$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft File: lDrZvGF3q4wvjoExwUpUZexClU8.mft (raw, json) Hash identifier: IUMzGd5HqGnG+YbnCLCq53Q213ftPyMQO3R+xpjsuQY= Subject key identifier: 22:52:03:A5:4E:08:2E:EE:7E:3B:43:01:23:9C:05:35:D7:11:1C:5E Authority key identifier: 94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F Certificate issuer: /CN=A9158568/serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F Certificate serial: 0224 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft Manifest number: 0211 Signing time: Tue 28 Jul 2026 18:40:49 +0000 Manifest this update: Tue 28 Jul 2026 18:40:49 +0000 Manifest next update: Tue 04 Aug 2026 18:40:49 +0000 Files and hashes: 1: lDrZvGF3q4wvjoExwUpUZexClU8.crl (hash: H9snbk2bjJWBRlfsBeOKtHw3MvrfVVFH85jDIC768i8=) 2: 203DB338782111EEAFDDBD86C4F9AE02.roa (hash: tSRP0mSyeCxo4ldlJd0x8udwsUTZBLiY2tDABXr5M1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 548 (0x224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158568, serialNumber=943AD9BC6177AB8C2F8E8131C14A5465EC42954F Validity Not Before: Jul 28 18:40:49 2026 GMT Not After : Aug 4 18:40:49 2026 GMT Subject: CN=6a68f7b1-0919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:e3:d0:d9:1d:e6:5e:29:46:36:fc:b3:c8: 0c:b0:2b:8d:d6:42:c8:f3:cc:da:7a:4d:58:e7:20: ed:30:38:aa:d0:95:01:17:47:85:bd:e7:d7:9c:52: ec:d0:24:66:51:ad:7b:a0:d8:56:ac:0e:4b:04:77: 6c:80:92:18:cb:36:21:82:c6:96:0d:a3:94:19:e3: a7:57:45:81:b0:30:d9:c5:e1:9c:81:72:b4:9a:1e: 54:eb:03:ff:82:de:10:49:ee:80:f8:f1:a1:91:9b: 77:b4:34:ae:4c:f0:aa:c4:a6:10:b4:03:a2:21:dd: f7:51:53:4f:41:cb:ce:96:08:38:80:a7:0f:06:ea: 62:d8:75:85:ac:e6:ba:98:d5:6f:13:0a:44:73:21: f7:8e:f0:bd:5c:e7:1f:fe:0a:60:66:bc:2c:ee:42: 3f:f8:14:dd:58:73:ac:5b:e3:36:3d:79:a5:2f:bb: 4b:98:47:ce:92:c4:b1:42:4a:71:c9:bc:02:90:31: 3a:6b:7c:1e:c0:ca:03:38:6f:8f:e1:e7:22:96:ec: 7c:9c:80:e1:0b:92:2b:5d:74:9a:d2:d1:fe:ca:d2: d6:f9:f5:a6:3b:4d:63:6c:90:ab:88:4c:cc:33:c6: 7a:95:81:42:19:01:8a:2c:d5:fb:6c:48:99:6d:73: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:52:03:A5:4E:08:2E:EE:7E:3B:43:01:23:9C:05:35:D7:11:1C:5E X509v3 Authority Key Identifier: keyid:94:3A:D9:BC:61:77:AB:8C:2F:8E:81:31:C1:4A:54:65:EC:42:95:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/lDrZvGF3q4wvjoExwUpUZexClU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/3618AB6E72A311EE94557211C4F9AE02/lDrZvGF3q4wvjoExwUpUZexClU8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:17:ea:a0:f5:07:4c:81:e5:96:b0:81:ab:c5:1a:88:d1:4e: c1:66:bc:11:82:83:7b:c7:eb:46:43:e4:b3:76:62:bf:c9:86: ae:a7:04:b6:3e:d8:2d:7b:d5:8a:15:e4:b6:89:11:c7:59:9a: a3:ea:21:4d:f4:60:69:20:51:42:c0:b9:ad:29:ff:bf:69:71: a9:a3:8d:32:9f:17:94:f3:e3:49:c9:20:c8:15:67:40:b7:0e: df:f5:01:be:cd:b6:25:98:86:01:65:e4:9a:30:c6:1c:c0:a2: 0e:27:78:dc:11:a0:32:38:a0:23:be:9c:5d:a1:96:5b:f8:0f: d2:38:23:72:45:4c:8a:ec:09:13:85:35:8e:d3:a4:f8:ec:a0: 0f:57:9d:7e:ba:77:90:b7:95:1f:41:c0:e7:c7:23:cc:15:60: 38:f0:3b:a6:3b:07:60:78:f8:3d:b0:6e:86:b6:a9:a7:e1:34: 50:e6:e4:d5:3c:86:fb:11:bc:b0:dd:ad:60:a6:e9:17:29:67: ca:2b:56:50:3f:50:b8:d0:0c:d2:75:e7:c0:2f:51:73:cd:d0: b9:df:91:f6:85:53:9e:bf:94:fa:6f:8a:f0:b1:68:78:97:8b: 4d:c9:67:3f:bd:8a:2a:3d:09:46:4e:9e:6a:80:4c:7d:ae:3c: 7e:74:10:38 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg1NjgxMTAvBgNVBAUTKDk0M0FEOUJDNjE3N0FCOEMyRjhFODEzMUMxNEE1NDY1 RUM0Mjk1NEYwHhcNMjYwNzI4MTg0MDQ5WhcNMjYwODA0MTg0MDQ5WjAYMRYwFAYD VQQDEw02YTY4ZjdiMS0wOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3sjj0Nkd5l4pRjb8s8gMsCuN1kLI88zaek1Y5yDtMDiq0JUBF0eFvefXnFLs 0CRmUa17oNhWrA5LBHdsgJIYyzYhgsaWDaOUGeOnV0WBsDDZxeGcgXK0mh5U6wP/ gt4QSe6A+PGhkZt3tDSuTPCqxKYQtAOiId33UVNPQcvOlgg4gKcPBupi2HWFrOa6 mNVvEwpEcyH3jvC9XOcf/gpgZrws7kI/+BTdWHOsW+M2PXmlL7tLmEfOksSxQkpx ybwCkDE6a3wewMoDOG+P4ecilux8nIDhC5IrXXSa0tH+ytLW+fWmO01jbJCriEzM M8Z6lYFCGQGKLNX7bEiZbXO9wwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCJSA6VO CC7ufjtDASOcBTXXERxeMB8GA1UdIwQYMBaAFJQ62bxhd6uML46BMcFKVGXsQpVP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC8zNjE4QUI2RTcy QTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi9sRHJadkdGM3E0d3Zqb0V4d1VwVVpleENs VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2xEclp2R0YzcTR3dmpvRXh3VXBVWmV4Q2xVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODU2OC8zNjE4QUI2RTcyQTMxMUVFOTQ1NTcyMTFDNEY5QUUwMi9sRHJadkdGM3E0 d3Zqb0V4d1VwVVpleENsVTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWBfqoPUHTIHllrCBq8UaiNFOwWa8EYKDe8frRkPks3Ziv8mGrqcEtj7YLXvV ihXktokRx1mao+ohTfRgaSBRQsC5rSn/v2lxqaONMp8XlPPjSckgyBVnQLcO3/UB vs22JZiGAWXkmjDGHMCiDid43BGgMjigI76cXaGWW/gP0jgjckVMiuwJE4U1jtOk +OygD1edfrp3kLeVH0HA58cjzBVgOPA7pjsHYHj4PbBuhrapp+E0UObk1TyG+xG8 sN2tYKbpFylnyitWUD9QuNAM0nXnwC9Rc83Qud+R9oVTnr+U+m+K8LFoeJeLTcln P72KKj0JRk6eaoBMfa48fnQQOA== -----END CERTIFICATE-----Generated at Wed Jul 29 00:33:03 2026 by rpki-client