$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft File: CStU0vnpbT_OHwwNuzGxuCyNLOA.mft (raw, json) Hash identifier: C+9CscVEWdht97Fc5JLFh5rFKC/fgOIiQUg3h/QBTJw= Subject key identifier: 1E:14:EA:6C:53:D9:B6:69:BC:C1:17:BD:46:86:3A:D8:11:7B:86:26 Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Certificate serial: 02BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft Manifest number: 02AC Signing time: Mon 27 Jul 2026 02:57:20 +0000 Manifest this update: Mon 27 Jul 2026 02:57:19 +0000 Manifest next update: Mon 03 Aug 2026 02:57:19 +0000 Files and hashes: 1: CStU0vnpbT_OHwwNuzGxuCyNLOA.crl (hash: JeW6usWn+thz1WK9LpDPZ0IhJDxoDa8MeM+WD4Y6tYo=) 2: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (hash: ZBpZFHSjfj1bISXLZ4G9TvJh+gywnnw40Zr1cDFnGAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 02:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 699 (0x2bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Validity Not Before: Jul 27 02:57:19 2026 GMT Not After : Aug 3 02:57:19 2026 GMT Subject: CN=6a66c910-92dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:40:59:fa:9a:eb:d0:41:6f:8e:2b:5a:5e: c0:91:3b:a4:f6:4d:68:b4:c5:75:bf:66:c7:f7:79: c2:80:5b:3f:91:a6:a9:72:7c:81:8f:41:70:4e:a8: 82:15:60:ab:89:fb:f2:26:0f:76:7b:ce:24:15:df: e3:2f:74:54:8f:f2:9d:36:ad:e8:48:2f:d1:8d:04: 1a:ee:81:ac:06:12:95:f4:6b:7a:3e:69:f4:0f:02: a0:04:f3:fa:70:5d:8d:2b:1b:cf:e4:97:85:e8:87: 96:46:67:e8:2c:ac:ea:42:b0:da:cf:42:0c:e6:43: 5f:31:11:93:88:41:f2:1f:3c:49:a7:14:8e:a6:85: ba:a0:9c:86:25:be:99:f2:93:31:6c:73:89:e6:1a: c4:d9:91:66:12:ab:0a:ac:78:0c:78:ed:7f:fb:5c: 66:9a:44:15:94:19:cf:4a:c9:9a:79:ae:bc:8b:14: 48:a0:81:b4:39:a8:bf:ea:4a:84:a1:b3:72:7c:8c: 4b:9e:93:94:96:a4:cd:bf:fd:c7:75:81:57:d5:b2: c2:4d:65:90:1a:e3:2e:2d:ea:06:14:64:13:85:57: 5f:d8:89:0e:eb:dc:8d:e2:fa:1f:5a:c5:23:06:21: 3d:42:a7:15:38:40:ea:5e:03:d2:34:de:91:75:f8: 7c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:14:EA:6C:53:D9:B6:69:BC:C1:17:BD:46:86:3A:D8:11:7B:86:26 X509v3 Authority Key Identifier: keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:2b:b3:79:4e:98:e2:b4:d9:17:ea:e9:3d:2b:3a:25:10:07: cb:65:70:59:24:e9:af:96:11:ba:6c:d3:54:eb:06:64:57:ec: 40:2a:1e:89:77:19:04:f2:0c:ae:b5:a2:89:25:75:99:ec:fe: 59:a6:a0:26:85:d5:d1:07:23:98:dc:6f:c6:a3:69:07:c9:3c: b2:89:2b:da:39:9a:18:81:74:4d:14:6b:ab:ed:11:89:da:0f: 1e:74:55:70:be:ca:d2:e5:26:ee:93:8e:a2:02:0a:d6:a8:fc: 77:fb:4d:f8:74:77:d9:6c:9e:10:5d:49:1a:24:49:e4:9a:bc: 04:f5:40:07:bb:a0:67:14:fc:04:af:35:42:e7:49:f6:2a:e9: 03:28:cc:8d:2a:87:35:e8:7a:e9:e7:7a:9a:ec:28:26:95:0f: 75:c8:6f:40:02:b3:ea:24:2a:e2:36:28:48:74:9b:91:57:78: 30:ac:03:bf:78:c6:9a:5c:ce:45:f3:56:ad:f5:1e:d7:ea:f4: 30:79:61:cf:16:e6:f1:ed:fa:14:a7:e9:bb:0f:5a:2b:32:77: 16:c3:1a:7b:54:02:9e:4a:72:c3:a9:6a:0f:ff:b7:10:12:5d: 1b:a9:c6:1d:2b:15:2a:c0:81:7c:93:8a:e1:8c:1f:3e:0f:2c: 1e:75:92:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQTIxMTAvBgNVBAUTKDA5MkI1NEQyRjlFOTZEM0ZDRTFGMEMwREJCMzFCMUI4 MkM4RDJDRTAwHhcNMjYwNzI3MDI1NzE5WhcNMjYwODAzMDI1NzE5WjAYMRYwFAYD VQQDEw02YTY2YzkxMC05MmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGBAWfqa69BBb44rWl7AkTuk9k1otMV1v2bH93nCgFs/kaapcnyBj0FwTqiC FWCrifvyJg92e84kFd/jL3RUj/KdNq3oSC/RjQQa7oGsBhKV9Gt6Pmn0DwKgBPP6 cF2NKxvP5JeF6IeWRmfoLKzqQrDaz0IM5kNfMRGTiEHyHzxJpxSOpoW6oJyGJb6Z 8pMxbHOJ5hrE2ZFmEqsKrHgMeO1/+1xmmkQVlBnPSsmaea68ixRIoIG0Oai/6kqE obNyfIxLnpOUlqTNv/3HdYFX1bLCTWWQGuMuLeoGFGQThVdf2IkO69yN4vofWsUj BiE9QqcVOEDqXgPSNN6Rdfh8sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB4U6mxT 2bZpvMEXvUaGOtgRe4YmMB8GA1UdIwQYMBaAFAkrVNL56W0/zh8MDbsxsbgsjSzg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVBMi8xNTI1MzQxNDg1 NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJUX09Id3dOdXpHeHVDeU5M T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NTdFUwdm5wYlRfT0h3d051ekd4dUN5TkxPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVBMi8xNTI1MzQxNDg1NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJU X09Id3dOdXpHeHVDeU5MT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACCuzeU6Y4rTZF+rpPSs6JRAHy2VwWSTpr5YRumzTVOsGZFfsQCoeiXcZBPIM rrWiiSV1mez+WaagJoXV0QcjmNxvxqNpB8k8sokr2jmaGIF0TRRrq+0RidoPHnRV cL7K0uUm7pOOogIK1qj8d/tN+HR32WyeEF1JGiRJ5Jq8BPVAB7ugZxT8BK81QudJ 9irpAyjMjSqHNeh66ed6muwoJpUPdchvQAKz6iQq4jYoSHSbkVd4MKwDv3jGmlzO RfNWrfUe1+r0MHlhzxbm8e36FKfpuw9aKzJ3FsMae1QCnkpyw6lqD/+3EBJdG6nG HSsVKsCBfJOK4YwfPg8sHnWSJw== -----END CERTIFICATE-----Generated at Tue Jul 28 22:29:35 2026 by rpki-client