$ rpki-client -vvf rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft File: d9okgAToxYcr33K6wSIsfMtujjc.mft (raw, json) Hash identifier: VAOwuD/q+ZIyUqy8RAXEc0q4561VsWcjsTb20J+XZRU= Subject key identifier: 9C:F0:80:E7:8E:06:6B:85:62:A7:16:1A:BE:D6:F9:C0:DE:A7:FC:4D Authority key identifier: 77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 Certificate issuer: /CN=A9156342/serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Certificate serial: 0A5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft Manifest number: 0A38 Signing time: Tue 28 Jul 2026 20:04:40 +0000 Manifest this update: Tue 28 Jul 2026 20:04:40 +0000 Manifest next update: Tue 04 Aug 2026 20:04:40 +0000 Files and hashes: 1: d9okgAToxYcr33K6wSIsfMtujjc.crl (hash: 9Yz7dUvDHA3gz7Asa96MnxzxKEY7BqXZEc2Z4l/7ygI=) 2: 3A58D9F499E611EAB3C00943C4F9AE02.roa (hash: Ix/A1HAv4E1o+T96OwAx6diCaMu8Un7l8lL1cR9lZ0I=) 3: 3BABBD7699E611EAB3C00943C4F9AE02.roa (hash: goeW12JBA3cKKGwjatqM92u32XRcfD8Zb78gB6ELWSk=) 4: 3AFD491C99E611EAB3C00943C4F9AE02.roa (hash: hAA41RG01uNOAJq/J2qFIRJdJvtjuAyTCQh8VD7YTr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 20:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156342, serialNumber=77DA248004E8C5872BDF72BAC1222C7CCB6E8E37 Validity Not Before: Jul 28 20:04:40 2026 GMT Not After : Aug 4 20:04:40 2026 GMT Subject: CN=6a690b58-5d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:28:11:ab:0c:4a:44:71:2a:7d:01:41:bd:28: d2:f3:05:39:ac:49:1d:e0:a2:d3:47:f9:47:ae:2c: 6b:ed:b3:86:56:8c:77:c9:67:da:3c:7e:93:ba:43: e1:08:49:ad:46:c8:2c:3d:95:8e:5f:9b:2d:b4:28: 76:7d:9b:bf:fb:bd:62:4a:68:59:11:5b:ab:b1:b4: e8:3e:c2:3f:8e:f5:91:b3:60:6f:1f:24:84:74:8e: 3d:69:8e:04:b0:c3:18:f6:f1:f5:fd:46:5e:a1:dd: 75:ae:d4:76:e2:fb:bc:8e:e9:d4:40:0d:d7:14:b4: 3c:89:38:b3:45:1e:0c:e9:e9:7b:6f:d2:73:e8:41: 30:a9:97:38:9b:41:39:1e:e0:5d:71:8a:fc:b1:03: 14:92:f2:a7:57:c2:09:c4:47:47:b8:51:e8:ab:56: c5:45:37:4d:0e:e8:43:58:fb:2c:a6:45:3f:b5:e4: 0b:8a:ae:a4:c0:48:8d:8f:a6:9a:35:e4:92:fd:e2: 49:5e:16:5a:57:6e:2f:a0:4f:ac:20:9f:e5:86:f1: 06:dc:29:0d:a9:4e:3c:03:bd:cf:b8:dd:66:82:c4: bf:9f:fb:82:bd:70:bc:24:20:0e:a5:dc:66:e5:81: cd:e7:15:ff:d0:d0:83:35:15:f4:16:f2:77:16:34: 29:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F0:80:E7:8E:06:6B:85:62:A7:16:1A:BE:D6:F9:C0:DE:A7:FC:4D X509v3 Authority Key Identifier: