$ rpki-client -vvf rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft File: UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft (raw, json) Hash identifier: 5Ij2R2aBquKk8RKPh3bSCajcciH1DBelF4UTvrYCIDI= Subject key identifier: D9:37:4F:BB:03:F0:85:90:99:ED:43:D5:4F:E7:65:D3:0C:2D:7A:9B Authority key identifier: 53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF Certificate issuer: /CN=A9159967/serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF Certificate serial: 2171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft Manifest number: 214C Signing time: Tue 28 Jul 2026 16:01:13 +0000 Manifest this update: Tue 28 Jul 2026 16:01:12 +0000 Manifest next update: Tue 04 Aug 2026 16:01:12 +0000 Files and hashes: 1: UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl (hash: oRjys16hB7Q+yxTFe4VuJ8hnLjhWXBHGhYQmTJY4Yuk=) 2: 2991FB703EBC11F0B4390D6CC4F9AE02.roa (hash: H6TSFHjxceqzGmdQryqjxQpaN4ogGNNs1wmONNfXYC4=) 3: F79267D61E4011E6945BEB0DC4F9AE02.roa (hash: o/MzyN7ge/ypeEuVIYd4HleoRWxXy+d/s8ghiWxojiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 16:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8561 (0x2171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159967, serialNumber=5330EEEEB0D0A9535FAC8505E735843AF6CE60AF Validity Not Before: Jul 28 16:01:12 2026 GMT Not After : Aug 4 16:01:12 2026 GMT Subject: CN=6a68d249-9451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:b1:17:cf:e5:34:01:ac:e6:9a:11:e3:31: 5a:a4:f5:88:15:3a:2a:66:5d:6b:45:67:09:10:f9: 33:ad:f5:d5:f7:7f:98:77:60:68:3a:8b:44:9c:6b: 51:15:41:73:a7:f1:4e:64:7f:b6:9c:7d:a6:81:0e: ef:18:a0:85:c0:15:5d:e1:7a:65:66:1a:91:5f:dc: b1:7c:9a:2b:b2:ed:d5:f1:1c:72:30:3d:09:2a:7a: 77:ca:a6:df:bc:a5:54:c8:37:69:eb:2d:cd:bc:a6: 83:dc:5c:78:45:0c:8c:9e:11:f8:fa:13:54:34:40: db:d7:1a:c3:6b:ac:ad:15:a7:d1:75:85:7d:44:ce: a1:ba:04:3f:b5:4a:33:45:47:cb:46:5a:65:ef:df: 17:3b:87:9f:a5:08:0c:d4:46:5b:b8:38:d5:19:0c: b3:52:58:0c:49:ae:79:a7:4a:8a:de:6d:fa:fe:4c: b6:7c:0b:b6:ce:29:f6:da:0b:a5:d0:46:85:38:c2: 49:0b:4d:67:fb:f8:09:80:57:cb:39:86:37:0a:b2: a0:f9:56:ca:b1:cd:63:90:85:c2:e4:ce:3c:ae:be: be:f2:c6:ae:cf:4c:2a:23:b7:1a:7b:7f:78:2f:b9: 3a:fb:37:e6:ce:51:e2:c1:92:14:c1:7e:0e:65:10: 05:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:37:4F:BB:03:F0:85:90:99:ED:43:D5:4F:E7:65:D3:0C:2D:7A:9B X509v3 Authority Key Identifier: keyid:53:30:EE:EE:B0:D0:A9:53:5F:AC:85:05:E7:35:84:3A:F6:CE:60:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzDu7rDQqVNfrIUF5zWEOvbOYK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159967/0BBF257815A911E6912D423BC4F9AE02/UzDu7rDQqVNfrIUF5zWEOvbOYK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:e4:d4:17:83:38:7b:5d:8f:7a:11:76:e9:44:96:f8:0e:77: a9:11:1a:fb:e6:2e:e4:0f:36:3d:d1:31:7a:ac:3c:64:88:45: e4:56:3f:0d:71:94:64:d6:c2:d8:72:c4:ff:68:5d:27:c3:31: 56:dd:ad:1c:51:26:7c:a5:1b:d6:00:09:a9:1a:5c:b9:4b:ef: 6e:24:21:70:12:77:88:3c:e2:26:3b:dc:0d:9f:71:aa:8c:fc: 72:08:a5:08:e3:81:69:36:ca:e2:80:08:b9:8b:ed:90:48:6b: 4e:d1:70:a1:b3:b6:51:67:d1:a5:1f:72:b4:1c:51:72:90:e3: a6:ad:10:05:a0:68:4b:eb:f3:16:0f:aa:c9:56:d2:7c:00:46: 8e:36:73:31:98:cd:c8:da:f7:75:04:f7:f4:9b:13:53:f3:d4: 75:03:4a:b1:0e:c3:21:e3:71:10:34:05:fe:8e:f4:ff:b8:f4: 1b:53:c0:ff:68:98:7b:ff:11:4f:3f:d7:c1:71:dd:28:1c:56: 4f:ef:61:ce:cc:44:ba:26:67:8b:c5:56:eb:e8:50:d0:a5:2d: 78:88:00:1c:96:44:ea:58:17:f7:b1:9f:1a:e8:0b:fa:04:d9: 38:17:93:a8:7a:37:4e:38:0f:d4:f1:1a:a6:fc:01:14:ad:4c: b0:96:1d:14 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk5NjcxMTAvBgNVBAUTKDUzMzBFRUVFQjBEMEE5NTM1RkFDODUwNUU3MzU4NDNB RjZDRTYwQUYwHhcNMjYwNzI4MTYwMTEyWhcNMjYwODA0MTYwMTEyWjAYMRYwFAYD VQQDEw02YTY4ZDI0OS05NDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueKxF8/lNAGs5poR4zFapPWIFToqZl1rRWcJEPkzrfXV93+Yd2BoOotEnGtR FUFzp/FOZH+2nH2mgQ7vGKCFwBVd4XplZhqRX9yxfJorsu3V8RxyMD0JKnp3yqbf vKVUyDdp6y3NvKaD3Fx4RQyMnhH4+hNUNEDb1xrDa6ytFafRdYV9RM6hugQ/tUoz RUfLRlpl798XO4efpQgM1EZbuDjVGQyzUlgMSa55p0qK3m36/ky2fAu2zin22gul 0EaFOMJJC01n+/gJgFfLOYY3CrKg+VbKsc1jkIXC5M48rr6+8sauz0wqI7cae394 L7k6+zfmzlHiwZIUwX4OZRAFWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNk3T7sD 8IWQme1D1U/nZdMMLXqbMB8GA1UdIwQYMBaAFFMw7u6w0KlTX6yFBec1hDr2zmCv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTk2Ny8wQkJGMjU3ODE1 QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFWTmZySVVGNXpXRU92Yk9Z SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6RHU3ckRRcVZOZnJJVUY1eldFT3ZiT1lLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTk2Ny8wQkJGMjU3ODE1QTkxMUU2OTEyRDQyM0JDNEY5QUUwMi9VekR1N3JEUXFW TmZySVVGNXpXRU92Yk9ZSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVuTUF4M4e12PehF26USW+A53qREa++Yu5A82PdExeqw8ZIhF5FY/DXGUZNbC 2HLE/2hdJ8MxVt2tHFEmfKUb1gAJqRpcuUvvbiQhcBJ3iDziJjvcDZ9xqoz8cgil COOBaTbK4oAIuYvtkEhrTtFwobO2UWfRpR9ytBxRcpDjpq0QBaBoS+vzFg+qyVbS fABGjjZzMZjNyNr3dQT39JsTU/PUdQNKsQ7DIeNxEDQF/o70/7j0G1PA/2iYe/8R Tz/XwXHdKBxWT+9hzsxEuiZni8VW6+hQ0KUteIgAHJZE6lgX97GfGugL+gTZOBeT qHo3TjgP1PEapvwBFK1MsJYdFA== -----END CERTIFICATE-----Generated at Wed Jul 29 11:03:54 2026 by rpki-client