$ rpki-client -vvf rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft File: 2h2yzTH0VPaVYdhmXck--BLzl7A.mft (raw, json) Hash identifier: nIkXqETXsnGMw+qmgCKj3NlAAJkJxv6GFSj7SWtz0/Y= Subject key identifier: 5C:FB:08:DC:CE:69:9B:52:55:1D:C1:F0:71:BF:93:F5:FA:63:06:63 Authority key identifier: DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 Certificate issuer: /CN=A919A7CA/serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft Manifest number: 01FF Signing time: Sat 25 Jul 2026 04:33:07 +0000 Manifest this update: Sat 25 Jul 2026 04:33:07 +0000 Manifest next update: Sat 01 Aug 2026 04:33:07 +0000 Files and hashes: 1: 2h2yzTH0VPaVYdhmXck--BLzl7A.crl (hash: 9v91I5Qqirozelmc8T40P+MFJ4NA3gbgY9dv/l5JxqY=) 2: 730B201A81E911EEAEFE7735C4F9AE02.roa (hash: n9a6GC1PPfM4Od1umHXXBpOit75pzAoxltMx72LHRVk=) 3: 4317395081E611EE9EFE132BC4F9AE02.roa (hash: IUu7tuCQnOn20gjKX4EGAdKOaWEy3Jn4yItME/O1HD4=) 4: E71AB92A7F7D11EE8C183162C4F9AE02.roa (hash: FExGseTOnvr3aPoCSxnG4oP3qMLxtEfz5diPyHkwwjM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 04:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A7CA, serialNumber=DA1DB2CD31F454F69561D8665DC93EF812F397B0 Validity Not Before: Jul 25 04:33:07 2026 GMT Not After : Aug 1 04:33:07 2026 GMT Subject: CN=6a643c83-d880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:50:02:c3:a3:92:b4:8e:7c:f7:49:aa:9a: 91:1d:9b:49:f8:e5:53:96:ab:00:2a:d7:6d:a4:19: f8:f6:1d:2e:7d:cf:ed:ea:db:4f:e3:51:03:59:45: 21:88:26:d9:61:6f:11:22:4f:79:aa:4e:e7:e4:32: 26:e5:ed:2f:43:e1:63:40:44:c3:bc:05:47:ae:32: a3:d8:22:51:73:1c:a2:13:c3:7f:9e:d2:c3:c8:46: 4b:15:1e:22:75:7b:03:54:78:a4:09:17:99:fb:d4: 5a:d6:f2:93:c6:82:ea:87:40:17:a5:01:c3:ac:de: 96:16:b6:50:e4:90:24:94:a8:99:c4:2c:59:9d:11: e1:ba:0b:b5:40:ca:4d:27:3c:2f:01:39:38:37:97: dd:a7:1a:dd:5a:18:96:5d:31:35:c2:0f:1e:16:d1: 40:8f:d5:90:6d:fa:f4:4f:e6:c4:e8:ad:91:8c:0c: 5d:c2:ac:7a:1b:9d:d7:52:1b:ad:49:9e:ca:df:af: 8d:e3:25:52:06:96:ce:5d:20:de:7d:3e:3f:0b:93: 52:5f:f2:49:f7:b3:ee:54:69:9c:d3:37:59:e2:f2: 2b:81:b6:cd:28:ab:dc:da:84:d9:ec:20:29:f9:db: e6:e2:29:04:01:80:9d:3b:1a:e0:b2:82:4c:10:e8: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FB:08:DC:CE:69:9B:52:55:1D:C1:F0:71:BF:93:F5:FA:63:06:63 X509v3 Authority Key Identifier: keyid:DA:1D:B2:CD:31:F4:54:F6:95:61:D8:66:5D:C9:3E:F8:12:F3:97:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2h2yzTH0VPaVYdhmXck--BLzl7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A7CA/4CF7F1587EB711EE9623E91AC4F9AE02/2h2yzTH0VPaVYdhmXck--BLzl7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:75:c7:59:7b:15:bc:9e:ee:d4:88:e7:bb:81:bb:d6:a1:4d: 