$ rpki-client -vvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft File: G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft (raw, json) Hash identifier: ss8tkIr6h9MI6LW/ieprXq+lDmRKmaN+yg61OfWB6KQ= Subject key identifier: 96:2C:0F:36:50:97:85:0C:8C:46:88:C6:83:FF:7B:28:B0:18:CB:EE Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 Certificate issuer: /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Certificate serial: 0CB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft Manifest number: 0CA5 Signing time: Tue 28 Jul 2026 18:46:15 +0000 Manifest this update: Tue 28 Jul 2026 18:46:14 +0000 Manifest next update: Tue 04 Aug 2026 18:46:14 +0000 Files and hashes: 1: G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl (hash: mW3zxVazB6dMXugoawWrTJ/pvI3sCaERLIZULHYttfI=) 2: 53409F861D9C11EAA3FD402FC4F9AE02.roa (hash: +93w0+gECKsPxfT8GgCs4EFDA/kceHJr+UZbAJ/I5oE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3248 (0xcb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117FA3, serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Validity Not Before: Jul 28 18:46:14 2026 GMT Not After : Aug 4 18:46:14 2026 GMT Subject: CN=6a68f8f7-0249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:e9:d1:bc:13:65:bb:5f:96:b4:04:9e:68: 5f:24:db:b2:d1:65:44:5b:5a:83:9c:7c:e7:c5:64: bd:ca:a6:fd:30:a6:3c:79:2d:9c:11:c3:55:7d:69: 80:13:65:ab:d0:9a:e3:44:12:56:34:ff:20:4d:db: a9:f2:f1:d9:9c:a5:d0:fe:28:4e:81:79:95:96:cf: 7f:a5:2f:17:15:32:fe:43:bb:7d:5b:fa:82:19:4a: 65:c1:36:14:39:90:04:8d:e2:4f:43:0e:6f:77:e2: 5d:77:2d:1b:cf:6a:d2:0e:cb:5b:c0:13:85:fe:40: aa:23:f7:05:42:be:0d:b6:ac:44:a8:64:dc:4e:4c: c6:f0:8c:bc:d7:9e:a0:ca:a9:f4:d3:cb:e4:5b:ba: 22:5d:ea:59:94:7d:7e:27:33:9c:58:2c:db:76:39: 60:cb:93:13:68:2c:59:10:9a:6e:6b:87:d6:bc:1c: 9f:f2:bd:74:07:15:23:52:4b:a1:e3:98:ad:94:9c: 77:25:79:2f:92:67:4a:cf:ca:89:7a:b0:11:d6:e4: 22:5e:cc:d9:85:f5:f7:b0:ec:df:07:c4:e0:5e:dd: cc:e6:dc:ea:a0:44:78:2b:b3:44:4a:91:bf:c1:9a: c2:2d:c4:50:e0:88:b5:c2:15:8d:b0:88:98:41:ea: 05:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2C:0F:36:50:97:85:0C:8C:46:88:C6:83:FF:7B:28:B0:18:CB:EE X509v3 Authority Key Identifier: keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:fc:e8:30:c5:ee:a3:13:75:9d:a3:35:87:c9:15:5a:81:8a: e7:37:bf:1b:99:9f:ba:9b:c8:f9:cc:7b:c2:58:73:25:d9:d6: 77:36:cf:3a:fa:3d:d3:aa:5d:26:a7:8c:32:58:25:63:4e:f4: 57:be:78:02:fe:3b:60:e1:9b:b5:5d:4b:36:a5:aa:d6:f8:51: a7:ed:c3:9d:b9:2b:a1:88:39:7c:71:01:2d:b5:91:ac:a4:a4: 93:fe:06:8c:a8:c9:b6:1d:79:9e:3e:c0:3a:66:38:1c:f2:b4: 9c:8a:46:85:2e:65:f1:fc:51:48:6f:df:91:a7:11:3e:ed:19: 01:3e:84:6e:6a:8b:06:b8:bc:aa:1f:b2:e6:4a:a3:78:8b:37: 9b:ad:59:26:52:fe:6e:2b:93:0e:f2:3d:6f:11:3a:92:ec:23: 50:29:34:88:a6:62:31:f9:47:4e:a2:6b:94:ff:61:b6:61:97: cb:65:33:07:53:b4:41:af:b2:be:bf:e5:e8:4f:73:59:4f:47: 69:83:99:90:84:cb:db:a7:12:db:2d:06:c3:e0:a7:a9:61:d2: 48:c2:0a:33:4c:70:81:fb:08:f7:e4:7e:8f:66:19:5b:33:4b: 1d:8d:96:06:ef:29:6a:a0:9c:9a:10:cb:db:e5:3d:cc:a2:df: 30:12:61:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdGQTMxMTAvBgNVBAUTKDFCODIxMkRCRjE1NTNDM0I3NjFGMTk5RTVFMDVBMkQx MDk4RENENDcwHhcNMjYwNzI4MTg0NjE0WhcNMjYwODA0MTg0NjE0WjAYMRYwFAYD VQQDEw02YTY4ZjhmNy0wMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQvp0bwTZbtflrQEnmhfJNuy0WVEW1qDnHznxWS9yqb9MKY8eS2cEcNVfWmA E2Wr0JrjRBJWNP8gTdup8vHZnKXQ/ihOgXmVls9/pS8XFTL+Q7t9W/qCGUplwTYU OZAEjeJPQw5vd+Jddy0bz2rSDstbwBOF/kCqI/cFQr4NtqxEqGTcTkzG8Iy8156g yqn008vkW7oiXepZlH1+JzOcWCzbdjlgy5MTaCxZEJpua4fWvByf8r10BxUjUkuh 45itlJx3JXkvkmdKz8qJerAR1uQiXszZhfX3sOzfB8TgXt3M5tzqoER4K7NESpG/ wZrCLcRQ4Ii1whWNsIiYQeoF3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJYsDzZQ l4UMjEaIxoP/eyiwGMvuMB8GA1UdIwQYMBaAFBuCEtvxVTw7dh8Znl4FotEJjc1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0ZBMy81OTMwNzMzNjFE OUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBEdDJIeG1lWGdXaTBRbU56 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0SVMyX0ZWUER0Mkh4bWVYZ1dpMFFtTnpVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0ZBMy81OTMwNzMzNjFEOUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBE dDJIeG1lWGdXaTBRbU56VWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV/zoMMXuoxN1naM1h8kVWoGK5ze/G5mfupvI+cx7wlhzJdnWdzbPOvo906pd JqeMMlglY070V754Av47YOGbtV1LNqWq1vhRp+3DnbkroYg5fHEBLbWRrKSkk/4G jKjJth15nj7AOmY4HPK0nIpGhS5l8fxRSG/fkacRPu0ZAT6EbmqLBri8qh+y5kqj eIs3m61ZJlL+biuTDvI9bxE6kuwjUCk0iKZiMflHTqJrlP9htmGXy2UzB1O0Qa+y vr/l6E9zWU9HaYOZkITL26cS2y0Gw+CnqWHSSMIKM0xwgfsI9+R+j2YZWzNLHY2W Bu8paqCcmhDL2+U9zKLfMBJhDQ== -----END CERTIFICATE-----Generated at Wed Jul 29 03:35:16 2026 by rpki-client