$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft File: -1uWlTzNsR6SaDs-tbekV0lLJfA.mft (raw, json) Hash identifier: dccvmRoIDumLBo+QKA7HhWjoez4I/LjVk6V/sun/kFI= Subject key identifier: 9D:5B:30:D8:3A:8F:AB:D9:AF:A2:D0:D3:51:47:9C:48:38:6E:EB:4E Authority key identifier: FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 Certificate issuer: /CN=A9146A72/serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft Manifest number: 020B Signing time: Tue 28 Jul 2026 15:34:38 +0000 Manifest this update: Tue 28 Jul 2026 15:34:38 +0000 Manifest next update: Tue 04 Aug 2026 15:34:38 +0000 Files and hashes: 1: -1uWlTzNsR6SaDs-tbekV0lLJfA.crl (hash: gEj+TTUdvwzW9w3qR6qf/H9ukmRetmooaxYYqGOmmHc=) 2: 67B0ACBC8E5011EE95DFC141C4F9AE02.roa (hash: 7WBF/67tQLlM0JIff5LKTgy333KC+LPGrQsaWqMRIeQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=FB5B96953CCDB11E92683B3EB5B7A457494B25F0 Validity Not Before: Jul 28 15:34:38 2026 GMT Not After : Aug 4 15:34:38 2026 GMT Subject: CN=6a68cc0e-a1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:2e:e6:17:41:3d:32:52:c1:9d:38:80:3d: 8f:fd:f5:32:bb:71:83:58:18:d2:2f:0c:9e:b9:bc: b4:44:db:d7:0d:da:47:ad:2a:6c:9b:63:fa:53:b6: 29:f1:1c:1f:db:a1:85:00:dd:11:b0:15:00:54:25: 5b:dd:6d:1a:8a:b6:a6:1c:91:49:35:41:a1:6c:46: 74:c8:4a:f4:85:d8:c0:12:a9:0f:20:ec:ed:f3:55: 95:b7:37:46:f9:7e:d5:5b:8c:70:60:ad:68:a1:8d: 58:b3:e4:38:46:c4:53:97:94:2f:4c:1f:9a:e8:d1: 36:64:02:ff:91:cb:af:f7:b1:44:da:84:75:96:e4: e7:b2:cd:95:d6:cb:f6:78:af:56:45:d7:16:72:17: bb:93:77:67:13:25:dd:0e:95:9e:77:9d:80:c4:0b: 30:10:17:67:4c:ff:f2:9a:ca:1a:e6:85:61:d5:af: c1:7c:dc:4e:24:41:f4:89:de:97:aa:2e:b5:3d:5d: 3d:b7:6c:a7:c9:e6:bc:e9:cb:12:46:32:fc:a4:69: bc:4a:dc:0a:18:42:7c:44:35:ea:db:92:a0:1e:7c: 1d:36:fd:88:55:dc:18:03:9b:b6:bb:22:c9:d3:f1: 1d:b7:3f:cd:7a:68:41:df:44:e1:3d:18:e8:79:c1: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5B:30:D8:3A:8F:AB:D9:AF:A2:D0:D3:51:47:9C:48:38:6E:EB:4E X509v3 Authority Key Identifier: keyid:FB:5B:96:95:3C:CD:B1:1E:92:68:3B:3E:B5:B7:A4:57:49:4B:25:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-1uWlTzNsR6SaDs-tbekV0lLJfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/4F56C01C779D11EEBB49E269C4F9AE02/-1uWlTzNsR6SaDs-tbekV0lLJfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:e8:92:c6:8a:67:09:3b:1c:f0:3e:40:d0:32:b3:d7:ed:5d: