$ rpki-client -vvf rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft File: eERZpLZsg1_PXW5aVoctkkfUZYo.mft (raw, json) Hash identifier: DK+r0VylthGleWX5RgyTRTVcdBK2xn+I0VZMxCaHw1w= Subject key identifier: 00:41:0E:3B:A8:87:34:8F:AE:B9:1B:F5:A7:FB:82:A1:F5:C0:FA:79 Authority key identifier: 78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A Certificate issuer: /CN=A9145258/serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft Manifest number: 011C Signing time: Mon 27 Jul 2026 07:57:04 +0000 Manifest this update: Mon 27 Jul 2026 07:57:04 +0000 Manifest next update: Mon 03 Aug 2026 07:57:04 +0000 Files and hashes: 1: eERZpLZsg1_PXW5aVoctkkfUZYo.crl (hash: IKUs2DaVuvhf9cF0fMvj0NVFpFkmf9R3VXbmDZI9Ftw=) 2: 2C7AE786042711F0BCEB4A75C4F9AE02.roa (hash: yY5W8QHlOVcNFdNHN5tf5xhCqQSWa5PPR1EloS7CLPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 07:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145258, serialNumber=784459A4B66C835FCF5D6E5A56872D9247D4658A Validity Not Before: Jul 27 07:57:04 2026 GMT Not After : Aug 3 07:57:04 2026 GMT Subject: CN=6a670f50-9dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:fa:0d:1f:cb:95:f6:e6:66:e8:a4:cc:fd: e8:dd:d1:d7:b4:7b:34:be:5a:be:06:79:10:b9:fa: 62:40:68:b8:ee:9d:29:ca:bd:76:a8:43:f6:5a:6f: 6a:04:e8:30:dd:25:a1:3d:1d:03:80:99:8e:a2:bc: 41:b2:4b:f5:64:12:35:95:7f:9e:b6:1b:02:8b:89: 1b:59:0f:6b:9d:e5:6f:43:4a:da:71:fe:31:2c:1a: 36:5f:a9:ca:de:9e:06:3c:d4:b8:5c:41:0d:2b:8e: 62:aa:fe:60:f2:9f:4f:4b:30:cf:6c:9f:ec:48:3e: 12:9d:ff:45:6d:fc:c5:35:e6:a0:65:3b:11:0c:87: 60:a7:d3:72:a0:de:3a:e5:1e:86:77:80:a1:af:f7: 4e:fb:79:30:0c:ba:45:cb:97:e6:ba:25:0b:5b:cf: f7:3a:c6:0f:38:20:58:d0:17:be:25:a7:3e:6d:d7: 93:fe:34:b6:e9:84:81:bf:81:58:c0:d1:55:48:52: 43:aa:1a:e6:bb:d8:e8:91:a1:56:23:e0:fd:2e:bc: 4c:e4:14:56:9b:c4:48:99:7e:eb:b5:6d:88:7f:73: 4f:3f:8f:a5:6e:15:ee:22:59:02:fb:5c:8f:38:91: c5:0e:98:e4:b1:a2:c8:42:ab:56:53:0b:c5:72:2b: e5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:41:0E:3B:A8:87:34:8F:AE:B9:1B:F5:A7:FB:82:A1:F5:C0:FA:79 X509v3 Authority Key Identifier: keyid:78:44:59:A4:B6:6C:83:5F:CF:5D:6E:5A:56:87:2D:92:47:D4:65:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eERZpLZsg1_PXW5aVoctkkfUZYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145258/AC09C6EEE30611EFA807B053C4F9AE02/eERZpLZsg1_PXW5aVoctkkfUZYo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:d1:c8:76:4d:95:da:4e:1e:9e:45:f2:6f:ef:2e:be:a3:04: 