$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft File: hA_W9-iR44BKfbMJ0EzoXBr3htE.mft (raw, json) Hash identifier: Ip2biiWtNrUhnzbsZDW0/WTEajhSf31KWS45yb2h4BY= Subject key identifier: 45:71:EC:5E:B4:61:9A:1E:A5:E5:14:4D:13:98:1A:46:E4:03:64:9E Authority key identifier: 84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 Certificate issuer: /CN=A912C8AF/serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft Manifest number: 0144 Signing time: Tue 28 Jul 2026 19:29:02 +0000 Manifest this update: Tue 28 Jul 2026 19:29:01 +0000 Manifest next update: Tue 04 Aug 2026 19:29:01 +0000 Files and hashes: 1: hA_W9-iR44BKfbMJ0EzoXBr3htE.crl (hash: FedYKmeeifDb6NiJ/Xd/3trKNFiqZ+KtlyayBVG4xRM=) 2: 245F176CA81311F0A8A82B85C4F9AE02.roa (hash: eX1W6sEO6qSGiwMhq2AqfocdX9JRjmM9eN6Q3NFHq5U=) 3: FD4056EC7CC411F0BAFA214CC4F9AE02.roa (hash: dPEhTQP3qeAR4yGjatb5GQPGEIi2y0rBsSN9VqRiVX4=) 4: 7B73A414A81311F0A69E5E49C4F9AE02.roa (hash: CmfJtzvbUDIWlxCuJc7fM+dnWaJ+FXCzjzg3v0W8Rc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=840FD6F7E891E3804A7DB309D04CE85C1AF786D1 Validity Not Before: Jul 28 19:29:01 2026 GMT Not After : Aug 4 19:29:01 2026 GMT Subject: CN=6a6902fe-40ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:07:6f:c4:1f:36:78:22:27:70:4e:40:49:db: 59:ad:20:e6:2d:68:b3:b2:65:fe:bb:d7:b2:e9:ae: f9:ab:a8:1f:dd:e6:a7:a8:3d:b2:f6:fd:8c:b5:c2: d3:e7:d6:91:7e:02:e9:26:88:0a:3e:8b:a5:53:e2: 16:1c:68:c1:fa:49:13:64:31:03:ea:93:db:9c:0d: a9:50:a8:43:30:51:78:15:d6:86:85:0f:03:94:39: 7b:9d:c9:20:08:4c:5b:4b:3f:64:83:51:f1:55:74: 50:32:c2:2a:05:0d:41:d8:ff:97:cb:82:05:99:ac: 25:19:b7:d8:b1:cb:bd:99:2a:13:9a:45:b5:71:ae: 9e:4e:df:90:8f:c4:3a:8a:69:f5:d0:02:41:a3:1a: 3a:5a:e8:63:18:77:28:7b:90:f8:04:d1:5f:cd:12: f3:23:a4:17:4d:98:02:a9:2e:09:44:31:4a:46:97: 96:fa:5b:b2:ef:2c:de:ac:9d:20:59:3c:d3:f5:cc: 13:fb:3c:3d:69:03:ba:ac:ae:54:f3:f5:17:3c:0d: 23:55:c4:67:be:d9:64:51:35:47:26:74:d5:e9:e6: ff:4a:ef:7d:88:19:78:6a:7b:3f:ee:7c:b3:4d:22: 12:23:dc:aa:64:a4:6c:ae:42:ef:78:dd:a9:81:d3: 7d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:71:EC:5E:B4:61:9A:1E:A5:E5:14:4D:13:98:1A:46:E4:03:64:9E X509v3 Authority Key Identifier: keyid:84:0F:D6:F7:E8:91:E3:80:4A:7D:B3:09:D0:4C:E8:5C:1A:F7:86:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hA_W9-iR44BKfbMJ0EzoXBr3htE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/197FF7A2B40911EF94E6745DC4F9AE02/hA_W9-iR44BKfbMJ0EzoXBr3htE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4b:fc:19:34:14:d7:26:c1:b3:b0:c3:c7:b2:96:5f:e8:8b: 