$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: QT+HFepCtEgdD0kBYnt5rwqWsNXJENoK7D8bqKm+MU4= Subject key identifier: 2E:4D:9B:00:35:F2:0A:AE:CC:4D:DB:63:C0:65:0D:79:2D:80:47:4B Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 0838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 082D Signing time: Tue 28 Jul 2026 21:32:27 +0000 Manifest this update: Tue 28 Jul 2026 21:32:27 +0000 Manifest next update: Tue 04 Aug 2026 21:32:27 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: qoby4+XzDaySepefrgVILuybQZ8kfjS0JnR4HTAh2Hc=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: tFjfeFvirq4K21vPq+LIVuacIhGqj3/ek6525SEORBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 21:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Jul 28 21:32:27 2026 GMT Not After : Aug 4 21:32:27 2026 GMT Subject: CN=6a691feb-cdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4b:00:48:dc:39:d9:ed:7d:e5:ac:f7:84:8a: 3d:1c:41:14:fb:dd:ee:63:36:88:5f:83:48:8f:55: 9e:24:a5:bc:45:12:0b:3e:6b:36:dd:2f:82:e3:b1: e0:ab:14:8a:6d:27:25:9d:df:23:c9:06:4e:a3:d5: 16:63:59:0b:d9:9b:68:28:42:e8:72:bc:be:0d:7e: 85:d3:57:ef:c0:e9:a2:2e:00:1a:73:d3:e1:d3:9a: ba:40:27:48:40:45:c7:eb:17:4e:77:43:5e:e1:a1: 2f:98:25:63:57:c9:3c:d7:b1:78:09:8e:d5:0d:24: 3c:05:dc:0f:46:0b:f7:39:f9:ae:b4:ad:c0:21:b7: 4e:a0:6b:83:b4:be:f0:47:9e:f2:a9:a1:35:32:b8: d0:06:44:d2:47:bd:f6:19:2b:54:e5:db:34:70:85: a2:81:a8:6b:bd:99:43:25:33:d4:9f:4a:e6:5b:e5: b1:d5:fe:fe:a9:cb:e5:24:5e:0d:77:d2:1e:9b:12: 75:49:05:8a:c0:3c:bb:6f:9c:6b:ce:53:85:4c:3c: 2a:04:aa:22:5c:c8:2c:03:3f:e3:df:c0:e8:19:32: 47:88:b9:d8:73:56:e6:c0:2f:37:08:88:5f:da:9a: 23:b0:67:40:c1:e0:a2:18:48:f8:af:0e:12:2c:44: 98:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4D:9B:00:35:F2:0A:AE:CC:4D:DB:63:C0:65:0D:79:2D:80:47:4B X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:09:9c:b6:74:07:e1:55:fe:8c:6f:59:6e:c8:de:6a:34:cb: 03:49:6a:44:d9:d2:fb:bf:53:a7:7a:99:43:ac:c1:6d:df:bd: 5e:3f:2a:42:ea:3c:e6:0e:86:00:9a:97:a1:6c:2f:59:34:31: 8a:c7:44:bb:c9:e1:44:24:59:40:bc:44:0c:f1:64:c7:da:90: 85:3d:3f:cd:f8:04:84:16:c1:28:7f:8a:a6:11:cd:33:ea:49: 90:f0:7d:7b:01:d0:00:dd:9d:b5:7f:7a:d2:fb:8e:32:47:e9: 7e:d6:af:0d:f9:25:ca:f2:16:f1:32:b3:7d:ae:28:c5:13:f6: 19:75:07:00:5d:0e:f5:e3:ed:53:37:37:7d:97:05:d2:a6:38: f9:1d:8e:73:db:1d:e2:62:dd:54:3e:1f:be:22:a0:04:53:70: e1:15:7d:b2:8c:e1:ae:15:c3:eb:95:41:b2:da:4d:e5:42:8c: b9:83:0c:c0:1c:05:50:80:83:8d:0f:b5:1c:54:e1:75:1a:c5: f8:d4:15:5e:c1:b7:35:21:ca:55:b8:54:ca:0d:df:44:8b:18: f3:c0:06:86:e7:8c:0d:69:0b:e8:11:8b:a8:8a:37:d1:18:8c: 2e:75:4a:9c:7e:15:97:1f:f7:88:d8:d8:38:29:02:f0:ed:b2: 7c:17:bb:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjYwNzI4MjEzMjI3WhcNMjYwODA0MjEzMjI3WjAYMRYwFAYD VQQDEw02YTY5MWZlYi1jZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA10sASNw52e195az3hIo9HEEU+93uYzaIX4NIj1WeJKW8RRILPms23S+C47Hg qxSKbSclnd8jyQZOo9UWY1kL2ZtoKELocry+DX6F01fvwOmiLgAac9Ph05q6QCdI QEXH6xdOd0Ne4aEvmCVjV8k817F4CY7VDSQ8BdwPRgv3OfmutK3AIbdOoGuDtL7w R57yqaE1MrjQBkTSR732GStU5ds0cIWigahrvZlDJTPUn0rmW+Wx1f7+qcvlJF4N d9IemxJ1SQWKwDy7b5xrzlOFTDwqBKoiXMgsAz/j38DoGTJHiLnYc1bmwC83CIhf 2pojsGdAweCiGEj4rw4SLESYrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5NmwA1 8gquzE3bY8BlDXktgEdLMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAowmctnQH4VX+jG9ZbsjeajTLA0lqRNnS+79Tp3qZQ6zBbd+9Xj8qQuo85g6G AJqXoWwvWTQxisdEu8nhRCRZQLxEDPFkx9qQhT0/zfgEhBbBKH+KphHNM+pJkPB9 ewHQAN2dtX960vuOMkfpftavDfklyvIW8TKzfa4oxRP2GXUHAF0O9ePtUzc3fZcF 0qY4+R2Oc9sd4mLdVD4fviKgBFNw4RV9sozhrhXD65VBstpN5UKMuYMMwBwFUICD jQ+1HFThdRrF+NQVXsG3NSHKVbhUyg3fRIsY88AGhueMDWkL6BGLqIo30RiMLnVK nH4Vlx/3iNjYOCkC8O2yfBe7pg== -----END CERTIFICATE-----Generated at Wed Jul 29 09:26:26 2026 by rpki-client