$ rpki-client -vvf rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft File: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft (raw, json) Hash identifier: 2pcyojXbZ/EKM4PH083ccRhhEoYDbVq4jiSEIiE49GY= Subject key identifier: 25:6B:A9:61:E2:23:3A:73:19:07:19:64:70:2E:79:F3:41:32:D3:D5 Authority key identifier: F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 Certificate issuer: /CN=A9153049/serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Certificate serial: 0D1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft Manifest number: 0D0D Signing time: Tue 28 Jul 2026 18:27:39 +0000 Manifest this update: Tue 28 Jul 2026 18:27:38 +0000 Manifest next update: Tue 04 Aug 2026 18:27:38 +0000 Files and hashes: 1: 9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl (hash: 226BZnchtf8/sZnzsQtQJ0U0v0fS2bMhKir+pa2PAR0=) 2: 4D6224A80C4A11EAABCEF428C4F9AE02.roa (hash: kLfSpY3kUgZtSnGVsreS4YqZQYWqK6EsvelahK7CL7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 18:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3354 (0xd1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153049, serialNumber=F62D2A685DCEC97E1583902A8EF9EE5170782074 Validity Not Before: Jul 28 18:27:38 2026 GMT Not After : Aug 4 18:27:38 2026 GMT Subject: CN=6a68f49b-1ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5e:3e:51:a3:fb:fb:c2:69:7d:ac:1b:0c:fd: 44:97:1a:22:22:fa:0f:bc:13:63:83:e9:f8:da:d5: 34:66:9a:60:1e:60:95:cd:92:5c:11:b8:7f:0c:87: 4b:e8:1e:0b:f7:d6:34:1f:82:fc:2e:b0:ff:d6:18: e8:32:1d:5b:ec:d6:61:94:6b:e7:4c:1a:04:bc:2e: 96:2d:e1:11:6d:5c:e2:3b:c3:69:ea:7f:4e:0f:7e: b3:e8:23:1a:41:ca:0f:0f:97:68:5c:34:47:cc:52: 66:e3:4c:d8:16:67:12:0c:a2:dc:00:63:78:15:31: c1:3f:55:a6:a2:b3:2b:be:3a:0e:50:a4:ba:bb:cd: 94:24:4b:91:cd:ba:39:d5:3b:b9:fc:37:0a:31:ef: 0c:8e:1b:0a:c3:cc:27:9d:51:33:61:50:3e:fd:fb: 9d:0f:34:c7:28:cd:65:51:c9:76:96:20:66:6d:2d: a5:d1:14:94:60:fc:21:50:3a:c0:30:8e:1d:a5:60: 0d:c2:7d:ba:ab:10:c8:0e:f2:51:d2:af:87:be:8a: 58:ce:7a:f3:89:07:aa:f0:6b:ce:08:d3:49:77:78: a0:3d:e4:7f:34:7f:a1:66:86:a1:67:fb:c9:a0:b3: b0:8e:2f:e5:84:79:90:9a:97:58:3b:be:57:94:72: ba:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6B:A9:61:E2:23:3A:73:19:07:19:64:70:2E:79:F3:41:32:D3:D5 X509v3 Authority Key Identifier: keyid:F6:2D:2A:68:5D:CE:C9:7E:15:83:90:2A:8E:F9:EE:51:70:78:20:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153049/ADAC528209D611EA9EB3381CC4F9AE02/9i0qaF3OyX4Vg5AqjvnuUXB4IHQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:ce:71:a5:a3:94:ea:7c:31:af:8c:a8:c2:fe:d5:d4:32:5c: 