keyid:77:DA:24:80:04:E8:C5:87:2B:DF:72:BA:C1:22:2C:7C:CB:6E:8E:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d9okgAToxYcr33K6wSIsfMtujjc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156342/BDF8908099E411EA89A4C240C4F9AE02/d9okgAToxYcr33K6wSIsfMtujjc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a7:c0:9d:81:85:92:c9:00:db:a0:a7:70:f4:9e:57:62:ad: 66:b2:b0:93:16:50:99:91:c8:94:1c:68:2f:69:7d:23:c6:1c: 7f:bb:65:ce:a7:44:b3:58:e0:84:66:ed:2b:d2:1d:4b:64:ab: 6b:24:65:7d:3b:ee:a0:0b:f4:13:6a:17:df:b7:35:a6:8b:07: b4:f1:1d:23:0a:e8:22:88:ba:ef:ee:e5:39:3a:68:bd:c1:33: 00:80:5c:22:62:19:84:da:e6:02:d4:e3:f0:de:6a:7a:96:da: c7:58:b3:48:37:3f:39:74:ae:0d:43:67:93:ae:2f:c5:9d:00: ea:84:e4:ad:c7:01:44:a5:f0:e4:41:6e:d7:9a:c1:b7:9e:48: 7b:d0:72:23:c6:a6:77:84:43:6d:a6:e6:22:a5:a4:7b:60:63: 9e:11:4d:bd:7b:8c:31:91:b1:0a:7b:da:e3:4c:19:7f:aa:8e: 45:d0:eb:83:83:43:04:ca:27:84:3f:31:92:83:78:41:ce:7d: 79:ba:b7:c7:b5:de:5d:7c:7b:2a:48:ef:15:04:15:c9:d0:db: ef:e0:80:09:d3:37:51:29:5c:15:47:0e:bc:4f:dc:53:7c:9d: 13:46:6f:00:fb:4c:f9:c1:02:36:b8:ea:ed:a1:54:33:a6:fb: a0:11:15:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYzNDIxMTAvBgNVBAUTKDc3REEyNDgwMDRFOEM1ODcyQkRGNzJCQUMxMjIyQzdD Q0I2RThFMzcwHhcNMjYwNzI4MjAwNDQwWhcNMjYwODA0MjAwNDQwWjAYMRYwFAYD VQQDEw02YTY5MGI1OC01ZDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqygRqwxKRHEqfQFBvSjS8wU5rEkd4KLTR/lHrixr7bOGVox3yWfaPH6TukPh CEmtRsgsPZWOX5sttCh2fZu/+71iSmhZEVursbToPsI/jvWRs2BvHySEdI49aY4E sMMY9vH1/UZeod11rtR24vu8junUQA3XFLQ8iTizRR4M6el7b9Jz6EEwqZc4m0E5 HuBdcYr8sQMUkvKnV8IJxEdHuFHoq1bFRTdNDuhDWPsspkU/teQLiq6kwEiNj6aa NeSS/eJJXhZaV24voE+sIJ/lhvEG3CkNqU48A73PuN1mgsS/n/uCvXC8JCAOpdxm 5YHN5xX/0NCDNRX0FvJ3FjQpCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJzwgOeO BmuFYqcWGr7W+cDep/xNMB8GA1UdIwQYMBaAFHfaJIAE6MWHK99yusEiLHzLbo43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjM0Mi9CREY4OTA4MDk5 RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZY3IzM0s2d1NJc2ZNdHVq amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q5b2tnQVRveFljcjMzSzZ3U0lzZk10dWpqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjM0Mi9CREY4OTA4MDk5RTQxMUVBODlBNEMyNDBDNEY5QUUwMi9kOW9rZ0FUb3hZ Y3IzM0s2d1NJc2ZNdHVqamMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVKfAnYGFkskA26CncPSeV2KtZrKwkxZQmZHIlBxoL2l9I8Ycf7tlzqdEs1jg hGbtK9IdS2SrayRlfTvuoAv0E2oX37c1posHtPEdIwroIoi67+7lOTpovcEzAIBc ImIZhNrmAtTj8N5qepbax1izSDc/OXSuDUNnk64vxZ0A6oTkrccBRKXw5EFu15rB t55Ie9ByI8amd4RDbabmIqWke2BjnhFNvXuMMZGxCnva40wZf6qORdDrg4NDBMon hD8xkoN4Qc59ebq3x7XeXXx7KkjvFQQVydDb7+CACdM3USlcFUcOvE/cU3ydE0Zv APtM+cECNrjq7aFUM6b7oBEVCg== -----END CERTIFICATE-----Generated at Wed Jul 29 10:35:54 2026 by rpki-client