$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: DrzYmpvEo0emDEaKA95yoeTgNPj9OQ7dZ8N3NndFMRw= Subject key identifier: 3A:EE:B6:1C:62:DA:14:12:FA:86:F1:C8:91:DD:84:7E:7E:DB:8C:B0 Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 0A1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 0A13 Signing time: Tue 04 Aug 2026 20:01:54 +0000 Manifest this update: Tue 04 Aug 2026 20:01:53 +0000 Manifest next update: Tue 11 Aug 2026 20:01:53 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: 4AcpyJKQs49knir7S+7qcCpAlO8q1Lny12Sj8C3TkWs=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: 1jaabUICJy48DuW6hLSy4F/Zdui5Uq8G26iJUdGW7X0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 20:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2591 (0xa1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Aug 4 20:01:53 2026 GMT Not After : Aug 11 20:01:53 2026 GMT Subject: CN=6a724531-8d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:e5:3b:fa:4c:14:92:fd:c4:7a:e8:90:ea: 39:95:82:cd:a7:e7:d2:19:67:89:a2:03:4f:02:82: 22:81:32:28:0d:13:b0:01:33:b8:3d:39:d8:e7:d5: 9a:78:70:5f:b6:e3:9d:db:3a:c1:bd:0e:82:b5:4b: df:91:22:2c:1e:8a:cb:54:1c:87:e4:54:c1:6d:c6: 70:13:78:7b:f2:48:8a:9b:b0:16:61:bf:70:74:65: 3f:06:56:61:66:d7:45:ac:3d:ec:ee:e3:ba:8d:a1: e4:43:f6:6f:9c:e4:e4:f7:b9:52:87:4c:f8:74:2f: b5:55:99:10:ab:48:61:b4:ee:9d:0c:27:ad:62:b7: 7d:30:73:b1:03:9b:a0:46:7d:d0:b2:18:3b:23:4c: 9d:f4:ac:0e:03:c6:31:74:f1:53:d6:28:d8:31:76: 43:92:b2:b9:b8:96:24:92:44:b4:e6:f3:b5:90:0e: 19:bd:30:a4:4b:b0:21:83:d7:27:40:ba:b9:f5:63: 40:0f:cb:bb:18:45:95:02:d8:cf:67:bf:69:89:a3: 06:d7:2f:e0:83:cd:ae:a8:e1:7c:74:7d:27:74:70: 2e:cc:b8:85:dd:af:71:b1:27:95:b2:b4:fa:ed:ea: 69:4a:cc:b1:64:53:ac:90:43:d5:80:38:3f:0f:60: 8a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EE:B6:1C:62:DA:14:12:FA:86:F1:C8:91:DD:84:7E:7E:DB:8C:B0 X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2c:17:f8:aa:21:3e:d1:4e:ca:f5:ce:ff:cc:f1:b2:65:2d: b5:a7:f0:23:bf:05:82:8d:b1:7b:6e:da:37:7d:c9:db:b8:d8: b2:5f:b6:84:05:e5:09:f2:6b:5c:ef:eb:af:c4:1d:8a:49:ef: 62:f6:18:8b:f3:60:5c:d4:a7:7e:99:f5:76:09:f6:15:97:73: 35:22:c0:5b:1b:f8:53:70:39:ef:7b:a5:bf:58:d6:ba:62:96: 4a:0d:18:92:c7:e8:ef:da:bf:d6:5a:ff:8c:fb:8d:ff:ce:ee: 62:ec:da:e0:62:b5:ff:d0:73:b2:0b:ab:2f:4f:89:9a:c5:2a: e7:aa:4d:e0:ad:6a:a7:be:e3:5d:fc:74:1a:ca:66:e9:d0:83: 7d:60:59:dc:f7:77:52:84:f9:8b:eb:ef:55:4d:fe:dc:a0:3b: c5:3f:74:2a:1f:b2:fb:a1:65:b8:1e:c8:9b:f7:cb:73:96:73: 05:1c:60:db:2a:47:2f:52:06:8e:6b:b5:23:d2:c5:0c:1e:9e: 8d:62:9a:12:c2:24:8f:f8:85:d4:b5:af:63:dc:5f:89:b6:f7: 29:ef:07:c4:13:8e:d4:c8:61:0d:62:dd:a5:41:45:c8:25:5b: 05:2c:7c:7a:4d:d9:b1:55:5a:35:e3:d5:25:cb:c0:ef:a3:5d: b8:36:84:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjYwODA0MjAwMTUzWhcNMjYwODExMjAwMTUzWjAYMRYwFAYD VQQDEw02YTcyNDUzMS04ZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqmjlO/pMFJL9xHrokOo5lYLNp+fSGWeJogNPAoIigTIoDROwATO4PTnY59Wa eHBftuOd2zrBvQ6CtUvfkSIsHorLVByH5FTBbcZwE3h78kiKm7AWYb9wdGU/BlZh ZtdFrD3s7uO6jaHkQ/ZvnOTk97lSh0z4dC+1VZkQq0hhtO6dDCetYrd9MHOxA5ug Rn3Qshg7I0yd9KwOA8YxdPFT1ijYMXZDkrK5uJYkkkS05vO1kA4ZvTCkS7Ahg9cn QLq59WNAD8u7GEWVAtjPZ79piaMG1y/gg82uqOF8dH0ndHAuzLiF3a9xsSeVsrT6 7eppSsyxZFOskEPVgDg/D2CKcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDruthxi 2hQS+obxyJHdhH5+24ywMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiywX+KohPtFOyvXO/8zxsmUttafwI78Fgo2xe27aN33J27jYsl+2hAXlCfJr XO/rr8QdiknvYvYYi/NgXNSnfpn1dgn2FZdzNSLAWxv4U3A573ulv1jWumKWSg0Y ksfo79q/1lr/jPuN/87uYuza4GK1/9BzsgurL0+JmsUq56pN4K1qp77jXfx0Gspm 6dCDfWBZ3Pd3UoT5i+vvVU3+3KA7xT90Kh+y+6FluB7Im/fLc5ZzBRxg2ypHL1IG jmu1I9LFDB6ejWKaEsIkj/iF1LWvY9xfibb3Ke8HxBOO1MhhDWLdpUFFyCVbBSx8 ek3ZsVVaNePVJcvA76NduDaEDg== -----END CERTIFICATE-----Generated at Wed Aug 5 03:14:28 2026 by rpki-client