$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft File: 2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft (raw, json) Hash identifier: KzSpYRgCFEBZcpsTZ8R6znFciw13PywWFRNENxD/gfQ= Subject key identifier: 53:7C:35:A1:96:FC:B8:18:B0:EB:A1:00:60:02:36:BE:7C:3F:37:9B Authority key identifier: D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE Certificate issuer: /CN=A91689B9/serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft Manifest number: 0A Signing time: Tue 21 Jul 2026 11:03:30 +0000 Manifest this update: Tue 21 Jul 2026 11:03:29 +0000 Manifest next update: Tue 28 Jul 2026 11:03:29 +0000 Files and hashes: 1: 2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl (hash: e5S5iSnbCGW9vycF+raR3ubI9vIOzxwYYpZuDGcL7Lw=) 2: 9D1E103C79BD11F1A56111AD5AA30FBC.roa (hash: v5LCMSJ7unsotsj1CUAFikFHoJMXhj0hIvgSsrnsLqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 11:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B9, serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE Validity Not Before: Jul 21 11:03:29 2026 GMT Not After : Jul 28 11:03:29 2026 GMT Subject: CN=6a5f5202-a948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:e9:5a:81:49:19:05:90:e5:7a:5c:be:85: 71:3a:e3:72:19:49:28:4a:56:63:4e:81:92:c6:3b: 66:e0:1c:d1:e1:b6:64:92:61:5c:e8:c9:ac:4b:b9: d2:8e:3a:cc:52:0d:7d:a2:45:e3:9f:2f:b3:83:63: a8:80:7f:29:ef:1d:e2:bc:6e:62:3b:8d:9b:54:3b: 0e:10:de:7f:51:ce:2e:3c:c0:4b:c2:30:4b:6a:e6: 9e:1e:e1:93:65:57:a3:20:89:cf:b7:9d:2f:cd:6f: 04:b8:fc:a5:ab:e3:b2:28:e2:d3:26:ce:c6:d3:c3: 3f:30:82:f9:a4:30:a3:c2:5b:ff:4a:9c:39:c3:6d: c0:ea:bd:2e:02:db:f0:65:24:3c:8c:8b:cb:7e:dc: 1e:cc:f2:7d:65:93:b6:aa:63:24:c4:98:85:7a:ad: 49:88:c5:4c:48:6f:9d:2b:dd:06:58:51:e3:28:25: 09:2c:7d:29:97:20:f9:14:af:b3:d9:c7:6d:4b:ed: c4:57:88:f6:17:2a:31:14:2c:53:b8:9a:e3:9f:bf: 9a:2f:7c:ad:01:e2:fa:1e:74:2e:a0:c7:f9:a0:1a: 1d:eb:71:0f:67:bf:b1:52:51:fc:ff:ee:61:57:58: 23:d7:85:96:25:3e:ad:1b:b0:c9:7e:b2:0d:d1:68: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:7C:35:A1:96:FC:B8:18:B0:EB:A1:00:60:02:36:BE:7C:3F:37:9B X509v3 Authority Key Identifier: keyid:D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:b6:99:c8:01:bd:dc:2c:1a:b3:ee:1c:9a:27:2a:00:bf:0d: b0:2e:3b:e1:2c:c3:c7:92:76:59:28:4b:5a:6d:30:e8:c4:91: 74:46:20:c2:3c:c3:53:59:15:53:99:87:01:f8:8a:08:55:76: 6e:b8:c3:33:72:22:c3:e2:65:0d:ca:eb:7b:f2:80:e2:a4:18: 48:af:55:e7:97:1b:e2:c4:1c:bd:3e:b0:70:c8:ec:ca:28:61: 3b:ba:87:39:d1:ea:34:cb:1c:ae:80:e0:ae:4c:fd:05:3f:78: cf:f3:9d:e3:80:4e:ed:4a:54:85:d7:4b:48:b4:00:20:37:9a: 0b:f4:6e:8c:56:e2:20:4d:8e:f4:5f:fe:82:67:fc:73:f8:c3: 77:19:ca:d9:9a:eb:ed:30:fb:25:50:e9:26:7b:1d:95:ed:74: e0:30:ce:22:d1:9d:04:b4:23:e2:dd:8e:46:91:dc:4f:f1:48: 95:ff:05:fb:d8:90:1d:2c:6f:6f:26:ee:53:c2:0f:c6:25:3d: fb:42:3f:65:93:75:db:e5:7e:31:f8:b6:15:51:e2:f4:14:f1: ca:ec:60:ec:a6:05:65:2b:0c:72:f4:01:a1:1a:75:98:21:dd: 74:97:bc:0f:32:bb:e0:92:78:0c:13:71:88:80:bf:0d:5f:69: 2b:f4:0a:a9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlCOTExMC8GA1UEBRMoRDg2OURCRUEyNjMwNjQzQ0Q2RDFENEI2MzhENDZFNTM0 RDNGNkVBRTAeFw0yNjA3MjExMTAzMjlaFw0yNjA3MjgxMTAzMjlaMBgxFjAUBgNV BAMTDTZhNWY1MjAyLWE5NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa/elagUkZBZDlely+hXE643IZSShKVmNOgZLGO2bgHNHhtmSSYVzoyaxLudKO OsxSDX2iReOfL7ODY6iAfynvHeK8bmI7jZtUOw4Q3n9Rzi48wEvCMEtq5p4e4ZNl V6Mgic+3nS/NbwS4/KWr47Io4tMmzsbTwz8wgvmkMKPCW/9KnDnDbcDqvS4C2/Bl JDyMi8t+3B7M8n1lk7aqYyTEmIV6rUmIxUxIb50r3QZYUeMoJQksfSmXIPkUr7PZ x21L7cRXiPYXKjEULFO4muOfv5ovfK0B4voedC6gx/mgGh3rcQ9nv7FSUfz/7mFX WCPXhZYlPq0bsMl+sg3RaBclAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUU3w1oZb8 uBiw66EAYAI2vnw/N5swHwYDVR0jBBgwFoAU2Gnb6iYwZDzW0dS2ONRuU00/bq4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzAwQ0U1QzQwNzky RDExRjFCQzg4OTA5MDZGQTMwRkJDLzJHbmI2aVl3WkR6VzBkUzJPTlJ1VTAwX2Jx NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkduYjZpWXdaRHpXMGRTMk9OUnVVMDBfYnE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 OUI5LzAwQ0U1QzQwNzkyRDExRjFCQzg4OTA5MDZGQTMwRkJDLzJHbmI2aVl3WkR6 VzBkUzJPTlJ1VTAwX2JxNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBjtpnIAb3cLBqz7hyaJyoAvw2wLjvhLMPHknZZKEtabTDoxJF0RiDCPMNTWRVT mYcB+IoIVXZuuMMzciLD4mUNyut78oDipBhIr1XnlxvixBy9PrBwyOzKKGE7uoc5 0eo0yxyugOCuTP0FP3jP853jgE7tSlSF10tItAAgN5oL9G6MVuIgTY70X/6CZ/xz +MN3GcrZmuvtMPslUOkmex2V7XTgMM4i0Z0EtCPi3Y5GkdxP8UiV/wX72JAdLG9v Ju5Twg/GJT37Qj9lk3Xb5X4x+LYVUeL0FPHK7GDspgVlKwxy9AGhGnWYId10l7wP MrvgkngME3GIgL8NX2kr9Aqp -----END CERTIFICATE-----Generated at Tue Jul 21 23:43:45 2026 by rpki-client