$ rpki-client -vvf rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft File: r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft (raw, json) Hash identifier: za/3uM+iEzEvRxgaJs1FH0sfEvXLdNOdS6e4pH+EDMs= Subject key identifier: 9E:8A:DA:38:15:03:2F:21:23:30:05:CA:C5:15:62:1A:6F:48:5E:8B Authority key identifier: AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87 Certificate issuer: /CN=A9147750/serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft Manifest number: 41 Signing time: Mon 27 Jul 2026 10:50:02 +0000 Manifest this update: Mon 27 Jul 2026 10:50:01 +0000 Manifest next update: Mon 03 Aug 2026 10:50:01 +0000 Files and hashes: 1: r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl (hash: dfPdjXnxIjh8P+V8qn7RK8TCuTDTyGWi8lvURNmSexQ=) 2: C6185536273011F1A8149F74AC833773.roa (hash: XZNI2I+TEYcAvEVGQBDMHCtqr9clDTEVottNypWj6ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 10:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147750, serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87 Validity Not Before: Jul 27 10:50:01 2026 GMT Not After : Aug 3 10:50:01 2026 GMT Subject: CN=6a6737da-7849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:ab:6b:fa:40:72:50:89:85:d6:db:2b:cc: 40:ea:8e:95:1f:f6:d4:ff:0d:99:8a:e0:54:23:43: a5:70:74:5a:c7:f7:45:75:67:10:db:b3:36:b8:83: 88:ff:70:0a:b0:f1:f7:f4:68:52:8b:b6:5d:6e:1a: 42:a8:41:b4:25:79:fb:2d:65:7e:b2:94:ce:74:8a: d3:5c:cb:99:82:63:1f:39:6c:51:e6:05:19:4b:a4: 1c:9a:7b:f8:ea:7b:10:00:cb:6e:75:11:ef:fd:33: 0e:21:da:f2:68:8b:e9:0e:65:13:28:06:64:87:38: 84:d8:68:f3:bf:4f:b2:20:42:10:bf:d6:ca:ec:43: 9e:f1:19:02:77:2b:08:0b:0a:89:16:de:4a:52:2f: 7e:55:f6:9c:3b:31:8d:4f:a8:e3:df:73:bf:aa:5a: 68:bf:b8:3d:bb:ba:5f:ba:57:f0:f7:14:ac:07:d8: ba:94:b3:4d:c8:19:c8:1f:91:c0:fe:d2:f8:c8:ac: 4b:ca:cf:0a:76:35:f1:6c:fa:a4:7e:67:cd:1d:7e: e2:c9:0c:94:54:b6:8f:69:f9:23:2c:09:3b:4a:bc: b6:4f:09:44:a2:e7:4f:dc:db:58:3d:22:81:f5:32: b1:04:58:50:fd:b2:62:69:4c:23:b0:9c:11:e0:36: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8A:DA:38:15:03:2F:21:23:30:05:CA:C5:15:62:1A:6F:48:5E:8B X509v3 Authority Key Identifier: keyid:AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:63:88:e6:dd:42:43:23:b8:cf:ba:79:51:bf:bc:ac:e9:78: 2e:99:0c:99:fa:51:d4:37:59:05:b0:87:20:ca:79:5a:aa:97: c1:da:7d:35:5e:f1:c8:5a:b3:69:0b:9e:a5:2d:31:e3:7a:9e: a8:35:e9:e3:16:66:e3:f7:a0:ba:a8:9d:71:5a:8b:f1:21:a1: 10:ed:e7:ca:8b:c4:5a:e5:eb:5c:cd:a8:f8:26:e7:23:59:a2: 03:6e:09:7f:b7:b1:64:59:a9:04:80:dc:97:69:46:53:6a:1c: 24:05:2f:6f:66:ef:27:de:5f:9c:9f:1b:82:76:8f:67:aa:c6: 82:53:26:da:11:e6:a8:a6:99:49:cb:ac:4c:3b:11:b5:86:09: 2a:b1:31:d6:bf:e5:3b:78:ac:ff:4a:2e:31:54:92:de:99:70: 3a:a7:df:f1:2a:8b:8b:b5:36:21:33:c8:d6:34:9e:60:78:3f: a8:7c:80:c2:46:7a:ce:3e:5a:3e:4f:57:54:94:87:28:8f:6c: 9d:af:26:6e:17:9f:45:34:95:6c:a1:3d:17:62:fb:1a:cf:3e: 36:06:66:07:91:e1:c5:84:bb:43:83:a3:3a:73:23:a9:cf:f8: e3:40:ce:b4:30:16:df:d4:e2:61:1f:71:0c:7e:75:84:be:d0: cb:1f:bc:78 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Nzc1MDExMC8GA1UEBRMoQUY1NjhFQkMyNkIxNEMxMjgxRTgxMjgzNzc4NkI1QTM4 QkM3OEI4NzAeFw0yNjA3MjcxMDUwMDFaFw0yNjA4MDMxMDUwMDFaMBgxFjAUBgNV BAMTDTZhNjczN2RhLTc4NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrR6tr+kByUImF1tsrzEDqjpUf9tT/DZmK4FQjQ6VwdFrH90V1ZxDbsza4g4j/ cAqw8ff0aFKLtl1uGkKoQbQlefstZX6ylM50itNcy5mCYx85bFHmBRlLpByae/jq exAAy251Ee/9Mw4h2vJoi+kOZRMoBmSHOITYaPO/T7IgQhC/1srsQ57xGQJ3KwgL CokW3kpSL35V9pw7MY1PqOPfc7+qWmi/uD27ul+6V/D3FKwH2LqUs03IGcgfkcD+ 0vjIrEvKzwp2NfFs+qR+Z80dfuLJDJRUto9p+SMsCTtKvLZPCUSi50/c21g9IoH1 MrEEWFD9smJpTCOwnBHgNgrVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUnoraOBUD LyEjMAXKxRViGm9IXoswHwYDVR0jBBgwFoAUr1aOvCaxTBKB6BKDd4a1o4vHi4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NzUwLzRDN0UwRkFBMjcy RjExRjE4NDMyNTJGRUFCODMzNzczL3IxYU92Q2F4VEJLQjZCS0RkNGExbzR2SGk0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjFhT3ZDYXhUQktCNkJLRGQ0YTFvNHZIaTRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NzUwLzRDN0UwRkFBMjcyRjExRjE4NDMyNTJGRUFCODMzNzczL3IxYU92Q2F4VEJL QjZCS0RkNGExbzR2SGk0Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB4Y4jm3UJDI7jPunlRv7ys6XgumQyZ+lHUN1kFsIcgynlaqpfB2n01XvHIWrNp C56lLTHjep6oNenjFmbj96C6qJ1xWovxIaEQ7efKi8Ra5etczaj4JucjWaIDbgl/ t7FkWakEgNyXaUZTahwkBS9vZu8n3l+cnxuCdo9nqsaCUybaEeaopplJy6xMOxG1 hgkqsTHWv+U7eKz/Si4xVJLemXA6p9/xKouLtTYhM8jWNJ5geD+ofIDCRnrOPlo+ T1dUlIcoj2ydryZuF59FNJVsoT0XYvsazz42BmYHkeHFhLtDg6M6cyOpz/jjQM60 MBbf1OJhH3EMfnWEvtDLH7x4 -----END CERTIFICATE-----Generated at Wed Jul 29 02:22:42 2026 by rpki-client