$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: pE7HVlh7samjkW6HCBjcEYYB4GewTZbfoPefrxDQFrk= Subject key identifier: C5:42:9C:BD:E7:CC:B9:01:DD:C6:2E:D0:EC:F1:32:08:E3:34:48:22 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 0314 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 030A Signing time: Wed 19 Aug 2026 01:30:39 +0000 Manifest this update: Wed 19 Aug 2026 01:30:39 +0000 Manifest next update: Wed 26 Aug 2026 01:30:39 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: +3P4VsaDcJPKhgLaqBbeBdtoUVc1VZDzLs/YYpHPiSo=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: 41XnV0Dfd97uGyPbDbqHHH2dJuzZIdcHH6ek0SjFVbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 01:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 788 (0x314) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Aug 19 01:30:39 2026 GMT Not After : Aug 26 01:30:39 2026 GMT Subject: CN=6a85073f-2fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b1:ca:44:1a:fb:80:cb:44:16:d5:d2:d2:c0: ea:ab:2f:cb:f6:5a:82:b1:72:c2:46:71:11:51:45: 1c:00:a0:20:74:05:4f:89:e5:6f:5b:fc:d9:09:34: 56:8d:a3:fa:e7:c4:b0:3c:7e:c0:f2:e8:55:15:60: ec:3a:42:b2:a0:03:7b:ae:e7:f1:9f:c6:40:8b:88: 21:56:79:db:50:6b:52:6f:de:bd:cb:81:19:68:c0: fb:45:eb:e8:ea:ca:67:b3:3a:3c:0b:ea:34:d8:95: c7:11:00:c9:f4:b8:6b:f0:eb:03:0a:4c:9b:87:8a: e2:fd:35:2b:b9:23:e7:7e:af:c1:dd:64:fd:a4:9c: 5f:8f:2b:bd:21:80:6e:2a:68:81:87:98:78:0c:b4: 76:e5:56:75:37:2d:68:12:09:f5:92:e5:7a:4e:5f: 81:64:aa:f5:4b:e8:3d:b7:13:a6:eb:90:87:4a:aa: 6e:1e:ec:94:fe:b1:b9:a1:9a:10:22:7d:36:b8:90: 0d:66:a7:6a:8c:68:f1:1f:71:0c:29:0d:1b:03:6c: f9:70:b7:1c:27:3a:e4:f4:74:aa:aa:88:5a:cf:80: 0e:ca:01:64:3d:25:d8:6c:3a:b6:c3:88:e8:42:14: d3:ed:b0:a8:dc:17:38:e7:13:e6:07:5e:94:d4:98: d0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:42:9C:BD:E7:CC:B9:01:DD:C6:2E:D0:EC:F1:32:08:E3:34:48:22 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f7:c2:98:19:da:c5:fd:e1:29:f5:1d:fc:b2:b7:28:a0:d3: 6d:96:03:9d:f6:94:86:d5:cf:f6:5d:c9:0e:38:fb:8c:e2:30: 76:1e:58:e2:3a:57:12:61:54:78:18:25:8f:25:0b:c2:84:7b: 70:d0:36:1d:85:3b:67:a0:35:bf:dd:cf:f3:31:12:2f:91:30: 8d:86:f6:13:aa:c1:b5:78:0d:4b:f8:c4:8f:1a:40:75:a6:45: 43:e5:f4:53:bd:03:cf:a3:78:47:89:bf:25:62:72:37:c0:8f: ff:68:bb:d1:40:58:f2:98:f8:74:1a:80:e2:b0:64:d0:d0:0a: 6b:7d:b2:49:13:22:1c:3f:d2:38:d1:35:69:74:1f:68:fe:d7: bd:50:e0:b4:12:23:c4:d5:62:0a:43:68:05:21:5f:e8:4a:17: 34:97:78:4b:1c:92:fd:3f:0f:49:74:59:98:ba:b0:7c:4e:49: ce:1a:e1:0b:f7:df:72:b6:63:84:0d:40:5f:64:7c:70:4e:f8: 81:5b:e4:7a:19:2c:73:d6:6e:b3:c1:3e:38:a2:ba:51:6c:97: e4:69:5e:35:6b:7c:51:11:f4:e1:ad:1e:4e:80:11:d3:ba:c2: d2:f0:f3:6e:e1:c7:48:f6:50:71:3e:cf:74:bc:35:f1:48:b1: b8:c7:84:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjYwODE5MDEzMDM5WhcNMjYwODI2MDEzMDM5WjAYMRYwFAYD VQQDEw02YTg1MDczZi0yZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrHKRBr7gMtEFtXS0sDqqy/L9lqCsXLCRnERUUUcAKAgdAVPieVvW/zZCTRW jaP658SwPH7A8uhVFWDsOkKyoAN7rufxn8ZAi4ghVnnbUGtSb969y4EZaMD7Revo 6spnszo8C+o02JXHEQDJ9Lhr8OsDCkybh4ri/TUruSPnfq/B3WT9pJxfjyu9IYBu KmiBh5h4DLR25VZ1Ny1oEgn1kuV6Tl+BZKr1S+g9txOm65CHSqpuHuyU/rG5oZoQ In02uJANZqdqjGjxH3EMKQ0bA2z5cLccJzrk9HSqqohaz4AOygFkPSXYbDq2w4jo QhTT7bCo3Bc45xPmB16U1JjQzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMVCnL3n zLkB3cYu0OzxMgjjNEgiMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT/fCmBnaxf3hKfUd/LK3KKDTbZYDnfaUhtXP9l3JDjj7jOIwdh5Y4jpXEmFU eBgljyULwoR7cNA2HYU7Z6A1v93P8zESL5EwjYb2E6rBtXgNS/jEjxpAdaZFQ+X0 U70Dz6N4R4m/JWJyN8CP/2i70UBY8pj4dBqA4rBk0NAKa32ySRMiHD/SONE1aXQf aP7XvVDgtBIjxNViCkNoBSFf6EoXNJd4SxyS/T8PSXRZmLqwfE5JzhrhC/ffcrZj hA1AX2R8cE74gVvkehksc9Zus8E+OKK6UWyX5GleNWt8URH04a0eToAR07rC0vDz buHHSPZQcT7PdLw18UixuMeE4A== -----END CERTIFICATE-----Generated at Wed Aug 19 12:49:56 2026 by rpki-client