$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: MfYME7wujO0Dypm/bO/EHmIyuoNCNTISNXK3++GAlM8= Subject key identifier: EB:B6:21:C1:B7:51:DB:BB:29:52:A0:02:DA:E8:94:14:4C:D0:B4:DE Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0EE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0ECA Signing time: Mon 20 Jul 2026 17:54:10 +0000 Manifest this update: Mon 20 Jul 2026 17:54:10 +0000 Manifest next update: Mon 27 Jul 2026 17:54:10 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: NpbzpHgL607fK50wBPTjabsDTVPcx8k8Q2gwRUT4tfE=) 2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: otCvD2+70hExeG7UwhAKqvYl8H+cUijlEBEY7BdlZms=) 3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: 8cuyoSN28q4uL8xy1DF6fDKydmWDLPM+OObCbWczh0k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 17:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3815 (0xee7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Jul 20 17:54:10 2026 GMT Not After : Jul 27 17:54:10 2026 GMT Subject: CN=6a5e60c2-8d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a4:0c:7c:4c:f6:dc:b5:58:df:fa:20:b7:0d: 98:b0:69:33:4f:15:03:d8:0a:69:f5:16:9f:ba:fd: c6:94:a7:2f:95:c0:0f:a5:86:1f:01:03:43:c2:99: 76:e7:33:95:5e:13:ad:da:d6:02:9a:7d:96:81:83: 27:e8:94:13:2c:6a:ec:00:3d:ce:2f:ec:88:d2:f8: 19:3f:3b:d6:1b:fc:c6:50:d3:b7:2f:e1:70:4d:24: 7a:09:68:bb:69:94:bc:c1:b0:6e:a9:19:b8:47:8c: 64:c6:31:1b:55:d6:b9:49:33:e2:56:d1:dc:d6:96: 80:f0:0a:2f:33:eb:62:23:95:7f:fa:87:dd:ca:72: 1f:30:63:01:8d:d1:6d:80:d8:21:dc:2d:dd:fb:8a: bc:72:aa:45:d0:a7:40:85:1e:b7:56:05:20:d0:31: c7:61:93:91:50:37:fd:e5:75:1a:85:2e:6b:6d:92: b7:0c:2d:f4:59:ca:d0:18:29:47:b2:ae:76:4a:d0: bc:93:0c:d4:ab:22:7c:be:1e:a3:da:33:56:9f:cc: 81:4e:42:60:8c:7b:b9:b9:17:ba:54:1e:94:31:56: 4b:2f:17:09:9c:d4:1e:21:d4:da:b1:48:da:7c:b2: 3f:af:11:35:d5:fc:54:52:9c:4a:e0:5d:ee:f7:d6: 75:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B6:21:C1:B7:51:DB:BB:29:52:A0:02:DA:E8:94:14:4C:D0:B4:DE X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:29:20:d5:98:1e:40:6e:53:fe:2f:36:61:03:81:4a:4e:48: c4:bf:7c:a6:c2:9c:e1:f8:a9:07:12:dd:f9:12:64:65:7e:3d: cb:20:ec:75:a0:0b:32:dd:21:85:eb:69:24:bf:25:cf:50:bb: 9d:32:a8:04:df:70:93:c6:b4:81:87:2a:b7:83:dd:04:a5:85: 5f:22:c7:29:40:a4:77:b7:38:20:3c:0d:c2:c9:18:32:06:f4: 8f:04:0d:c9:c0:1b:8a:d7:8c:27:7b:b5:71:76:f0:61:c8:9d: b1:d7:4e:d7:35:37:68:8d:c4:f0:29:30:1f:91:15:89:ff:87: d9:34:21:8f:c3:ff:b5:49:96:f2:d5:a6:18:bf:d8:35:20:6b: 69:d6:e6:92:9d:c1:a1:74:6f:1c:57:c7:35:0b:7f:65:74:9d: 8b:c8:6d:6e:89:8a:9b:e1:a4:03:0f:21:0f:09:42:a0:94:48: b7:34:97:6f:cc:78:27:4f:54:2c:ca:4e:2d:4a:db:99:ca:3a: b2:ca:0a:a1:7e:cd:0d:dc:ee:04:05:21:83:ed:04:b1:75:42: fb:b8:2d:a2:1d:04:44:d6:bf:b1:cd:89:23:51:46:00:2e:9e: 96:fa:cb:8d:b9:a7:86:e9:fc:b3:6b:21:d3:06:b7:e4:58:5d: 32:5b:79:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjYwNzIwMTc1NDEwWhcNMjYwNzI3MTc1NDEwWjAYMRYwFAYD VQQDEw02YTVlNjBjMi04ZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKQMfEz23LVY3/ogtw2YsGkzTxUD2App9Rafuv3GlKcvlcAPpYYfAQNDwpl2 5zOVXhOt2tYCmn2WgYMn6JQTLGrsAD3OL+yI0vgZPzvWG/zGUNO3L+FwTSR6CWi7 aZS8wbBuqRm4R4xkxjEbVda5STPiVtHc1paA8AovM+tiI5V/+ofdynIfMGMBjdFt gNgh3C3d+4q8cqpF0KdAhR63VgUg0DHHYZORUDf95XUahS5rbZK3DC30WcrQGClH sq52StC8kwzUqyJ8vh6j2jNWn8yBTkJgjHu5uRe6VB6UMVZLLxcJnNQeIdTasUja fLI/rxE11fxUUpxK4F3u99Z1PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOu2IcG3 Udu7KVKgAtrolBRM0LTeMB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJSkg1ZgeQG5T/i82YQOBSk5IxL98psKc4fipBxLd+RJkZX49yyDsdaALMt0h hetpJL8lz1C7nTKoBN9wk8a0gYcqt4PdBKWFXyLHKUCkd7c4IDwNwskYMgb0jwQN ycAbiteMJ3u1cXbwYcidsddO1zU3aI3E8CkwH5EVif+H2TQhj8P/tUmW8tWmGL/Y NSBradbmkp3BoXRvHFfHNQt/ZXSdi8htbomKm+GkAw8hDwlCoJRItzSXb8x4J09U LMpOLUrbmco6ssoKoX7NDdzuBAUhg+0EsXVC+7gtoh0ERNa/sc2JI1FGAC6elvrL jbmnhun8s2sh0wa35FhdMlt5qA== -----END CERTIFICATE-----Generated at Tue Jul 21 20:31:39 2026 by rpki-client