$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft File: RITQfaaNUwUM3PaxPAwFReZFfOU.mft (raw, json) Hash identifier: Zex7eFLhjjf4ZTyQFiMsu+rW1VSaLvRwyw7PIa/tXgU= Subject key identifier: F0:B7:C9:6A:3F:66:32:4A:D2:DE:61:C4:D2:A3:70:80:E3:A0:C5:E9 Authority key identifier: 44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 Certificate issuer: /CN=A91B5CEA/serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Certificate serial: 02BA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft Manifest number: 02B4 Signing time: Tue 21 Jul 2026 02:30:29 +0000 Manifest this update: Tue 21 Jul 2026 02:30:28 +0000 Manifest next update: Tue 28 Jul 2026 02:30:28 +0000 Files and hashes: 1: RITQfaaNUwUM3PaxPAwFReZFfOU.crl (hash: p/LYNbcBfe9xJBDwgo2JPgE6D0TbWnWeqBPZV3yaYYo=) 2: B3795CBC64F211ED9AEC046FC4F9AE02.roa (hash: WcWgzJGh0m7kjX3X0vlH0++NcJ8zb8A6kxhRMuoMb8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 698 (0x2ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5CEA, serialNumber=4484D07DA68D53050CDCF6B13C0C0545E6457CE5 Validity Not Before: Jul 21 02:30:28 2026 GMT Not After : Jul 28 02:30:28 2026 GMT Subject: CN=6a5ed9c5-f444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:fe:8a:68:20:f6:ba:4f:02:db:9d:c2:06: 8c:7a:cf:02:bb:4f:5e:2a:55:3e:32:78:4c:81:cf: af:0f:68:e9:2a:5e:5f:e7:78:f1:71:0c:e1:74:9a: 58:23:39:80:53:a8:af:6f:bb:d1:a5:80:05:be:f4: 23:e5:5b:a9:1b:d3:35:12:78:d0:83:84:c0:5f:5a: a7:3a:22:16:b7:2b:0d:3f:5a:81:c0:0d:64:e9:c7: 76:9c:5d:60:f5:74:73:5f:0b:78:ed:2a:08:f7:94: b0:88:04:21:43:e2:bf:e9:b5:41:49:ad:13:5c:a2: 68:c9:84:bc:5a:fb:b6:36:76:07:9f:79:04:55:90: de:ee:22:00:68:91:1e:b6:d4:2b:d6:aa:04:05:15: ad:25:fc:19:30:9f:2e:1a:01:2d:31:3e:38:4b:b7: 28:8d:37:b4:5b:bb:1c:b0:e1:1f:f5:90:13:91:a9: b5:ea:d1:28:80:5d:a8:a8:b0:3f:a9:c0:82:56:eb: 39:52:e5:5f:28:ea:c5:7b:f2:c4:e6:26:95:6a:f2: 12:b2:a3:5a:e4:df:73:59:99:df:e4:b6:cd:68:74: bd:14:c0:76:77:d1:b1:23:2a:71:ff:e4:ff:42:c9: 19:5f:a3:14:da:ad:b6:23:44:8a:ac:12:bd:a0:77: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B7:C9:6A:3F:66:32:4A:D2:DE:61:C4:D2:A3:70:80:E3:A0:C5:E9 X509v3 Authority Key Identifier: keyid:44:84:D0:7D:A6:8D:53:05:0C:DC:F6:B1:3C:0C:05:45:E6:45:7C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RITQfaaNUwUM3PaxPAwFReZFfOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5CEA/1F63A56864EE11EDA4A34513C4F9AE02/RITQfaaNUwUM3PaxPAwFReZFfOU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c2:c7:a3:99:f0:97:1b:03:08:b1:a0:18:d7:f5:8b:9b:d1: 