$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft File: 2nWrD7Oqh1r631o4-FK9zB3YJvc.mft (raw, json) Hash identifier: nW4MIwyiWq31XnMCWXrmY9s+e03sJtPb/WTVLGjTiAk= Subject key identifier: D3:C3:A6:45:31:3C:40:CE:08:9A:6D:0F:AC:3E:5B:D4:1C:DA:0A:1B Authority key identifier: DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7 Certificate issuer: /CN=A91FEFBB/serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7 Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft Manifest number: 0264 Signing time: Mon 27 Jul 2026 03:38:25 +0000 Manifest this update: Mon 27 Jul 2026 03:38:25 +0000 Manifest next update: Mon 03 Aug 2026 03:38:25 +0000 Files and hashes: 1: 2nWrD7Oqh1r631o4-FK9zB3YJvc.crl (hash: fDDQJHQ21ld85DrBDPPT30O6K02aZtknCjuU2pucP3I=) 2: DE10576881C811F19DD5355C67A30FBC.roa (hash: Mybp7xu69McndoDjQ+vpXUAVd2ngNEP7A3p6m2zUXBk=) 3: 881C3F9CABD311EFBFED7130C4F9AE02.roa (hash: JS1ZBhltkdXyrySkpU8SpuqRR1QN77GhpUZ60d1ygSU=) 4: 261D3B8AEE4611ED9BEFED31C4F9AE02.roa (hash: 2kSM4B/k8NdFJAL4ebPd/o/E0Fw58aj47tXGXUAxnss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEFBB, serialNumber=DA75AB0FB3AA875AFADF5A38F852BDCC1DD826F7 Validity Not Before: Jul 27 03:38:25 2026 GMT Not After : Aug 3 03:38:25 2026 GMT Subject: CN=6a66d2b1-cd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:81:c8:d1:5b:8f:8e:e7:c2:08:c4:04:e9:46: af:79:9e:a1:b5:53:e4:c2:6f:e5:5f:94:f2:8e:1c: 68:cc:16:23:0b:b7:fd:2f:dd:f7:9a:75:92:1b:37: 9f:db:14:44:26:47:71:5c:71:48:99:40:22:59:c4: f8:de:9b:53:78:5a:00:07:47:88:91:af:3b:90:d7: 33:1f:4d:9f:2d:80:bd:6b:be:71:b8:c8:5f:60:fa: a6:7a:02:5a:85:ab:08:52:bb:47:4a:69:cc:35:91: cf:4b:c1:d9:08:e9:18:c6:0e:f9:bf:a8:62:59:ea: 1f:20:0d:3a:8d:5d:0c:a5:57:54:f3:0b:12:d4:23: 1d:dd:c3:bd:ad:61:ca:7b:60:60:2d:d3:85:2e:48: 50:4f:ac:5a:47:aa:b3:d4:23:2b:c6:92:d1:c4:48: 7b:6a:e9:2d:cc:fe:15:cb:22:cf:0f:9d:a5:7e:c9: 03:38:2e:36:b4:c9:4a:72:03:e7:5f:fd:2e:63:f2: 64:a2:84:52:ac:f6:11:b6:39:5e:b2:93:d9:53:1c: 90:86:01:6c:3f:96:57:6e:c4:c7:a1:7e:a9:76:ac: ab:a8:17:12:33:7a:32:aa:11:b3:60:95:ce:cb:e1: d9:dc:05:5d:42:55:39:33:0a:58:3a:8f:88:7d:1e: c5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C3:A6:45:31:3C:40:CE:08:9A:6D:0F:AC:3E:5B:D4:1C:DA:0A:1B X509v3 Authority Key Identifier: keyid:DA:75:AB:0F:B3:AA:87:5A:FA:DF:5A:38:F8:52:BD:CC:1D:D8:26:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nWrD7Oqh1r631o4-FK9zB3YJvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEFBB/D896B5C8EA6A11EDB5B6B55EC4F9AE02/2nWrD7Oqh1r631o4-FK9zB3YJvc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:dc:e8:1d:ff:28:c7:da:d3:7d:49:b1:4b:15:6f:72:cb:ce: 