$ rpki-client -vvf rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft File: R1JQ5qBVR49Kwerx7TLVZyw80bM.mft (raw, json) Hash identifier: 3GndPHUaqrIjVyWl+M9i7DbKlrNH7OvLFvKC/dMqOIY= Subject key identifier: E3:94:AE:9B:71:85:33:E6:92:00:7F:13:0C:A1:75:36:59:12:29:DD Authority key identifier: 47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3 Certificate issuer: /CN=A9140EE2/serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3 Certificate serial: 0DFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft Manifest number: 0DEC Signing time: Tue 28 Jul 2026 18:00:05 +0000 Manifest this update: Tue 28 Jul 2026 18:00:05 +0000 Manifest next update: Tue 04 Aug 2026 18:00:05 +0000 Files and hashes: 1: R1JQ5qBVR49Kwerx7TLVZyw80bM.crl (hash: C2VQhW3qXU95Yay6XiuNY58k88EdHeWQR4XP1w1Srf0=) 2: B523DAE68C9211EABC682867C4F9AE02.roa (hash: BERBRpUK9OW10E7s8SXbXfmaAhMyFWqG+VQ0XIykVvs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3582 (0xdfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140EE2, serialNumber=475250E6A055478F4AC1EAF1ED32D5672C3CD1B3 Validity Not Before: Jul 28 18:00:05 2026 GMT Not After : Aug 4 18:00:05 2026 GMT Subject: CN=6a68ee25-3a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9d:ec:17:25:99:2c:3d:83:21:f2:55:f3:da: 02:32:82:be:4e:82:d6:20:20:ef:1e:44:2d:ad:f3: 0c:1e:38:b8:7a:14:f2:5a:b2:b4:5d:f8:b6:8e:f7: 04:79:19:99:43:9c:b6:90:7b:68:35:27:85:f8:d2: 68:6f:0c:18:4f:a4:be:27:2b:ff:28:cc:49:69:6a: 2d:47:aa:c6:95:36:b1:0b:47:0e:98:6e:6b:3b:1c: 0d:14:f7:b0:50:d6:57:31:fa:a9:f3:e5:38:ae:fa: e4:ac:14:74:59:3d:ea:6d:22:a9:c0:9c:c2:1d:c2: 40:a0:f0:3d:44:49:b7:b0:23:5c:11:f3:25:22:d5: 69:e6:8c:1a:dc:ec:05:36:aa:d4:3a:a0:bf:31:db: 4b:fa:8a:52:2b:aa:6f:94:bd:59:eb:92:45:d8:d2: d8:e4:80:f3:3f:eb:89:f7:bb:e8:63:d8:8f:cb:5d: 31:12:62:b8:20:bb:89:99:35:9d:fa:bc:ef:10:cd: 2f:0f:15:30:9d:da:aa:cf:7a:7e:b3:ba:fa:2e:b5: e3:25:7f:4c:cd:b1:61:b5:81:e3:29:e6:06:9e:01: 99:06:2d:bb:94:0f:e2:2b:25:1b:42:08:60:ba:07: db:a7:d9:78:58:c3:30:af:84:0a:ae:06:1f:b8:ad: 2c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:94:AE:9B:71:85:33:E6:92:00:7F:13:0C:A1:75:36:59:12:29:DD X509v3 Authority Key Identifier: keyid:47:52:50:E6:A0:55:47:8F:4A:C1:EA:F1:ED:32:D5:67:2C:3C:D1:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1JQ5qBVR49Kwerx7TLVZyw80bM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140EE2/EA01D55ADF7311E9ABEBD43BC4F9AE02/R1JQ5qBVR49Kwerx7TLVZyw80bM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:87:89:9e:8c:b4:01:57:6b:cf:79:60:52:dc:f9:f8:12:98: 