:15:73:85:EE:AB:74:09:98:C6:9D:73:32:20:BB:14:97:39:EC:E7 Authority key identifier: AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13 Certificate issuer: /CN=A91E013A/serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft Manifest number: 21 Signing time: Thu 23 Jul 2026 10:58:53 +0000 Manifest this update: Thu 23 Jul 2026 10:58:53 +0000 Manifest next update: Thu 30 Jul 2026 10:58:53 +0000 Files and hashes: 1: ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl (hash: dAJU5B42Dmd7yDU58vK+ykDpZfZe3r28ArL7THiz2sE=) 2: B3FF987E5B8211F19BF8DAE6A7833773.roa (hash: h4RxHhEmIQwOTsAbSmC6rMq+saFdX1zwIpm3FWaV4gQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E013A, serialNumber=AF2D906E264D2A860B049201D50E185EF2ADC113 Validity Not Before: Jul 23 10:58:53 2026 GMT Not After : Jul 30 10:58:53 2026 GMT Subject: CN=6a61f3ed-ea56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ee:d4:13:e3:1f:35:43:10:ee:ec:c1:b7:51: c8:87:d4:e9:3a:17:c9:7f:1c:1e:4a:64:0e:89:df: 8a:3a:3f:fe:0d:53:76:cf:a3:39:66:43:c2:71:f8: 82:c0:44:f0:02:25:a1:ca:9d:98:5f:72:a1:46:58: 63:0d:b1:de:3d:78:a3:17:a8:4f:6b:cc:99:9d:b3: 23:8f:15:ef:4e:fb:7e:c0:21:00:98:8d:b6:3a:26: 19:ea:7f:f4:91:21:a3:ff:45:7e:0b:0b:24:0b:cc: a7:68:56:ed:1f:4b:0a:bd:53:30:3a:17:e7:32:59: df:24:03:83:3d:7f:b6:c3:39:8d:34:df:fb:7d:91: 39:52:e1:20:50:1f:b0:51:24:82:b3:06:ee:00:77: 24:f1:e1:62:17:c6:33:2c:05:ad:38:fd:d6:f2:30: 18:4e:0d:49:f8:7a:82:bc:86:3e:59:7a:01:40:79: da:75:59:dd:f7:38:06:dc:c5:e6:c4:a5:5d:fc:97: 96:09:48:b5:94:0c:72:c6:36:bc:e1:06:bd:6d:3d: b6:14:74:b8:fa:1b:52:de:8f:98:8a:85:db:4a:57: ea:ac:b2:98:42:32:a0:52:16:f0:c3:78:b8:23:a7: 73:d0:7f:be:71:66:44:ae:9e:87:c8:e1:ac:73:2f: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:15:73:85:EE:AB:74:09:98:C6:9D:73:32:20:BB:14:97:39:EC:E7 X509v3 Authority Key Identifier: keyid:AF:2D:90:6E:26:4D:2A:86:0B:04:92:01:D5:0E:18:5E:F2:AD:C1:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E013A/84752FD2581811F186FA5137A3833773/ry2QbiZNKoYLBJIB1Q4YXvKtwRM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:61:ee:04:c8:6a:02:2f:b0:c3:61:b9:2d:7f:8a:35:41:b0: 90:4c:80:38:b5:d2:46:70:96:ee:92:2f:4e:25:f8:95:ba:de: 53:72:5c:05:22:3d:c9:a0:41:43:57:be:50:1c:ec:35:a6:57: d5:2d:28:41:09:ca:3c:94:63:78:71:a0:e8:ad:8f:4e:25:4f: 2f:ee:ec:f6:a1:60:c7:5d:d0:f2:f1:c6:a4:86:40:6e:93:14: 07:42:6a:5c:7b:7c:d6:c7:d5:88:86:55:df:9e:e7:cb:5c:32: 7d:65:a2:12:94:8a:8d:85:11:b1:ea:bf:9d:17:35:d2:c7:ca: b8:78:a8:7b:9c:dc:64:1e:56:4f:5e:aa:31:be:c2:8e:a9:fa: 73:ac:6b:8d:6e:2a:4f:32:b6:d1:a2:8e:c0:b4:de:a5:11:85: b3:84:3d:23:7f:5a:f1:e9:93:6a:32:11:33:19:68:cc:44:2a: 78:97:c6:d7:14:03:ed:a6:9c:c6:50:a2:2c:33:be:90:45:b5: 3f:16:0e:f0:9d:68:67:1e:04:04:44:0d:18:71:d3:b0:08:77: c1:92:8e:06:53:1e:5d:54:d2:38:ea:34:60:cf:ff:26:6f:be: 8a:f3:30:4c:3f:9c:24:67:a4:a2:ee:0f:8f:36:ee:2c:e9:80: 44:6c:6b:cf -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDEzQTExMC8GA1UEBRMoQUYyRDkwNkUyNjREMkE4NjBCMDQ5MjAxRDUwRTE4NUVG MkFEQzExMzAeFw0yNjA3MjMxMDU4NTNaFw0yNjA3MzAxMDU4NTNaMBgxFjAUBgNV BAMTDTZhNjFmM2VkLWVhNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS7tQT4x81QxDu7MG3UciH1Ok6F8l/HB5KZA6J34o6P/4NU3bPozlmQ8Jx+ILA RPACJaHKnZhfcqFGWGMNsd49eKMXqE9rzJmdsyOPFe9O+37AIQCYjbY6Jhnqf/SR IaP/RX4LCyQLzKdoVu0fSwq9UzA6F+cyWd8kA4M9f7bDOY003/t9kTlS4SBQH7BR JIKzBu4AdyTx4WIXxjMsBa04/dbyMBhODUn4eoK8hj5ZegFAedp1Wd33OAbcxebE pV38l5YJSLWUDHLGNrzhBr1tPbYUdLj6G1Lej5iKhdtKV+qssphCMqBSFvDDeLgj p3PQf75xZkSunofI4axzLzKTAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqxVzhe6r dAmYxp1zMiC7FJc57OcwHwYDVR0jBBgwFoAUry2QbiZNKoYLBJIB1Q4YXvKtwRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwMTNBLzg0NzUyRkQyNTgx ODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29ZTEJKSUIxUTRZWHZLdHdS TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcnkyUWJpWk5Lb1lMQkpJQjFRNFlYdkt0d1JNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw MTNBLzg0NzUyRkQyNTgxODExRjE4NkZBNTEzN0EzODMzNzczL3J5MlFiaVpOS29Z TEJKSUIxUTRZWHZLdHdSTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBBYe4EyGoCL7DDYbktf4o1QbCQTIA4tdJGcJbuki9OJfiVut5TclwFIj3JoEFD V75QHOw1plfVLShBCco8lGN4caDorY9OJU8v7uz2oWDHXdDy8cakhkBukxQHQmpc e3zWx9WIhlXfnufLXDJ9ZaISlIqNhRGx6r+dFzXSx8q4eKh7nNxkHlZPXqoxvsKO qfpzrGuNbipPMrbRoo7AtN6lEYWzhD0jf1rx6ZNqMhEzGWjMRCp4l8bXFAPtppzG UKIsM76QRbU/Fg7wnWhnHgQERA0YcdOwCHfBko4GUx5dVNI46jRgz/8mb76K8zBM P5wkZ6Si7g+PNu4s6YBEbGvP -----END CERTIFICATE-----Generated at Fri Jul 24 02:01:31 2026 by rpki-client