$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json) Hash identifier: IP/lIXaVRPK0QYSk1jmHoTok4MYysEs4Q0uNVVXU/+U= Subject key identifier: EB:B7:E5:6A:DE:EF:34:62:91:49:8D:5A:4D:2F:4D:B2:7A:DD:19:61 Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft Manifest number: 0475 Signing time: Mon 27 Jul 2026 01:07:09 +0000 Manifest this update: Mon 27 Jul 2026 01:07:09 +0000 Manifest next update: Mon 03 Aug 2026 01:07:09 +0000 Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: a6Q8uUryXVWn98wcgCF33gjbuOHZyByy/l2LDrq8ZRc=) 2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: kVxDpjbggfcolPJrx4wyAyjtrQ4Mtc6iJ6/Dgd9wN9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:07:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Validity Not Before: Jul 27 01:07:09 2026 GMT Not After : Aug 3 01:07:09 2026 GMT Subject: CN=6a66af3d-1ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:7d:24:37:21:64:fd:7f:96:32:af:0c:a3: 02:56:90:8e:b8:3e:21:92:90:df:44:8d:40:a9:a5: a6:28:13:eb:97:ca:de:37:c4:c9:56:8a:5a:21:90: b4:70:eb:d0:7e:d2:7b:36:07:4f:9c:1d:dc:74:8e: c6:f3:29:3c:4e:f1:97:12:81:e7:af:15:8a:3f:b4: f4:4c:d9:54:9b:ad:8c:82:e0:16:27:50:07:ff:5c: 08:7c:e0:7c:36:7d:73:f7:13:fa:46:0a:04:c0:9a: 87:ee:15:82:d5:d8:f4:4f:4b:bd:22:63:02:fd:92: 82:2c:30:3a:86:d0:64:95:ec:f8:c2:dc:4d:7e:88: da:b4:ba:58:d8:eb:db:8d:e3:7a:9e:e3:b6:08:23: 9a:f8:5a:9a:45:b3:db:ac:dd:ea:89:a4:48:ad:59: 7c:5c:2d:ac:64:0a:4f:e4:b6:80:04:4e:b5:97:a0: b8:a5:e4:30:bf:c7:d2:e1:5f:72:cd:f5:b6:63:3e: 97:e4:53:f9:33:27:f2:ce:62:5d:28:63:f6:69:19: 9e:53:35:fc:de:77:7c:55:8b:e4:8e:0f:f0:bd:53: 6d:f6:2f:95:71:c9:1b:0d:9f:f1:61:cf:f8:07:cb: 7b:e4:16:d0:eb:0d:4b:ec:74:fb:5a:12:25:3c:cb: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B7:E5:6A:DE:EF:34:62:91:49:8D:5A:4D:2F:4D:B2:7A:DD:19:61 X509v3 Authority Key Identifier: keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:f7:7d:ba:31:8b:39:73:42:2f:c8:2c:6c:d7:8c:03:e4:6a: 11:a3:98:6d:b1:9c:0b:8b:7f:87:8c:43:0d:89:66:4f:97:97: cf:5d:a8:15:c9:d3:19:1f:5c:b5:60:83:61:05:dd:93:f6:c1: d1:20:43:de:f8:cb:64:44:78:fa:c7:a6:26:97:da:43:ae:ca: d7:03:af:36:dd:8f:f5:06:c4:db:1e:e7:34:33:96:28:f2:5d: c1:0d:33:75:d0:fa:46:fc:94:47:04:d3:fd:42:af:72:57:6a: 44:ff:06:32:2e:26:32:8f:b2:26:06:17:9c:eb:84:82:47:b5: 79:8b:98:d4:3a:ae:46:02:b6:5d:c2:be:3f:d6:65:7d:b3:2e: 59:44:d8:93:8d:f3:76:35:25:f8:aa:3f:ff:d1:2a:3e:39:3b: e5:3f:b4:19:57:e5:69:5b:e4:77:df:74:a1:db:01:b3:46:70: c6:d2:b3:8f:20:99:13:37:c0:26:09:84:30:c0:27:10:68:98: 2a:b5:86:4b:06:16:c7:5f:42:a0:83:13:79:d3:72:12:c3:5a: a8:15:28:01:0e:a3:ae:86:cf:e2:6f:ab:6e:3d:84:23:49:4f: 8f:55:24:85:a1:57:82:62:07:0d:1e:2c:dd:4b:b9:03:37:dd: 3d:e7:3d:1e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzIxMTAvBgNVBAUTKEI2MTEwM0E1QzlDQzYwRUFEMTg4QTJGOUZEMTFFNjNE NTIzM0Q5OTUwHhcNMjYwNzI3MDEwNzA5WhcNMjYwODAzMDEwNzA5WjAYMRYwFAYD VQQDEw02YTY2YWYzZC0xYWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1W19JDchZP1/ljKvDKMCVpCOuD4hkpDfRI1AqaWmKBPrl8reN8TJVopaIZC0 cOvQftJ7NgdPnB3cdI7G8yk8TvGXEoHnrxWKP7T0TNlUm62MguAWJ1AH/1wIfOB8 Nn1z9xP6RgoEwJqH7hWC1dj0T0u9ImMC/ZKCLDA6htBklez4wtxNfojatLpY2Ovb jeN6nuO2CCOa+FqaRbPbrN3qiaRIrVl8XC2sZApP5LaABE61l6C4peQwv8fS4V9y zfW2Yz6X5FP5MyfyzmJdKGP2aRmeUzX83nd8VYvkjg/wvVNt9i+VcckbDZ/xYc/4 B8t75BbQ6w1L7HT7WhIlPMtFuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOu35Wre 7zRikUmNWk0vTbJ63RlhMB8GA1UdIwQYMBaAFLYRA6XJzGDq0Yii+f0R5j1SM9mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMi9GRjc3MUJCQzlE MjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlPclJpS0w1X1JIbVBWSXoy WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RoRURwY25NWU9yUmlLTDVfUkhtUFZJejJaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEIzMi9GRjc3MUJCQzlEMjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlP clJpS0w1X1JIbVBWSXoyWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVfd9ujGLOXNCL8gsbNeMA+RqEaOYbbGcC4t/h4xDDYlmT5eXz12oFcnTGR9c tWCDYQXdk/bB0SBD3vjLZER4+semJpfaQ67K1wOvNt2P9QbE2x7nNDOWKPJdwQ0z ddD6RvyURwTT/UKvcldqRP8GMi4mMo+yJgYXnOuEgke1eYuY1DquRgK2XcK+P9Zl fbMuWUTYk43zdjUl+Ko//9EqPjk75T+0GVflaVvkd990odsBs0ZwxtKzjyCZEzfA JgmEMMAnEGiYKrWGSwYWx19CoIMTedNyEsNaqBUoAQ6jrobP4m+rbj2EI0lPj1Uk haFXgmIHDR4s3Uu5AzfdPec9Hg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:23:33 2026 by rpki-client