$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json) Hash identifier: Rg5vN3fsMYR3WrH/Ch4zTiQbfZTgMx/Q2sOusEo0MUA= Subject key identifier: B7:DD:C0:C0:21:8D:3A:FA:45:46:90:70:46:81:00:5A:8B:C6:D6:04 Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft Manifest number: 01D0 Signing time: Thu 23 Jul 2026 05:04:17 +0000 Manifest this update: Thu 23 Jul 2026 05:04:16 +0000 Manifest next update: Thu 30 Jul 2026 05:04:16 +0000 Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: MVIVLizPGL1ZPBxXwNqLfVEVRq76YzPy9Y29jqqZ17A=) 2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: Nm/9k1bK/nJvJq+EeJ6k6OoJJzoZhznxyzIVifoqxa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Validity Not Before: Jul 23 05:04:16 2026 GMT Not After : Jul 30 05:04:16 2026 GMT Subject: CN=6a61a0d1-a3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a1:25:a6:52:a9:35:f2:ee:c2:64:e8:4c:7b: fa:bf:d6:ec:c6:43:1f:8c:3f:f1:8a:a1:e1:30:fa: 8d:e2:e9:2a:22:d1:35:5a:39:e2:a2:d0:0e:4a:d4: 2e:36:b4:d2:90:f0:91:af:0d:d2:0c:04:96:d3:29: 48:4f:f3:55:96:2b:87:98:81:fd:df:c8:29:f1:d7: 44:02:bf:ee:c2:f6:2e:5a:6d:0c:99:ed:04:e7:7f: 74:62:7e:4a:b2:49:9b:02:f7:7c:80:20:2e:47:38: 6a:e2:78:da:ba:e0:a3:62:ea:03:7c:d9:22:29:7a: 88:23:8b:fe:97:72:77:1e:89:71:a0:e4:c3:e6:68: ef:bf:bb:f6:21:00:02:01:f3:e1:76:5b:e2:71:a8: 48:52:ce:5c:fa:a3:86:b6:59:70:f7:72:a1:e1:7c: b7:9e:93:86:36:03:6a:b8:e4:a3:49:69:e4:c2:14: 5f:53:e5:65:fc:7f:8a:e4:cb:61:98:bf:64:1f:a7: 72:2b:77:88:07:2f:38:06:6f:a4:ac:da:c8:40:0c: 7c:60:12:93:9e:a5:ae:ab:a4:3a:50:d5:73:11:26: 2c:2f:40:3f:5c:4e:ef:8c:2d:34:3f:4c:bb:da:70: 23:6a:a8:e4:74:d9:8f:bf:08:6b:1b:57:de:cb:c6: f3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DD:C0:C0:21:8D:3A:FA:45:46:90:70:46:81:00:5A:8B:C6:D6:04 X509v3 Authority Key Identifier: keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:98:41:1a:1a:71:f7:04:8a:d6:20:8f:75:27:44:32:c8:25: 76:4c:02:36:08:ba:ad:69:fa:4a:83:d5:8e:49:05:f3:2d:3a: 33:3d:e9:1b:97:7e:70:3a:ac:0a:72:33:e5:7a:8a:e5:50:ce: 53:6a:ea:69:8a:57:ef:0d:76:e4:05:89:f3:cd:2f:10:92:c3: 94:c4:73:1c:18:40:87:4b:b8:23:de:45:a4:ab:92:a5:41:5a: 17:8a:1b:1d:97:9b:1d:94:c7:a4:7d:d6:ad:de:15:74:a8:64: 2c:f3:67:40:de:86:ec:d7:37:a5:a3:09:e4:a2:b2:55:51:dd: 06:55:68:10:9a:29:91:26:5a:f5:7d:9c:83:64:fc:6f:74:f9: 26:f6:d9:f2:1f:66:a7:c5:cb:a8:fc:8c:05:07:c0:5e:83:ac: ec:ea:c6:75:4a:5e:b8:5a:79:e7:20:67:7e:a2:77:b2:7e:ef: 08:a5:68:94:34:9a:8d:8c:5a:ec:25:68:3f:98:56:d0:a8:44: 10:12:44:fd:95:e0:2b:f3:f5:81:b6:59:f0:8e:0e:04:50:89: 9c:7c:52:79:66:5e:6d:3e:69:1a:96:15:96:08:46:e7:73:28: 9a:6d:1d:99:6d:5f:60:e1:fd:0b:45:a1:7d:be:24:84:df:0c: e2:c3:83:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKEQ4RkM3OTVCNjNDQzQyNTczRkQ1REI0NEYwQTgzODZD OEQ2NDNCODQwHhcNMjYwNzIzMDUwNDE2WhcNMjYwNzMwMDUwNDE2WjAYMRYwFAYD VQQDEw02YTYxYTBkMS1hM2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj6ElplKpNfLuwmToTHv6v9bsxkMfjD/xiqHhMPqN4ukqItE1WjniotAOStQu NrTSkPCRrw3SDASW0ylIT/NVliuHmIH938gp8ddEAr/uwvYuWm0Mme0E5390Yn5K skmbAvd8gCAuRzhq4njauuCjYuoDfNkiKXqII4v+l3J3HolxoOTD5mjvv7v2IQAC AfPhdlvicahIUs5c+qOGtllw93Kh4Xy3npOGNgNquOSjSWnkwhRfU+Vl/H+K5Mth mL9kH6dyK3eIBy84Bm+krNrIQAx8YBKTnqWuq6Q6UNVzESYsL0A/XE7vjC00P0y7 2nAjaqjkdNmPvwhrG1fey8bzNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfdwMAh jTr6RUaQcEaBAFqLxtYEMB8GA1UdIwQYMBaAFNj8eVtjzEJXP9XbRPCoOGyNZDuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CMzk2RjNDMEM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFsY18xZHRFOEtnNGJJMWtP NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJQeDVXMlBNUWxjXzFkdEU4S2c0Ykkxa080US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CMzk2RjNDMEM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFs Y18xZHRFOEtnNGJJMWtPNFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN5hBGhpx9wSK1iCPdSdEMsgldkwCNgi6rWn6SoPVjkkF8y06Mz3pG5d+cDqs CnIz5XqK5VDOU2rqaYpX7w125AWJ880vEJLDlMRzHBhAh0u4I95FpKuSpUFaF4ob HZebHZTHpH3Wrd4VdKhkLPNnQN6G7Nc3paMJ5KKyVVHdBlVoEJopkSZa9X2cg2T8 b3T5JvbZ8h9mp8XLqPyMBQfAXoOs7OrGdUpeuFp55yBnfqJ3sn7vCKVolDSajYxa 7CVoP5hW0KhEEBJE/ZXgK/P1gbZZ8I4OBFCJnHxSeWZebT5pGpYVlghG53Momm0d mW1fYOH9C0Whfb4khN8M4sODjA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:55:25 2026 by rpki-client