$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft File: dhdGJegWMtON9iqDtXsDuiiH5vU.mft (raw, json) Hash identifier: mLmMup/YglACpzFUkRylQ4jhMgu2oItcxNK8/WMUgxo= Subject key identifier: D8:34:9B:90:18:5A:AA:0B:D0:1E:CD:26:E5:04:B5:1E:29:1A:5E:32 Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Certificate serial: 08C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft Manifest number: 0870 Signing time: Tue 28 Jul 2026 21:16:05 +0000 Manifest this update: Tue 28 Jul 2026 21:16:04 +0000 Manifest next update: Tue 04 Aug 2026 21:16:04 +0000 Files and hashes: 1: dhdGJegWMtON9iqDtXsDuiiH5vU.crl (hash: XOGN1NBebHDC3hEibbDc/zTWTh83QrTot8uMr4y88V4=) 2: 1E5945A69E4111EDB7C9020EC4F9AE02.roa (hash: pvFonBORhSy6GqQA95XiSSNf+YFqf3gZwDwVyUGpPXw=) 3: 8068BF600E9711EB9A6C2B3CC4F9AE02.roa (hash: Wgi3qaUP4AwlQyzcQOtu4ueX0G7wEtCAO856OXKIg5k=) 4: 830314BE0E9711EB9A6C2B3CC4F9AE02.roa (hash: 72Tkghs7fx3YGLfcqd8sgqht0LgctZvrmUHWBmaUJPY=) 5: 8433FF6A0E9711EB9A6C2B3CC4F9AE02.roa (hash: EB5fEBsIbMfn9YJD9h/+4rRWAn5WefDNlUQO5AqoPSc=) 6: A98668464EEB11EFB3305C85C4F9AE02.roa (hash: JBb0KRJJMSsKu9szajgDk+sMTZKTdzrWFreoE2L4+PQ=) 7: 80F371780E9711EB9A6C2B3CC4F9AE02.roa (hash: eqNgUUGEnKSLrr7l5YiKKMwHA/+QCW0oTCdLlMRgu1M=) 8: 84B9D0540E9711EB9A6C2B3CC4F9AE02.roa (hash: BmuzrhT/hd6OEuIxeUFgnn3z+wS1dKGLwfT6dDIUDh8=) 9: 21CF5E6C7AF111EF8BC4E684C4F9AE02.roa (hash: CfHWZYgOb2hVFX3BPz+agdH43bTlnpYAOS7Dyk5S+dw=) 10: 824D5E300E9711EB9A6C2B3CC4F9AE02.roa (hash: SYisrx/N2yWVA/82fanH6pbSefaqEwWUXuoKhxt8qsw=) 11: 857A6BC00E9711EB9A6C2B3CC4F9AE02.roa (hash: 2B9w5akDsjV/uqZco7E7faLjlGCr0uBdhxds5wvxGd0=) 12: 8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa (hash: SLHfHFfxsTJRhuYOBpm2D8SdeHazWSUArKrVh+qD8OQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2249 (0x8c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5 Validity Not Before: Jul 28 21:16:04 2026 GMT Not After : Aug 4 21:16:04 2026 GMT Subject: CN=6a691c15-7a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:2a:bc:53:c2:84:fb:92:6b:56:9e:c1:e7: 59:a2:a8:5f:c7:b5:b7:3f:4e:01:c2:80:c4:6a:62: 67:b9:31:c6:0f:54:63:98:5c:75:9b:83:b1:9c:6c: ae:dd:bc:e9:75:e1:57:8d:4e:11:ed:46:0a:05:b0: f5:85:5f:7e:16:66:60:21:d6:45:61:10:5e:00:40: c0:f6:42:47:25:49:44:ee:43:27:16:95:58:00:d1: f0:17:15:00:6d:fa:1b:d2:90:17:93:1e:74:f8:e2: 14:06:fc:92:d5:b3:e5:b1:b5:59:ae:11:ed:af:10: a0:db:c4:c1:65:1b:b4:cf:48:30:fe:0a:9d:b4:1a: c1:22:8e:78:df:8d:1c:d3:ec:63:09:dc:bf:af:b9: 63:3d:14:f7:6e:7b:e5:9e:6a:69:d4:9b:1d:5e:8a: c9:f8:05:c7:db:48:8d:30:ae:99:00:ab:7a:9a:70: 