15:72:15:b9:88:6a:ab:56:e4:19:8c:d1:25:8d:7f:f0:dc:2c: 59:ba:ba:21:83:a6:a7:f6:9d:83:1f:80:3b:3e:24:2a:ab:b8: d1:86:79:8c:b7:20:5b:fd:85:91:49:0f:c9:46:89:cd:c5:54: 4a:8f:d8:c5:52:9e:2b:49:37:8c:ec:30:0a:35:a6:39:10:35: 81:a1:fe:48:cd:39:8a:d6:fe:6b:d2:0b:f8:b5:42:e6:ac:12: af:b2:79:29:61:f7:5b:3c:07:24:9d:c3:b6:91:fc:0d:f9:14: f7:7e:fb:d0:58:45:4e:f3:c8:84:e1:b9:c8:1c:1b:2f:89:f7: e0:2f:27:4e:95:f5:06:99:95:51:14:0c:56:a8:11:d8:fc:66: 13:3f:10:5b:7f:89:56:1d:91:4b:ba:35:b2:65:db:b8:04:4d: 7f:df:8d:ba:41:e2:2c:35:00:c1:ba:2d:04:93:8a:04:27:3e: 18:93:12:50:ae:00:35:c7:bd:70:85:b3:9e:5b:da:74:6b:40: eb:73:be:b9:8b:34:bb:0c:cc:f6:b5:3f:27:0f:c4:87:cd:62: 62:bf:f2:56:74:8a:ee:7e:c0:6e:48:bb:ac:22:a9:b7:93:a8: 78:4c:9b:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDg0MEZENkY3RTg5MUUzODA0QTdEQjMwOUQwNENFODVD MUFGNzg2RDEwHhcNMjYwNzI4MTkyOTAxWhcNMjYwODA0MTkyOTAxWjAYMRYwFAYD VQQDEw02YTY5MDJmZS00MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1gdvxB82eCIncE5ASdtZrSDmLWizsmX+u9ey6a75q6gf3eanqD2y9v2MtcLT 59aRfgLpJogKPoulU+IWHGjB+kkTZDED6pPbnA2pUKhDMFF4FdaGhQ8DlDl7nckg CExbSz9kg1HxVXRQMsIqBQ1B2P+Xy4IFmawlGbfYscu9mSoTmkW1ca6eTt+Qj8Q6 imn10AJBoxo6WuhjGHcoe5D4BNFfzRLzI6QXTZgCqS4JRDFKRpeW+luy7yzerJ0g WTzT9cwT+zw9aQO6rK5U8/UXPA0jVcRnvtlkUTVHJnTV6eb/Su99iBl4ans/7nyz TSISI9yqZKRsrkLveN2pgdN9RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVx7F60 YZoepeUUTROYGkbkA2SeMB8GA1UdIwQYMBaAFIQP1vfokeOASn2zCdBM6Fwa94bR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi8xOTdGRjdBMkI0 MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0QktmYk1KMEV6b1hCcjNo dEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hBX1c5LWlSNDRCS2ZiTUowRXpvWEJyM2h0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi8xOTdGRjdBMkI0MDkxMUVGOTRFNjc0NURDNEY5QUUwMi9oQV9XOS1pUjQ0 QktmYk1KMEV6b1hCcjNodEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHkv8GTQU1ybBs7DDx7KWX+iLFXIVuYhqq1bkGYzRJY1/8NwsWbq6IYOmp/ad gx+AOz4kKqu40YZ5jLcgW/2FkUkPyUaJzcVUSo/YxVKeK0k3jOwwCjWmORA1gaH+ SM05itb+a9IL+LVC5qwSr7J5KWH3WzwHJJ3DtpH8DfkU93770FhFTvPIhOG5yBwb L4n34C8nTpX1BpmVURQMVqgR2PxmEz8QW3+JVh2RS7o1smXbuARNf9+NukHiLDUA wbotBJOKBCc+GJMSUK4ANce9cIWznlvadGtA63O+uYs0uwzM9rU/Jw/Eh81iYr/y VnSK7n7Abki7rCKpt5OoeEybJA== -----END CERTIFICATE-----Generated at Wed Jul 29 03:12:55 2026 by rpki-client