$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft File: 2itDzBg8qOD2qPbapUzdcwb4Yig.mft (raw, json) Hash identifier: cNqc//qT7rEImPhrrOXrM0MF+T2gurNHVD4gRekmciM= Subject key identifier: 43:3B:BF:39:F6:0C:67:A2:55:05:56:1D:48:3F:25:1B:CF:42:89:71 Authority key identifier: DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 Certificate issuer: /CN=A91DF0EC/serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Certificate serial: 0AE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft Manifest number: 0ACC Signing time: Sat 04 Jul 2026 19:34:21 +0000 Manifest this update: Sat 04 Jul 2026 19:34:20 +0000 Manifest next update: Sat 11 Jul 2026 19:34:20 +0000 Files and hashes: 1: 2itDzBg8qOD2qPbapUzdcwb4Yig.crl (hash: wXqEZIKFPagZdUzD7fQObM9Qqzytl2/pU14CnBwQS+w=) 2: C8A0E422831611EA95762453C4F9AE02.roa (hash: zy8s2JOSWvYwBrRrmYSE0kwJEPoK1AaNF1yfDHC6Css=) 3: 0D6FFE56BA3511ECA20A3817C4F9AE02.roa (hash: T6idJL8aHggzjv6s1JmSSpHwZuTbLSQAyDk/XLJrS3o=) 4: FD114232912711EFBCB4ED6EC4F9AE02.roa (hash: m31d9LY6Fb+rpx0iPU2nTzyFxPrcr/nSM8utNGuQQUI=) 5: 0DBF860C6FB111F1A2CD02AE78A30FBC.roa (hash: HcbMw2rn7TZMWXGPZnCmUILsaTL6x9o/58aT8kV7J4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Jul 2026 19:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2791 (0xae7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF0EC, serialNumber=DA2B43CC183CA8E0F6A8F6DAA54CDD7306F86228 Validity Not Before: Jul 4 19:34:20 2026 GMT Not After : Jul 11 19:34:20 2026 GMT Subject: CN=6a49603d-721d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e0:2a:1e:8c:c9:9c:52:6c:a5:4a:e6:7f:f4: 35:3f:13:47:d0:15:0e:53:df:a1:ea:4a:7e:09:39: 15:04:41:aa:35:9a:7b:59:3b:0e:57:35:a9:85:35: 8a:66:2f:bf:fa:e1:32:4d:26:de:d6:80:37:8e:b6: 1b:4c:e1:d5:24:ba:a3:ec:39:d9:ed:98:d6:e5:ed: cc:41:6b:09:58:5b:64:03:ae:60:97:67:c7:46:bc: c8:d1:31:ae:da:61:98:1b:a6:56:34:97:69:ff:12: 6a:b9:2e:9e:30:92:c0:3d:58:61:61:52:7b:0c:ef: a0:19:cd:63:e4:e3:35:72:16:85:c8:95:04:93:44: b7:69:55:ae:22:5c:68:57:b4:d2:4f:51:c3:c3:f1: 6b:37:0c:bc:68:5b:98:9f:c3:fa:29:44:9c:a9:55: cb:8d:65:ed:f8:38:33:a5:b0:92:5a:82:ec:d5:84: ad:1a:ba:42:1b:16:16:67:6e:07:57:d8:fc:78:67: a2:9f:4a:0c:66:fe:6e:3e:0d:b9:95:74:8c:2b:f0: d1:cd:29:97:08:80:59:8c:64:34:9d:a9:f9:69:1f: 8d:d5:f3:c1:37:06:48:b6:83:23:6c:e6:34:84:9c: ff:b9:e5:94:49:7a:78:44:26:9c:09:85:a2:1a:9c: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3B:BF:39:F6:0C:67:A2:55:05:56:1D:48:3F:25:1B:CF:42:89:71 X509v3 Authority Key Identifier: