$ rpki-client -vvf rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft File: y7aOmQU8HeJHirvi3_KrzsDRsUg.mft (raw, json) Hash identifier: xPqTrnkEdeDF3KYo5zwyGtIMHDzB7NfU47NQN7w1nWY= Subject key identifier: D2:D9:C3:DE:F8:D7:6F:4A:96:76:9C:D4:99:FE:A4:6E:F7:98:18:2F Authority key identifier: CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 Certificate issuer: /CN=A9149905/serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Certificate serial: 3570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft Manifest number: 3567 Signing time: Tue 28 Jul 2026 14:59:36 +0000 Manifest this update: Tue 28 Jul 2026 14:59:35 +0000 Manifest next update: Tue 04 Aug 2026 14:59:35 +0000 Files and hashes: 1: y7aOmQU8HeJHirvi3_KrzsDRsUg.crl (hash: aGuXF/wqQ7eVi3ozI6grsH1nQTB882iKQe1dca0da6g=) 2: A6D6CA7E022C11EBAC47A831C4F9AE02.roa (hash: k15XvHBFTQxYQednyHDCk4s/WtIgkfY4gwfxlATMUsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 14:59:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13680 (0x3570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149905, serialNumber=CBB68E99053C1DE2478ABBE2DFF2ABCEC0D1B148 Validity Not Before: Jul 28 14:59:35 2026 GMT Not After : Aug 4 14:59:35 2026 GMT Subject: CN=6a68c3d8-5f44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:e3:b4:7a:5c:01:ca:6d:b5:0f:2b:f3:7a: ff:2e:59:48:80:dc:13:f7:18:54:2b:35:91:76:9c: 98:c9:a4:86:1a:5a:ff:c3:0c:78:fd:c0:cc:7e:ee: 50:96:ba:9e:35:19:81:bf:d1:b9:7c:70:1f:4c:4d: b6:30:10:4b:bc:f3:09:87:53:8d:ab:37:16:30:8c: 4a:84:0e:ca:67:93:be:49:9f:48:38:de:22:b3:92: 09:fc:d0:a2:c5:db:26:c2:c0:82:6b:79:a8:24:cd: 26:40:7d:58:31:2d:03:f8:e6:18:64:bf:07:0d:d2: 48:3a:10:ff:e0:cf:d1:27:52:42:3e:97:de:cd:da: 45:74:40:b6:2d:82:c5:1b:7f:87:f3:e5:c8:bb:84: d6:7d:69:93:03:09:03:9c:f3:87:d3:6d:fd:ee:b3: 73:bf:21:ab:74:98:dd:65:d2:94:75:50:8b:1b:57: d7:c2:3a:97:0b:1d:2a:39:bf:2e:b4:6e:7e:15:e8: f8:56:9a:b4:b5:81:07:78:1c:4b:ca:36:ee:b5:f9: 84:65:8b:19:d3:9f:c4:12:cd:4e:c0:83:b8:0f:3f: b1:f3:03:fe:f9:c0:58:3b:9c:14:7b:62:d6:e6:58: 31:bd:fd:ac:02:ea:f2:d4:b1:87:65:66:8f:5b:23: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D9:C3:DE:F8:D7:6F:4A:96:76:9C:D4:99:FE:A4:6E:F7:98:18:2F X509v3 Authority Key Identifier: keyid:CB:B6:8E:99:05:3C:1D:E2:47:8A:BB:E2:DF:F2:AB:CE:C0:D1:B1:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7aOmQU8HeJHirvi3_KrzsDRsUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149905/394D064A1D9B11E2BE12EF8808B02CD2/y7aOmQU8HeJHirvi3_KrzsDRsUg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:80:8c:e5:e5:65:eb:ce:26:c2:d2:ec:76:0e:ae:01:fb:42: 