$ rpki-client -vvf rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft File: Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft (raw, json) Hash identifier: Lc8L9uxD8CeWkLO6jgvbNGe2Js/raGwLt7tlUTtOS7Q= Subject key identifier: 5F:29:E7:65:CF:DD:0A:2B:5B:2F:9A:5A:96:1F:36:CD:C4:15:31:D5 Authority key identifier: 11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93 Certificate issuer: /CN=A9142C40/serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft Manifest number: 09 Signing time: Mon 27 Jul 2026 11:34:19 +0000 Manifest this update: Mon 27 Jul 2026 11:34:18 +0000 Manifest next update: Mon 03 Aug 2026 11:34:18 +0000 Files and hashes: 1: Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl (hash: H6J/t6E8Zf2n9/sWczPmeF+Cyl8AAtY3V8pr4eAGegg=) 2: BAD07DD27F4811F1990DB98295A30FBC.roa (hash: VBBLrjGrqCd0Wu3hf1qDG8C18Uo1AAMHQGWoL8gJlLg=) 3: BA2F8ECC7F4811F1990DB98295A30FBC.roa (hash: B0ehoAhHlNvECD8MrwXSLG+T0N6cMbbYGRxsUCIbqxg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 11:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142C40, serialNumber=11CE4E5A2C08A77C4279E01CCB5BAE8C8A09C293 Validity Not Before: Jul 27 11:34:18 2026 GMT Not After : Aug 3 11:34:18 2026 GMT Subject: CN=6a67423b-164d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:2a:38:aa:39:36:39:53:fe:cf:20:ca:cf: 7c:12:99:7b:c7:64:8a:36:02:6b:9e:87:e2:6b:af: 9e:7b:04:5e:81:77:04:77:c2:b1:a7:c9:70:ef:6b: c4:0d:c7:ba:c4:bc:1a:93:90:1f:87:82:ed:d0:8c: 89:72:1a:db:14:64:a4:f2:ed:76:50:93:5f:85:5b: a4:96:69:0a:3d:11:48:56:9f:e0:20:16:4d:f7:99: 83:be:67:5c:18:a6:28:5e:62:58:9d:68:80:02:8c: 14:96:37:e7:7b:92:c7:fa:eb:86:a8:bd:c9:1a:e1: 57:42:33:d6:e5:13:05:50:44:c3:96:87:6d:7c:b8: ef:b9:9e:a6:b4:02:55:6e:d3:99:09:2e:ec:d0:b7: 77:5a:78:e1:b9:f6:80:34:b6:97:fa:4f:a1:3b:cd: 82:26:22:d1:01:c2:d6:a0:b2:87:7d:d9:b9:2b:20: 5e:92:a5:ca:ac:07:6b:88:06:f7:8a:d6:87:a5:7b: 79:58:2f:77:12:ad:08:81:07:64:1c:42:b1:2e:94: 48:05:7d:35:3d:3e:14:26:e2:a5:69:3a:9d:d1:1e: 87:49:d6:8f:39:41:3d:b3:12:5d:dd:59:fd:c3:ac: 25:70:59:3b:0f:4a:3b:f7:00:fa:2d:a2:e7:6c:50: 7a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:29:E7:65:CF:DD:0A:2B:5B:2F:9A:5A:96:1F:36:CD:C4:15:31:D5 X509v3 Authority Key Identifier: keyid:11:CE:4E:5A:2C:08:A7:7C:42:79:E0:1C:CB:5B:AE:8C:8A:09:C2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ec5OWiwIp3xCeeAcy1uujIoJwpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142C40/701CE8FA7F4511F1BA8AA70C95A30FBC/Ec5OWiwIp3xCeeAcy1uujIoJwpM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:36:2f:4a:93:03:19:cd:04:37:1c:56:64:3b:c9:ad:11:bf: 