keyid:DA:2B:43:CC:18:3C:A8:E0:F6:A8:F6:DA:A5:4C:DD:73:06:F8:62:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2itDzBg8qOD2qPbapUzdcwb4Yig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF0EC/991CEF7E795811EA93AE9646C4F9AE02/2itDzBg8qOD2qPbapUzdcwb4Yig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:48:e2:76:4c:8a:41:41:f1:65:cf:d8:91:89:8c:cc:01:cf: 0e:e4:ec:1d:a3:0d:2a:52:69:ac:b5:15:86:0d:fe:84:f3:84: 84:44:71:57:e1:97:7a:13:e8:e2:c7:01:25:e0:73:b6:7f:d2: 9e:ee:d0:6a:60:ad:3c:82:83:d9:35:30:fa:ab:1f:71:31:73: 3c:61:31:fb:24:92:5f:db:f7:77:0d:81:ff:d8:f7:13:94:a1: 15:89:d6:0f:6f:fd:bc:6b:33:a6:05:7e:d7:6e:df:93:c3:f8: 1d:2b:5f:8f:70:df:5b:a8:28:0a:e9:ca:23:7f:cb:b4:1a:b9: a1:96:a7:e2:7f:77:7f:0a:f2:7a:96:c5:c2:9d:0b:73:ca:3b: 3e:59:ad:75:68:a8:e0:bf:4c:20:51:a5:93:49:88:6e:0b:b2: b2:de:f8:3a:b2:72:4c:fb:81:e0:00:56:20:6f:84:c6:d4:98: c3:ac:75:ff:c3:3a:40:0a:c1:6c:e9:b3:33:4e:a0:0d:e0:0e: 38:a4:d0:6d:2d:2c:93:31:8e:2e:53:77:cf:d5:2c:7a:dc:f0: 7c:5a:3c:60:fb:ca:68:83:95:65:b0:f2:be:68:41:f2:f2:ff: 71:5f:65:4b:db:bb:3f:d0:8b:99:57:2d:95:ab:b8:4a:55:87: eb:05:cf:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REYwRUMxMTAvBgNVBAUTKERBMkI0M0NDMTgzQ0E4RTBGNkE4RjZEQUE1NENERDcz MDZGODYyMjgwHhcNMjYwNzA0MTkzNDIwWhcNMjYwNzExMTkzNDIwWjAYMRYwFAYD VQQDEw02YTQ5NjAzZC03MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3eAqHozJnFJspUrmf/Q1PxNH0BUOU9+h6kp+CTkVBEGqNZp7WTsOVzWphTWK Zi+/+uEyTSbe1oA3jrYbTOHVJLqj7DnZ7ZjW5e3MQWsJWFtkA65gl2fHRrzI0TGu 2mGYG6ZWNJdp/xJquS6eMJLAPVhhYVJ7DO+gGc1j5OM1chaFyJUEk0S3aVWuIlxo V7TST1HDw/FrNwy8aFuYn8P6KUScqVXLjWXt+DgzpbCSWoLs1YStGrpCGxYWZ24H V9j8eGein0oMZv5uPg25lXSMK/DRzSmXCIBZjGQ0nan5aR+N1fPBNwZItoMjbOY0 hJz/ueWUSXp4RCacCYWiGpw63QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEM7vzn2 DGeiVQVWHUg/JRvPQolxMB8GA1UdIwQYMBaAFNorQ8wYPKjg9qj22qVM3XMG+GIo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjBFQy85OTFDRUY3RTc5 NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFPRDJxUGJhcFV6ZGN3YjRZ aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJpdER6Qmc4cU9EMnFQYmFwVXpkY3diNFlpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjBFQy85OTFDRUY3RTc5NTgxMUVBOTNBRTk2NDZDNEY5QUUwMi8yaXREekJnOHFP RDJxUGJhcFV6ZGN3YjRZaWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAukjidkyKQUHxZc/YkYmMzAHPDuTsHaMNKlJprLUVhg3+hPOEhERxV+GXehPo 4scBJeBztn/Snu7QamCtPIKD2TUw+qsfcTFzPGEx+ySSX9v3dw2B/9j3E5ShFYnW D2/9vGszpgV+127fk8P4HStfj3DfW6goCunKI3/LtBq5oZan4n93fwryepbFwp0L c8o7PlmtdWio4L9MIFGlk0mIbguyst74OrJyTPuB4ABWIG+ExtSYw6x1/8M6QArB bOmzM06gDeAOOKTQbS0skzGOLlN3z9UsetzwfFo8YPvKaIOVZbDyvmhB8vL/cV9l S9u7P9CLmVctlau4SlWH6wXP4g== -----END CERTIFICATE-----Generated at Mon Jul 6 09:00:17 2026 by rpki-client