$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft File: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft (raw, json) Hash identifier: 6aNo2PrTugq03swT21K6dAAeYDVohh5viumeX8UD/lU= Subject key identifier: 13:A7:11:51:E3:15:D5:F8:9E:34:A6:88:1B:7F:F2:50:50:37:61:86 Authority key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED Certificate issuer: /CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Certificate serial: 14BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft Manifest number: 1495 Signing time: Wed 22 Jul 2026 15:29:52 +0000 Manifest this update: Wed 22 Jul 2026 15:29:52 +0000 Manifest next update: Wed 29 Jul 2026 15:29:52 +0000 Files and hashes: 1: 2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl (hash: 2j+lWyFFIr9F4O75NG4beG/1nq0aGDerDBVtDldFhsc=) 2: B969D2D0BA4A11EC90B53115C4F9AE02.roa (hash: yi1Y4ZAzUNkEpGZbqmVVGbSuzm1HULg6+CfEtcyOZy0=) 3: 49678FBCB72B11EC8C8E3017C4F9AE02.roa (hash: w2NWjfabvdQFP3C4IwPEM+fGnRuZMPns4zEDrwbMyxc=) 4: 76C6BCF6B72811ECAEFC180DC4F9AE02.roa (hash: Ahq8pAmeUbi/UnTEDIDcD1i65MG+Vf7huahab+3HR9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5307 (0x14bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Validity Not Before: Jul 22 15:29:52 2026 GMT Not After : Jul 29 15:29:52 2026 GMT Subject: CN=6a60e1f0-9eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:db:08:54:42:ce:4e:cf:38:77:01:35:7d: bf:30:3a:66:af:3f:6d:c7:ef:df:8a:eb:30:8b:69: d9:6d:0d:9f:34:a6:d5:55:e9:3b:81:a0:39:ab:3f: a5:8b:36:cf:f4:43:92:35:84:e2:89:a1:d6:ab:3a: 8d:0c:4c:4c:cc:f8:c5:13:92:8a:7c:90:f1:1b:3b: 39:96:57:16:80:c3:85:a8:67:a1:d8:74:31:b5:8e: 95:af:c7:01:be:cc:b9:05:e8:d9:e7:c8:72:61:8b: ed:30:b3:b8:2f:ff:6d:a6:4b:66:83:eb:29:77:24: e8:49:d4:64:3e:61:2e:0a:dc:ce:de:16:01:2f:21: b6:55:ba:54:aa:bc:76:b9:d1:dd:40:6a:87:2a:4e: b5:ca:61:85:84:7c:61:64:b1:ac:20:88:4c:ba:cf: 3e:7e:ba:77:fa:bc:24:36:5b:05:64:d7:57:6e:b3: 56:0d:1d:39:a5:be:1c:1c:7f:35:1f:22:f1:75:c9: 6d:82:92:e3:94:22:96:b3:e8:fc:6d:73:51:44:c7: 8f:96:91:d3:21:a3:91:5c:a0:a6:c1:c0:d5:8e:44: be:1e:5b:29:9d:e4:3b:28:0f:39:a7:53:0c:29:63: 5a:1f:88:16:9d:6b:0d:16:e5:bc:2a:60:05:30:0e: 7f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A7:11:51:E3:15:D5:F8:9E:34:A6:88:1B:7F:F2:50:50:37:61:86 X509v3 Authority Key Identifier: keyid:DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:bb:c4:fd:b3:66:ea:48:80:76:0f:e3:ef:77:4e:1b:2c:1a: 32:86:e6:78:b9:3a:a8:da:0a:52:f9:e9:b5:17:27:6c:99:96: f6:93:12:39:5f:2e:79:7d:00:cb:a8:5c:1a:a9:dd:36:47:1c: 6d:2d:9c:b0:a4:82:41:ac:ee:35:7d:7e:ce:8b:58:17:ba:2c: 9c:a8:97:a2:df:c8:61:04:1f:e3:72:dd:65:d8:fa:12:d5:14: a7:32:d5:df:cc:55:18:d6:5b:fc:74:56:0d:8a:85:6a:0e:06: 74:18:39:54:7d:ef:0c:5c:53:36:9d:48:d8:d2:98:60:fb:3c: aa:79:36:ef:e2:48:04:f1:5b:00:8d:5e:02:33:7c:16:92:08: 19:57:b5:f7:3d:ae:8b:71:61:4c:50:b1:06:65:15:87:95:73: 23:11:2d:e0:02:8d:a7:c5:ee:29:7d:e1:c2:dc:1f:30:fd:a8: 77:cd:9e:95:f0:0e:50:8f:0d:5d:ac:32:c7:e9:2a:c7:92:ad: f0:b3:6a:db:5e:b6:82:91:65:7c:d5:9d:06:c8:ff:42:7d:a0: c1:5d:f5:47:99:fd:bf:b5:ac:f6:9f:14:0d:d2:a3:38:c4:cb: a7:19:e4:56:02:f3:9f:9f:68:48:58:bd:be:c6:d6:49:07:1d: 89:23:f0:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKERBNEI1QzIxMjNCQTlEMEY4MDIzNzhEQURERDQ4MDFC NTY3MEEzRUQwHhcNMjYwNzIyMTUyOTUyWhcNMjYwNzI5MTUyOTUyWjAYMRYwFAYD VQQDEw02YTYwZTFmMC05ZWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFfbCFRCzk7POHcBNX2/MDpmrz9tx+/fiuswi2nZbQ2fNKbVVek7gaA5qz+l izbP9EOSNYTiiaHWqzqNDExMzPjFE5KKfJDxGzs5llcWgMOFqGeh2HQxtY6Vr8cB vsy5BejZ58hyYYvtMLO4L/9tpktmg+spdyToSdRkPmEuCtzO3hYBLyG2VbpUqrx2 udHdQGqHKk61ymGFhHxhZLGsIIhMus8+frp3+rwkNlsFZNdXbrNWDR05pb4cHH81 HyLxdcltgpLjlCKWs+j8bXNRRMePlpHTIaORXKCmwcDVjkS+HlspneQ7KA85p1MM KWNaH4gWnWsNFuW8KmAFMA5/KQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBOnEVHj FdX4njSmiBt/8lBQN2GGMB8GA1UdIwQYMBaAFNpLXCEjup0PgCN42t3UgBtWcKPt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wNzQ5NTg5MDkx ODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5RLUFJM2phM2RTQUcxWndv LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJrdGNJU082blEtQUkzamEzZFNBRzFad28tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlCRC8wNzQ5NTg5MDkxODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5R LUFJM2phM2RTQUcxWndvLTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVLvE/bNm6kiAdg/j73dOGywaMobmeLk6qNoKUvnptRcnbJmW9pMSOV8ueX0A y6hcGqndNkccbS2csKSCQazuNX1+zotYF7osnKiXot/IYQQf43LdZdj6EtUUpzLV 38xVGNZb/HRWDYqFag4GdBg5VH3vDFxTNp1I2NKYYPs8qnk27+JIBPFbAI1eAjN8 FpIIGVe19z2ui3FhTFCxBmUVh5VzIxEt4AKNp8XuKX3hwtwfMP2od82elfAOUI8N Xawyx+kqx5Kt8LNq2162gpFlfNWdBsj/Qn2gwV31R5n9v7Ws9p8UDdKjOMTLpxnk VgLzn59oSFi9vsbWSQcdiSPwiA== -----END CERTIFICATE-----Generated at Thu Jul 23 23:00:23 2026 by rpki-client