$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: AaAI4LTpQIc7lAgbzcrq7nksx64BFuGZ+zpSSauJTKk= Subject key identifier: B9:D5:37:05:B4:9C:E8:2D:60:AE:DF:A0:86:13:9C:3D:F7:1B:9C:DE Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 0297 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 027F Signing time: Tue 21 Jul 2026 03:29:46 +0000 Manifest this update: Tue 21 Jul 2026 03:29:45 +0000 Manifest next update: Tue 28 Jul 2026 03:29:45 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: oBj3eOKXm/GunRc3uvQQWeL2yaRs6wVtMeDiEVa9AOw=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: TG2ohJNYEaDsDYNDfYYhx+nUq/BWPbtnOzSvkzV8QmA=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 8KKDSMBlMVX3WIkFvdZMkpRJGKyqonScIIf8lT6mmuA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 03:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 663 (0x297) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Jul 21 03:29:45 2026 GMT Not After : Jul 28 03:29:45 2026 GMT Subject: CN=6a5ee7a9-30c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b7:b5:b6:ba:9a:47:18:a9:d0:7f:4d:55:f4: d7:e9:ee:ce:60:6b:3d:a9:92:54:9f:86:66:99:dc: 73:8a:23:8d:8f:6a:95:f4:96:90:39:30:b1:e3:0e: ae:b0:8f:b8:aa:b2:9d:d1:8a:2a:05:d5:7a:3d:35: 0e:a9:4b:6f:a9:20:29:8a:f5:5e:82:93:17:c8:da: e5:d4:07:ff:7f:b1:19:24:2c:d5:2c:1c:82:31:2a: 37:dd:c4:ce:54:d7:c0:85:ba:22:4e:e5:24:c3:8c: 01:79:9a:1d:d0:db:67:47:fb:bf:10:f4:ef:29:31: 3e:99:da:04:e1:64:11:5c:06:7f:e0:0f:31:7d:94: 0c:36:ce:e7:b6:c2:a1:f2:6d:a5:e7:1a:dc:c8:71: 50:08:c9:43:ab:47:47:5f:25:6a:85:f4:61:6f:ff: 08:cd:ed:8e:00:c0:15:b4:78:61:0c:3e:35:21:8a: 4e:39:c9:c8:9c:10:4d:4a:44:18:3d:de:c4:89:3d: 10:ea:55:74:05:c5:ed:d9:39:8c:62:65:fb:99:72: 99:6b:4f:52:5f:c4:29:eb:ee:0c:65:d7:92:54:0e: 1f:31:8c:d4:00:24:65:cf:5e:c3:c1:3e:b4:61:41: 20:73:cc:a6:1b:3b:bc:5a:c6:c8:f3:5a:03:45:9c: 31:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D5:37:05:B4:9C:E8:2D:60:AE:DF:A0:86:13:9C:3D:F7:1B:9C:DE X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:66:c9:c9:e6:44:e5:0f:5f:8f:1b:48:2d:a4:6c:63:e2:8b: 1b:39:58:78:b6:2c:97:97:eb:24:89:e9:ae:17:03:32:da:92: 77:25:58:ac:7a:32:dd:74:b3:6b:dc:73:b3:a3:17:8f:0e:85: fc:c3:fa:32:0c:ec:f9:d8:d1:8c:79:06:06:90:e9:49:66:cc: a4:ca:54:6a:d8:bb:77:f3:e4:94:f9:44:bc:9b:14:2a:03:62: ab:9f:b8:60:bb:8b:97:b2:b8:1b:78:e8:90:8e:a7:a2:7d:55: 9a:98:9b:2b:a8:2f:d0:47:d0:9c:f1:c2:32:20:cf:18:6c:32: d1:88:55:9a:1d:e6:6d:b9:9d:2a:03:2d:14:f0:dc:c4:1a:b3: 1a:40:7f:e0:17:76:c1:2e:55:9f:fd:1e:26:05:83:5c:e9:4f: eb:98:3c:af:95:35:52:fe:3d:88:ca:95:b9:bc:80:31:43:5f: 13:2b:e0:7e:2c:2f:fe:16:04:33:54:a0:25:6e:60:d5:69:3d: f8:e8:81:c6:6b:65:a5:ed:48:64:a7:a5:d0:45:ab:e8:b3:62: b2:f1:63:90:fc:e3:92:a0:3b:d6:31:23:cb:f3:9e:fd:74:15: f6:d8:84:e7:1f:12:fb:ee:8e:73:e2:fd:a7:f6:25:7c:fd:62: 93:a1:e2:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjYwNzIxMDMyOTQ1WhcNMjYwNzI4MDMyOTQ1WjAYMRYwFAYD VQQDEw02YTVlZTdhOS0zMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj7e1trqaRxip0H9NVfTX6e7OYGs9qZJUn4ZmmdxziiONj2qV9JaQOTCx4w6u sI+4qrKd0YoqBdV6PTUOqUtvqSApivVegpMXyNrl1Af/f7EZJCzVLByCMSo33cTO VNfAhboiTuUkw4wBeZod0NtnR/u/EPTvKTE+mdoE4WQRXAZ/4A8xfZQMNs7ntsKh 8m2l5xrcyHFQCMlDq0dHXyVqhfRhb/8Ize2OAMAVtHhhDD41IYpOOcnInBBNSkQY Pd7EiT0Q6lV0BcXt2TmMYmX7mXKZa09SX8Qp6+4MZdeSVA4fMYzUACRlz17DwT60 YUEgc8ymGzu8WsbI81oDRZwxVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLnVNwW0 nOgtYK7foIYTnD33G5zeMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARGbJyeZE5Q9fjxtILaRsY+KLGzlYeLYsl5frJInprhcDMtqSdyVYrHoy3XSz a9xzs6MXjw6F/MP6Mgzs+djRjHkGBpDpSWbMpMpUati7d/PklPlEvJsUKgNiq5+4 YLuLl7K4G3jokI6non1VmpibK6gv0EfQnPHCMiDPGGwy0YhVmh3mbbmdKgMtFPDc xBqzGkB/4Bd2wS5Vn/0eJgWDXOlP65g8r5U1Uv49iMqVubyAMUNfEyvgfiwv/hYE M1SgJW5g1Wk9+OiBxmtlpe1IZKel0EWr6LNisvFjkPzjkqA71jEjy/Oe/XQV9tiE 5x8S++6Oc+L9p/YlfP1ik6Hi7w== -----END CERTIFICATE-----Generated at Tue Jul 21 18:25:30 2026 by rpki-client