$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json) Hash identifier: qlpvdI8wlrPDc7/ImnScPAJRJFXh9SSf6VELqjVr950= Subject key identifier: BA:47:4F:1C:AE:11:A1:EE:7A:F3:59:86:EC:AE:64:51:7E:75:6C:C5 Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft Manifest number: 0C1A Signing time: Tue 28 Jul 2026 19:02:09 +0000 Manifest this update: Tue 28 Jul 2026 19:02:09 +0000 Manifest next update: Tue 04 Aug 2026 19:02:09 +0000 Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: kmn4jQukpX+cQs/9iXUlEHLJKHmgcHj/21Gp6rctab4=) 2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: mSjl0ibvEOuCK6DB5KHjDY/U2WKZFdSr/+i3luIa4aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 19:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Validity Not Before: Jul 28 19:02:09 2026 GMT Not After : Aug 4 19:02:09 2026 GMT Subject: CN=6a68fcb1-2ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:31:9b:b1:5d:ab:1e:d2:24:0d:4a:24:96: c6:f1:7a:7a:09:ef:59:c5:1c:7f:12:b1:63:f5:14: a6:ba:48:b0:e3:87:ec:8d:29:10:ca:c6:9b:8b:07: 20:5d:d2:5b:7d:6d:86:8a:6f:82:7f:22:96:8b:c8: f9:15:b1:1f:d9:03:b9:33:47:a5:f7:0b:e2:62:40: cd:7e:44:79:32:2d:b5:0b:0c:f5:10:12:5e:a0:d1: 67:fb:9e:48:b6:bd:22:94:05:72:11:b0:93:34:10: af:13:93:f6:39:44:af:28:2f:8d:9f:ac:16:ee:c2: 9d:82:6b:80:92:8b:26:16:c9:67:1e:fa:be:bf:11: aa:86:1e:5e:b2:c7:bd:6f:2d:8d:b0:c1:8d:b8:cc: 04:f6:ee:5a:4a:ce:e7:4f:79:39:a9:40:42:e0:75: 35:87:26:d7:3f:2d:28:b6:9c:13:09:a9:07:f3:25: b2:81:ec:45:90:f4:4c:fb:1f:a7:76:d1:57:66:21: 1f:e2:39:1c:54:9c:83:65:38:17:56:c7:f4:41:77: c6:4d:e8:0a:8c:4d:9c:8b:44:30:97:c8:3f:33:8f: 5f:be:49:62:35:9a:48:44:c2:92:01:5c:d0:04:c3: 9e:59:c0:0c:44:ff:1d:b0:27:c2:97:81:67:67:8e: 72:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:47:4F:1C:AE:11:A1:EE:7A:F3:59:86:EC:AE:64:51:7E:75:6C:C5 X509v3 Authority Key Identifier: keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:aa:37:66:9e:39:2d:75:9c:5d:4c:1c:1a:64:48:cc:ba:dd: 33:bb:70:a1:55:22:3e:7b:cc:0b:75:72:e7:43:65:ed:ed:a7: 02:4e:ff:83:7a:46:23:99:50:ff:a4:72:98:06:67:65:e1:0b: 20:05:65:65:ed:b8:7b:a4:7e:d6:1e:d5:29:66:96:ad:2a:28: 7b:03:7e:87:29:d9:ab:d7:8f:bf:45:98:e8:1a:8f:0c:77:b0: dc:26:c1:bc:36:3c:86:6a:c3:3f:ed:5e:bc:3b:7d:ec:3f:33: ea:fe:0e:d4:8e:fa:48:b0:b3:fc:2a:e9:a1:9f:d8:06:9e:15: 42:0b:79:ec:60:bf:49:b3:03:a5:f5:d0:f3:f7:b2:7c:a7:53: f4:f0:22:64:2a:55:4b:8f:03:ad:a5:3e:80:a1:16:54:93:dd: 0f:a7:00:8b:de:76:5f:7b:5f:9d:1c:0f:e9:dd:ba:c5:23:40: 8d:f4:88:0e:a1:ed:57:5e:83:77:72:7d:20:dd:b5:f5:be:39: c2:e9:6a:47:fa:8c:9d:3b:f0:f7:d9:6a:54:58:11:19:72:74: 9e:86:6b:f4:b3:78:88:38:7b:86:91:14:65:e7:48:38:cd:1e: c0:3e:3f:6e:ae:7f:c0:b1:4d:e5:e1:43:fd:2e:91:3f:47:91: b5:6b:ab:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFMEQxMTAvBgNVBAUTKDE2QjgwM0RCMzkzOERDQjE1REM1OUEyOEM5NzcxOURB MUZGMjBBNTMwHhcNMjYwNzI4MTkwMjA5WhcNMjYwODA0MTkwMjA5WjAYMRYwFAYD VQQDEw02YTY4ZmNiMS0yYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylMxm7Fdqx7SJA1KJJbG8Xp6Ce9ZxRx/ErFj9RSmukiw44fsjSkQysabiwcg XdJbfW2Gim+CfyKWi8j5FbEf2QO5M0el9wviYkDNfkR5Mi21Cwz1EBJeoNFn+55I tr0ilAVyEbCTNBCvE5P2OUSvKC+Nn6wW7sKdgmuAkosmFslnHvq+vxGqhh5esse9 by2NsMGNuMwE9u5aSs7nT3k5qUBC4HU1hybXPy0otpwTCakH8yWygexFkPRM+x+n dtFXZiEf4jkcVJyDZTgXVsf0QXfGTegKjE2ci0Qwl8g/M49fvkliNZpIRMKSAVzQ BMOeWcAMRP8dsCfCl4FnZ45ywwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLpHTxyu EaHuevNZhuyuZFF+dWzFMB8GA1UdIwQYMBaAFBa4A9s5ONyxXcWaKMl3Gdof8gpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUUwRC85MDRFNzQ3RTM5 MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNMRmR4Wm9veVhjWjJoX3lD bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyZ0Qyems0M0xGZHhab295WGNaMmhfeUNsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUUwRC85MDRFNzQ3RTM5MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNM RmR4Wm9veVhjWjJoX3lDbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw6o3Zp45LXWcXUwcGmRIzLrdM7twoVUiPnvMC3Vy50Nl7e2nAk7/g3pGI5lQ /6RymAZnZeELIAVlZe24e6R+1h7VKWaWrSooewN+hynZq9ePv0WY6BqPDHew3CbB vDY8hmrDP+1evDt97D8z6v4O1I76SLCz/CrpoZ/YBp4VQgt57GC/SbMDpfXQ8/ey fKdT9PAiZCpVS48DraU+gKEWVJPdD6cAi952X3tfnRwP6d26xSNAjfSIDqHtV16D d3J9IN219b45wulqR/qMnTvw99lqVFgRGXJ0noZr9LN4iDh7hpEUZedIOM0ewD4/ bq5/wLFN5eFD/S6RP0eRtWurOw== -----END CERTIFICATE-----Generated at Wed Jul 29 01:08:34 2026 by rpki-client