$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json) Hash identifier: KH4Yg0DjjkVLnZJ10MnXZzhrUK5J3Oye6QQhBqCUCiQ= Subject key identifier: 91:31:5B:A7:47:C8:49:30:4D:41:7F:A6:19:4A:E2:53:F7:94:10:0B Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft Manifest number: 01AC Signing time: Mon 03 Aug 2026 05:16:40 +0000 Manifest this update: Mon 03 Aug 2026 05:16:39 +0000 Manifest next update: Mon 10 Aug 2026 05:16:39 +0000 Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: QKoyNZhHQLetEciXhJBcJk/nxnTn9Y4y3dyvf2Up2bI=) 2: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: i2+AU5JC1CnIuV2WebgbR1MhXzhp17jyG1HTb2dIKP0=) 3: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: EOqSQLbOPrsjZ56mAXCzCp42zP2pW/1hVyLkMumCHLc=) 4: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: EFBskJYMHfJRXujHupPsFrdh1ToDlvL0xJdWDE7eAo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Aug 2026 05:16:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Aug 3 05:16:39 2026 GMT Not After : Aug 10 05:16:39 2026 GMT Subject: CN=6a702438-5e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e9:36:a6:1b:aa:af:88:8e:a9:18:02:3d:0e: 48:1c:ca:61:5d:5c:63:c3:39:20:db:f4:65:ca:03: 07:98:da:db:bb:bc:64:ea:f1:d1:ae:a4:16:e3:4a: 0d:18:d2:63:ea:94:39:6c:77:2d:a9:72:13:21:3d: eb:6f:55:e6:48:b0:a2:bb:30:b6:9c:17:61:3c:7e: ee:fa:bf:b7:55:e3:cb:6d:53:d0:a8:a4:dc:14:eb: f3:4e:67:02:44:87:ea:80:b2:b3:2b:ae:a0:39:7f: 0b:ac:25:19:9e:02:e6:c9:85:3d:de:61:3c:75:11: 2f:f8:dc:4b:ba:73:32:4f:a3:98:95:84:e2:55:ec: e9:37:7d:8e:57:d1:19:7b:57:8f:37:7d:4b:55:60: 57:fa:da:b1:70:71:f1:3e:48:5a:fd:2b:e4:42:66: b8:dc:1f:25:2b:96:3e:93:34:97:da:61:74:f8:f5: 31:00:d7:c1:97:84:23:66:65:d1:ed:51:93:e6:fb: e9:6a:df:22:b9:e9:8c:ac:68:01:cd:07:6d:a3:f5: 0c:b6:90:62:b1:b5:0e:4d:2c:2e:8b:85:c6:b0:60: 04:07:6b:ca:c7:9e:4b:4e:63:e9:75:c5:da:88:75: d1:96:3f:8f:bf:3d:43:67:a3:de:20:e5:69:fa:65: e8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:31:5B:A7:47:C8:49:30:4D:41:7F:A6:19:4A:E2:53:F7:94:10:0B X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:fd:f4:6f:f8:00:5c:4d:35:3c:56:63:5d:cc:3c:b6:5b:b3: ec:fd:d0:ca:2d:2f:1d:2a:09:b1:eb:fa:f4:e7:51:5d:37:47: 14:7e:4e:2b:20:be:e2:1e:c0:17:bd:c4:f5:69:23:7a:22:ae: 74:e2:e4:95:c9:f7:16:31:ed:78:6d:3d:9e:35:38:5b:8f:9e: e0:40:b1:d7:98:bf:62:c9:ba:f1:24:dd:fe:9a:1f:37:8d:8f: d0:61:6c:84:8f:dd:4e:bc:13:22:0c:49:7e:d9:b6:9e:c3:b5: e4:72:c2:6f:93:14:14:b8:1c:ca:fa:d3:27:a3:dc:15:2c:d8: 96:9d:b2:42:75:6e:f9:3d:4d:23:94:a7:33:6f:bc:fb:af:b2: 40:db:38:cb:39:54:73:29:13:ba:8b:e9:9a:87:cf:a0:7c:8d: 3e:b6:14:33:89:9d:e2:2d:38:26:7d:d8:c2:bd:f8:37:8a:f3: 4a:e5:c1:9d:e6:7e:1e:e9:97:c9:c6:4d:9a:f0:5f:66:6b:2c: 34:5d:1d:4f:2e:53:81:76:94:5a:86:b3:36:53:7b:62:ca:a1: bf:49:04:09:e7:44:81:06:82:77:3c:79:1b:f0:51:48:94:9f: 34:56:c3:f8:10:35:f8:ba:20:59:3e:61:3b:65:f0:0a:8e:11: 0e:17:99:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG MERDNTkzM0QwHhcNMjYwODAzMDUxNjM5WhcNMjYwODEwMDUxNjM5WjAYMRYwFAYD VQQDEw02YTcwMjQzOC01ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuuk2phuqr4iOqRgCPQ5IHMphXVxjwzkg2/RlygMHmNrbu7xk6vHRrqQW40oN GNJj6pQ5bHctqXITIT3rb1XmSLCiuzC2nBdhPH7u+r+3VePLbVPQqKTcFOvzTmcC RIfqgLKzK66gOX8LrCUZngLmyYU93mE8dREv+NxLunMyT6OYlYTiVezpN32OV9EZ e1ePN31LVWBX+tqxcHHxPkha/SvkQma43B8lK5Y+kzSX2mF0+PUxANfBl4QjZmXR 7VGT5vvpat8iuemMrGgBzQdto/UMtpBisbUOTSwui4XGsGAEB2vKx55LTmPpdcXa iHXRlj+Pvz1DZ6PeIOVp+mXoZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJExW6dH yEkwTUF/phlK4lP3lBALMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF QWJ6eURVdklERVB3M0ZrejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArv30b/gAXE01PFZjXcw8tluz7P3Qyi0vHSoJsev69OdRXTdHFH5OKyC+4h7A F73E9WkjeiKudOLklcn3FjHteG09njU4W4+e4ECx15i/Ysm68STd/pofN42P0GFs hI/dTrwTIgxJftm2nsO15HLCb5MUFLgcyvrTJ6PcFSzYlp2yQnVu+T1NI5SnM2+8 +6+yQNs4yzlUcykTuovpmofPoHyNPrYUM4md4i04Jn3Ywr34N4rzSuXBneZ+HumX ycZNmvBfZmssNF0dTy5TgXaUWoazNlN7Ysqhv0kECedEgQaCdzx5G/BRSJSfNFbD +BA1+LogWT5hO2XwCo4RDheZ0g== -----END CERTIFICATE-----Generated at Tue Aug 4 12:21:44 2026 by rpki-client