$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft File: 2m3rP2XMI2eEg6drt445Hy-cZCE.mft (raw, json) Hash identifier: Ou2m+AsP5Ra0OIdgAVvtgfe6DJOUTFOzmLhXCuyoF1U= Subject key identifier: DA:6A:43:0E:04:3C:59:4D:16:97:7F:D9:86:FE:C1:69:7A:E5:35:C2 Authority key identifier: DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 Certificate issuer: /CN=A91CE959/serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft Manifest number: 43 Signing time: Tue 21 Jul 2026 05:26:14 +0000 Manifest this update: Tue 21 Jul 2026 05:26:14 +0000 Manifest next update: Tue 28 Jul 2026 05:26:14 +0000 Files and hashes: 1: 2m3rP2XMI2eEg6drt445Hy-cZCE.crl (hash: vZhggZpdORlMOsznXgD4Akaocblk1CUZyOE0nJR4UYU=) 2: DD10EC4221D311F1A9814A2D233D8C67.roa (hash: /yzAJPiNJxpo9+q64etk5otNPKwR6uKsst/Nxwyi5gg=) 3: E302E312268811F185CD3CFFB4833773.roa (hash: 1Tn0eJ0bGdKPh/87544Mu+NSKKv9zP/9QDVNwO5GdQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 05:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Validity Not Before: Jul 21 05:26:14 2026 GMT Not After : Jul 28 05:26:14 2026 GMT Subject: CN=6a5f02f6-8fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b7:df:26:4e:c8:3c:56:63:a1:1e:ec:9e:f8: 95:c6:a4:b6:2e:d2:80:2d:b2:9c:8d:33:bd:4b:51: 27:b8:52:be:94:1f:a9:f0:00:37:85:07:c2:b7:93: 8d:46:0b:65:f5:fd:bf:0a:80:60:5e:e0:59:c7:6d: c1:20:1e:37:23:c1:b5:20:e5:f4:1c:02:57:62:50: fb:4e:bd:cd:9e:c6:11:ad:4a:b6:3e:02:ef:13:05: 62:18:33:1e:19:b6:43:02:b9:62:e9:e6:68:cb:27: e2:10:3c:7c:d7:c0:24:92:a7:75:37:cf:6f:c5:7d: d0:f3:4f:e8:c8:07:da:29:19:93:43:49:45:10:e1: 22:6f:ca:92:32:97:75:e5:4d:d5:56:f5:49:b9:46: df:aa:60:e5:df:47:f9:2e:d7:ca:f4:58:82:8b:b1: 7c:97:b7:fa:f7:f1:67:a9:e4:52:f8:2c:cf:44:86: 0e:05:3b:98:f9:7a:c8:5a:91:2a:8d:49:ba:20:6f: c5:72:36:e0:3a:04:df:44:07:7b:89:b4:20:f0:13: 25:92:5c:98:9a:65:f1:4d:04:93:8b:a5:4a:0f:e9: 1e:50:30:de:fb:78:ac:af:68:8a:12:c8:9d:87:4a: e8:7b:95:55:db:6d:9d:9c:4e:46:13:aa:84:a9:bd: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6A:43:0E:04:3C:59:4D:16:97:7F:D9:86:FE:C1:69:7A:E5:35:C2 X509v3 Authority Key Identifier: keyid:DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:18:1a:13:2c:4b:12:13:e5:c8:e6:06:09:e1:8f:b7:76:69: 59:57:d0:61:70:4f:65:08:48:de:1a:0f:34:dd:97:d4:ba:23: 