$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft File: aAYK77v8wH1z211yeLyPJJxX9RU.mft (raw, json) Hash identifier: MHDdoOkW1H3KNP6LzevfRqeyloRqCKteDcMQGx/aYVc= Subject key identifier: 5D:2D:94:F8:21:4E:42:04:86:E2:46:DB:63:8F:23:DE:AE:DF:1F:BF Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 Certificate issuer: /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft Manifest number: 0475 Signing time: Wed 29 Jul 2026 00:49:17 +0000 Manifest this update: Wed 29 Jul 2026 00:49:17 +0000 Manifest next update: Wed 05 Aug 2026 00:49:17 +0000 Files and hashes: 1: aAYK77v8wH1z211yeLyPJJxX9RU.crl (hash: y1Q3bqNKsoS/hQPgWq8SPNmPa/7sxo062lVaoDn5dM4=) 2: 5B639C667CEB11EDA3D10364C4F9AE02.roa (hash: Yp8vQRRn+1isdhS7HH7fMBWq8BHFrYVDOBpfy5O1p3A=) 3: ADBB651E043411ED9F02B325C4F9AE02.roa (hash: cVYpcEpLmW3gYRT3SsW9LPnpjNMLZz8OsKdq5PALSk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 00:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515 Validity Not Before: Jul 29 00:49:17 2026 GMT Not After : Aug 5 00:49:17 2026 GMT Subject: CN=6a694e0d-dba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:3c:97:ba:bf:7d:45:27:51:70:d7:94:e7: 67:c4:74:d1:ac:b0:bb:f4:a2:56:12:eb:2b:d4:7d: b7:6c:5a:c3:5e:42:6c:e9:1a:60:46:54:8c:a0:69: 27:72:dd:e1:ff:16:77:05:8a:46:6d:11:5d:5e:cc: 14:cf:21:37:66:3e:06:a8:52:ce:c3:eb:70:88:dd: 17:a7:ea:ea:ee:f4:f0:63:d8:ec:1e:4d:19:13:91: d5:24:44:50:91:eb:d7:b5:35:be:e8:01:97:c1:11: eb:9b:ab:61:2e:e3:35:02:51:40:eb:30:33:a9:c3: 3f:68:2f:8d:b8:1e:d4:b2:d5:3f:25:33:63:33:d5: de:7f:48:12:99:ec:3d:cc:4f:6a:67:1f:e0:6d:61: 6c:fc:1b:0d:63:97:9f:04:64:12:c0:11:20:d7:c8: 05:a7:d4:fd:64:9d:6d:e0:0a:ad:13:5b:c8:f4:88: 58:11:54:49:81:71:51:1b:fb:29:5c:f6:f1:5a:23: fc:1b:af:49:08:d6:e1:4c:37:e4:f4:18:4d:ec:8d: b6:81:ca:6d:cd:4d:ce:33:33:1a:5c:82:8e:38:f3: f9:ca:42:7f:b4:20:a4:83:1b:71:d3:c4:be:5d:34: 2b:b9:af:67:0b:c4:8e:f9:73:9c:3e:2e:4d:58:03: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2D:94:F8:21:4E:42:04:86:E2:46:DB:63:8F:23:DE:AE:DF:1F:BF X509v3 Authority Key Identifier: keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f5:2b:b3:51:9c:6b:1b:69:4e:73:8a:7d:8a:d3:ba:67:e5: c2:c5:4a:a0:d3:b1:a8:ae:07:09:fc:7c:35:62:89:9c:0a:af: 6b:f7:1d:cc:c5:82:8d:27:0d:49:61:38:a8:59:23:d7:4e:07: f9:57:8b:4a:26:86:ce:e7:5f:2a:3c:e6:d4:d7:18:e2:0d:59: 41:58:81:9c:81:b8:c3:3b:27:eb:d7:c6:c7:a4:d4:f9:7a:33: e1:05:ee:fb:4e:94:31:0a:7b:97:a7:25:ef:98:7c:03:e1:58: a2:e5:62:b0:70:9e:40:3a:f9:8d:da:9c:a8:91:e9:8f:2b:c8: 4b:ca:d1:e1:fc:3c:cf:5e:84:c0:19:49:5b:9c:98:ea:f0:10: c9:fc:98:40:f4:91:34:7d:23:a8:62:08:56:09:c7:5e:e9:9c: ca:d6:17:9d:1d:b9:5c:25:d6:70:20:71:71:a3:f2:fe:9a:8e: aa:31:c4:1e:90:9d:a1:54:20:3c:15:21:5d:b6:10:4b:fa:8d: 4c:a7:fb:b7:52:c2:46:05:d1:ea:5e:6c:16:31:4f:a5:0d:f3: 3c:73:54:47:0f:40:cd:65:92:eb:7f:e9:77:a9:e0:e9:22:e4: 9a:d0:e5:e1:c8:d6:45:ab:4b:41:f9:cf:35:88:26:70:da:9f: 00:59:3b:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg1OUExMTAvBgNVBAUTKDY4MDYwQUVGQkJGQ0MwN0Q3M0RCNUQ3Mjc4QkM4RjI0 OUM1N0Y1MTUwHhcNMjYwNzI5MDA0OTE3WhcNMjYwODA1MDA0OTE3WjAYMRYwFAYD VQQDEw02YTY5NGUwZC1kYmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvY8l7q/fUUnUXDXlOdnxHTRrLC79KJWEusr1H23bFrDXkJs6RpgRlSMoGkn ct3h/xZ3BYpGbRFdXswUzyE3Zj4GqFLOw+twiN0Xp+rq7vTwY9jsHk0ZE5HVJERQ kevXtTW+6AGXwRHrm6thLuM1AlFA6zAzqcM/aC+NuB7UstU/JTNjM9Xef0gSmew9 zE9qZx/gbWFs/BsNY5efBGQSwBEg18gFp9T9ZJ1t4AqtE1vI9IhYEVRJgXFRG/sp XPbxWiP8G69JCNbhTDfk9BhN7I22gcptzU3OMzMaXIKOOPP5ykJ/tCCkgxtx08S+ XTQrua9nC8SO+XOcPi5NWAPyuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0tlPgh TkIEhuJG22OPI96u3x+/MB8GA1UdIwQYMBaAFGgGCu+7/MB9c9tdcni8jyScV/UV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODU5QS9CQUNBQjdFQzlE RkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdIMXoyMTF5ZUx5UEpKeFg5 UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FBWUs3N3Y4d0gxejIxMXllTHlQSkp4WDlSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODU5QS9CQUNBQjdFQzlERkUxMUVDQjg3RjUxNDdDNEY5QUUwMi9hQVlLNzd2OHdI MXoyMTF5ZUx5UEpKeFg5UlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK/Urs1GcaxtpTnOKfYrTumflwsVKoNOxqK4HCfx8NWKJnAqva/cdzMWCjScN SWE4qFkj104H+VeLSiaGzudfKjzm1NcY4g1ZQViBnIG4wzsn69fGx6TU+Xoz4QXu +06UMQp7l6cl75h8A+FYouVisHCeQDr5jdqcqJHpjyvIS8rR4fw8z16EwBlJW5yY 6vAQyfyYQPSRNH0jqGIIVgnHXumcytYXnR25XCXWcCBxcaPy/pqOqjHEHpCdoVQg PBUhXbYQS/qNTKf7t1LCRgXR6l5sFjFPpQ3zPHNURw9AzWWS63/pd6ng6SLkmtDl 4cjWRatLQfnPNYgmcNqfAFk7lw== -----END CERTIFICATE-----Generated at Wed Jul 29 11:00:46 2026 by rpki-client