$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft File: uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json) Hash identifier: 6XKQ78UDjFLh5fYmKRrqAKQ7UDHcQSf8yrt2TKbW4+I= Subject key identifier: D5:93:E5:D8:D5:93:70:B7:14:BA:3C:BD:93:74:D2:AD:BD:62:8E:33 Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 Certificate issuer: /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Certificate serial: 10C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft Manifest number: 1AB7 Signing time: Tue 28 Jul 2026 17:25:21 +0000 Manifest this update: Tue 28 Jul 2026 17:25:21 +0000 Manifest next update: Tue 04 Aug 2026 17:25:21 +0000 Files and hashes: 1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: caPVP2IcXEQ1rmE7IoHLseySHfA6aciKUBUCgoMDVj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4291 (0x10c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1 Validity Not Before: Jul 28 17:25:21 2026 GMT Not After : Aug 4 17:25:21 2026 GMT Subject: CN=6a68e601-a8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:bf:59:b7:0f:da:a9:4e:65:4d:a1:04:f6: 9d:11:e7:e0:b3:1c:d5:48:e7:47:44:67:83:30:f1: 94:55:9a:f3:fe:ee:51:2a:03:86:f2:68:6a:18:95: a9:ea:3f:a4:80:4f:d2:f2:99:76:08:04:12:2f:ff: e5:dc:c7:79:15:f0:1c:c2:85:23:c8:d8:d6:0b:dd: a4:5a:f1:5f:3a:23:81:28:81:fe:56:75:60:53:a5: f1:6c:fa:18:fe:5b:9c:08:fe:9c:b9:00:35:75:d6: ab:2c:09:fc:24:70:2c:74:3f:99:3f:76:1b:c3:2d: d0:5d:e9:f2:aa:57:fe:fb:80:52:94:ed:f5:b1:88: 84:c3:78:01:4e:9c:12:8d:55:a4:fa:21:9a:f0:ac: 5c:fb:0e:cc:15:ee:2c:44:d1:79:6e:ad:80:18:0f: 1d:46:ee:bd:dc:0e:ad:3e:f3:af:fb:7d:bc:e6:3e: 26:90:e3:f9:ec:55:c2:7b:5f:36:e8:32:f1:05:39: 84:c9:9c:2e:a7:d1:f4:33:9d:00:a5:25:fd:10:f2: a2:1d:23:ff:72:1e:6e:3f:b3:7d:2d:f6:24:df:07: b2:94:68:bb:e0:cd:f8:f1:f2:b1:d9:1f:05:ee:5e: b2:bb:f8:1e:1d:fb:3a:76:0b:4c:c6:86:26:67:67: 0d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:93:E5:D8:D5:93:70:B7:14:BA:3C:BD:93:74:D2:AD:BD:62:8E:33 X509v3 Authority Key Identifier: keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:3b:37:ed:59:ca:f1:6a:72:24:35:43:90:8f:c6:3d:8d:d0: 51:a7:cb:2d:cc:b5:2e:b8:81:01:da:02:2e:f3:5d:aa:64:db: 10:ba:97:cf:6f:4f:af:13:a0:b4:5a:c8:a2:c5:5b:05:7d:41: bf:67:08:36:b8:7f:b0:69:be:ca:26:7c:96:4d:f2:e7:f3:ec: f7:73:80:87:45:7a:9b:84:06:f2:18:97:7b:f1:3c:f7:31:d1: ce:c9:ba:f3:52:4f:c8:a7:2f:2d:62:e8:4d:48:7d:88:31:0c: aa:76:ac:dc:a2:3b:42:92:04:24:33:6c:03:6f:28:0d:1c:37: 93:e0:bc:7e:3e:35:91:f7:ed:2c:d4:da:a6:01:fa:c7:f5:88: 3b:5e:ad:b8:64:99:3f:51:66:f7:39:96:c4:f7:7e:4a:c3:58: 14:0d:d0:2c:eb:27:42:ea:df:31:e0:e8:4d:29:b7:a0:16:1b: 44:64:88:f6:dd:2a:56:2a:8a:cb:cb:ab:ab:be:43:be:63:1a: 0c:4b:5a:64:a3:02:54:53:8c:7f:6e:33:73:d5:2f:b8:89:22: 92:30:a2:3e:d3:db:b8:cd:42:9c:43:d2:4f:83:64:74:ef:08: 73:b2:e7:38:3c:98:ef:a6:05:5c:13:b2:4f:f6:cc:6b:c5:a3: a8:c2:b2:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF Q0IxMUZERDEwHhcNMjYwNzI4MTcyNTIxWhcNMjYwODA0MTcyNTIxWjAYMRYwFAYD VQQDEw02YTY4ZTYwMS1hOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/O/WbcP2qlOZU2hBPadEefgsxzVSOdHRGeDMPGUVZrz/u5RKgOG8mhqGJWp 6j+kgE/S8pl2CAQSL//l3Md5FfAcwoUjyNjWC92kWvFfOiOBKIH+VnVgU6XxbPoY /lucCP6cuQA1ddarLAn8JHAsdD+ZP3Ybwy3QXenyqlf++4BSlO31sYiEw3gBTpwS jVWk+iGa8Kxc+w7MFe4sRNF5bq2AGA8dRu693A6tPvOv+3285j4mkOP57FXCe182 6DLxBTmEyZwup9H0M50ApSX9EPKiHSP/ch5uP7N9LfYk3weylGi74M348fKx2R8F 7l6yu/geHfs6dgtMxoYmZ2cNMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNWT5djV k3C3FLo8vZN00q29Yo4zMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj dG14eXU1X0tjNzdzc1JfZEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArzs37VnK8WpyJDVDkI/GPY3QUafLLcy1LriBAdoCLvNdqmTbELqXz29PrxOg tFrIosVbBX1Bv2cINrh/sGm+yiZ8lk3y5/Ps93OAh0V6m4QG8hiXe/E89zHRzsm6 81JPyKcvLWLoTUh9iDEMqnas3KI7QpIEJDNsA28oDRw3k+C8fj41kfftLNTapgH6 x/WIO16tuGSZP1Fm9zmWxPd+SsNYFA3QLOsnQurfMeDoTSm3oBYbRGSI9t0qViqK y8urq75DvmMaDEtaZKMCVFOMf24zc9UvuIkikjCiPtPbuM1CnEPST4NkdO8Ic7Ln ODyY76YFXBOyT/bMa8WjqMKy7w== -----END CERTIFICATE-----Generated at Tue Jul 28 19:12:12 2026 by rpki-client