$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: jLRXqNJj2CyGk7eyyh1VbEFFXQyVyjuUZUiNCmRmdRg= Subject key identifier: 50:D3:5B:CF:57:A6:14:4F:04:CF:6E:D0:47:1B:C7:2F:BD:1B:CE:C0 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 074F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0700 Signing time: Sun 02 Aug 2026 22:56:28 +0000 Manifest this update: Sun 02 Aug 2026 22:56:27 +0000 Manifest next update: Sun 09 Aug 2026 22:56:27 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: 4oS6kRDdrJ9jEn6fYvoR7jlJZhjp01ZvBEccVeI+Vt8=) 2: 845606CEC0A211F08C07402EC4F9AE02.roa (hash: v7d4ja1ESFuV05o4tIc6tlbK7AAd3qHGz6U1RvKvczo=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: 58vao/9GGubkwPWBOyoban8KHUzqrGmqpxVYe7P3hcw=) 4: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: pFqkF1zmQvdIJM8db/lZ4fhptMY52NI16qAgj/QHF5w=) 5: 617AEF02C0A211F0834F0B2EC4F9AE02.roa (hash: 0bX50fN7yMkPLafPhvISijJ+Iy6I0xfbZmaAYXSMxbk=) 6: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: oxu41HgxWL0E+AQvmJ1eeEwaaUHJYBTIoxmy6KwGEUQ=) 7: A19BECB47DC011F0907B9458C4F9AE02.roa (hash: cIJapcHW1zkqJzi09UTnegLWFfOthoNcKms5il2GoDA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Aug 2026 22:56:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1871 (0x74f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Aug 2 22:56:27 2026 GMT Not After : Aug 9 22:56:27 2026 GMT Subject: CN=6a6fcb1c-564d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:a5:50:55:39:be:b1:9e:3b:3a:ce:86:7a: ea:3e:2a:34:fe:ec:3d:d9:3f:b4:0c:74:11:c3:68: d2:19:34:ea:b5:e4:79:34:75:13:f1:df:6e:d7:d7: d1:07:3c:28:27:de:53:b2:42:8d:f3:9a:f9:9c:84: 11:d6:46:58:2c:cf:21:c8:77:6b:61:96:f9:61:c6: ec:b6:65:7a:f0:f6:4f:5c:fb:e9:25:96:60:a3:cd: d8:f3:04:fd:b7:7b:8a:07:b4:18:55:59:88:da:77: dd:fe:41:76:ca:a7:4c:e6:01:77:21:89:0d:65:0b: 8b:a5:a3:84:4c:c8:48:3c:34:2f:f3:f9:04:1c:88: 61:c6:14:b5:a4:20:7c:af:8b:b4:9e:ed:dc:a3:58: 58:72:9c:cd:49:a3:e8:ef:df:c1:30:80:97:29:56: 49:3d:d5:9e:3f:83:d1:bc:e6:f9:90:34:88:91:16: ce:e9:84:2d:a4:e2:c7:01:2f:c1:3d:e6:9d:ce:24: b7:d6:04:a5:06:d8:8b:27:c6:9d:d2:64:fc:d6:df: 20:3f:6d:06:d7:0a:3b:0e:2b:70:00:80:27:15:8f: 84:d0:ab:8b:47:b7:24:5a:3e:6c:d4:ed:cb:a3:bd: 18:00:7c:c5:ed:88:9e:57:1e:3c:30:94:27:47:c0: 06:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D3:5B:CF:57:A6:14:4F:04:CF:6E:D0:47:1B:C7:2F:BD:1B:CE:C0 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:12:ad:26:f1:a6:a4:ec:c7:5c:3c:7c:09:ae:94:ff:da:ba: 50:05:c1:13:cb:d8:c5:c6:03:54:68:e5:5b:28:1c:74:8f:09: 11:30:65:d0:9c:65:1d:a2:87:58:f8:ae:31:9d:22:d8:de:87: 9c:67:78:8c:d8:9f:12:c1:d3:ce:37:13:99:29:c4:52:84:77: 72:3d:3a:ae:70:f1:67:30:27:19:9b:91:eb:d9:7c:2f:f4:80: 52:cf:4f:0c:67:bd:e6:e9:36:46:8f:cf:bf:5d:3a:23:ef:c1: 69:bd:00:4f:87:e9:52:80:31:93:d9:1f:8d:4e:27:20:72:ce: ab:d4:b5:1c:75:90:fc:b6:30:3e:df:03:bd:f2:50:c9:a8:50: 32:07:58:bc:5f:a2:8a:5e:6c:43:79:27:07:cd:80:c8:a1:c8: b6:b9:2d:b4:08:99:7b:e2:44:82:35:4d:14:e3:ce:34:53:04: 4c:4b:26:5d:c4:86:d0:e6:94:5d:05:58:31:2c:ef:7d:10:7a: 13:57:88:9e:a6:38:d6:95:37:92:d1:6d:aa:2e:fe:d3:31:8c: 86:6b:10:10:50:91:e0:e6:8d:07:91:72:2a:ed:db:24:07:6e: 95:88:19:39:ad:27:b1:2a:9d:00:d4:0f:b1:f7:7a:12:8c:03: 6e:53:89:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjYwODAyMjI1NjI3WhcNMjYwODA5MjI1NjI3WjAYMRYwFAYD VQQDEw02YTZmY2IxYy01NjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJylUFU5vrGeOzrOhnrqPio0/uw92T+0DHQRw2jSGTTqteR5NHUT8d9u19fR BzwoJ95TskKN85r5nIQR1kZYLM8hyHdrYZb5YcbstmV68PZPXPvpJZZgo83Y8wT9 t3uKB7QYVVmI2nfd/kF2yqdM5gF3IYkNZQuLpaOETMhIPDQv8/kEHIhhxhS1pCB8 r4u0nu3co1hYcpzNSaPo79/BMICXKVZJPdWeP4PRvOb5kDSIkRbO6YQtpOLHAS/B PeadziS31gSlBtiLJ8ad0mT81t8gP20G1wo7DitwAIAnFY+E0KuLR7ckWj5s1O3L o70YAHzF7YieVx48MJQnR8AGcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFDTW89X phRPBM9u0Ecbxy+9G87AMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuRKtJvGmpOzHXDx8Ca6U/9q6UAXBE8vYxcYDVGjlWygcdI8JETBl0JxlHaKH WPiuMZ0i2N6HnGd4jNifEsHTzjcTmSnEUoR3cj06rnDxZzAnGZuR69l8L/SAUs9P DGe95uk2Ro/Pv106I+/Bab0AT4fpUoAxk9kfjU4nIHLOq9S1HHWQ/LYwPt8DvfJQ yahQMgdYvF+iil5sQ3knB82AyKHItrkttAiZe+JEgjVNFOPONFMETEsmXcSG0OaU XQVYMSzvfRB6E1eInqY41pU3ktFtqi7+0zGMhmsQEFCR4OaNB5FyKu3bJAdulYgZ Oa0nsSqdANQPsfd6EowDblOJ1g== -----END CERTIFICATE-----Generated at Tue Aug 4 08:46:19 2026 by rpki-client