$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft File: 33HZn0zTs4Mms-1HyOSl35ieQvI.mft (raw, json) Hash identifier: NYxQ+YbGzYtb5dKZ9jzEoR/fptwVmgz8CiUvrEIIRoA= Subject key identifier: 07:7E:9F:B6:EA:7F:67:03:EE:3C:CE:57:14:A2:F5:AC:5E:74:37:FA Authority key identifier: DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 Certificate issuer: /CN=A915A0EE/serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft Manifest number: 0257 Signing time: Mon 27 Jul 2026 03:51:59 +0000 Manifest this update: Mon 27 Jul 2026 03:51:58 +0000 Manifest next update: Mon 03 Aug 2026 03:51:58 +0000 Files and hashes: 1: 33HZn0zTs4Mms-1HyOSl35ieQvI.crl (hash: U5f736qKbahFeRHBdYRmDPEYKbLkESdISLjidFI3JJo=) 2: 1BDBCE5013A011EE91039C41C4F9AE02.roa (hash: jQDpwo+QqLU/lJ9etJ9XrTrIVILmvaXnCVSDMxtlPro=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:51:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0EE, serialNumber=DF71D99F4CD3B38326B3ED47C8E4A5DF989E42F2 Validity Not Before: Jul 27 03:51:58 2026 GMT Not After : Aug 3 03:51:58 2026 GMT Subject: CN=6a66d5df-28db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:63:95:10:41:b9:cc:9b:29:2d:eb:a0:5a: 3f:68:d7:18:c9:40:5e:12:66:e8:59:e3:09:75:ca: 9a:0f:5d:09:6e:28:95:04:2a:ac:e9:8c:c7:8f:de: b7:28:c5:99:f9:62:7d:68:4e:d9:3e:4f:b0:d9:a4: 1a:aa:46:f6:b4:be:fa:d4:e7:f7:e0:71:d3:dd:b6: ff:9e:4d:17:e0:ff:b6:89:86:c2:15:d0:2a:81:6b: 5f:08:58:24:e7:ee:8a:01:3e:01:85:9e:3b:3f:97: 84:f8:d9:a9:87:9c:0a:dd:ac:b9:34:9e:49:fe:51: 43:ce:b6:74:15:6a:d8:66:bc:11:fe:9f:19:88:60: ca:d9:d7:a8:bc:b6:8e:8f:a9:fc:40:35:c3:8d:b4: 84:e4:80:ff:76:13:e7:c9:98:37:7c:b7:d4:a1:17: 6d:61:1f:ed:d0:e5:10:bb:17:cd:35:cd:e4:f0:16: 37:2f:b6:5c:6e:29:16:cc:ee:14:0b:d2:d3:49:2e: f1:f6:3f:27:4b:fc:b3:7d:22:73:c5:01:80:88:78: c9:0b:c3:61:1c:46:c1:87:92:70:21:63:c8:50:2a: cd:89:c9:b4:77:b8:2f:cf:4e:0a:cd:66:10:0f:8c: a4:00:36:4e:23:6b:65:e0:6b:ff:dd:13:68:05:8f: e3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7E:9F:B6:EA:7F:67:03:EE:3C:CE:57:14:A2:F5:AC:5E:74:37:FA X509v3 Authority Key Identifier: keyid:DF:71:D9:9F:4C:D3:B3:83:26:B3:ED:47:C8:E4:A5:DF:98:9E:42:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33HZn0zTs4Mms-1HyOSl35ieQvI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0EE/55C803CA09C011EEBE12583AC4F9AE02/33HZn0zTs4Mms-1HyOSl35ieQvI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f6:44:65:e7:fb:ed:06:5a:af:63:1d:91:39:79:f2:2e:98: ff:a8:a6:29:b3:1d:53:56:2a:e3:12:f7:8c:06:93:cf:31:2d: 52:87:fd:12:f1:a0:a7:64:3b:a0:fe:65:f0:f2:ee:8f:cc:46: cc:f2:60:9c:19:0a:b0:ac:6b:83:0f:de:ba:02:4b:cd:4c:dc: 66:e7:c6:d2:6f:5f:f2:00:74:24:a1:c8:11:b0:c6:19:28:a1: 45:b7:5d:35:1c:d0:c6:04:7f:44:01:9c:18:cf:82:33:00:70: 80:c1:61:bf:d3:6d:82:42:74:cd:df:43:66:49:41:ae:b1:89: 0d:9b:d0:3f:99:4b:e6:69:87:c3:98:b7:62:f9:88:1f:ca:54: d1:a2:45:ac:67:b9:e8:c3:70:87:99:ff:7a:2e:81:e6:25:94: 3a:e9:24:d1:18:78:3a:f1:22:bc:2b:20:3f:7f:d8:b8:d5:58: ad:53:95:60:97:ce:bc:f9:7f:73:c9:93:61:f3:fa:10:ef:5c: 2d:29:72:84:10:7a:7c:6e:15:6f:bf:eb:1f:26:43:d6:15:ce: ef:ef:82:ad:d9:6a:54:a2:bd:db:7d:b7:46:a4:b8:f5:61:35: 91:52:00:4c:28:c5:59:bb:0c:4a:c5:14:e7:10:20:1a:9d:27: 93:3c:03:67 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRUUxMTAvBgNVBAUTKERGNzFEOTlGNENEM0IzODMyNkIzRUQ0N0M4RTRBNURG OTg5RTQyRjIwHhcNMjYwNzI3MDM1MTU4WhcNMjYwODAzMDM1MTU4WjAYMRYwFAYD VQQDEw02YTY2ZDVkZi0yOGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOpjlRBBucybKS3roFo/aNcYyUBeEmboWeMJdcqaD10JbiiVBCqs6YzHj963 KMWZ+WJ9aE7ZPk+w2aQaqkb2tL761Of34HHT3bb/nk0X4P+2iYbCFdAqgWtfCFgk 5+6KAT4BhZ47P5eE+Nmph5wK3ay5NJ5J/lFDzrZ0FWrYZrwR/p8ZiGDK2deovLaO j6n8QDXDjbSE5ID/dhPnyZg3fLfUoRdtYR/t0OUQuxfNNc3k8BY3L7ZcbikWzO4U C9LTSS7x9j8nS/yzfSJzxQGAiHjJC8NhHEbBh5JwIWPIUCrNicm0d7gvz04KzWYQ D4ykADZOI2tl4Gv/3RNoBY/jjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAd+n7bq f2cD7jzOVxSi9axedDf6MB8GA1UdIwQYMBaAFN9x2Z9M07ODJrPtR8jkpd+YnkLy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBFRS81NUM4MDNDQTA5 QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0TW1zLTFIeU9TbDM1aWVR dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzSFpuMHpUczRNbXMtMUh5T1NsMzVpZVF2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBFRS81NUM4MDNDQTA5QzAxMUVFQkUxMjU4M0FDNEY5QUUwMi8zM0habjB6VHM0 TW1zLTFIeU9TbDM1aWVRdkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC/ZEZef77QZar2MdkTl58i6Y/6imKbMdU1Yq4xL3jAaTzzEtUof9EvGgp2Q7 oP5l8PLuj8xGzPJgnBkKsKxrgw/eugJLzUzcZufG0m9f8gB0JKHIEbDGGSihRbdd NRzQxgR/RAGcGM+CMwBwgMFhv9NtgkJ0zd9DZklBrrGJDZvQP5lL5mmHw5i3YvmI H8pU0aJFrGe56MNwh5n/ei6B5iWUOukk0Rh4OvEivCsgP3/YuNVYrVOVYJfOvPl/ c8mTYfP6EO9cLSlyhBB6fG4Vb7/rHyZD1hXO7++CrdlqVKK92323RqS49WE1kVIA TCjFWbsMSsUU5xAgGp0nkzwDZw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:34:22 2026 by rpki-client