9f:d8:d6:a0:8f:7b:06:e6:b3:ea:10:70:50:dd:0e:bc:92:a8: d2:85:f7:3f:55:25:49:be:90:22:ec:ef:c5:2f:16:35:b5:0c: 48:d1:7d:39:b7:1d:67:13:9e:c7:52:f4:b2:75:6f:da:f5:dc: d9:7d:67:50:c3:d4:47:95:c2:8f:83:d0:73:eb:3f:bc:93:be: b0:16:3d:7b:23:6e:f9:2e:f3:4a:87:d2:d3:93:b5:32:8d:38: 97:e0:db:b8:dc:58:6d:07:9c:fd:ab:c7:04:bd:ff:60:f3:41: 74:b5:4d:85:65:d7:78:72:26:e9:45:6c:fd:f1:c6:52:f8:c0: da:fa:94:a5:8e:aa:cc:42:26:7c:d8:9a:26:97:51:c4:c1:b5: 78:1d:74:b7:84:a3:cf:2e:c7:da:c6:97:15:7c:d2:40:85:54: 52:47:ca:dd:0d:57:1b:ff:a6:22:9a:a0:a2:41:84:b8:bd:23: 6c:52:a3:d9:78:99:dd:bc:95:a9:86:24:3a:2d:e5:7d:0c:57: e7:59:44:a0:cf:b6:fe:a5:ff:47:81:30:dd:15:0a:8c:57:00: 12:22:71:1b:d3:56:98:d3:23:7f:b8:50:af:9f:d0:49:97:6b: 5e:f6:a1:79 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MkM0MDExMC8GA1UEBRMoMTFDRTRFNUEyQzA4QTc3QzQyNzlFMDFDQ0I1QkFFOEM4 QTA5QzI5MzAeFw0yNjA3MjcxMTM0MThaFw0yNjA4MDMxMTM0MThaMBgxFjAUBgNV BAMTDTZhNjc0MjNiLTE2NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2Ayo4qjk2OVP+zyDKz3wSmXvHZIo2Amueh+Jrr557BF6BdwR3wrGnyXDva8QN x7rEvBqTkB+Hgu3QjIlyGtsUZKTy7XZQk1+FW6SWaQo9EUhWn+AgFk33mYO+Z1wY piheYlidaIACjBSWN+d7ksf664aovcka4VdCM9blEwVQRMOWh218uO+5nqa0AlVu 05kJLuzQt3daeOG59oA0tpf6T6E7zYImItEBwtagsod92bkrIF6SpcqsB2uIBveK 1oele3lYL3cSrQiBB2QcQrEulEgFfTU9PhQm4qVpOp3RHodJ1o85QT2zEl3dWf3D rCVwWTsPSjv3APotoudsUHoDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUXynnZc/d CitbL5palh82zcQVMdUwHwYDVR0jBBgwFoAUEc5OWiwIp3xCeeAcy1uujIoJwpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyQzQwLzcwMUNFOEZBN0Y0 NTExRjFCQThBQTcwQzk1QTMwRkJDL0VjNU9XaXdJcDN4Q2VlQWN5MXV1aklvSndw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRWM1T1dpd0lwM3hDZWVBY3kxdXVqSW9Kd3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy QzQwLzcwMUNFOEZBN0Y0NTExRjFCQThBQTcwQzk1QTMwRkJDL0VjNU9XaXdJcDN4 Q2VlQWN5MXV1aklvSndwTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAPNi9KkwMZzQQ3HFZkO8mtEb+f2Nagj3sG5rPqEHBQ3Q68kqjShfc/VSVJvpAi 7O/FLxY1tQxI0X05tx1nE57HUvSydW/a9dzZfWdQw9RHlcKPg9Bz6z+8k76wFj17 I275LvNKh9LTk7UyjTiX4Nu43FhtB5z9q8cEvf9g80F0tU2FZdd4cibpRWz98cZS +MDa+pSljqrMQiZ82Joml1HEwbV4HXS3hKPPLsfaxpcVfNJAhVRSR8rdDVcb/6Yi mqCiQYS4vSNsUqPZeJndvJWphiQ6LeV9DFfnWUSgz7b+pf9HgTDdFQqMVwASInEb 01aY0yN/uFCvn9BJl2te9qF5 -----END CERTIFICATE-----Generated at Wed Jul 29 04:14:36 2026 by rpki-client