0d:ca:40:d6:b2:36:94:44:24:08:1c:b4:cc:7e:63:6a:c7:e6: 4c:75:13:4b:a0:6d:0b:aa:8a:3d:e1:64:88:e9:90:1d:cc:6a: c6:07:2a:10:fa:5a:82:af:ec:79:b6:7d:3e:d1:b2:2e:ea:4e: 3c:28:ce:d0:85:9d:29:4b:9a:9d:9d:47:e2:4a:4d:a9:28:a5: 1a:35:57:09:0e:03:a4:47:6e:42:6f:eb:c0:41:51:79:7c:88: 8d:e5:4e:94:d6:e7:a1:67:76:21:d6:30:54:6b:87:6f:0d:42: 6c:9f:0d:0b:80:b1:dc:16:9a:c6:b8:22:65:6f:a1:c0:c7:db: 93:94:59:76:97:98:7c:1b:f8:76:46:e8:58:ef:77:df:d5:d1: d4:88:34:3e:a3:a5:67:bf:24:6f:41:5f:bd:32:8e:48:46:df: 34:7d:27:dc:dc:ba:a2:44:9e:66:dd:37:c9:81:82:52:2b:33: 56:a3:d5:c3:c7:6a:61:a8:5a:f9:bd:0b:2c:85:44:76:4a:5e: dd:90:cf:4e:46:5a:fe:82:09:82:ef:c4:51:59:83:db:fe:f1: da:8c:66:b4:40:07:5f:a9:57:ee:fe:ee:fe:57:ec:0c:0f:10: e5:1d:23:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDUyNTgxMTAvBgNVBAUTKDc4NDQ1OUE0QjY2QzgzNUZDRjVENkU1QTU2ODcyRDky NDdENDY1OEEwHhcNMjYwNzI3MDc1NzA0WhcNMjYwODAzMDc1NzA0WjAYMRYwFAYD VQQDEw02YTY3MGY1MC05ZGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznD6DR/LlfbmZuikzP3o3dHXtHs0vlq+BnkQufpiQGi47p0pyr12qEP2Wm9q BOgw3SWhPR0DgJmOorxBskv1ZBI1lX+ethsCi4kbWQ9rneVvQ0racf4xLBo2X6nK 3p4GPNS4XEENK45iqv5g8p9PSzDPbJ/sSD4Snf9FbfzFNeagZTsRDIdgp9NyoN46 5R6Gd4Chr/dO+3kwDLpFy5fmuiULW8/3OsYPOCBY0Be+Jac+bdeT/jS26YSBv4FY wNFVSFJDqhrmu9jokaFWI+D9LrxM5BRWm8RImX7rtW2If3NPP4+lbhXuIlkC+1yP OJHFDpjksaLIQqtWUwvFcivlTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFABBDjuo hzSPrrkb9af7gqH1wPp5MB8GA1UdIwQYMBaAFHhEWaS2bINfz11uWlaHLZJH1GWK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTI1OC9BQzA5QzZFRUUz MDYxMUVGQTgwN0IwNTNDNEY5QUUwMi9lRVJacExac2cxX1BYVzVhVm9jdGtrZlVa WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VFUlpwTFpzZzFfUFhXNWFWb2N0a2tmVVpZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTI1OC9BQzA5QzZFRUUzMDYxMUVGQTgwN0IwNTNDNEY5QUUwMi9lRVJacExac2cx X1BYVzVhVm9jdGtrZlVaWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYtHIdk2V2k4enkXyb+8uvqMEDcpA1rI2lEQkCBy0zH5jasfmTHUTS6BtC6qK PeFkiOmQHcxqxgcqEPpagq/sebZ9PtGyLupOPCjO0IWdKUuanZ1H4kpNqSilGjVX CQ4DpEduQm/rwEFReXyIjeVOlNbnoWd2IdYwVGuHbw1CbJ8NC4Cx3BaaxrgiZW+h wMfbk5RZdpeYfBv4dkboWO9339XR1Ig0PqOlZ78kb0FfvTKOSEbfNH0n3Ny6okSe Zt03yYGCUiszVqPVw8dqYaha+b0LLIVEdkpe3ZDPTkZa/oIJgu/EUVmD2/7x2oxm tEAHX6lX7v7u/lfsDA8Q5R0jeg== -----END CERTIFICATE-----Generated at Tue Jul 28 23:39:22 2026 by rpki-client