$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: DgbsV8snDagnCe/5JBWsrXTL4/0HMSSnJ7z9pjbWcBw= Subject key identifier: 11:E2:12:77:BF:6E:BB:9F:C2:EA:D6:86:89:EB:EC:12:A3:80:C3:D2 Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0BE9 Signing time: Tue 04 Aug 2026 19:19:36 +0000 Manifest this update: Tue 04 Aug 2026 19:19:36 +0000 Manifest next update: Tue 11 Aug 2026 19:19:36 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: Gt8tg0Hk1KbiFkX9pmuDhvDi4LbLo0pWpa68tK006xI=) 2: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: Ds4m30JNX7VD0YAwlidc5p6ZJQmsCh5FAge2wZckos0=) 3: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: rs5DeAiXJUjkmk87XhQXy9eavqmolXmi42NXBuxe1D8=) 4: B66F0C58817111EFB121970CC4F9AE02.roa (hash: ouZu/jn5ZKmwfIcE3ghEaFkVLB6My1iKKzR3gtO189k=) 5: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: MsOEzeKC3wQWVNmqxzfHjUDeGAqxXFvTMRBM7uQm94k=) 6: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: x0qoqY3+7NzxsMKW0qJM37L/2r2psmq486dVg8v0Nmc=) 7: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: dL/b9kFR/fDDp+1b1nZMcsVPe3aqtduJg9+GzU7pUT4=) 8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: jHzcYJ90DjGoipsCrkdoqarlimj3fDzkOjXCClEv3uY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Aug 2026 19:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Aug 4 19:19:36 2026 GMT Not After : Aug 11 19:19:36 2026 GMT Subject: CN=6a723b48-353c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a3:e3:e0:82:1b:9f:9a:ad:8d:72:ee:5a:58: 5a:11:14:6a:ee:fa:27:39:36:b6:13:c9:34:c1:08: 6a:bb:cc:85:85:94:96:43:34:a7:9f:40:66:c4:b0: a2:cd:31:52:7a:60:72:e4:6b:c3:62:8a:ae:d4:b9: c2:54:4e:df:85:d8:48:87:33:ea:4c:1b:8a:c3:65: 6a:24:59:6e:2e:51:5f:7e:c1:45:53:d7:ef:09:c5: 50:6a:64:f0:1d:7e:89:37:db:11:0d:86:f3:ca:c8: bb:26:dd:d6:4f:dd:ad:e2:e0:1d:e8:3c:0b:85:21: da:e9:ad:be:50:20:7a:f2:08:16:c7:10:17:e8:0e: 79:e3:df:e9:58:c8:cd:1a:19:eb:17:53:8a:15:78: 33:db:11:8a:3c:72:32:81:9f:60:dc:5e:fa:4a:f7: 47:c8:5f:d9:b6:4d:75:62:81:53:9d:9e:c0:ac:ba: 77:3b:12:17:f8:e0:bf:74:61:70:db:3b:d3:a8:e2: 5c:52:6b:89:25:3b:e8:86:26:f8:a5:b0:40:f0:c8: e2:cf:f5:40:9e:ec:df:50:3e:b9:2a:7c:6f:59:53: a2:be:e5:c0:22:88:ba:0b:aa:04:4b:45:79:81:d5: 7b:71:d1:e0:21:bb:98:ba:0f:05:91:2e:25:71:e9: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E2:12:77:BF:6E:BB:9F:C2:EA:D6:86:89:EB:EC:12:A3:80:C3:D2 X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:16:23:2a:33:93:94:39:85:64:bf:7b:0e:1c:ee:f9:21:3c: 4e:fb:7c:34:ce:1d:3e:ac:42:e8:9d:13:54:78:1d:b4:42:86: 3e:44:35:4a:3f:3e:b4:9f:e5:57:a4:88:1a:e2:9f:f4:80:9f: 92:22:1e:87:af:de:c4:80:81:a9:bc:22:c4:a8:a8:e6:4f:80: 0d:73:8c:36:94:12:5f:ff:66:5e:14:c3:70:e4:b2:7d:4e:d9: a4:09:2c:8d:a0:03:15:2d:20:5c:42:1c:0a:fa:31:cd:fb:77: 78:b4:d0:69:9a:83:79:6f:f3:df:97:e8:7e:03:38:fb:1f:aa: 01:75:4a:83:58:53:7c:da:02:7d:5d:ab:0f:12:bb:b9:ef:a6: 0c:7f:03:85:10:af:a6:25:32:51:64:fa:34:50:51:f9:b9:e8: ed:80:76:97:5e:fb:55:5d:44:41:77:b5:73:0e:9e:1e:7c:77: 61:49:23:c6:d6:c5:2f:e5:c2:90:0d:ed:39:73:70:10:99:4d: 92:ee:3f:3b:f5:66:33:06:3c:88:f6:4b:6f:fd:6c:ad:82:32: 85:59:14:6b:5f:1f:40:8c:27:7a:ad:09:da:6a:c0:e9:d1:53: bd:86:2d:89:40:3c:8d:ed:00:e7:89:74:4f:cb:32:13:2f:a1: 24:8b:61:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjYwODA0MTkxOTM2WhcNMjYwODExMTkxOTM2WjAYMRYwFAYD VQQDEw02YTcyM2I0OC0zNTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6Pj4IIbn5qtjXLuWlhaERRq7vonOTa2E8k0wQhqu8yFhZSWQzSnn0BmxLCi zTFSemBy5GvDYoqu1LnCVE7fhdhIhzPqTBuKw2VqJFluLlFffsFFU9fvCcVQamTw HX6JN9sRDYbzysi7Jt3WT92t4uAd6DwLhSHa6a2+UCB68ggWxxAX6A5549/pWMjN GhnrF1OKFXgz2xGKPHIygZ9g3F76SvdHyF/Ztk11YoFTnZ7ArLp3OxIX+OC/dGFw 2zvTqOJcUmuJJTvohib4pbBA8Mjiz/VAnuzfUD65KnxvWVOivuXAIoi6C6oES0V5 gdV7cdHgIbuYug8FkS4lcenX4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHiEne/ brufwurWhonr7BKjgMPSMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEBYjKjOTlDmFZL97Dhzu+SE8Tvt8NM4dPqxC6J0TVHgdtEKGPkQ1Sj8+tJ/l V6SIGuKf9ICfkiIeh6/exICBqbwixKio5k+ADXOMNpQSX/9mXhTDcOSyfU7ZpAks jaADFS0gXEIcCvoxzft3eLTQaZqDeW/z35fofgM4+x+qAXVKg1hTfNoCfV2rDxK7 ue+mDH8DhRCvpiUyUWT6NFBR+bno7YB2l177VV1EQXe1cw6eHnx3YUkjxtbFL+XC kA3tOXNwEJlNku4/O/VmMwY8iPZLb/1srYIyhVkUa18fQIwneq0J2mrA6dFTvYYt iUA8je0A54l0T8syEy+hJIthjw== -----END CERTIFICATE-----Generated at Thu Aug 6 17:39:12 2026 by rpki-client