$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: XTMhaD5iTSIKaVai8Tt9RzR9pReqZq8NTENcIXCURaA= Subject key identifier: 02:11:BA:AE:4A:5B:F6:97:C9:70:41:AC:77:8E:2C:37:99:69:4D:8A Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 0920 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 0908 Signing time: Tue 28 Jul 2026 20:39:05 +0000 Manifest this update: Tue 28 Jul 2026 20:39:05 +0000 Manifest next update: Tue 04 Aug 2026 20:39:05 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: 15nwLsNbI1OhNck8ANcZdo6qkOhm8eSZF5f78u1C1Gw=) 2: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: /CRw6E1vIEc7eVb62+omgoF8qhFxYxHMoooVUbjUl3E=) 3: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: L4cLpZwwCZ10zCVLhR1vyw0wh/3vcnCO5sVsoXu+2hs=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: qB0RRqeSWEL7TTLu1HM6B7BoFOWF6xTcsw18m7Kj/MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2336 (0x920) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Jul 28 20:39:05 2026 GMT Not After : Aug 4 20:39:05 2026 GMT Subject: CN=6a691369-d682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:51:51:87:36:d3:38:f8:e9:da:91:9d:14:17: ea:a5:e4:3c:6f:c7:47:52:33:a3:82:14:77:1b:86: 1d:14:eb:db:64:8f:a8:ea:92:66:0a:d4:d9:9f:52: 1d:b3:fc:56:f6:ea:e6:56:57:93:29:16:56:c8:5c: 85:77:91:72:47:68:72:77:f9:ed:03:22:8b:29:04: fe:db:f7:41:0c:cd:f3:fe:aa:6e:e9:ae:d8:f7:b4: ed:37:22:f7:08:13:f6:d2:1f:10:9f:20:3d:8b:79: 90:00:16:4f:22:a2:68:eb:ba:12:58:fd:f8:ab:20: e2:f9:12:d6:0b:40:8b:20:36:cf:91:ee:5b:fe:c1: 6a:c3:44:df:ab:41:97:57:fc:9f:fe:02:69:d3:8a: 0e:23:31:7f:6c:a8:31:f5:a7:ad:16:78:2e:a3:54: 86:c4:bc:a3:f8:af:c2:b0:f2:0c:c4:4c:4f:35:d6: 4b:a3:e1:d7:a5:b2:dd:5e:00:da:e7:ae:3d:47:21: 5e:5e:33:e9:36:a3:ff:49:d0:b2:66:4d:ec:97:80: 0e:1c:54:f1:eb:f0:d1:73:5c:15:5b:3e:c9:7a:e9: 4a:11:d5:a9:8b:e7:3b:5d:56:fc:cc:a1:39:4a:d9: e9:67:4a:af:6a:93:47:3e:d2:6b:c3:f0:50:13:68: 19:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:11:BA:AE:4A:5B:F6:97:C9:70:41:AC:77:8E:2C:37:99:69:4D:8A X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:27:d5:c0:7f:64:c9:6f:25:e2:a5:56:dc:2e:cd:c6:a5:4b: ec:9f:57:aa:2a:ab:92:03:e9:1f:b6:65:ce:3b:7d:06:f0:8a: c9:c6:e1:ad:10:9d:a2:49:af:4c:1c:74:71:90:45:69:fd:dc: 35:b4:30:5f:8c:bb:c8:1c:91:98:b7:53:ae:bb:e5:14:fc:ec: b3:1d:93:01:59:c0:35:c3:8d:f7:a3:cb:bc:6f:1b:d1:c8:14: 30:6c:51:c1:f0:36:00:40:e0:e8:57:24:aa:7a:9a:f7:65:da: 73:37:80:4e:5b:8c:6c:d9:25:3e:e4:f4:d7:3f:a2:41:17:0f: 99:e5:a2:ca:26:0c:50:88:d9:d0:f6:fe:88:ea:fb:1f:dc:32: f1:d0:a8:b2:1b:b5:97:93:60:0a:f3:6a:2c:8b:29:c2:af:7e: 3b:b6:7c:a9:09:13:0c:88:7b:44:70:e9:db:f7:e7:aa:70:1e: 6c:e2:d2:ec:72:3b:56:ff:2c:56:88:d3:40:12:e2:d4:53:37: 15:8b:e5:a4:b5:f9:c0:59:97:a8:94:49:96:8e:41:02:0f:42: b7:13:19:7a:75:e8:c0:06:1b:ea:21:db:19:21:4b:02:81:4f: d8:ff:6e:ce:6b:22:3a:c2:36:da:db:e1:db:9b:52:15:a0:50: 23:54:f8:68 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjYwNzI4MjAzOTA1WhcNMjYwODA0MjAzOTA1WjAYMRYwFAYD VQQDEw02YTY5MTM2OS1kNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1FRhzbTOPjp2pGdFBfqpeQ8b8dHUjOjghR3G4YdFOvbZI+o6pJmCtTZn1Id s/xW9urmVleTKRZWyFyFd5FyR2hyd/ntAyKLKQT+2/dBDM3z/qpu6a7Y97TtNyL3 CBP20h8QnyA9i3mQABZPIqJo67oSWP34qyDi+RLWC0CLIDbPke5b/sFqw0Tfq0GX V/yf/gJp04oOIzF/bKgx9aetFnguo1SGxLyj+K/CsPIMxExPNdZLo+HXpbLdXgDa 5649RyFeXjPpNqP/SdCyZk3sl4AOHFTx6/DRc1wVWz7JeulKEdWpi+c7XVb8zKE5 StnpZ0qvapNHPtJrw/BQE2gZJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAIRuq5K W/aXyXBBrHeOLDeZaU2KMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhifVwH9kyW8l4qVW3C7NxqVL7J9XqiqrkgPpH7Zlzjt9BvCKycbhrRCdokmv TBx0cZBFaf3cNbQwX4y7yByRmLdTrrvlFPzssx2TAVnANcON96PLvG8b0cgUMGxR wfA2AEDg6Fckqnqa92XaczeATluMbNklPuT01z+iQRcPmeWiyiYMUIjZ0Pb+iOr7 H9wy8dCoshu1l5NgCvNqLIspwq9+O7Z8qQkTDIh7RHDp2/fnqnAebOLS7HI7Vv8s VojTQBLi1FM3FYvlpLX5wFmXqJRJlo5BAg9CtxMZenXowAYb6iHbGSFLAoFP2P9u zmsiOsI22tvh25tSFaBQI1T4aA== -----END CERTIFICATE-----Generated at Wed Jul 29 07:18:25 2026 by rpki-client