c6:7a:fd:8a:86:6c:81:65:18:88:bd:65:d0:fa:b6:9c:94:b4: 38:16:81:38:f8:f8:45:4f:eb:73:d8:2c:7f:db:21:30:cc:e7: e1:ce:d1:f4:93:5e:ea:1b:29:15:21:71:91:15:2f:3a:c5:89: 41:61:11:ed:2c:bc:0a:dc:c8:03:4e:87:fd:85:34:90:8d:2b: d6:ea:d7:9f:a3:14:14:d2:68:12:3f:ca:54:b9:b8:60:dc:dc: c1:e5:2e:74:1d:93:16:2b:29:7c:d9:95:23:57:7c:17:c4:a7: 74:4c:5a:6e:ec:ad:e1:7d:88:3c:63:d7:48:05:a4:90:2e:e5: dd:04:05:72:68:d0:ce:14:f1:fa:d4:e4:4f:45:f2:18:26:1b: 62:59:38:b3:ae:0a:2f:83:91:ab:9a:97:41:27:c2:62:17:e1: 42:ab:ea:c8:95:1c:f2:74:cf:7c:9c:05:c7:57:c1:47:c9:f3: 83:4c:20:22:5f:57:1e:98:46:c6:c2:f0:91:64:d5:3b:f6:2e: 67:8a:5d:93:57:54:ff:8b:dd:41:94:49:db:05:79:39:a7:22: c2:a5:17:44:ca:4e:45:7d:19:0d:ea:10:5b:4c:10:5a:63:6d: 4a:07:99:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKEZCNUI5Njk1M0NDREIxMUU5MjY4M0IzRUI1QjdBNDU3 NDk0QjI1RjAwHhcNMjYwNzI4MTUzNDM4WhcNMjYwODA0MTUzNDM4WjAYMRYwFAYD VQQDEw02YTY4Y2MwZS1hMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg0u5hdBPTJSwZ04gD2P/fUyu3GDWBjSLwyeuby0RNvXDdpHrSpsm2P6U7Yp 8Rwf26GFAN0RsBUAVCVb3W0airamHJFJNUGhbEZ0yEr0hdjAEqkPIOzt81WVtzdG +X7VW4xwYK1ooY1Ys+Q4RsRTl5QvTB+a6NE2ZAL/kcuv97FE2oR1luTnss2V1sv2 eK9WRdcWche7k3dnEyXdDpWed52AxAswEBdnTP/ymsoa5oVh1a/BfNxOJEH0id6X qi61PV09t2ynyea86csSRjL8pGm8StwKGEJ8RDXq25KgHnwdNv2IVdwYA5u2uyLJ 0/Edtz/NemhB30ThPRjoecHOewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ1bMNg6 j6vZr6LQ01FHnEg4butOMB8GA1UdIwQYMBaAFPtblpU8zbEekmg7PrW3pFdJSyXw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi80RjU2QzAxQzc3 OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNSNlNhRHMtdGJla1YwbExK ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy0xdVdsVHpOc1I2U2FEcy10YmVrVjBsTEpmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi80RjU2QzAxQzc3OUQxMUVFQkI0OUUyNjlDNEY5QUUwMi8tMXVXbFR6TnNS NlNhRHMtdGJla1YwbExKZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeeiSxopnCTsc8D5A0DKz1+1dxnr9ioZsgWUYiL1l0Pq2nJS0OBaBOPj4RU/r c9gsf9shMMzn4c7R9JNe6hspFSFxkRUvOsWJQWER7Sy8CtzIA06H/YU0kI0r1urX n6MUFNJoEj/KVLm4YNzcweUudB2TFispfNmVI1d8F8SndExabuyt4X2IPGPXSAWk kC7l3QQFcmjQzhTx+tTkT0XyGCYbYlk4s64KL4ORq5qXQSfCYhfhQqvqyJUc8nTP fJwFx1fBR8nzg0wgIl9XHphGxsLwkWTVO/YuZ4pdk1dU/4vdQZRJ2wV5OaciwqUX RMpORX0ZDeoQW0wQWmNtSgeZ+w== -----END CERTIFICATE-----Generated at Wed Jul 29 06:32:06 2026 by rpki-client