0e:0d:a4:de:b8:99:59:ed:25:8d:d1:29:f0:93:61:37:4d:30: ab:4e:2f:79:81:b9:43:0d:48:f5:50:da:5a:ef:11:16:23:08: 6a:38:d7:f4:0c:da:63:21:88:66:ab:30:9e:62:de:09:85:ba: ec:de:ec:ac:58:8d:02:e6:93:b5:81:25:8f:de:e1:ec:47:36: 7f:86:3a:f0:c8:09:d8:ac:7c:fb:fa:3c:6b:ce:b5:b7:ea:6b: 22:a2:54:de:70:0a:b8:0a:81:ad:c7:f2:cf:47:93:a3:92:5a: 0e:de:ae:4b:94:f3:01:66:99:6a:e9:c6:16:4b:19:d9:1e:76: c9:79:47:68:54:4f:87:1a:b2:db:b6:02:b1:f8:53:3f:cf:50: f7:ce:1c:bf:1f:c3:6b:2c:be:64:66:d3:40:42:27:de:79:8a: 58:29:47:42:ad:11:1c:9f:71:b9:a0:a9:06:cb:0d:a4:50:db: 51:ea:e5:2b:27:26:5e:e1:d7:b7:b7:54:71:8f:96:47:88:14: 27:cc:1f:51:e2:7e:8e:b2:79:eb:57:c4:b0:73:6e:98:fb:e4: a0:7d:b6:5f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTk1OTExMC8GA1UEBRMoREE2REVCM0Y2NUNDMjM2Nzg0ODNBNzZCQjc4RTM5MUYy RjlDNjQyMTAeFw0yNjA3MjEwNTI2MTRaFw0yNjA3MjgwNTI2MTRaMBgxFjAUBgNV BAMTDTZhNWYwMmY2LThmYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmt98mTsg8VmOhHuye+JXGpLYu0oAtspyNM71LUSe4Ur6UH6nwADeFB8K3k41G C2X1/b8KgGBe4FnHbcEgHjcjwbUg5fQcAldiUPtOvc2exhGtSrY+Au8TBWIYMx4Z tkMCuWLp5mjLJ+IQPHzXwCSSp3U3z2/FfdDzT+jIB9opGZNDSUUQ4SJvypIyl3Xl TdVW9Um5Rt+qYOXfR/ku18r0WIKLsXyXt/r38Wep5FL4LM9Ehg4FO5j5eshakSqN Sbogb8VyNuA6BN9EB3uJtCDwEyWSXJiaZfFNBJOLpUoP6R5QMN77eKyvaIoSyJ2H Suh7lVXbbZ2cTkYTqoSpvQVLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU2mpDDgQ8 WU0Wl3/Zhv7BaXrlNcIwHwYDVR0jBBgwFoAU2m3rP2XMI2eEg6drt445Hy+cZCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFOTU5L0Y0Nzc1NUI4MjFC MjExRjE5NTlERjk3N0FBRUU1MjhFLzJtM3JQMlhNSTJlRWc2ZHJ0NDQ1SHktY1pD RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMm0zclAyWE1JMmVFZzZkcnQ0NDVIeS1jWkNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF OTU5L0Y0Nzc1NUI4MjFCMjExRjE5NTlERjk3N0FBRUU1MjhFLzJtM3JQMlhNSTJl RWc2ZHJ0NDQ1SHktY1pDRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAOGBoTLEsSE+XI5gYJ4Y+3dmlZV9BhcE9lCEjeGg803ZfUuiMODaTeuJlZ7SWN 0Snwk2E3TTCrTi95gblDDUj1UNpa7xEWIwhqONf0DNpjIYhmqzCeYt4Jhbrs3uys WI0C5pO1gSWP3uHsRzZ/hjrwyAnYrHz7+jxrzrW36msiolTecAq4CoGtx/LPR5Oj kloO3q5LlPMBZplq6cYWSxnZHnbJeUdoVE+HGrLbtgKx+FM/z1D3zhy/H8NrLL5k ZtNAQifeeYpYKUdCrREcn3G5oKkGyw2kUNtR6uUrJyZe4de3t1Rxj5ZHiBQnzB9R 4n6OsnnrV8Swc26Y++SgfbZf -----END CERTIFICATE-----Generated at Tue Jul 21 18:00:04 2026 by rpki-client