7f:1c:aa:1a:8a:30:3b:f7:f2:bf:ad:a0:e1:a1:ca: d5:4c:b8:1c:f9:63:1c:64:28:d4:4a:9a:54:4a:71: a1:11:ef:d5:dd:b9:e3:b3:7a:3c:b4:83:92:76:7b: 65:04:f3:00:ca:21:43:bc:23:10:ac:db:df:c9:c4: a3:bf:0a:8a:81:29:67:b0:86:21:f4:93:36:cf:23: de:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:34:9B:90:18:5A:AA:0B:D0:1E:CD:26:E5:04:B5:1E:29:1A:5E:32 X509v3 Authority Key Identifier: keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:d3:98:fd:e9:0d:13:ba:73:9e:3a:62:40:7e:58:73:64:16: c6:04:5c:1c:11:f2:60:17:df:2f:78:21:ef:b8:a8:12:2a:8f: 1d:da:1e:8b:11:66:30:10:65:af:bf:64:45:f5:8d:35:54:00: 4c:6c:55:0a:c8:c2:6a:49:29:ab:94:b0:8f:65:e7:f8:15:fb: cc:b5:00:9d:79:88:8d:da:06:a9:3d:cf:cb:1f:0f:3c:f6:03: 68:ef:f8:f0:49:42:01:90:f8:b0:91:df:61:64:f3:7e:44:af: 1f:a1:42:19:b8:9f:62:a4:47:25:08:e5:88:26:fd:32:8f:d3: e4:21:44:ad:ac:ef:1d:d8:47:c7:a4:77:23:dc:59:11:96:8f: bc:9d:ff:5e:6c:06:43:29:18:8c:c0:96:76:40:81:df:92:21: 2e:25:56:44:05:84:08:01:cd:eb:73:c3:67:d3:68:23:8e:3f: 5d:f4:19:27:e8:bf:05:86:3e:9e:85:92:50:26:d1:d9:50:03: 14:66:79:f2:03:db:ab:46:f6:a4:0a:75:31:57:66:37:52:e6: c8:47:7d:13:4d:d7:8c:b3:f5:a6:4d:17:9b:2f:82:26:44:df: 31:6f:f3:ad:30:7b:43:e0:4d:07:7d:40:35:29:8e:0f:7a:ec: d4:8a:16:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB Mjg4N0U2RjUwHhcNMjYwNzI4MjExNjA0WhcNMjYwODA0MjExNjA0WjAYMRYwFAYD VQQDEw02YTY5MWMxNS03YTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlv0qvFPChPuSa1aewedZoqhfx7W3P04BwoDEamJnuTHGD1RjmFx1m4OxnGyu 3bzpdeFXjU4R7UYKBbD1hV9+FmZgIdZFYRBeAEDA9kJHJUlE7kMnFpVYANHwFxUA bfob0pAXkx50+OIUBvyS1bPlsbVZrhHtrxCg28TBZRu0z0gw/gqdtBrBIo54340c 0+xjCdy/r7ljPRT3bnvlnmpp1JsdXorJ+AXH20iNMK6ZAKt6mnB/HKoaijA79/K/ raDhocrVTLgc+WMcZCjUSppUSnGhEe/V3bnjs3o8tIOSdntlBPMAyiFDvCMQrNvf ycSjvwqKgSlnsIYh9JM2zyPeTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNg0m5AY WqoL0B7NJuUEtR4pGl4yMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1 dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDcxOC85MjgzRURFRTBFOTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010 T045aXFEdFhzRHVpaUg1dlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAINOY/ekNE7pznjpiQH5Yc2QWxgRcHBHyYBffL3gh77ioEiqPHdoeixFmMBBl r79kRfWNNVQATGxVCsjCakkpq5Swj2Xn+BX7zLUAnXmIjdoGqT3Pyx8PPPYDaO/4 8ElCAZD4sJHfYWTzfkSvH6FCGbifYqRHJQjliCb9Mo/T5CFErazvHdhHx6R3I9xZ EZaPvJ3/XmwGQykYjMCWdkCB35IhLiVWRAWECAHN63PDZ9NoI44/XfQZJ+i/BYY+ noWSUCbR2VADFGZ58gPbq0b2pAp1MVdmN1LmyEd9E03XjLP1pk0Xmy+CJkTfMW/z rTB7Q+BNB31ANSmOD3rs1IoWmA== -----END CERTIFICATE-----Generated at Wed Jul 29 12:29:52 2026 by rpki-client