89:51:ec:90:f0:56:c6:fb:c8:13:39:a7:1c:66:c7:40:fd:a6: 32:b6:f4:c2:d0:f6:8e:e5:43:a4:ce:25:14:51:aa:ab:42:06: 10:51:fd:83:a7:e0:38:56:2a:94:20:32:15:13:4e:18:1f:d2: 87:2d:7a:92:39:4f:33:c5:6a:39:a0:9b:e8:ec:1f:5a:28:d4: 99:65:aa:ad:53:4c:44:9d:0f:cf:e4:a9:17:48:7a:03:7e:77: 18:9a:08:14:3a:77:ce:91:32:01:67:aa:8d:96:02:34:8c:e1: b0:e2:85:f2:dd:f3:40:c4:60:55:48:56:bc:54:ee:8d:4b:c7: f8:b8:9f:33:d9:d3:5c:ad:0f:d5:07:3e:5b:ff:16:48:19:78: d0:22:b0:92:d5:27:c3:7a:6a:ea:b9:d6:59:a3:e4:0c:88:47: 95:9f:80:87:a7:9f:16:00:29:2b:27:0d:a0:db:6c:aa:d8:e7: bd:15:d9:ce:44:bd:0c:49:57:1e:ec:62:51:1f:79:a8:a1:0e: 31:53:6f:65:6d:55:7c:28:2f:99:71:ea:73:0b:fd:ca:67:8d: 9c:b5:3d:3a:1a:e4:f4:0f:7b:c5:ce:af:5b:4e:35:98:d0:21: 82:d8:3f:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFRTIxMTAvBgNVBAUTKDQ3NTI1MEU2QTA1NTQ3OEY0QUMxRUFGMUVEMzJENTY3 MkMzQ0QxQjMwHhcNMjYwNzI4MTgwMDA1WhcNMjYwODA0MTgwMDA1WjAYMRYwFAYD VQQDEw02YTY4ZWUyNS0zYTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Z3sFyWZLD2DIfJV89oCMoK+ToLWICDvHkQtrfMMHji4ehTyWrK0Xfi2jvcE eRmZQ5y2kHtoNSeF+NJobwwYT6S+Jyv/KMxJaWotR6rGlTaxC0cOmG5rOxwNFPew UNZXMfqp8+U4rvrkrBR0WT3qbSKpwJzCHcJAoPA9REm3sCNcEfMlItVp5owa3OwF NqrUOqC/MdtL+opSK6pvlL1Z65JF2NLY5IDzP+uJ97voY9iPy10xEmK4ILuJmTWd +rzvEM0vDxUwndqqz3p+s7r6LrXjJX9MzbFhtYHjKeYGngGZBi27lA/iKyUbQghg ugfbp9l4WMMwr4QKrgYfuK0sWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOOUrptx hTPmkgB/EwyhdTZZEindMB8GA1UdIwQYMBaAFEdSUOagVUePSsHq8e0y1WcsPNGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEVFMi9FQTAxRDU1QURG NzMxMUU5QUJFQkQ0M0JDNEY5QUUwMi9SMUpRNXFCVlI0OUt3ZXJ4N1RMVlp5dzgw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxSlE1cUJWUjQ5S3dlcng3VExWWnl3ODBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEVFMi9FQTAxRDU1QURGNzMxMUU5QUJFQkQ0M0JDNEY5QUUwMi9SMUpRNXFCVlI0 OUt3ZXJ4N1RMVlp5dzgwYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGoeJnoy0AVdrz3lgUtz5+BKYiVHskPBWxvvIEzmnHGbHQP2mMrb0wtD2juVD pM4lFFGqq0IGEFH9g6fgOFYqlCAyFRNOGB/Shy16kjlPM8VqOaCb6OwfWijUmWWq rVNMRJ0Pz+SpF0h6A353GJoIFDp3zpEyAWeqjZYCNIzhsOKF8t3zQMRgVUhWvFTu jUvH+LifM9nTXK0P1Qc+W/8WSBl40CKwktUnw3pq6rnWWaPkDIhHlZ+Ah6efFgAp KycNoNtsqtjnvRXZzkS9DElXHuxiUR95qKEOMVNvZW1VfCgvmXHqcwv9ymeNnLU9 Ohrk9A97xc6vW041mNAhgtg/VQ== -----END CERTIFICATE-----Generated at Tue Jul 28 23:11:08 2026 by rpki-client