94:1d:5f:58:f0:72:e0:57:2d:3f:0a:56:04:e5:04:0e:00:e4: 57:c5:21:47:70:14:7d:87:06:9a:03:ff:77:25:90:a3:d6:3e: b5:45:2d:34:77:d2:e0:c5:eb:d6:23:d8:d8:5a:97:92:d6:88: 40:09:5a:f7:55:b2:d2:41:d8:85:19:17:08:8c:cc:28:ba:10: 65:43:82:84:04:8f:ab:45:39:f5:a1:ad:65:93:c6:1e:a1:e6: 55:1c:74:72:01:9c:69:94:90:f4:e8:df:a0:a9:30:93:c6:4e: 77:17:99:90:83:50:37:65:25:54:80:c5:1d:9d:e9:19:44:16: 25:8b:57:9b:52:78:ff:af:31:21:1b:5f:66:62:b7:3d:8c:a5: de:6a:c7:1e:37:26:59:02:fe:8c:b2:9b:a8:1f:85:04:b6:bf: 1c:6f:08:4a:d4:5e:72:54:c8:bf:5b:3f:16:b7:7b:e4:84:fd: 9d:d8:1c:5e:55:3c:78:1c:55:b2:e2:e2:91:36:18:74:74:69: 78:ff:9d:36:1c:f0:ff:d7:37:a3:f4:4c:d5:8e:fe:17:6a:2b: 00:ea:85:25:6d:97:b7:69:19:a8:77:97:1f:3a:cf:12:a8:2b: b5:68:c9:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTMwNDkxMTAvBgNVBAUTKEY2MkQyQTY4NURDRUM5N0UxNTgzOTAyQThFRjlFRTUx NzA3ODIwNzQwHhcNMjYwNzI4MTgyNzM4WhcNMjYwODA0MTgyNzM4WjAYMRYwFAYD VQQDEw02YTY4ZjQ5Yi0xY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApV4+UaP7+8JpfawbDP1ElxoiIvoPvBNjg+n42tU0ZppgHmCVzZJcEbh/DIdL 6B4L99Y0H4L8LrD/1hjoMh1b7NZhlGvnTBoEvC6WLeERbVziO8Np6n9OD36z6CMa QcoPD5doXDRHzFJm40zYFmcSDKLcAGN4FTHBP1WmorMrvjoOUKS6u82UJEuRzbo5 1Tu5/DcKMe8MjhsKw8wnnVEzYVA+/fudDzTHKM1lUcl2liBmbS2l0RSUYPwhUDrA MI4dpWANwn26qxDIDvJR0q+HvopYznrziQeq8GvOCNNJd3igPeR/NH+hZoahZ/vJ oLOwji/lhHmQmpdYO75XlHK6bwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVrqWHi IzpzGQcZZHAuefNBMtPVMB8GA1UdIwQYMBaAFPYtKmhdzsl+FYOQKo757lFweCB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzA0OS9BREFDNTI4MjA5 RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lYNFZnNUFxanZudVVYQjRJ SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlpMHFhRjNPeVg0Vmc1QXFqdm51VVhCNElIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MzA0OS9BREFDNTI4MjA5RDYxMUVBOUVCMzM4MUNDNEY5QUUwMi85aTBxYUYzT3lY NFZnNUFxanZudVVYQjRJSFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFc5xpaOU6nwxr4yowv7V1DJclB1fWPBy4FctPwpWBOUEDgDkV8UhR3AUfYcG mgP/dyWQo9Y+tUUtNHfS4MXr1iPY2FqXktaIQAla91Wy0kHYhRkXCIzMKLoQZUOC hASPq0U59aGtZZPGHqHmVRx0cgGcaZSQ9OjfoKkwk8ZOdxeZkINQN2UlVIDFHZ3p GUQWJYtXm1J4/68xIRtfZmK3PYyl3mrHHjcmWQL+jLKbqB+FBLa/HG8IStReclTI v1s/Frd75IT9ndgcXlU8eBxVsuLikTYYdHRpeP+dNhzw/9c3o/RM1Y7+F2orAOqF JW2Xt2kZqHeXHzrPEqgrtWjJ1A== -----END CERTIFICATE-----Generated at Tue Jul 28 21:40:02 2026 by rpki-client