$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft File: mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft (raw, json) Hash identifier: XYvZjL/NetPofZAhcCSlewz7GF4rWUeNngCXuFGTGvM= Subject key identifier: 2E:22:14:16:42:24:B6:E1:CE:67:D7:8D:0E:A5:36:BA:47:64:B7:C4 Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 Certificate issuer: /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Certificate serial: 112D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft Manifest number: 10EA Signing time: Tue 28 Jul 2026 17:27:05 +0000 Manifest this update: Tue 28 Jul 2026 17:27:04 +0000 Manifest next update: Tue 04 Aug 2026 17:27:04 +0000 Files and hashes: 1: mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl (hash: e38mFAB0t9KCdljU0SSD3rf5e3YN1OTiltSwDA+pJbc=) 2: 2E680D2AC99911F0BDA2F55CC4F9AE02.roa (hash: Q/eCF0AzmK8tNl3R3SFQuYN54I5IONWrSmL4B/NCtck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 17:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4397 (0x112d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50 Validity Not Before: Jul 28 17:27:04 2026 GMT Not After : Aug 4 17:27:04 2026 GMT Subject: CN=6a68e669-021a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:bd:33:44:61:51:c8:2e:1b:5e:6a:d0:b0: d2:8e:fe:6c:71:8b:e9:2c:ea:1d:e5:e9:55:4c:e1: 73:64:52:d8:62:94:87:49:20:e8:04:45:4c:fc:45: 9a:78:77:cc:4e:95:b5:c6:ef:40:0c:6c:cf:31:d8: 7b:eb:d4:86:91:40:84:80:30:fe:95:1c:f3:db:87: 04:29:88:ed:f5:22:57:af:5d:80:3b:8b:e4:c4:0e: 2f:fe:60:c3:a1:6c:1c:7d:e5:7e:2a:fa:9b:07:66: 45:a5:87:94:29:61:02:1a:e9:3f:85:79:42:fb:29: 5a:d3:55:be:13:b6:1f:f6:9f:f9:03:33:cf:c1:8d: d3:ef:5b:e4:63:76:96:9e:33:e4:a5:bf:cd:bd:3a: 3e:1d:2c:ab:e2:81:c9:51:3c:0b:67:d2:9c:c4:aa: 15:c4:1d:09:ae:1b:51:7c:01:ba:33:69:68:01:0e: f5:50:20:ed:c5:15:ed:3d:3a:81:cd:cc:1e:2b:be: 3d:62:2c:6d:ac:a5:33:94:1a:b7:79:c3:9d:60:05: 41:d4:8e:ef:c5:82:9d:fa:b6:95:49:6c:be:49:83: 93:bc:46:84:ca:e0:97:75:44:80:7f:ea:5c:35:03: c9:6b:e4:ee:43:55:85:09:cf:59:7b:31:7f:0f:0b: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:22:14:16:42:24:B6:E1:CE:67:D7:8D:0E:A5:36:BA:47:64:B7:C4 X509v3 Authority Key Identifier: keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:f8:99:b4:8b:da:d3:9b:89:51:99:ed:78:5d:84:73:8e:b1: 90:4f:3f:05:ca:fb:fe:56:ec:49:03:35:67:76:8a:e3:96:d5: fa:66:e3:ee:97:4b:16:c2:be:2f:2c:e6:5c:5b:5c:d9:ce:e5: f2:6f:6b:fd:10:1d:e2:a5:c6:a9:a4:8b:e6:59:c8:da:d1:1d: 60:18:2a:74:6b:28:d2:2e:38:c3:d5:ad:fc:39:5d:40:e3:90: e5:d8:dd:c3:f6:a4:14:2c:9b:86:ba:8a:bd:f0:90:72:d9:19: d6:ea:ae:bf:73:b4:1a:c0:a3:f5:97:00:d1:74:6f:59:52:c1: dd:2d:53:7c:49:d0:34:03:59:64:2d:d1:dc:6b:11:31:1f:ea: 76:55:0f:b1:f3:44:5d:1f:42:46:bd:c3:2a:ed:c7:63:30:ee: a8:89:f9:ed:cd:1b:2c:dd:82:be:5e:87:cd:21:06:a6:0f:dd: 8f:da:dd:fe:1b:91:b9:04:0a:a8:0b:08:f9:e0:0e:af:a9:17: 31:ad:db:e2:93:73:7f:34:ea:15:ec:42:00:36:a6:c4:a9:6e: 36:f1:11:c9:8e:52:ad:a4:bf:d7:9c:e0:39:9f:c4:09:62:ab: 6e:8c:76:3b:7b:38:ff:0e:d2:3e:12:b6:7c:9f:6a:68:a2:11: 78:34:5b:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICES0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGNEIxMTAvBgNVBAUTKDk5MzBEMEZGRUI4NzA3MDFCNEU4RUI0REIzQzA4NjYy MzNGQzVCNTAwHhcNMjYwNzI4MTcyNzA0WhcNMjYwODA0MTcyNzA0WjAYMRYwFAYD VQQDEw02YTY4ZTY2OS0wMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpu9M0RhUcguG15q0LDSjv5scYvpLOod5elVTOFzZFLYYpSHSSDoBEVM/EWa eHfMTpW1xu9ADGzPMdh769SGkUCEgDD+lRzz24cEKYjt9SJXr12AO4vkxA4v/mDD oWwcfeV+KvqbB2ZFpYeUKWECGuk/hXlC+yla01W+E7Yf9p/5AzPPwY3T71vkY3aW njPkpb/NvTo+HSyr4oHJUTwLZ9KcxKoVxB0JrhtRfAG6M2loAQ71UCDtxRXtPTqB zcweK749YixtrKUzlBq3ecOdYAVB1I7vxYKd+raVSWy+SYOTvEaEyuCXdUSAf+pc NQPJa+TuQ1WFCc9ZezF/DwtU0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4iFBZC JLbhzmfXjQ6lNrpHZLfEMB8GA1UdIwQYMBaAFJkw0P/rhwcBtOjrTbPAhmIz/FtQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY0Qi81NzcyQUEzMDU0 RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3RzA2T3ROczhDR1lqUDhX MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21URFFfLXVIQndHMDZPdE5zOENHWWpQOFcxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY0Qi81NzcyQUEzMDU0RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3 RzA2T3ROczhDR1lqUDhXMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwviZtIva05uJUZnteF2Ec46xkE8/Bcr7/lbsSQM1Z3aK45bV+mbj7pdLFsK+ LyzmXFtc2c7l8m9r/RAd4qXGqaSL5lnI2tEdYBgqdGso0i44w9Wt/DldQOOQ5djd w/akFCybhrqKvfCQctkZ1uquv3O0GsCj9ZcA0XRvWVLB3S1TfEnQNANZZC3R3GsR MR/qdlUPsfNEXR9CRr3DKu3HYzDuqIn57c0bLN2Cvl6HzSEGpg/dj9rd/huRuQQK qAsI+eAOr6kXMa3b4pNzfzTqFexCADamxKluNvERyY5SraS/15zgOZ/ECWKrbox2 O3s4/w7SPhK2fJ9qaKIReDRb6g== -----END CERTIFICATE-----Generated at Tue Jul 28 21:39:50 2026 by rpki-client