$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json) Hash identifier: juzW3LimPBT8F6ZTEPjBVGn5IjdmRzCwSzkYua4q+cw= Subject key identifier: F4:1A:CD:98:8D:AD:89:66:10:F9:AD:FD:EC:D6:AD:5E:64:3E:80:00 Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft Manifest number: 013A Signing time: Wed 05 Aug 2026 06:58:19 +0000 Manifest this update: Wed 05 Aug 2026 06:58:18 +0000 Manifest next update: Wed 12 Aug 2026 06:58:18 +0000 Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: 3ZNnDP88I/Wg15p3o8U/J3kxZCKND0Ilsj8c07R11Sg=) 2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: zIvaOMrJj6tNY8+g0C9uE13uNUrzvq9Y4fdiG+e+9uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Aug 2026 06:58:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Validity Not Before: Aug 5 06:58:18 2026 GMT Not After : Aug 12 06:58:18 2026 GMT Subject: CN=6a72df0a-b924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2c:15:89:10:d4:b8:f5:b7:f5:89:d7:57:d5: 2b:96:7d:43:41:87:7d:c6:02:88:d4:15:a9:ee:60: fc:0e:d9:45:46:7a:1a:b4:4e:53:4e:83:49:45:52: 5d:d4:a4:3d:2b:83:4b:4a:00:dd:14:7a:05:b1:5b: 77:af:a3:b0:dc:00:e1:d7:27:da:2f:26:4e:26:69: 7d:a9:cf:c5:b5:c3:56:d2:e4:d1:0b:e0:83:c4:75: cd:d7:3c:4b:e6:85:bc:44:a0:d3:22:0f:ca:52:32: 14:46:56:18:3e:c4:da:48:6b:f6:d1:d2:71:10:82: fc:a3:7c:b9:1e:6b:3e:6a:4b:9c:e0:05:4c:56:3d: 84:3a:1b:0d:9a:1d:31:92:71:71:eb:b9:b4:38:60: f7:6d:da:8d:d4:bc:08:96:c2:e1:05:7f:3d:a7:ad: 30:4e:96:52:84:bd:0b:85:92:0e:c5:e8:63:71:60: 1e:d0:14:df:4a:47:1e:02:38:b7:bb:f4:78:06:97: f8:2c:72:fc:88:e1:23:3d:52:dd:fa:27:68:2e:67: d5:2e:53:e3:14:ff:dc:83:78:c9:38:10:65:99:66: 42:f0:ef:95:45:6b:ce:30:00:a5:ff:7c:6c:0a:bd: 05:aa:45:2c:10:61:2e:f7:48:c0:03:40:4f:33:a3: 45:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:1A:CD:98:8D:AD:89:66:10:F9:AD:FD:EC:D6:AD:5E:64:3E:80:00 X509v3 Authority Key Identifier: keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c3:ab:9c:3b:92:07:60:bd:ca:e1:b8:17:87:e5:49:2d:3f: 78:6c:b9:a5:d9:f9:7b:c1:5c:0a:63:a6:bb:bf:89:a1:72:d1: e8:d7:66:7c:e1:a9:cf:9b:a9:de:7d:b1:50:42:c3:f2:21:72: a2:d5:b7:0c:55:ef:55:5f:62:ce:da:49:4d:9e:18:ea:87:8e: 3b:ae:4c:68:22:df:4c:c8:d1:80:8c:9f:85:03:44:7c:c9:25: 0c:0d:6a:3e:35:ab:9a:56:32:51:f6:96:05:60:75:b6:36:20: f0:fc:e8:dd:4c:95:1f:1e:2e:47:e7:86:a0:33:75:5a:4a:9c: d6:18:a2:2a:f7:26:62:6a:88:0e:22:b9:33:9b:b6:18:cd:74: 77:ab:09:70:62:e9:96:40:e2:00:89:7a:57:fc:d4:51:0d:c1: 0b:00:f3:63:5a:8d:7d:0e:b3:0a:2f:d2:31:23:e7:2f:02:a9: 69:29:17:7c:56:c7:f1:93:c7:7e:ba:33:04:d4:b4:5c:68:0c: 87:6e:ac:00:25:0f:64:22:4e:60:58:75:2e:25:1a:09:eb:47: 75:17:1f:18:81:f8:0d:22:1f:47:ff:af:6c:26:b7:6a:bd:1b: e6:79:82:71:70:1c:b2:84:be:03:24:b4:8b:ba:45:dc:7e:f1: 76:16:fb:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZBOTYxMTAvBgNVBAUTKERBRUZBNTQzNThGNEJDQzBEODQ3Q0M2REM5Q0FGNzhC QzVFMDk5NkUwHhcNMjYwODA1MDY1ODE4WhcNMjYwODEyMDY1ODE4WjAYMRYwFAYD VQQDEw02YTcyZGYwYS1iOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlywViRDUuPW39YnXV9Urln1DQYd9xgKI1BWp7mD8DtlFRnoatE5TToNJRVJd 1KQ9K4NLSgDdFHoFsVt3r6Ow3ADh1yfaLyZOJml9qc/FtcNW0uTRC+CDxHXN1zxL 5oW8RKDTIg/KUjIURlYYPsTaSGv20dJxEIL8o3y5Hms+akuc4AVMVj2EOhsNmh0x knFx67m0OGD3bdqN1LwIlsLhBX89p60wTpZShL0LhZIOxehjcWAe0BTfSkceAji3 u/R4Bpf4LHL8iOEjPVLd+idoLmfVLlPjFP/cg3jJOBBlmWZC8O+VRWvOMACl/3xs Cr0FqkUsEGEu90jAA0BPM6NFSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPQazZiN rYlmEPmt/ezWrV5kPoAAMB8GA1UdIwQYMBaAFNrvpUNY9LzA2EfMbcnK94vF4Jlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkE5Ni84QTM1MDkwQ0I1 RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZNRFlSOHh0eWNyM2k4WGdt VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ1LWxRMWowdk1EWVI4eHR5Y3IzaThYZ21XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkE5Ni84QTM1MDkwQ0I1RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZN RFlSOHh0eWNyM2k4WGdtVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXsOrnDuSB2C9yuG4F4flSS0/eGy5pdn5e8FcCmOmu7+JoXLR6NdmfOGpz5up 3n2xUELD8iFyotW3DFXvVV9iztpJTZ4Y6oeOO65MaCLfTMjRgIyfhQNEfMklDA1q PjWrmlYyUfaWBWB1tjYg8Pzo3UyVHx4uR+eGoDN1Wkqc1hiiKvcmYmqIDiK5M5u2 GM10d6sJcGLplkDiAIl6V/zUUQ3BCwDzY1qNfQ6zCi/SMSPnLwKpaSkXfFbH8ZPH frozBNS0XGgMh26sACUPZCJOYFh1LiUaCetHdRcfGIH4DSIfR/+vbCa3ar0b5nmC cXAcsoS+AyS0i7pF3H7xdhb7Ow== -----END CERTIFICATE-----Generated at Thu Aug 6 17:33:49 2026 by rpki-client