1d:0c:6b:20:8f:e8:0b:fe:81:5b:a1:42:e6:50:d9:e9:52:a3: d8:19:4f:6f:24:af:00:86:22:8a:b9:fa:ba:35:41:d1:19:79: c4:6e:c4:ed:f0:24:13:36:84:25:0f:f0:2b:ac:99:94:00:12: 28:5a:00:d3:78:b9:72:f8:5e:ca:d0:d0:2c:f9:ca:ae:85:1a: e7:4b:a6:d7:59:92:ba:b9:0b:af:d0:8c:cd:20:49:73:db:e3: 35:51:58:06:0c:a5:88:87:be:bc:25:54:24:6d:6f:d3:73:d2: 05:55:9b:21:f3:5d:01:2f:65:d1:c5:43:29:8e:8a:7c:6e:bf: 36:2b:bf:5f:f8:4a:ec:79:4d:58:2c:39:97:a7:06:5f:e8:38: 88:93:c7:e5:2e:d0:a9:bf:1f:c2:5c:6f:d9:57:e2:13:1f:a7: 46:58:b2:0c:d6:80:6d:4c:2a:ca:c2:19:e5:ec:4b:f7:92:9c: de:b3:1c:cd:91:6d:39:fd:48:83:78:de:90:76:99:f6:be:00: e9:a5:8f:c0:2f:ef:38:f7:e7:9a:06:33:c2:55:71:24:50:89: 31:ad:17:ef:d9:53:ae:74:0c:2a:a2:2d:9f:9c:99:4b:3f:29: 59:e1:39:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDUxMTAvBgNVBAUTKENCQjY4RTk5MDUzQzFERTI0NzhBQkJFMkRGRjJBQkNF QzBEMUIxNDgwHhcNMjYwNzI4MTQ1OTM1WhcNMjYwODA0MTQ1OTM1WjAYMRYwFAYD VQQDEw02YTY4YzNkOC01ZjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAut/jtHpcAcpttQ8r83r/LllIgNwT9xhUKzWRdpyYyaSGGlr/wwx4/cDMfu5Q lrqeNRmBv9G5fHAfTE22MBBLvPMJh1ONqzcWMIxKhA7KZ5O+SZ9ION4is5IJ/NCi xdsmwsCCa3moJM0mQH1YMS0D+OYYZL8HDdJIOhD/4M/RJ1JCPpfezdpFdEC2LYLF G3+H8+XIu4TWfWmTAwkDnPOH02397rNzvyGrdJjdZdKUdVCLG1fXwjqXCx0qOb8u tG5+Fej4Vpq0tYEHeBxLyjbutfmEZYsZ05/EEs1OwIO4Dz+x8wP++cBYO5wUe2LW 5lgxvf2sAury1LGHZWaPWyOmbwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLZw974 129Klnac1Jn+pG73mBgvMB8GA1UdIwQYMBaAFMu2jpkFPB3iR4q74t/yq87A0bFI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNS8zOTREMDY0QTFE OUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhlSkhpcnZpM19LcnpzRFJz VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3k3YU9tUVU4SGVKSGlydmkzX0tyenNEUnNVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNS8zOTREMDY0QTFEOUIxMUUyQkUxMkVGODgwOEIwMkNEMi95N2FPbVFVOEhl SkhpcnZpM19LcnpzRFJzVWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGYCM5eVl684mwtLsdg6uAftCHQxrII/oC/6BW6FC5lDZ6VKj2BlPbySvAIYi irn6ujVB0Rl5xG7E7fAkEzaEJQ/wK6yZlAASKFoA03i5cvheytDQLPnKroUa50um 11mSurkLr9CMzSBJc9vjNVFYBgyliIe+vCVUJG1v03PSBVWbIfNdAS9l0cVDKY6K fG6/Niu/X/hK7HlNWCw5l6cGX+g4iJPH5S7Qqb8fwlxv2VfiEx+nRliyDNaAbUwq ysIZ5exL95Kc3rMczZFtOf1Ig3jekHaZ9r4A6aWPwC/vOPfnmgYzwlVxJFCJMa0X 79lTrnQMKqItn5yZSz8pWeE53Q== -----END CERTIFICATE-----Generated at Tue Jul 28 20:24:12 2026 by rpki-client