$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: YuOzilH3VqKUXZCHzOqTILhqs3b50Th/yu18EDyHqbU= Subject key identifier: 6F:D7:D0:A2:D5:D9:84:ED:CF:E8:BA:F9:DC:42:39:56:05:9A:74:B6 Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0DDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0DB3 Signing time: Wed 22 Jul 2026 18:08:07 +0000 Manifest this update: Wed 22 Jul 2026 18:08:07 +0000 Manifest next update: Wed 29 Jul 2026 18:08:07 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: Sk/uRD+GG5Ho0XTxxEnzcbH8hKc3DC5CHqa1IH5leuo=) 2: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: AsxJJe7AQfPpeTieWhSPJw58k738mrKqvlACAyMZyn0=) 3: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: QT3QM4Ca91XVmmXNZAyaNX0ZIAsny+fn6mttdm0kFjo=) 4: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: ZqgPOrVGAVhmIWvwXmsHVZQruBjCO1WrYjc/KjSm8/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3547 (0xddb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Jul 22 18:08:07 2026 GMT Not After : Jul 29 18:08:07 2026 GMT Subject: CN=6a610707-dbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:6b:cb:b9:0b:31:7d:00:c5:a9:ad:92:74: bb:3a:2a:fe:ee:06:8a:a4:c6:65:5e:38:88:00:f8: 56:08:ae:4d:70:ca:56:66:e4:e4:43:75:ef:8b:1f: e9:33:76:6c:01:dd:3b:9c:1f:3b:db:c0:e8:ef:3a: 4d:84:d3:28:71:02:e6:29:0e:8b:a8:4c:c7:0d:6e: 03:69:0d:c3:a7:64:9c:35:8f:e2:6f:aa:c4:d6:07: b5:be:6d:75:93:58:fb:02:59:93:5c:43:d4:87:2e: 0c:81:60:27:4c:52:c4:20:10:76:e5:64:29:85:aa: ec:12:f8:db:8a:8c:8f:65:62:89:eb:cc:39:aa:69: d9:0b:59:d5:3f:5e:1f:4a:dc:f2:f4:14:cd:33:d5: 35:7c:a6:f9:f8:9c:28:05:f8:8b:91:52:fa:bc:1e: 80:58:a3:5b:fb:50:eb:2b:2b:63:b5:57:24:36:14: f8:09:d3:98:55:7b:11:ba:b8:a0:d8:fc:45:af:b1: a3:85:7d:5e:01:08:ea:0a:08:f4:6b:79:90:9f:ec: 4b:e1:93:31:48:9f:0a:17:1d:e0:7d:5f:05:cf:ad: 58:84:76:c5:c4:42:06:92:ee:fa:ff:9b:82:f6:61: 77:11:13:49:26:15:16:cb:e8:21:59:f4:a6:8b:5f: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D7:D0:A2:D5:D9:84:ED:CF:E8:BA:F9:DC:42:39:56:05:9A:74:B6 X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:3b:f0:b3:ad:35:64:ef:42:b8:af:8e:ad:f6:8e:b1:6a:ae: d3:75:72:42:22:59:f7:f7:3a:e8:87:92:6d:b9:a8:13:3b:69: a6:3d:f3:1a:a2:13:07:e3:b4:c3:29:91:7d:6a:3c:ae:fc:ae: eb:bd:6d:86:92:ef:e1:bc:b1:8a:6c:0b:0d:d4:18:e9:9b:ff: f7:a3:7b:46:4f:a1:c7:25:27:c3:ab:9e:df:01:2a:b9:c4:f9: 71:c8:23:7a:be:31:51:0c:eb:6e:6a:4f:d5:f1:4b:20:8c:e0: fc:ed:f9:ef:b7:b1:c0:14:1f:ec:6b:aa:be:05:7e:59:48:69: 51:25:34:bf:04:f3:06:74:db:ae:f0:39:98:03:d4:12:2e:4d: 5b:68:a3:dd:ee:1f:7f:3a:4f:11:1e:38:81:c6:4f:41:d7:d1: c5:20:a9:78:5e:b1:64:af:f6:a9:44:f4:ae:f7:2f:22:f3:de: f9:2d:9a:53:2e:09:55:20:10:f7:13:cc:1d:ae:fa:5a:69:ed: f1:c5:3e:17:a1:41:4d:7d:8d:8c:3a:51:05:92:cf:fc:97:86: 59:37:88:f1:9f:76:00:c7:2d:26:b4:85:ea:28:6e:97:35:c1: 26:f6:d3:90:3a:51:bb:cf:33:96:e2:44:ac:ed:78:96:74:0a: 11:8d:34:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjYwNzIyMTgwODA3WhcNMjYwNzI5MTgwODA3WjAYMRYwFAYD VQQDEw02YTYxMDcwNy1kYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GVry7kLMX0AxamtknS7Oir+7gaKpMZlXjiIAPhWCK5NcMpWZuTkQ3Xvix/p M3ZsAd07nB8728Do7zpNhNMocQLmKQ6LqEzHDW4DaQ3Dp2ScNY/ib6rE1ge1vm11 k1j7AlmTXEPUhy4MgWAnTFLEIBB25WQpharsEvjbioyPZWKJ68w5qmnZC1nVP14f Stzy9BTNM9U1fKb5+JwoBfiLkVL6vB6AWKNb+1DrKytjtVckNhT4CdOYVXsRurig 2PxFr7GjhX1eAQjqCgj0a3mQn+xL4ZMxSJ8KFx3gfV8Fz61YhHbFxEIGku76/5uC 9mF3ERNJJhUWy+ghWfSmi1+sawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/X0KLV 2YTtz+i6+dxCOVYFmnS2MB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABzvws601ZO9CuK+OrfaOsWqu03VyQiJZ9/c66IeSbbmoEztppj3zGqITB+O0 wymRfWo8rvyu671thpLv4byximwLDdQY6Zv/96N7Rk+hxyUnw6ue3wEqucT5ccgj er4xUQzrbmpP1fFLIIzg/O3577exwBQf7GuqvgV+WUhpUSU0vwTzBnTbrvA5mAPU Ei5NW2ij3e4ffzpPER44gcZPQdfRxSCpeF6xZK/2qUT0rvcvIvPe+S2aUy4JVSAQ 9xPMHa76Wmnt8cU+F6FBTX2NjDpRBZLP/JeGWTeI8Z92AMctJrSF6ihulzXBJvbT kDpRu88zluJErO14lnQKEY00dA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:02:26 2026 by rpki-client