$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json) Hash identifier: iOQRcD2XvZMuSTh6k5VZrWiGt9PAEj4l3O97QuUUpN8= Subject key identifier: 73:13:59:7C:E5:D8:5C:6E:EE:FA:94:C4:7D:3A:ED:05:34:51:65:08 Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft Manifest number: 0CAE Signing time: Tue 28 Jul 2026 18:43:16 +0000 Manifest this update: Tue 28 Jul 2026 18:43:15 +0000 Manifest next update: Tue 04 Aug 2026 18:43:15 +0000 Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: J3KPnRtIDhTakve+fPCXHHTQeNgLPWx7csTHg4yL534=) 2: 021496F2A4EC11F0A8EB5F7EC4F9AE02.roa (hash: wgK4ZuIIb0twemfmKGJQ9J4VlAgOAeotYnSBFamHuz8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Validity Not Before: Jul 28 18:43:15 2026 GMT Not After : Aug 4 18:43:15 2026 GMT Subject: CN=6a68f843-a7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:48:65:e5:75:a8:f1:6e:e9:f1:e2:7b:22:0c: 4e:07:f0:c8:82:b5:65:be:08:aa:a7:49:04:cd:27: 8e:a4:70:b2:d5:32:f5:bd:cc:60:fd:d0:60:4f:07: 8f:47:98:ef:ad:90:de:95:4c:26:80:2d:af:32:4c: ed:2c:2b:d3:12:38:c3:d1:6a:b1:a0:e4:ce:2b:41: c9:38:77:eb:62:b1:96:3f:03:4f:ee:d6:a0:0f:27: 2c:83:37:98:a9:9e:d4:62:79:f5:5d:10:11:31:38: 90:5a:17:00:d4:11:df:20:45:25:7e:f8:61:23:f1: 00:74:24:d5:e8:6b:23:02:a8:d4:33:01:ca:71:10: a1:10:dd:78:2c:c0:61:27:a9:3a:a1:10:d2:92:82: 2e:c2:ea:e8:68:57:b8:74:de:f2:ff:17:38:99:e6: 4f:df:ea:7e:6d:f1:5d:d5:7e:c0:65:bd:b3:78:a0: 1b:58:9a:73:c0:b7:48:1b:65:f8:89:62:00:4a:7f: a0:ae:81:66:ad:da:ae:3f:cf:69:9e:02:a3:30:b7: f8:c5:aa:c1:18:ec:b6:d7:d6:63:a8:59:7b:d9:4e: 4f:28:f3:1f:4e:78:6f:73:13:b3:ee:a5:e1:df:0b: fb:82:c3:e6:ce:03:10:be:c5:bf:da:0d:53:89:64: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:13:59:7C:E5:D8:5C:6E:EE:FA:94:C4:7D:3A:ED:05:34:51:65:08 X509v3 Authority Key Identifier: keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:6a:1b:f2:3e:01:94:59:7f:6b:70:b9:f8:bc:da:b6:78:88: 2b:39:94:68:4e:96:99:2a:34:37:22:ee:33:81:bf:56:15:a5: 18:dc:88:c8:78:93:32:bc:04:d9:85:c3:f3:d6:6d:31:14:0a: d7:e6:80:4c:c9:ae:aa:36:4f:fb:1c:c7:d1:a5:6c:9d:e3:77: fa:22:c5:51:4a:25:6b:1e:2f:7e:0f:3b:03:db:24:62:1e:ee: 73:68:77:41:69:dd:d6:a7:ce:97:a9:0c:5f:90:c5:8d:c4:ac: de:b6:17:83:7c:7c:8c:fa:de:32:ff:4b:50:cf:d0:ec:0d:3b: 27:e6:17:62:46:9a:1c:38:35:1f:90:7f:ca:c5:8f:fd:63:4a: 0d:fc:c2:04:6e:8e:41:e7:61:b9:00:74:42:91:be:cd:2d:39: fa:e2:30:df:b7:4c:a6:14:0f:f2:89:33:9f:f0:d1:1a:b1:64: 06:47:c9:77:ff:9f:6f:94:24:63:80:11:3a:90:1b:43:96:17: 3c:74:cd:9d:aa:1c:3f:e7:ec:4c:6d:22:15:05:95:86:6c:78: 18:3d:89:1f:72:47:ed:fc:63:14:d6:4d:16:9c:c9:b5:ad:5d: da:17:40:5b:59:e4:8e:04:18:89:01:bb:00:11:2e:75:d4:33: a4:d2:19:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFFMjIxMTAvBgNVBAUTKDcyNjIyMEQ5OEJDQzdEQzY2QTNDQ0YzNzY3N0VBMEEz REIwOTBEQTQwHhcNMjYwNzI4MTg0MzE1WhcNMjYwODA0MTg0MzE1WjAYMRYwFAYD VQQDEw02YTY4Zjg0My1hN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtkhl5XWo8W7p8eJ7IgxOB/DIgrVlvgiqp0kEzSeOpHCy1TL1vcxg/dBgTweP R5jvrZDelUwmgC2vMkztLCvTEjjD0WqxoOTOK0HJOHfrYrGWPwNP7tagDycsgzeY qZ7UYnn1XRARMTiQWhcA1BHfIEUlfvhhI/EAdCTV6GsjAqjUMwHKcRChEN14LMBh J6k6oRDSkoIuwuroaFe4dN7y/xc4meZP3+p+bfFd1X7AZb2zeKAbWJpzwLdIG2X4 iWIASn+groFmrdquP89pngKjMLf4xarBGOy219ZjqFl72U5PKPMfTnhvcxOz7qXh 3wv7gsPmzgMQvsW/2g1TiWRNCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMTWXzl 2Fxu7vqUxH067QU0UWUIMB8GA1UdIwQYMBaAFHJiINmLzH3GajzPN2d+oKPbCQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUUyMi9CMTc4NDM5RTFC QkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZjWnFQTTgzWjM2Z285c0pE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtSWcyWXZNZmNacVBNODNaMzZnbzlzSkRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUUyMi9CMTc4NDM5RTFCQkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZj WnFQTTgzWjM2Z285c0pEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi2ob8j4BlFl/a3C5+LzatniIKzmUaE6WmSo0NyLuM4G/VhWlGNyIyHiTMrwE 2YXD89ZtMRQK1+aATMmuqjZP+xzH0aVsneN3+iLFUUolax4vfg87A9skYh7uc2h3 QWnd1qfOl6kMX5DFjcSs3rYXg3x8jPreMv9LUM/Q7A07J+YXYkaaHDg1H5B/ysWP /WNKDfzCBG6OQedhuQB0QpG+zS05+uIw37dMphQP8okzn/DRGrFkBkfJd/+fb5Qk Y4AROpAbQ5YXPHTNnaocP+fsTG0iFQWVhmx4GD2JH3JH7fxjFNZNFpzJta1d2hdA W1nkjgQYiQG7ABEuddQzpNIZAQ== -----END CERTIFICATE-----Generated at Wed Jul 29 10:34:00 2026 by rpki-client