$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: 88cEyAldPlz4wpjHGKetwH3B9eiJHh8cvtsonbN9hJE= Subject key identifier: 51:86:5A:B2:2D:61:20:80:5A:50:81:27:97:89:09:75:7F:62:ED:BF Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 0529 Signing time: Mon 31 Aug 2026 23:30:21 +0000 Manifest this update: Mon 31 Aug 2026 23:30:20 +0000 Manifest next update: Mon 07 Sep 2026 23:30:20 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: LWp5BgvswjkOsqSZ02IZPtybcjvzywwDFOv8Zv3UYzM=) 2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: CP9FAdKBke/NciieBtLRTUYPVa+mGRMYkC3JaQUvBRc=) 3: 90065F424DB511F0A1C8D30DC4F9AE02.roa (hash: bPO66cPU1SPGOc5KH5eGrolnSN1m6sptmbmqTiJIuEU=) 4: E03427482D2411F192A7D59AB8833773.roa (hash: jK7mks1MMjJvVIyRYKwMkRBkaa32MR5Py6W7RYY9KqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 23:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: Aug 31 23:30:20 2026 GMT Not After : Sep 7 23:30:20 2026 GMT Subject: CN=6a960e8d-8129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:a6:17:a1:ec:52:3b:c5:51:eb:5e:09:dc: 67:5e:82:6a:ce:89:2d:d4:c5:1e:b7:1f:e5:f1:41: 85:ec:00:e3:dc:b5:72:b8:af:54:96:ac:0c:95:d0: 72:fc:ff:1e:aa:25:5e:b9:46:cb:d1:02:7c:34:93: ae:8e:a0:c7:ba:f7:f8:5d:8d:73:51:6e:da:7f:0c: 19:fc:30:f8:ca:43:54:60:e5:4a:6d:4f:40:05:3b: 2c:62:48:1c:06:a7:d4:d8:de:88:7e:76:dd:11:f9: 37:d0:78:39:48:2e:ab:86:7b:db:1a:21:f7:77:34: 39:97:6d:1a:c6:c3:58:09:ee:24:d7:31:44:39:a6: 13:23:e4:b7:25:21:4c:7e:77:15:f3:7e:6f:b4:33: 72:95:c9:23:0f:ac:05:dd:6d:36:ca:62:28:7b:56: bf:f1:34:c9:92:ce:56:c6:f7:6c:8d:5f:d8:5c:f1: 38:77:cc:0e:98:6e:b4:68:6a:15:0c:4e:f1:31:f0: 69:11:3a:3b:9f:dd:81:62:18:4b:ad:45:28:10:c7: bf:b6:2b:fa:0c:29:24:03:15:36:b9:27:56:67:29: 8a:8d:ad:87:e0:d8:8c:86:51:ca:ad:7b:4f:bf:ac: 1c:ed:ee:dc:44:9c:be:bd:20:14:10:d2:7b:03:68: 67:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:86:5A:B2:2D:61:20:80:5A:50:81:27:97:89:09:75:7F:62:ED:BF X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d8:59:82:1c:e5:7e:96:08:9f:5f:a1:60:22:a7:03:eb:46: 96:98:c9:36:7a:ee:97:9c:79:72:16:c0:e6:d7:ea:a6:2c:34: 41:32:88:e2:72:ac:b4:c9:a7:8d:35:cc:b8:5b:18:de:43:b9: 7c:c5:d4:f8:ec:6c:ce:72:5a:5c:86:7b:05:34:61:6c:6b:3f: 97:85:fb:ea:f0:81:b6:d2:65:8d:7d:6b:62:47:8c:63:49:53: b0:43:20:0f:e5:17:e1:90:d0:a5:32:a1:23:36:ec:dd:08:39: 57:10:07:e9:b3:a7:a5:3a:23:de:a0:ec:dd:ce:61:95:44:cf: e2:f1:bc:01:ea:b0:e8:e8:b3:20:9d:e4:53:81:38:ae:9e:19: 42:86:21:a8:de:6a:af:15:1f:c0:4b:b2:f9:01:91:91:27:e2: 56:9b:6b:a9:6f:ab:ca:4b:39:a3:03:bc:26:4c:02:e9:5f:51: fa:a8:83:52:d4:ee:b6:98:82:f4:cb:b3:aa:00:c6:15:16:07: 7f:79:84:21:75:f8:f0:e6:cd:3f:f0:41:94:4d:62:82:89:66: f2:aa:89:c2:9e:fe:d1:d1:64:5b:9e:7f:81:14:93:89:f3:4b: 2e:d5:b0:b7:ac:b2:50:7b:f2:4f:65:b8:bf:09:39:3d:7c:4c: bb:a0:bb:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjYwODMxMjMzMDIwWhcNMjYwOTA3MjMzMDIwWjAYMRYwFAYD VQQDEw02YTk2MGU4ZC04MTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmMymF6HsUjvFUeteCdxnXoJqzokt1MUetx/l8UGF7ADj3LVyuK9UlqwMldBy /P8eqiVeuUbL0QJ8NJOujqDHuvf4XY1zUW7afwwZ/DD4ykNUYOVKbU9ABTssYkgc BqfU2N6IfnbdEfk30Hg5SC6rhnvbGiH3dzQ5l20axsNYCe4k1zFEOaYTI+S3JSFM fncV835vtDNylckjD6wF3W02ymIoe1a/8TTJks5WxvdsjV/YXPE4d8wOmG60aGoV DE7xMfBpETo7n92BYhhLrUUoEMe/tiv6DCkkAxU2uSdWZymKja2H4NiMhlHKrXtP v6wc7e7cRJy+vSAUENJ7A2hnvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFGGWrIt YSCAWlCBJ5eJCXV/Yu2/MB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADdhZghzlfpYIn1+hYCKnA+tGlpjJNnrul5x5chbA5tfqpiw0QTKI4nKstMmn jTXMuFsY3kO5fMXU+OxsznJaXIZ7BTRhbGs/l4X76vCBttJljX1rYkeMY0lTsEMg D+UX4ZDQpTKhIzbs3Qg5VxAH6bOnpToj3qDs3c5hlUTP4vG8Aeqw6OizIJ3kU4E4 rp4ZQoYhqN5qrxUfwEuy+QGRkSfiVptrqW+ryks5owO8JkwC6V9R+qiDUtTutpiC 9MuzqgDGFRYHf3mEIXX48ObNP/BBlE1igolm8qqJwp7+0dFkW55/gRSTifNLLtWw t6yyUHvyT2W4vwk5PXxMu6C7Rw== -----END CERTIFICATE-----Generated at Tue Sep 1 04:33:04 2026 by rpki-client