$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft File: _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json) Hash identifier: WboaRmy1Ncr/p1PCCVmx6u4Og+Pm22DJU5BpGrBYCPY= Subject key identifier: 21:B6:38:AA:AD:08:65:CC:91:DD:17:C2:09:D7:54:93:0B:33:1B:A5 Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE Certificate issuer: /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Certificate serial: 08F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft Manifest number: 08E8 Signing time: Sun 26 Jul 2026 20:55:35 +0000 Manifest this update: Sun 26 Jul 2026 20:55:35 +0000 Manifest next update: Sun 02 Aug 2026 20:55:35 +0000 Files and hashes: 1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: e7pLcmHLKhQjy57yxXpPnziMhdMUq80t76WPMFeMzao=) 2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: c4VC0uZLIwEYMCTYEDFpqIYkNUoeZb1I54lM3XwQmNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 20:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2290 (0x8f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Validity Not Before: Jul 26 20:55:35 2026 GMT Not After : Aug 2 20:55:35 2026 GMT Subject: CN=6a667447-edc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:0c:0d:e0:57:dc:ad:4a:b6:9b:f8:3d:f6: 72:c3:94:03:41:a9:7a:50:e4:86:3d:ef:09:8d:76: 76:de:66:ef:67:f2:07:7e:69:68:39:32:32:3b:31: 8b:23:68:73:23:d8:c5:5c:88:0e:93:9b:e0:a5:6d: 9f:f4:78:72:37:2e:4a:c2:9a:af:53:17:60:83:3c: 12:63:07:66:de:04:30:f0:46:8e:76:38:b8:19:8d: 35:bf:a0:68:6e:19:9f:d4:2a:e4:5f:01:ca:27:00: 84:9a:91:bd:77:fc:c4:b1:9b:6a:4e:6a:5d:5b:ed: 0b:4a:8e:ec:31:d1:de:37:bf:85:dd:52:f2:02:1b: d7:81:8c:74:c7:f7:a8:c2:a3:0f:1f:f9:c0:d2:b8: ef:d5:a2:f1:94:01:a6:40:65:5d:6a:bc:a5:28:14: a3:0b:7b:8d:07:fa:ce:0d:c2:30:11:e9:f2:fd:55: e7:fa:f7:65:92:25:fa:15:9b:2e:c0:3a:61:b2:58: c7:ee:89:74:49:ff:24:3b:a8:4a:f7:e6:85:1b:09: fd:64:ef:87:e9:da:62:78:a7:c7:22:24:6d:c1:83: 10:23:66:5b:7b:ff:73:12:ba:36:26:86:08:6f:98: 1e:a3:f9:cc:0d:08:a4:6b:5f:0c:c2:71:f9:0c:89: 24:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B6:38:AA:AD:08:65:CC:91:DD:17:C2:09:D7:54:93:0B:33:1B:A5 X509v3 Authority Key Identifier: keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:be:f8:d3:f0:ab:da:e6:ba:67:25:d0:9b:1b:f9:b6:eb:56: 4e:0c:78:ac:a5:ed:48:12:ec:2e:cb:8d:b7:61:cd:0c:3e:bc: 1d:3f:94:77:42:97:a6:ae:74:da:dd:74:38:29:0c:15:cb:c6: b6:8b:a8:50:80:f5:1a:86:d8:d9:d1:d5:70:53:97:20:33:78: b3:8b:c4:d9:91:d5:9a:eb:01:bd:76:f8:c1:a1:49:61:23:08: 9f:cb:a0:f7:7c:be:a5:28:01:58:91:34:8d:e2:e5:8c:a9:c9: 7e:4d:1b:a5:52:85:1e:6f:cc:9e:d2:34:3e:93:30:c6:99:68: 63:dd:16:1a:28:37:d2:c9:b2:5c:05:3f:e4:36:9f:77:c2:59: 0a:50:dc:8a:11:ad:2d:ca:a2:1a:b7:59:75:e2:a3:56:0c:6a: ff:07:51:9f:2b:6e:1c:ca:c3:c9:6b:83:98:ad:5f:54:b5:aa: c4:61:76:ed:9c:cd:7e:f7:8e:7b:a2:d5:4e:3a:e2:22:bd:e3: c8:f5:10:cd:10:a1:9e:9f:f3:bd:7b:7f:e6:2b:54:fa:3b:94: 2f:75:0f:ee:51:7c:14:57:a9:32:a4:ea:3b:4a:26:df:47:e8: 6b:a3:a3:f9:ac:7d:c6:e9:74:78:0c:d0:85:2a:a1:2e:69:f0: bf:a5:a1:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI0NjIxMTAvBgNVBAUTKEZENEQ4QzYzOUFEQzE1ODQ3QzdCNDkxMTE1OURFNzFC RDgxMzkzQUUwHhcNMjYwNzI2MjA1NTM1WhcNMjYwODAyMjA1NTM1WjAYMRYwFAYD VQQDEw02YTY2NzQ0Ny1lZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtx0MDeBX3K1Ktpv4PfZyw5QDQal6UOSGPe8JjXZ23mbvZ/IHfmloOTIyOzGL I2hzI9jFXIgOk5vgpW2f9HhyNy5KwpqvUxdggzwSYwdm3gQw8EaOdji4GY01v6Bo bhmf1CrkXwHKJwCEmpG9d/zEsZtqTmpdW+0LSo7sMdHeN7+F3VLyAhvXgYx0x/eo wqMPH/nA0rjv1aLxlAGmQGVdarylKBSjC3uNB/rODcIwEeny/VXn+vdlkiX6FZsu wDphsljH7ol0Sf8kO6hK9+aFGwn9ZO+H6dpieKfHIiRtwYMQI2Zbe/9zEro2JoYI b5geo/nMDQika18MwnH5DIkk7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCG2OKqt CGXMkd0XwgnXVJMLMxulMB8GA1UdIwQYMBaAFP1NjGOa3BWEfHtJERWd5xvYE5Ou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjQ2Mi8zMkM3NTdFNkRD NDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZUjhlMGtSRlozbkc5Z1Rr NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VMk1ZNXJjRllSOGUwa1JGWjNuRzlnVGs2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjQ2Mi8zMkM3NTdFNkRDNDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZ UjhlMGtSRlozbkc5Z1RrNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARL740/Cr2ua6ZyXQmxv5tutWTgx4rKXtSBLsLsuNt2HNDD68HT+Ud0KXpq50 2t10OCkMFcvGtouoUID1GobY2dHVcFOXIDN4s4vE2ZHVmusBvXb4waFJYSMIn8ug 93y+pSgBWJE0jeLljKnJfk0bpVKFHm/MntI0PpMwxploY90WGig30smyXAU/5Daf d8JZClDcihGtLcqiGrdZdeKjVgxq/wdRnytuHMrDyWuDmK1fVLWqxGF27ZzNfveO e6LVTjriIr3jyPUQzRChnp/zvXt/5itU+juUL3UP7lF8FFepMqTqO0om30foa6Oj +ax9xul0eAzQhSqhLmnwv6Wh7g== -----END CERTIFICATE-----Generated at Tue Jul 28 18:26:01 2026 by rpki-client