88:fb:cd:9a:96:04:24:ad:f6:dc:78:0e:49:6b:02:92:53:a4: 9b:c4:ab:21:ba:05:8e:90:fe:55:ed:0d:5a:8e:69:7d:36:bb: 7b:0a:2d:6f:3b:f1:bb:86:1c:c7:a3:48:7f:ac:1f:b4:76:94: 56:f3:d9:3c:00:a0:e5:86:87:4b:60:ff:ff:9c:e6:46:74:d6: 73:e9:53:6d:20:f7:9c:87:26:53:91:54:3a:dd:fd:91:8d:7b: 79:49:8e:cd:f1:c3:86:80:6a:ce:c6:c5:4a:03:f1:ec:a0:5e: e6:c0:30:d4:dc:99:8c:e7:85:33:ec:20:14:24:2b:83:20:22: c3:94:e9:37:be:3d:d3:56:f0:d8:22:10:d9:74:e3:15:1a:84: 69:e3:48:72:da:4a:5e:72:c2:1c:8e:ed:ae:6c:93:0c:03:b0: e0:7d:4b:c9:b4:f2:b2:4a:33:f1:5a:0d:6f:96:8c:29:92:f5: 31:52:61:d8:e2:97:ef:39:34:52:78:5a:34:a3:e6:b2:14:b7: 3c:95:3e:4e:48:59:49:3a:0d:22:b7:50:58:f2:41:93:65:74: 57:5c:7b:2a:ed:6e:27:29:98:2a:e9:2d:21:fc:4f:3c:bb:95: 69:d6:2d:7d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVDRUExMTAvBgNVBAUTKDQ0ODREMDdEQTY4RDUzMDUwQ0RDRjZCMTNDMEMwNTQ1 RTY0NTdDRTUwHhcNMjYwNzIxMDIzMDI4WhcNMjYwNzI4MDIzMDI4WjAYMRYwFAYD VQQDEw02YTVlZDljNS1mNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzf+imgg9rpPAtudwgaMes8Cu09eKlU+MnhMgc+vD2jpKl5f53jxcQzhdJpY IzmAU6ivb7vRpYAFvvQj5VupG9M1EnjQg4TAX1qnOiIWtysNP1qBwA1k6cd2nF1g 9XRzXwt47SoI95SwiAQhQ+K/6bVBSa0TXKJoyYS8Wvu2NnYHn3kEVZDe7iIAaJEe ttQr1qoEBRWtJfwZMJ8uGgEtMT44S7cojTe0W7scsOEf9ZATkam16tEogF2oqLA/ qcCCVus5UuVfKOrFe/LE5iaVavISsqNa5N9zWZnf5LbNaHS9FMB2d9GxIypx/+T/ QskZX6MU2q22I0SKrBK9oHciLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPC3yWo/ ZjJK0t5hxNKjcIDjoMXpMB8GA1UdIwQYMBaAFESE0H2mjVMFDNz2sTwMBUXmRXzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUNFQS8xRjYzQTU2ODY0 RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3VU0zUGF4UEF3RlJlWkZm T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JJVFFmYWFOVXdVTTNQYXhQQXdGUmVaRmZPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUNFQS8xRjYzQTU2ODY0RUUxMUVEQTRBMzQ1MTNDNEY5QUUwMi9SSVRRZmFhTlV3 VU0zUGF4UEF3RlJlWkZmT1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn8LHo5nwlxsDCLGgGNf1i5vRiPvNmpYEJK323HgOSWsCklOkm8SrIboFjpD+ Ve0NWo5pfTa7ewotbzvxu4Ycx6NIf6wftHaUVvPZPACg5YaHS2D//5zmRnTWc+lT bSD3nIcmU5FUOt39kY17eUmOzfHDhoBqzsbFSgPx7KBe5sAw1NyZjOeFM+wgFCQr gyAiw5TpN74901bw2CIQ2XTjFRqEaeNIctpKXnLCHI7trmyTDAOw4H1LybTyskoz 8VoNb5aMKZL1MVJh2OKX7zk0UnhaNKPmshS3PJU+TkhZSToNIrdQWPJBk2V0V1x7 Ku1uJymYKuktIfxPPLuVadYtfQ== -----END CERTIFICATE-----Generated at Tue Jul 21 17:57:57 2026 by rpki-client