$ rpki-client -vvf rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft File: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft (raw, json) Hash identifier: lccaT/7WCuatJQIdWudVgjK7KUUE+i7SoalYmnmPa5E= Subject key identifier: 78:33:47:FC:9B:E8:16:63:28:72:EE:12:FD:2E:57:3F:76:3F:AB:3D Authority key identifier: AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 Certificate issuer: /CN=A9123BFF/serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Certificate serial: 085E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft Manifest number: 0854 Signing time: Tue 28 Jul 2026 16:01:05 +0000 Manifest this update: Tue 28 Jul 2026 16:01:05 +0000 Manifest next update: Tue 04 Aug 2026 16:01:05 +0000 Files and hashes: 1: r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl (hash: rHijUwNjG5nJogPZ3Fxu41UPVrmb670L2YuSyXGBeBE=) 2: A3744A28149A11EDB9CF2F70C4F9AE02.roa (hash: zMVM5XvHUSFuCWzCvYIz2LcqG9igaxxQSY0E3/h4FG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123BFF, serialNumber=AF4A3544C74B317A7C326AF0E8393CB9D5262032 Validity Not Before: Jul 28 16:01:05 2026 GMT Not After : Aug 4 16:01:05 2026 GMT Subject: CN=6a68d241-e98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:46:8a:8f:c6:f5:1f:d5:f6:fe:3b:15:d6: 46:fe:c5:41:83:fd:4c:ae:d0:76:9a:bd:7f:d8:27: 84:07:5e:44:ef:a6:6c:dd:e8:0f:e8:f4:cb:b9:06: 1a:ac:2e:52:e4:80:d0:59:11:51:3c:5b:b4:80:c9: d5:b7:e6:38:d5:3e:45:16:96:4b:3e:6c:0c:01:f1: e0:c2:ca:ca:7e:bd:5a:f5:7b:ca:5f:28:ff:ea:0c: 88:15:91:b0:23:f8:d7:e4:2a:f4:1d:2e:d6:fa:1b: 2e:ab:c9:01:b0:9e:b7:1e:26:d3:00:9f:39:5b:ee: e7:97:e3:a7:5c:36:fa:15:71:fc:f7:b8:25:3f:82: 68:db:c3:d8:c7:09:cf:98:3b:e1:a8:e7:d9:15:13: ab:70:ad:25:57:95:c0:d2:65:b6:17:97:28:4d:03: c8:59:18:7b:29:5a:90:61:9d:c9:fa:83:2b:18:2c: 52:ae:4c:83:76:72:56:63:e2:61:eb:90:3b:97:71: 9c:92:ac:9b:ca:02:7e:1b:f8:28:68:bc:48:74:ba: bd:1f:9b:59:28:64:46:86:a6:89:b3:da:e5:c1:2c: 23:07:bf:39:c3:a6:17:d3:a9:5d:7f:6d:7e:9b:0f: 3a:59:d5:da:66:5a:c7:50:8a:97:c1:51:37:b8:89: 7d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:33:47:FC:9B:E8:16:63:28:72:EE:12:FD:2E:57:3F:76:3F:AB:3D X509v3 Authority Key Identifier: keyid:AF:4A:35:44:C7:4B:31:7A:7C:32:6A:F0:E8:39:3C:B9:D5:26:20:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123BFF/0E2EF5341A6A11EB9FD2D363C4F9AE02/r0o1RMdLMXp8Mmrw6Dk8udUmIDI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a3:fd:a4:1f:25:f4:20:4f:b9:3c:f1:88:f5:20:88:83:db: