$ rpki-client -vvf rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft File: d5yg0JVwhQFufQNaTsuieBq3xQ8.mft (raw, json) Hash identifier: O1dNRty/lktpfPUC6rL/48hcOzpsK9iQk28lo8JDDLs= Subject key identifier: 46:B3:06:D5:7D:A3:CE:2C:D0:48:46:7D:6F:EF:65:A8:A9:B1:18:4B Authority key identifier: 77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F Certificate issuer: /CN=A9137157/serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft Manifest number: 59 Signing time: Wed 29 Jul 2026 09:48:56 +0000 Manifest this update: Wed 29 Jul 2026 09:48:56 +0000 Manifest next update: Wed 05 Aug 2026 09:48:56 +0000 Files and hashes: 1: d5yg0JVwhQFufQNaTsuieBq3xQ8.crl (hash: tp6fW4Dvlpmju/FqAN7HQmF6gj9E430UMofaaQjXpGo=) 2: 55C25D260BD911F1B73B6397303D8C67.roa (hash: rdz1gfwbX0jq2TD9cfgavgz+Dublp64Dbpc4uLKUPL8=) 3: 9AAB80560BD511F1920C67C12E3D8C67.roa (hash: 7MrcBRtrM3i0RslsHky1Cdr7mamN7Fo1uDMcDW+7UiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Aug 2026 09:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137157, serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F Validity Not Before: Jul 29 09:48:56 2026 GMT Not After : Aug 5 09:48:56 2026 GMT Subject: CN=6a69cc88-41cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:67:05:44:5d:98:ce:7c:c5:a6:83:2e:84: a9:90:7a:02:c8:d2:a3:33:2f:fe:4c:24:56:83:94: 37:89:27:0e:c2:5a:b2:dc:58:03:f5:71:92:38:d2: d9:3b:cc:f1:cb:47:c5:7d:e5:2b:dd:a2:d7:a4:5c: d2:ca:74:a6:71:75:9d:8b:5e:ed:a8:1f:8e:27:d7: 41:e9:5e:02:e3:29:7f:cc:69:5b:ab:07:6f:90:01: 1e:d8:33:8d:2c:f7:b0:fa:20:a7:56:28:b8:eb:0c: fb:b6:b3:1b:2b:aa:e0:db:46:cf:24:38:7c:d3:c2: d2:84:ba:86:8e:20:29:be:6f:28:cf:5d:7e:c3:ae: 65:ad:df:c1:52:3c:b2:8d:e1:36:f7:fb:78:53:f5: 9a:25:6c:38:7c:ae:09:96:8f:c7:c6:34:5b:67:ed: 91:43:e8:94:dd:ff:cc:e3:1c:0e:3f:10:6c:c2:9d: bf:5f:2d:fe:92:e9:b1:e7:08:57:27:93:5d:8f:09: 32:ae:19:3e:25:ce:5e:3e:e5:a6:e0:b0:a8:61:eb: 96:f0:a8:1b:bb:45:af:26:e3:dc:77:18:71:51:1e: 02:74:5b:83:f1:fe:ed:a7:fe:12:b5:6a:8a:aa:e3: cc:9c:f1:c1:65:24:6b:41:2d:e2:b3:8b:bf:48:bf: 8d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B3:06:D5:7D:A3:CE:2C:D0:48:46:7D:6F:EF:65:A8:A9:B1:18:4B X509v3 Authority Key Identifier: keyid:77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:70:6f:cb:99:80:ba:1c:ba:97:40:ea:f6:b6:1b:83:62:b6: ef:57:62:4f:b8:db:1b:ae:99:27:94:54:d5:50:09:d8:26:59: ac:50:9c:5c:f8:e6:72:fc:b4:1e:05:83:bd:61:0c:1e:1a:2d: 93:93:05:b5:28:90:c2:e1:ea:60:dd:ac:ed:86:9d:37:c6:a9: 2a:3c:a1:e3:01:77:b9:9b:fd:f9:62:6c:5f:5b:ac:30:0d:5d: db:cf:cb:5f:dc:be:c0:31:f4:d7:29:50:8f:fd:4e:b1:d0:4c: b3:f2:9f:c6:32:6b:c3:bf:a6:0b:be:9a:03:e3:c0:5b:b3:77: b7:3a:82:cd:d9:32:e7:1c:2c:ec:ba:0a:fd:c5:ad:66:a0:92: 63:2e:80:88:15:ad:65:1a:0a:aa:9b:1e:a8:ca:44:59:17:70: b6:99:a3:51:81:c5:56:38:a7:17:fd:4f:97:22:13:5b:15:df: af:2f:d0:66:63:cf:84:9a:36:98:d8:c6:c0:b5:66:bc:a7:50: 0d:f7:b1:f0:d3:b9:09:42:96:0a:aa:d6:dd:bc:34:16:7e:4f: 1e:1f:21:4b:06:cd:6c:ee:e4:4b:67:43:35:1b:10:db:c4:5c: 94:06:06:9a:aa:30:1e:74:62:f1:60:95:57:44:ba:04:23:62: 17:7d:cb:28 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE1NzExMC8GA1UEBRMoNzc5Q0EwRDA5NTcwODUwMTZFN0QwMzVBNEVDQkEyNzgx QUI3QzUwRjAeFw0yNjA3MjkwOTQ4NTZaFw0yNjA4MDUwOTQ4NTZaMBgxFjAUBgNV BAMTDTZhNjljYzg4LTQxY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCU92cFRF2YznzFpoMuhKmQegLI0qMzL/5MJFaDlDeJJw7CWrLcWAP1cZI40tk7 zPHLR8V95SvdotekXNLKdKZxdZ2LXu2oH44n10HpXgLjKX/MaVurB2+QAR7YM40s 97D6IKdWKLjrDPu2sxsrquDbRs8kOHzTwtKEuoaOICm+byjPXX7DrmWt38FSPLKN 4Tb3+3hT9ZolbDh8rgmWj8fGNFtn7ZFD6JTd/8zjHA4/EGzCnb9fLf6S6bHnCFcn k12PCTKuGT4lzl4+5abgsKhh65bwqBu7Ra8m49x3GHFRHgJ0W4Px/u2n/hK1aoqq 48yc8cFlJGtBLeKzi79Iv42tAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURrMG1X2j zizQSEZ9b+9lqKmxGEswHwYDVR0jBBgwFoAUd5yg0JVwhQFufQNaTsuieBq3xQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTU3LzY1Qjg4QjlDMEJD RjExRjFCQkQxRkVEQTJDM0Q4QzY3L2Q1eWcwSlZ3aFFGdWZRTmFUc3VpZUJxM3hR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDV5ZzBKVndoUUZ1ZlFOYVRzdWllQnEzeFE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTU3LzY1Qjg4QjlDMEJDRjExRjFCQkQxRkVEQTJDM0Q4QzY3L2Q1eWcwSlZ3aFFG dWZRTmFUc3VpZUJxM3hROC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA8cG/LmYC6HLqXQOr2thuDYrbvV2JPuNsbrpknlFTVUAnYJlmsUJxc+OZy/LQe BYO9YQweGi2TkwW1KJDC4epg3azthp03xqkqPKHjAXe5m/35YmxfW6wwDV3bz8tf 3L7AMfTXKVCP/U6x0Eyz8p/GMmvDv6YLvpoD48Bbs3e3OoLN2TLnHCzsugr9xa1m oJJjLoCIFa1lGgqqmx6oykRZF3C2maNRgcVWOKcX/U+XIhNbFd+vL9BmY8+EmjaY 2MbAtWa8p1AN97Hw07kJQpYKqtbdvDQWfk8eHyFLBs1s7uRLZ0M1GxDbxFyUBgaa qjAedGLxYJVXRLoEI2IXfcso -----END CERTIFICATE-----Generated at Wed Jul 29 12:31:07 2026 by rpki-client