2d:e8:a6:3d:ae:ac:c3:17:f7:43:81:5a:88:27:17:ad:68:59: 33:56:81:59:24:29:3b:2f:3a:72:b4:e8:6a:ab:1d:7f:58:9a: 6a:c7:94:e7:e6:77:65:95:8c:a4:ae:e0:81:75:9b:b4:d6:ba: 1b:0e:33:2c:db:92:0b:d0:f4:2f:a7:57:93:18:ce:fa:c3:2a: ab:91:53:41:fc:85:1f:c0:50:79:af:8f:da:f3:bb:48:72:ab: 0a:b9:1c:b6:7a:9d:8d:07:b9:cf:b9:5a:a8:77:c5:cb:7b:20: 85:16:d6:87:19:6b:9f:7f:cf:7a:17:82:43:c5:ec:01:1d:1e: 93:94:f9:cf:b5:cd:f0:59:b0:2d:7b:f9:f1:71:31:f6:02:61: 21:67:e9:72:96:c6:58:28:eb:ee:ae:e0:b7:fd:7f:bb:9b:36: 02:e3:d5:df:25:26:e3:98:99:4e:0c:88:89:a5:2b:8a:1a:db: 23:6d:ea:50:b7:3e:5c:33:6f:49:94:3e:8e:9e:b9:90:cb:cc: 12:fc:4a:53:05:40:44:9f:73:37:de:57:41:0a:c0:bf:68:a3: bf:55:38:8c:73:e1:a1:2f:8e:85:c0:09:f7:a3:5f:c2:d7:0f: 14:c6:59:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE3Q0ExMTAvBgNVBAUTKERBMURCMkNEMzFGNDU0RjY5NTYxRDg2NjVEQzkzRUY4 MTJGMzk3QjAwHhcNMjYwNzI1MDQzMzA3WhcNMjYwODAxMDQzMzA3WjAYMRYwFAYD VQQDEw02YTY0M2M4My1kODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVhQAsOjkrSOfPdJqpqRHZtJ+OVTlqsAKtdtpBn49h0ufc/t6ttP41EDWUUh iCbZYW8RIk95qk7n5DIm5e0vQ+FjQETDvAVHrjKj2CJRcxyiE8N/ntLDyEZLFR4i dXsDVHikCReZ+9Ra1vKTxoLqh0AXpQHDrN6WFrZQ5JAklKiZxCxZnRHhugu1QMpN JzwvATk4N5fdpxrdWhiWXTE1wg8eFtFAj9WQbfr0T+bE6K2RjAxdwqx6G53XUhut SZ7K36+N4yVSBpbOXSDefT4/C5NSX/JJ97PuVGmc0zdZ4vIrgbbNKKvc2oTZ7CAp +dvm4ikEAYCdOxrgsoJMEOhnDQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFz7CNzO aZtSVR3B8HG/k/X6YwZjMB8GA1UdIwQYMBaAFNodss0x9FT2lWHYZl3JPvgS85ew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTdDQS80Q0Y3RjE1ODdF QjcxMUVFOTYyM0U5MUFDNEY5QUUwMi8yaDJ5elRIMFZQYVZZZGhtWGNrLS1CTHps N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJoMnl6VEgwVlBhVllkaG1YY2stLUJMemw3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTdDQS80Q0Y3RjE1ODdFQjcxMUVFOTYyM0U5MUFDNEY5QUUwMi8yaDJ5elRIMFZQ YVZZZGhtWGNrLS1CTHpsN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf3XHWXsVvJ7u1Ijnu4G71qFNLeimPa6swxf3Q4FaiCcXrWhZM1aBWSQpOy86 crToaqsdf1iaaseU5+Z3ZZWMpK7ggXWbtNa6Gw4zLNuSC9D0L6dXkxjO+sMqq5FT QfyFH8BQea+P2vO7SHKrCrkctnqdjQe5z7laqHfFy3sghRbWhxlrn3/PeheCQ8Xs AR0ek5T5z7XN8FmwLXv58XEx9gJhIWfpcpbGWCjr7q7gt/1/u5s2AuPV3yUm45iZ TgyIiaUrihrbI23qULc+XDNvSZQ+jp65kMvMEvxKUwVARJ9zN95XQQrAv2ijv1U4 jHPhoS+OhcAJ96NfwtcPFMZZVg== -----END CERTIFICATE-----Generated at Sun Jul 26 20:21:25 2026 by rpki-client