$ rpki-client -vvf rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft File: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft (raw, json) Hash identifier: 9jNFRKg9y/0Ci7qSNmaxx9GclEVup6+r/oIZKNrWKRI= Subject key identifier: DE:93:CD:01:0E:A9:00:91:CE:80:ED:5A:76:B6:AB:AF:12:37:68:63 Authority key identifier: 0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 Certificate issuer: /CN=A9132AEB/serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Certificate serial: 3588 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft Manifest number: 3575 Signing time: Tue 28 Jul 2026 15:08:59 +0000 Manifest this update: Tue 28 Jul 2026 15:08:58 +0000 Manifest next update: Tue 04 Aug 2026 15:08:58 +0000 Files and hashes: 1: D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl (hash: IadOLpsws7e9Ibz4urcw3hxddtz5THAnDxfYfFySbi0=) 2: 514DBDFC98C711EAA0CFE582C4F9AE02.roa (hash: OakXz6uabwbVjZ3x8angGynzmkwZsBIUc2kp6w+BN9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13704 (0x3588) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9132AEB, serialNumber=0F952A27EF3EF27CEA08C57D202A38069ECB5840 Validity Not Before: Jul 28 15:08:58 2026 GMT Not After : Aug 4 15:08:58 2026 GMT Subject: CN=6a68c60b-cd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a6:67:96:d4:56:d9:79:ae:f0:73:db:16:1f: 42:a3:5a:80:f1:c0:69:21:50:41:ac:5e:9e:58:0e: fb:ba:53:72:82:43:d1:41:2e:ba:f3:d6:50:dc:7e: 3d:bf:4c:26:f0:39:d8:4c:28:6a:7b:c7:8f:51:55: d0:12:aa:ab:2b:00:ff:8f:f8:bf:19:a1:16:f9:21: c8:94:27:c2:da:de:6e:e5:24:30:97:78:7c:3f:65: 4a:09:bd:a5:f9:f4:00:bd:e5:4b:7d:ad:25:84:f9: e6:96:b2:99:6d:62:62:97:bd:7a:37:fb:42:c0:ce: 7e:91:df:fb:05:6d:f8:fb:0b:db:13:97:07:48:80: 51:d5:3b:05:16:b9:13:10:96:f1:0e:c7:15:73:ae: 3b:8d:20:59:03:e2:13:28:ed:ac:0e:2a:58:1e:7a: 20:77:78:cd:1d:c9:09:cb:36:c6:02:c2:d8:a3:17: 07:cb:3f:44:c1:dc:7e:fa:93:e4:60:0e:9b:cb:8c: d6:9c:a1:df:a1:2b:c4:c6:44:bc:94:44:ee:97:5d: 86:c7:33:ae:ba:2c:d2:57:b0:44:f6:22:7a:04:3e: 73:bb:5d:bb:2a:ad:6f:2c:ce:3d:97:c1:cd:5c:96: b8:3d:c1:77:5b:cf:54:92:8c:90:c7:47:2e:12:30: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:93:CD:01:0E:A9:00:91:CE:80:ED:5A:76:B6:AB:AF:12:37:68:63 X509v3 Authority Key Identifier: keyid:0F:95:2A:27:EF:3E:F2:7C:EA:08:C5:7D:20:2A:38:06:9E:CB:58:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132AEB/EF29BA2A1DA111E2868B689408B02CD2/D5UqJ-8-8nzqCMV9ICo4Bp7LWEA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:74:91:f7:ed:c3:3e:c8:09:70:b1:83:c7:b1:5d:e3:e8:d1: f3:70:f4:e5:ed:04:81:a4:3a:e5:48:8b:1f:d2:4a:64:e8:e8: 4d:bf:7b:49:21:0e:fe:51:ae:14:8f:85:ee:ac:75:89:1d:d7: cf:5f:d5:39:41:aa:6b:f9:85:3a:b6:e3:c0:71:c4:3f:38:ed: 6f:52:34:61:f7:88:6f:9d:59:19:d4:fb:3e:91:bd:dc:02:c0: 2d:2f:dc:64:21:0d:1d:f7:c6:af:bb:c3:71:b0:f2:22:59:e3: 7c:01:6e:1b:fa:9e:66:69:b3:6b:72:3f:89:18:c7:f0:ca:41: c5:f2:46:43:9b:d0:04:29:8d:84:3f:cb:82:be:80:65:dc:db: 5d:33:05:fb:8e:4b:f3:c1:43:fd:ba:08:a7:1a:29:22:1c:b5: 14:17:3c:91:09:9b:a2:3d:82:85:1c:16:5e:79:fe:0b:e7:b9: f9:d5:9f:5e:53:fa:55:48:1b:1e:a7:02:91:2b:36:00:08:44: 45:44:98:4a:13:91:2a:d2:22:ce:c4:31:2f:35:67:c0:83:75: 59:48:31:1e:ff:02:41:78:0d:5d:56:c0:ab:8e:b7:bb:d3:87: 7c:a6:ee:fd:f0:84:5d:56:0c:11:6c:cd:4a:62:cc:ff:4f:90: 80:98:b6:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzJBRUIxMTAvBgNVBAUTKDBGOTUyQTI3RUYzRUYyN0NFQTA4QzU3RDIwMkEzODA2 OUVDQjU4NDAwHhcNMjYwNzI4MTUwODU4WhcNMjYwODA0MTUwODU4WjAYMRYwFAYD VQQDEw02YTY4YzYwYi1jZDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6qZnltRW2Xmu8HPbFh9Co1qA8cBpIVBBrF6eWA77ulNygkPRQS6689ZQ3H49 v0wm8DnYTChqe8ePUVXQEqqrKwD/j/i/GaEW+SHIlCfC2t5u5SQwl3h8P2VKCb2l +fQAveVLfa0lhPnmlrKZbWJil716N/tCwM5+kd/7BW34+wvbE5cHSIBR1TsFFrkT EJbxDscVc647jSBZA+ITKO2sDipYHnogd3jNHckJyzbGAsLYoxcHyz9Ewdx++pPk YA6by4zWnKHfoSvExkS8lETul12GxzOuuizSV7BE9iJ6BD5zu127Kq1vLM49l8HN XJa4PcF3W89UkoyQx0cuEjBwIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN6TzQEO qQCRzoDtWna2q68SN2hjMB8GA1UdIwQYMBaAFA+VKifvPvJ86gjFfSAqOAaey1hA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkFFQi9FRjI5QkEyQTFE QTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThuenFDTVY5SUNvNEJwN0xX RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1VXFKLTgtOG56cUNNVjlJQ280QnA3TFdFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MkFFQi9FRjI5QkEyQTFEQTExMUUyODY4QjY4OTQwOEIwMkNEMi9ENVVxSi04LThu enFDTVY5SUNvNEJwN0xXRUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtnSR9+3DPsgJcLGDx7Fd4+jR83D05e0EgaQ65UiLH9JKZOjoTb97SSEO/lGu FI+F7qx1iR3Xz1/VOUGqa/mFOrbjwHHEPzjtb1I0YfeIb51ZGdT7PpG93ALALS/c ZCENHffGr7vDcbDyIlnjfAFuG/qeZmmza3I/iRjH8MpBxfJGQ5vQBCmNhD/Lgr6A ZdzbXTMF+45L88FD/boIpxopIhy1FBc8kQmboj2ChRwWXnn+C+e5+dWfXlP6VUgb HqcCkSs2AAhERUSYShORKtIizsQxLzVnwIN1WUgxHv8CQXgNXVbAq463u9OHfKbu /fCEXVYMEWzNSmLM/0+QgJi2Iw== -----END CERTIFICATE-----Generated at Tue Jul 28 20:22:07 2026 by rpki-client