da:0a:a4:a6:31:02:e6:7d:63:d0:8d:1b:1b:c2:cc:df:b6:e3: 7f:05:10:ec:4f:2e:f7:56:28:75:ad:9c:2c:1b:6a:6c:12:57: 92:c4:c3:37:d0:6d:97:83:72:a4:5a:4b:ee:75:1e:22:0f:11: c6:a4:7a:b3:c7:03:49:e1:f7:b7:3b:08:4c:15:b7:7a:56:7a: 63:bb:25:42:b7:69:0d:8d:e5:91:e9:d9:46:c5:e8:1f:34:42: a5:ae:56:a8:df:c6:b5:55:c2:11:fc:e8:97:01:bb:f2:4f:60: 98:4c:ce:d4:dd:5f:44:6b:51:20:93:5d:0d:3b:49:79:c5:4a: 53:5d:14:1c:20:14:09:7d:da:2f:a0:f8:f6:b1:2b:b1:fd:04: 44:0d:42:fe:69:5a:cf:54:6d:ea:6e:98:cd:ef:f5:51:cb:79: f2:a4:43:a7:4b:97:83:8c:3b:83:3f:7f:47:12:08:ae:c2:0a: 70:89:45:fa:21:76:8d:10:ba:fe:14:29:ce:56:6b:6d:47:95: f1:e3:e0:96:93:77:32:d5:aa:ba:13:f8:db:50:b9:a7:bc:e7: ec:88:41:48:71:05:08:23:b4:ef:44:d0:48:11:44:6c:84:2f: c2:5f:69:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNCRkYxMTAvBgNVBAUTKEFGNEEzNTQ0Qzc0QjMxN0E3QzMyNkFGMEU4MzkzQ0I5 RDUyNjIwMzIwHhcNMjYwNzI4MTYwMTA1WhcNMjYwODA0MTYwMTA1WjAYMRYwFAYD VQQDEw02YTY4ZDI0MS1lOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnC1Gio/G9R/V9v47FdZG/sVBg/1MrtB2mr1/2CeEB15E76Zs3egP6PTLuQYa rC5S5IDQWRFRPFu0gMnVt+Y41T5FFpZLPmwMAfHgwsrKfr1a9XvKXyj/6gyIFZGw I/jX5Cr0HS7W+hsuq8kBsJ63HibTAJ85W+7nl+OnXDb6FXH897glP4Jo28PYxwnP mDvhqOfZFROrcK0lV5XA0mW2F5coTQPIWRh7KVqQYZ3J+oMrGCxSrkyDdnJWY+Jh 65A7l3GckqybygJ+G/goaLxIdLq9H5tZKGRGhqaJs9rlwSwjB785w6YX06ldf21+ mw86WdXaZlrHUIqXwVE3uIl9KwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHgzR/yb 6BZjKHLuEv0uVz92P6s9MB8GA1UdIwQYMBaAFK9KNUTHSzF6fDJq8Og5PLnVJiAy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0JGRi8wRTJFRjUzNDFB NkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1YcDhNbXJ3NkRrOHVkVW1J REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3IwbzFSTWRMTVhwOE1tcnc2RGs4dWRVbUlESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0JGRi8wRTJFRjUzNDFBNkExMUVCOUZEMkQzNjNDNEY5QUUwMi9yMG8xUk1kTE1Y cDhNbXJ3NkRrOHVkVW1JREkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK6P9pB8l9CBPuTzxiPUgiIPb2gqkpjEC5n1j0I0bG8LM37bjfwUQ7E8u91Yo da2cLBtqbBJXksTDN9Btl4NypFpL7nUeIg8RxqR6s8cDSeH3tzsITBW3elZ6Y7sl QrdpDY3lkenZRsXoHzRCpa5WqN/GtVXCEfzolwG78k9gmEzO1N1fRGtRIJNdDTtJ ecVKU10UHCAUCX3aL6D49rErsf0ERA1C/mlaz1Rt6m6Yze/1Uct58qRDp0uXg4w7 gz9/RxIIrsIKcIlF+iF2jRC6/hQpzlZrbUeV8ePglpN3MtWquhP421C5p7zn7IhB SHEFCCO070TQSBFEbIQvwl9pZQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:44:32 2026 by rpki-client