$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: mKTJjbddl5QVUfYpGoJZ8xjFyrdBYT304efE6xlrpDI= Subject key identifier: A3:BC:84:E0:A6:79:1F:A6:C2:EF:12:36:71:A3:82:DD:64:95:A3:C7 Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 0474 Signing time: Mon 27 Jul 2026 01:07:38 +0000 Manifest this update: Mon 27 Jul 2026 01:07:38 +0000 Manifest next update: Mon 03 Aug 2026 01:07:38 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: JZ0Ql/U2rCgei9+bosKUPLGZdMVIyD/pwCpD9lmpgoY=) 2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: Yp8vQRRn+1isdhS7HH7fMBWq8BHFrYVDOBpfy5O1p3A=) 3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: cVYpcEpLmW3gYRT3SsW9LPnpjNMLZz8OsKdq5PALSk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 01:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Jul 27 01:07:38 2026 GMT Not After : Aug 3 01:07:38 2026 GMT Subject: CN=6a66af5a-ea55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7a:34:3a:00:dd:d9:65:74:2a:ba:ec:14:ad: 11:73:6e:c7:4c:f8:0c:6b:a4:66:95:d7:0b:2e:1c: de:b1:76:a7:1a:e5:9d:e4:1f:da:92:4d:4e:0b:e6: d6:90:9b:46:05:e6:6a:d2:1a:ac:61:46:4d:e4:3e: 68:4e:d7:8f:3f:e3:25:f6:c3:87:05:f3:3e:ce:16: 20:09:1a:36:33:9c:40:54:94:c3:47:36:dc:8c:d4: 6b:08:c1:cb:f6:b5:a3:1a:cc:75:84:00:1e:bf:ad: c1:fc:0d:ff:96:41:f3:e9:37:7b:2e:55:a3:6f:64: c8:f7:ff:57:ea:19:ca:ee:fa:bf:48:d5:28:2e:6e: 3d:0c:c1:da:f5:38:45:c2:32:60:55:56:00:da:8f: b5:d0:32:fd:66:17:7a:da:3d:a6:d4:a2:c3:76:0b: 96:90:4d:2f:4b:ac:fb:01:7a:02:ee:5f:6b:b1:35: 38:d7:4f:10:50:89:6c:95:59:ac:3a:e6:63:23:29: 69:7d:f3:37:53:91:8b:3b:9f:b3:b7:e4:6e:ea:a0: 97:ca:99:85:1c:eb:62:6d:3f:b2:e8:03:ec:73:3b: 70:db:13:4d:cd:1f:e8:aa:64:c3:4f:4c:f2:78:26: d5:91:a4:1b:44:77:e7:df:54:25:82:c8:b4:e2:b2: 86:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BC:84:E0:A6:79:1F:A6:C2:EF:12:36:71:A3:82:DD:64:95:A3:C7 X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:7e:22:2c:ce:d1:14:ef:d6:3a:33:73:0c:fe:84:47:c2:64: 16:04:a9:3c:27:c9:48:e9:4d:12:f3:d7:23:3b:a5:19:c2:0c: 73:38:cf:f3:e7:99:f8:d2:d5:c4:bf:75:75:06:c6:35:ce:9d: 65:f4:2c:9b:28:fb:dc:c3:39:15:c2:1b:d1:44:b6:05:25:0b: 13:49:32:94:cf:89:a6:73:88:be:df:53:76:f9:70:85:e6:15: 23:47:fa:20:11:b4:6f:47:7d:79:62:47:59:69:28:7e:fc:e5: 36:29:26:7e:fd:d2:bd:b8:d5:2f:2d:7e:6f:0f:8e:8f:8e:1e: 15:a1:1c:63:93:ba:94:df:96:94:37:18:66:74:d9:c7:c0:f9: 7f:e5:bb:6b:81:10:86:87:f9:03:82:f9:23:03:68:dc:79:47: 98:06:79:1f:84:ba:52:94:3f:1a:a0:74:a3:39:45:f2:58:8f: 40:3b:fc:7a:1c:b8:df:58:4e:74:59:0d:8d:cd:67:53:1f:96: bc:67:2d:fc:25:dd:c9:85:52:5d:77:5a:11:1a:84:8b:01:bd: 44:20:57:6f:b8:78:36:02:07:17:6f:a9:17:56:c3:f7:9e:c5: 43:38:36:ff:b4:59:38:bd:df:d3:84:46:84:35:f8:be:fa:2b: da:80:68:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjYwNzI3MDEwNzM4WhcNMjYwODAzMDEwNzM4WjAYMRYwFAYD VQQDEw02YTY2YWY1YS1lYTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXo0OgDd2WV0KrrsFK0Rc27HTPgMa6RmldcLLhzesXanGuWd5B/akk1OC+bW kJtGBeZq0hqsYUZN5D5oTtePP+Ml9sOHBfM+zhYgCRo2M5xAVJTDRzbcjNRrCMHL 9rWjGsx1hAAev63B/A3/lkHz6Td7LlWjb2TI9/9X6hnK7vq/SNUoLm49DMHa9ThF wjJgVVYA2o+10DL9Zhd62j2m1KLDdguWkE0vS6z7AXoC7l9rsTU4108QUIlslVms OuZjIylpffM3U5GLO5+zt+Ru6qCXypmFHOtibT+y6APscztw2xNNzR/oqmTDT0zy eCbVkaQbRHfn31Qlgsi04rKGcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKO8hOCm eR+mwu8SNnGjgt1klaPHMB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeX4iLM7RFO/WOjNzDP6ER8JkFgSpPCfJSOlNEvPXIzulGcIMczjP8+eZ+NLV xL91dQbGNc6dZfQsmyj73MM5FcIb0US2BSULE0kylM+JpnOIvt9TdvlwheYVI0f6 IBG0b0d9eWJHWWkofvzlNikmfv3SvbjVLy1+bw+Oj44eFaEcY5O6lN+WlDcYZnTZ x8D5f+W7a4EQhof5A4L5IwNo3HlHmAZ5H4S6UpQ/GqB0ozlF8liPQDv8ehy431hO dFkNjc1nUx+WvGct/CXdyYVSXXdaERqEiwG9RCBXb7h4NgIHF2+pF1bD957FQzg2 /7RZOL3f04RGhDX4vvor2oBobA== -----END CERTIFICATE-----Generated at Wed Jul 29 01:01:47 2026 by rpki-client