$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: TYCb17Q6GUqHr30N+42d69HHB0s7RqetxnFnHsue2eU= Subject key identifier: 22:A3:E7:36:31:5A:D8:0D:04:6E:E6:4F:30:1A:47:64:80:00:3B:2C Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0240 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 023A Signing time: Sat 25 Jul 2026 03:49:01 +0000 Manifest this update: Sat 25 Jul 2026 03:49:01 +0000 Manifest next update: Sat 01 Aug 2026 03:49:01 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: x2GQcKYzHcHHn165ghfJx32DawRlWENtg/GtH9Z3JyQ=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: BKPtg7HeDu7JSoWpyLKk1keMXR9Vj+kENI1xPmqvGCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 03:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 576 (0x240) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: Jul 25 03:49:01 2026 GMT Not After : Aug 1 03:49:01 2026 GMT Subject: CN=6a64322d-50c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:31:86:0e:c6:c6:0b:10:93:fc:07:ca:6a:44: 52:90:30:c0:39:b5:a7:2b:b2:b6:77:4c:23:a7:a6: 05:1d:5f:37:81:9c:b3:2c:bb:3a:f7:c3:44:4c:d3: a2:a2:30:ff:df:a0:d6:81:0d:75:6d:e1:e3:68:35: 14:47:e0:15:74:3e:19:51:a5:d1:45:12:96:fc:06: 2f:1c:65:41:44:7d:03:e9:25:4a:f3:7a:7f:40:88: 6e:35:1a:b0:af:da:c5:e5:c7:3b:fc:83:db:05:90: 23:69:d2:4e:32:28:c3:b3:01:19:29:4c:88:c0:2a: c7:49:0c:a7:ca:65:3d:9e:b0:6f:79:62:ef:02:bf: f0:8f:67:43:b2:81:d7:94:e5:7e:f2:dd:e9:9f:69: b8:30:6c:ba:e1:f1:54:d7:12:52:42:11:56:29:81: 45:10:3a:f6:c5:fc:bc:15:00:f0:a6:2b:31:5d:1b: 20:95:52:be:d8:fa:53:d2:9b:eb:fd:28:16:2f:7f: d7:6e:b0:f6:b0:fd:50:f6:53:55:20:8b:c9:21:0a: 26:66:cb:67:e5:b8:78:24:cd:8c:72:1b:77:a9:6a: 2d:14:28:5d:b5:7e:d1:08:91:5c:0b:23:bb:9e:5a: e0:45:74:3c:d5:68:fd:d7:d1:10:6e:ba:59:0e:fd: 9a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A3:E7:36:31:5A:D8:0D:04:6E:E6:4F:30:1A:47:64:80:00:3B:2C X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b8:9d:f4:56:3c:b3:3c:8f:7a:8d:13:4f:c6:77:b4:93:29: b8:18:79:a6:d6:31:fc:da:e4:c8:f5:8d:85:8f:ec:3a:b9:61: 9d:40:0d:c3:32:1d:c9:53:51:df:2b:5e:77:57:d1:08:61:ce: 75:23:72:6f:a7:f8:53:cf:2b:c9:73:90:1e:31:45:ee:63:a6: 8f:0f:ed:af:d5:3c:83:4c:68:e6:a6:28:17:a0:e3:c6:87:2d: 68:17:d9:67:0b:1a:c7:8e:e9:cd:ad:e3:77:c2:b1:64:9a:8b: 38:22:c4:ff:df:be:e7:e3:6a:dc:73:7e:4d:56:f3:64:0d:da: ce:85:93:f1:e9:a3:25:90:ad:be:1e:59:37:6f:8c:09:76:d5: d3:f0:36:09:1b:42:6e:eb:d7:22:4d:18:71:da:ce:26:49:80: a8:45:49:6e:ed:8c:9f:f2:f2:4a:93:1c:5e:5c:1e:65:a7:8d: cb:ed:24:b8:85:f9:81:c3:c1:1b:45:b4:21:fd:d2:7c:e2:ba: ad:96:8b:38:18:08:b5:1f:7f:1f:0c:98:c1:cb:46:f8:04:2f: 25:3b:01:af:e5:44:14:0b:95:91:72:4b:10:24:6b:27:0f:d1: c1:fc:97:50:94:62:71:21:7c:d0:2f:aa:8d:05:6f:fb:c0:1f: 19:46:db:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjYwNzI1MDM0OTAxWhcNMjYwODAxMDM0OTAxWjAYMRYwFAYD VQQDEw02YTY0MzIyZC01MGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9TGGDsbGCxCT/AfKakRSkDDAObWnK7K2d0wjp6YFHV83gZyzLLs698NETNOi ojD/36DWgQ11beHjaDUUR+AVdD4ZUaXRRRKW/AYvHGVBRH0D6SVK83p/QIhuNRqw r9rF5cc7/IPbBZAjadJOMijDswEZKUyIwCrHSQynymU9nrBveWLvAr/wj2dDsoHX lOV+8t3pn2m4MGy64fFU1xJSQhFWKYFFEDr2xfy8FQDwpisxXRsglVK+2PpT0pvr /SgWL3/XbrD2sP1Q9lNVIIvJIQomZstn5bh4JM2Mcht3qWotFChdtX7RCJFcCyO7 nlrgRXQ81Wj919EQbrpZDv2aLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCKj5zYx WtgNBG7mTzAaR2SAADssMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmrid9FY8szyPeo0TT8Z3tJMpuBh5ptYx/NrkyPWNhY/sOrlhnUANwzIdyVNR 3yted1fRCGHOdSNyb6f4U88ryXOQHjFF7mOmjw/tr9U8g0xo5qYoF6DjxoctaBfZ Zwsax47pza3jd8KxZJqLOCLE/9++5+Nq3HN+TVbzZA3azoWT8emjJZCtvh5ZN2+M CXbV0/A2CRtCbuvXIk0YcdrOJkmAqEVJbu2Mn/LySpMcXlweZaeNy+0kuIX5gcPB G0W0If3SfOK6rZaLOBgItR9/HwyYwctG+AQvJTsBr+VEFAuVkXJLECRrJw/RwfyX UJRicSF80C+qjQVv+8AfGUbbWQ== -----END CERTIFICATE-----Generated at Mon Jul 27 04:26:19 2026 by rpki-client