74:d8:44:fc:3a:9d:a6:33:75:06:b6:77:7d:85:b2:c9:88:9f: b5:f0:85:99:25:06:6a:66:ac:69:f1:95:05:c5:ef:a9:2a:24: 17:c8:98:49:84:4b:68:16:5e:76:b2:c4:a3:ba:6b:fd:0b:0c: 65:bb:fe:99:f5:a1:90:ae:f3:ff:a3:45:2c:cd:9f:9d:73:2a: 75:d6:6a:3a:98:b5:72:67:d0:30:46:b9:08:6c:d5:c9:d3:e9: 29:0b:b9:d0:45:63:9c:74:fc:5b:07:14:20:b0:cd:49:62:bd: 06:fc:12:07:28:43:6f:ae:ac:8d:31:a6:31:81:0a:a2:8f:5f: 65:28:e4:d7:88:c3:e8:91:37:1b:69:23:08:53:9d:01:4f:df: bb:b7:82:65:76:07:b1:56:6d:0a:aa:58:13:1a:51:6c:ea:12: 01:1a:2a:73:80:01:76:b4:2e:64:59:be:0a:9b:3f:f6:01:aa: f8:e1:84:e3:c3:5e:18:05:fc:a7:09:50:d9:a1:23:b8:3f:1c: b4:c6:c3:87:e0:f3:0d:de:3e:e1:5e:e6:0d:ba:9b:76:f2:e7: 31:a7:6e:f4:13:1f:4f:8b:12:d1:97:43:da:9a:7d:a2:e4:4c: 7a:a9:d1:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVGQkIxMTAvBgNVBAUTKERBNzVBQjBGQjNBQTg3NUFGQURGNUEzOEY4NTJCREND MUREODI2RjcwHhcNMjYwNzI3MDMzODI1WhcNMjYwODAzMDMzODI1WjAYMRYwFAYD VQQDEw02YTY2ZDJiMS1jZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoHI0VuPjufCCMQE6UaveZ6htVPkwm/lX5TyjhxozBYjC7f9L933mnWSGzef 2xREJkdxXHFImUAiWcT43ptTeFoAB0eIka87kNczH02fLYC9a75xuMhfYPqmegJa hasIUrtHSmnMNZHPS8HZCOkYxg75v6hiWeofIA06jV0MpVdU8wsS1CMd3cO9rWHK e2BgLdOFLkhQT6xaR6qz1CMrxpLRxEh7auktzP4VyyLPD52lfskDOC42tMlKcgPn X/0uY/JkooRSrPYRtjlespPZUxyQhgFsP5ZXbsTHoX6pdqyrqBcSM3oyqhGzYJXO y+HZ3AVdQlU5MwpYOo+IfR7F2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNPDpkUx PEDOCJptD6w+W9Qc2gobMB8GA1UdIwQYMBaAFNp1qw+zqoda+t9aOPhSvcwd2Cb3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUZCQi9EODk2QjVDOEVB NkExMUVEQjVCNkI1NUVDNEY5QUUwMi8ybldyRDdPcWgxcjYzMW80LUZLOXpCM1lK dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuV3JEN09xaDFyNjMxbzQtRks5ekIzWUp2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUZCQi9EODk2QjVDOEVBNkExMUVEQjVCNkI1NUVDNEY5QUUwMi8ybldyRDdPcWgx cjYzMW80LUZLOXpCM1lKdmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALtzoHf8ox9rTfUmxSxVvcsvOdNhE/DqdpjN1BrZ3fYWyyYiftfCFmSUGamas afGVBcXvqSokF8iYSYRLaBZedrLEo7pr/QsMZbv+mfWhkK7z/6NFLM2fnXMqddZq Opi1cmfQMEa5CGzVydPpKQu50EVjnHT8WwcUILDNSWK9BvwSByhDb66sjTGmMYEK oo9fZSjk14jD6JE3G2kjCFOdAU/fu7eCZXYHsVZtCqpYExpRbOoSARoqc4ABdrQu ZFm+Cps/9gGq+OGE48NeGAX8pwlQ2aEjuD8ctMbDh+DzDd4+4V7mDbqbdvLnMadu 9BMfT4sS0ZdD2pp9ouRMeqnRdA== -----END CERTIFICATE-----Generated at Tue Jul 28 02:28:04 2026 by rpki-client