$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft File: s9da4ezu9vkr0X0MSzZRjVvndvE.mft (raw, json) Hash identifier: FkiXw5zGK2mGrU3snF4c9d19zEBHzixsYajje+zUCFU= Subject key identifier: FA:37:76:5A:92:96:C0:6F:F1:1D:4A:52:A1:FF:66:7E:B1:B1:70:27 Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft Manifest number: 01AC Signing time: Mon 27 Jul 2026 05:52:12 +0000 Manifest this update: Mon 27 Jul 2026 05:52:12 +0000 Manifest next update: Mon 03 Aug 2026 05:52:12 +0000 Files and hashes: 1: s9da4ezu9vkr0X0MSzZRjVvndvE.crl (hash: ztXk14CIOV3Oq0AgNRaNT0e7g5R8YlPcw/LigYSXiHA=) 2: C591C650781311F080669C0EC4F9AE02.roa (hash: Bg2wu7TpMXwzFSX0fI8NfsbFSLdPHOZ/G6xBjTAs5cw=) 3: 9D44176C781211F09ADE4979C4F9AE02.roa (hash: ki8BXTLBldb3cGwGovgDoOhIuW4iyxvUAjDm1D52/e0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 05:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Jul 27 05:52:12 2026 GMT Not After : Aug 3 05:52:12 2026 GMT Subject: CN=6a66f20c-b208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0f:f5:b1:65:75:51:f4:89:46:c6:53:0f:68: b0:c0:ac:fd:c9:85:3b:51:ac:a0:91:3e:a2:bf:db: 59:a5:58:9f:8b:3c:00:a1:b3:76:a6:47:61:13:c9: ae:50:34:4e:1d:cd:a2:bd:43:5a:8e:bf:26:34:42: 6b:9d:5b:9a:cb:fd:bb:7c:50:1a:2c:15:24:84:74: a2:8a:94:e7:a4:ae:08:72:e2:58:aa:7e:d9:4b:39: 2a:4b:af:38:6f:af:36:22:bb:0a:12:92:fb:cc:21: 45:21:43:cd:23:06:26:99:28:4b:5a:c3:f5:ec:d8: bb:32:9e:0b:91:28:53:5c:08:d7:df:d9:b1:46:8b: c9:e7:32:af:e6:eb:1c:91:31:eb:85:af:8c:2f:2b: d1:c2:64:5a:ef:0a:78:30:ae:9f:5b:76:7d:5a:97: 2f:7a:a3:c5:ef:60:e8:73:86:7c:65:47:a9:59:25: 08:c3:bd:46:70:b1:d5:68:5f:bb:de:89:4c:fa:66: 2d:f9:9c:be:d7:27:54:ba:a4:84:f7:91:61:34:c0: e5:b0:d6:dc:41:c6:12:10:84:dd:2c:4c:c1:9d:12: ab:9d:14:f7:15:12:72:47:59:6f:f5:b1:d9:50:24: c2:e8:79:b2:54:a6:e1:8a:9f:4f:52:e4:13:8f:b0: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:37:76:5A:92:96:C0:6F:F1:1D:4A:52:A1:FF:66:7E:B1:B1:70:27 X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:05:22:85:e0:fd:5e:be:59:4c:c5:0a:e4:c0:68:55:34:24: 72:a8:e1:ab:8e:29:27:8a:cd:e9:4e:57:ef:f1:f4:cf:83:85: d3:09:be:cc:ac:71:a5:fd:ea:a9:3f:78:bf:64:8f:99:8b:ae: 7f:3d:a2:b1:ec:56:f6:c2:04:6f:3c:a0:fc:80:ee:6d:68:fc: 38:24:00:77:77:e3:2d:28:99:c6:c3:09:a5:75:cd:2d:c0:94: 2c:68:fa:60:27:12:35:8f:71:28:06:8b:4e:b6:18:ac:b7:00: 21:0f:30:95:b9:f8:2b:ad:0b:ef:80:83:d1:27:23:ec:0d:c7: 26:5b:eb:59:ac:c8:0a:e2:87:09:61:c6:75:a7:46:a8:af:76: d6:b9:76:37:f1:d6:cd:c4:c6:ec:f5:09:5b:da:a4:8e:26:97: 64:c7:6f:ec:11:a6:5a:9d:dc:f4:a4:18:94:93:2b:a6:bc:34: 73:af:eb:da:f3:b2:87:b6:1a:3e:89:8f:a2:d9:05:87:4c:17: a5:ed:86:f4:09:16:1f:68:bf:43:99:8d:09:90:73:79:2e:58: 9d:e2:20:09:7e:13:1d:c4:33:77:ad:34:e7:bc:b8:71:11:08: 17:5e:ef:51:9b:37:89:49:82:33:45:dc:b2:26:1a:67:a6:91: a8:d0:ee:6b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjYwNzI3MDU1MjEyWhcNMjYwODAzMDU1MjEyWjAYMRYwFAYD VQQDEw02YTY2ZjIwYy1iMjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiw/1sWV1UfSJRsZTD2iwwKz9yYU7UaygkT6iv9tZpVifizwAobN2pkdhE8mu UDROHc2ivUNajr8mNEJrnVuay/27fFAaLBUkhHSiipTnpK4IcuJYqn7ZSzkqS684 b682IrsKEpL7zCFFIUPNIwYmmShLWsP17Ni7Mp4LkShTXAjX39mxRovJ5zKv5usc kTHrha+MLyvRwmRa7wp4MK6fW3Z9WpcveqPF72Doc4Z8ZUepWSUIw71GcLHVaF+7 3olM+mYt+Zy+1ydUuqSE95FhNMDlsNbcQcYSEITdLEzBnRKrnRT3FRJyR1lv9bHZ UCTC6HmyVKbhip9PUuQTj7CPBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPo3dlqS lsBv8R1KUqH/Zn6xsXAnMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS85RTdDMkNFRTAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2 a3IwWDBNU3paUmpWdm5kdkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYQUiheD9Xr5ZTMUK5MBoVTQkcqjhq44pJ4rN6U5X7/H0z4OF0wm+zKxxpf3q qT94v2SPmYuufz2isexW9sIEbzyg/IDubWj8OCQAd3fjLSiZxsMJpXXNLcCULGj6 YCcSNY9xKAaLTrYYrLcAIQ8wlbn4K60L74CD0Scj7A3HJlvrWazICuKHCWHGdadG qK921rl2N/HWzcTG7PUJW9qkjiaXZMdv7BGmWp3c9KQYlJMrprw0c6/r2vOyh7Ya PomPotkFh0wXpe2G9AkWH2i/Q5mNCZBzeS5YneIgCX4THcQzd60057y4cREIF17v UZs3iUmCM0XcsiYaZ6aRqNDuaw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:51:57 2026 by rpki-client