$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: ML30ibB+IUttD7adtjHBlQuvBF7pY7zOHUukZUR6IDg= Subject key identifier: C4:16:3E:B9:5B:3A:5D:9B:1B:90:88:8E:58:2B:06:37:21:7B:C4:3F Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 0212 Signing time: Mon 27 Jul 2026 04:29:32 +0000 Manifest this update: Mon 27 Jul 2026 04:29:32 +0000 Manifest next update: Mon 03 Aug 2026 04:29:32 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: dsDvkDCcuE4ympCKOCck9ToPKeQ3c49AGs5mF1MwlrQ=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: qK+khHCIuI//dPRwyz9oPvFPdzHoY4nUbkit8bRPNhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 04:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA, serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Validity Not Before: Jul 27 04:29:32 2026 GMT Not After : Aug 3 04:29:32 2026 GMT Subject: CN=6a66deac-07be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2a:f4:ec:25:78:a0:67:3a:68:88:41:21:04: 54:b8:80:19:cb:32:86:c5:8e:6b:d5:c6:99:30:c8: 27:fe:d6:0a:1d:aa:e2:43:72:6f:46:6a:f2:e5:28: f5:53:9a:9e:cd:16:03:2a:9e:df:fe:f1:0f:bb:9e: b6:ce:d9:a1:29:87:75:4c:83:38:5d:57:0c:71:2c: d4:1b:87:fc:b8:9c:3a:19:1d:87:42:75:21:56:9f: 85:ae:02:d5:14:9d:05:bd:01:95:c0:da:a0:e7:f9: e1:4f:f4:4c:f7:5f:33:47:fd:8e:b4:31:1d:ee:da: 9f:9e:7b:91:bb:f7:66:d2:2e:8e:66:65:fe:03:5e: 42:55:4c:49:25:c5:eb:ed:f2:16:58:92:ec:f3:eb: 7e:6b:29:61:5e:17:2b:7e:2e:05:ce:ce:f2:32:dd: ab:db:ea:74:2a:1a:52:9e:e9:5c:ea:4d:de:73:ba: 78:11:ad:ac:45:c1:95:65:11:f6:aa:f9:ae:30:f0: 63:a6:5d:6a:d0:e6:ec:67:32:cd:d7:ed:3e:35:66: ae:f0:f6:ac:20:2e:b5:b0:04:0c:f4:b1:9a:55:0d: 82:c8:b7:c8:9c:77:f2:a3:5f:00:fd:8c:22:98:df: bd:4f:17:5d:7a:31:1d:fa:b9:10:67:b3:e9:0d:22: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:16:3E:B9:5B:3A:5D:9B:1B:90:88:8E:58:2B:06:37:21:7B:C4:3F X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:c8:7c:14:67:b2:18:5b:cf:4c:7a:5c:c0:84:3b:8e:f9:34: a5:f5:80:20:c8:cc:5b:cd:29:65:a8:9f:21:38:cf:00:91:50: 66:8a:36:8f:94:88:43:48:12:a6:da:93:c3:15:8e:4f:84:07: 86:b4:03:b9:89:7c:8f:1b:ea:2e:1d:70:6f:97:05:e8:b3:14: 76:62:9a:e0:4f:62:17:47:d9:5f:15:6e:98:07:e9:de:6c:83: 3e:67:38:46:c0:44:b5:09:a1:1f:bf:42:8d:eb:0d:49:a1:3a: 4f:3b:e2:c1:f7:92:19:83:93:b7:05:3c:18:20:80:e5:b5:5c: 10:62:93:6e:f0:cb:d6:59:73:31:33:42:03:1a:7c:b3:e2:23: 4a:ea:83:8a:4f:89:18:11:1f:7f:35:48:e4:e7:73:83:3d:63: 50:47:37:06:e2:ca:c3:44:e1:cc:2b:19:8e:fa:d1:40:c8:b2: 1d:bd:1c:ed:05:6c:05:1c:42:7d:c4:42:13:7d:d5:6b:c5:a3: 8f:dc:42:13:b0:1d:ed:89:51:bc:9a:92:fd:46:da:63:3e:08: 25:52:32:63:3d:59:c2:a0:1d:b0:97:83:1a:d2:bb:9d:35:1a: 29:ef:10:82:45:de:2e:2d:b4:e8:c6:8a:19:ef:12:e8:01:ad: 2b:52:1c:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3 MzNGOUMyQjUwHhcNMjYwNzI3MDQyOTMyWhcNMjYwODAzMDQyOTMyWjAYMRYwFAYD VQQDEw02YTY2ZGVhYy0wN2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhyr07CV4oGc6aIhBIQRUuIAZyzKGxY5r1caZMMgn/tYKHariQ3JvRmry5Sj1 U5qezRYDKp7f/vEPu562ztmhKYd1TIM4XVcMcSzUG4f8uJw6GR2HQnUhVp+FrgLV FJ0FvQGVwNqg5/nhT/RM918zR/2OtDEd7tqfnnuRu/dm0i6OZmX+A15CVUxJJcXr 7fIWWJLs8+t+aylhXhcrfi4Fzs7yMt2r2+p0KhpSnulc6k3ec7p4Ea2sRcGVZRH2 qvmuMPBjpl1q0ObsZzLN1+0+NWau8PasIC61sAQM9LGaVQ2CyLfInHfyo18A/Ywi mN+9TxddejEd+rkQZ7PpDSLkwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMQWPrlb Ol2bG5CIjlgrBjche8Q/MB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3 clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy WFB1UjhTRXNLTTl6UDV3clUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKch8FGeyGFvPTHpcwIQ7jvk0pfWAIMjMW80pZaifITjPAJFQZoo2j5SIQ0gS ptqTwxWOT4QHhrQDuYl8jxvqLh1wb5cF6LMUdmKa4E9iF0fZXxVumAfp3myDPmc4 RsBEtQmhH79CjesNSaE6TzviwfeSGYOTtwU8GCCA5bVcEGKTbvDL1llzMTNCAxp8 s+IjSuqDik+JGBEffzVI5Odzgz1jUEc3BuLKw0ThzCsZjvrRQMiyHb0c7QVsBRxC fcRCE33Va8Wjj9xCE7Ad7YlRvJqS/UbaYz4IJVIyYz1ZwqAdsJeDGtK7nTUaKe8Q gkXeLi206MaKGe8S6AGtK1IcpA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:38:06 2026 by rpki-client