$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft File: f1QPcIZAQhpialmxa5Q_AzutP_Y.mft (raw, json) Hash identifier: ma8pwcrb5G0eSEd4Ye/vG1wOXVMSiFgeyJArBhvusfc= Subject key identifier: 1D:BA:50:51:1D:42:DB:76:A6:D7:12:57:AF:8B:F5:93:11:02:65:80 Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 Certificate issuer: /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Certificate serial: 0D4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft Manifest number: 0D37 Signing time: Sun 26 Jul 2026 18:24:18 +0000 Manifest this update: Sun 26 Jul 2026 18:24:17 +0000 Manifest next update: Sun 02 Aug 2026 18:24:17 +0000 Files and hashes: 1: f1QPcIZAQhpialmxa5Q_AzutP_Y.crl (hash: yhdLY5FZqepXKVfxWft6c1mdHc+0lvpsW6IMvN4jua0=) 2: 88C6F3B64EBA11F1A27D1DFDCC833773.roa (hash: +GXbWJ8DH4MXu8C2FQdeX12xA8wLfLkGkqve6/PrmJQ=) 3: AF905A0C021111EAA331B072C4F9AE02.roa (hash: qd9STy+iZzB+BWK7tdr5s3ge+XISfdZKjAs1tWz1RCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 18:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3402 (0xd4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B53A, serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6 Validity Not Before: Jul 26 18:24:17 2026 GMT Not After : Aug 2 18:24:17 2026 GMT Subject: CN=6a6650d2-41dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:6e:e8:6f:b5:e2:00:ab:66:d8:ab:9e:61: f2:62:16:75:d3:63:da:29:f4:e6:21:39:96:b7:78: 0a:9e:13:ec:49:66:cc:80:1f:0d:0c:92:98:9c:66: ee:14:09:47:d9:ba:dd:8c:db:32:41:64:06:2b:01: 57:8c:39:85:d0:43:18:dc:01:d5:e8:82:13:ba:02: 71:1a:64:17:a8:79:b2:2b:ff:ea:eb:78:4c:81:a1: b4:ed:f8:34:44:54:f9:8d:4d:c9:5c:22:82:86:3a: 92:b5:d0:0e:c1:74:d3:96:04:75:94:75:93:ec:e8: 94:96:97:ac:b7:52:36:2d:bb:51:da:93:6c:9d:cd: 21:6d:57:9d:50:31:56:ff:43:78:4f:cc:09:08:1b: d7:30:f1:ce:ce:1c:07:33:c7:e6:d9:fd:60:ba:aa: b4:af:1d:e3:fb:19:eb:3a:5e:7d:58:68:43:27:ef: 5d:05:a0:22:22:e0:03:45:c7:b2:bd:64:6a:c6:a5: 6c:0a:b8:b7:b2:8c:b8:57:0b:b9:97:95:59:52:19: 8d:6c:dd:db:c2:25:e2:d3:1c:0f:cd:1c:cd:44:e7: 27:4f:f2:e0:d9:96:b6:86:0e:68:7c:52:fc:98:eb: e8:1c:98:80:91:cb:fd:da:0b:a8:92:c2:2f:1f:7c: c2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BA:50:51:1D:42:DB:76:A6:D7:12:57:AF:8B:F5:93:11:02:65:80 X509v3 Authority Key Identifier: keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a6:2f:e2:38:b8:48:bf:2d:f9:1c:ba:92:d0:45:7a:20:d7: 77:ae:42:77:75:c5:85:1c:09:ac:27:53:f8:37:5b:19:3b:8a: ad:2d:d6:cf:33:a8:43:23:2c:f9:4e:d3:09:4c:3e:e8:df:b6: eb:f4:7f:00:f7:a6:32:b9:0c:9f:0c:ec:bc:08:a9:21:ef:3e: b0:23:c8:24:a4:f6:4e:04:01:7b:0e:b4:2c:0c:59:ca:98:c2: 7a:1c:0c:73:27:63:7a:f9:6a:ee:a2:e0:4c:1e:a5:a2:31:0d: dd:f8:79:e3:06:1a:af:9a:77:5d:e4:d9:e1:8f:ad:a5:01:b7: 46:b3:b0:7d:5c:d9:c3:38:95:cb:4e:c9:b9:75:4c:23:10:6f: 12:48:cf:53:8c:af:c7:b7:5c:96:0b:73:19:8c:d6:db:e0:e6: 1b:ed:ae:fd:03:74:1c:07:4c:24:96:48:d7:f2:24:2d:3a:5d: 77:39:a4:21:6b:c9:b5:d6:40:95:a2:00:05:eb:35:c8:c9:f2: db:ed:f6:3a:f9:9d:34:16:36:78:65:a6:9a:2b:62:3f:dc:01: ab:b4:d4:0d:53:18:63:19:29:d5:76:c5:24:d3:16:23:f7:4e: a8:ca:79:71:0a:c1:23:08:66:75:40:68:70:65:fd:8c:eb:6b: 2d:ef:1c:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1M0ExMTAvBgNVBAUTKDdGNTQwRjcwODY0MDQyMUE2MjZBNTlCMTZCOTQzRjAz M0JBRDNGRjYwHhcNMjYwNzI2MTgyNDE3WhcNMjYwODAyMTgyNDE3WjAYMRYwFAYD VQQDEw02YTY2NTBkMi00MWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2du6G+14gCrZtirnmHyYhZ102PaKfTmITmWt3gKnhPsSWbMgB8NDJKYnGbu FAlH2brdjNsyQWQGKwFXjDmF0EMY3AHV6IITugJxGmQXqHmyK//q63hMgaG07fg0 RFT5jU3JXCKChjqStdAOwXTTlgR1lHWT7OiUlpest1I2LbtR2pNsnc0hbVedUDFW /0N4T8wJCBvXMPHOzhwHM8fm2f1guqq0rx3j+xnrOl59WGhDJ+9dBaAiIuADRcey vWRqxqVsCri3soy4Vwu5l5VZUhmNbN3bwiXi0xwPzRzNROcnT/Lg2Za2hg5ofFL8 mOvoHJiAkcv92guoksIvH3zCOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB26UFEd Qtt2ptcSV6+L9ZMRAmWAMB8GA1UdIwQYMBaAFH9UD3CGQEIaYmpZsWuUPwM7rT/2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjUzQS8yQ0Q2QjM4QzAy MTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFocGlhbG14YTVRX0F6dXRQ X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YxUVBjSVpBUWhwaWFsbXhhNVFfQXp1dFBfWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjUzQS8yQ0Q2QjM4QzAyMTAxMUVBQUUwNzk5NkZDNEY5QUUwMi9mMVFQY0laQVFo cGlhbG14YTVRX0F6dXRQX1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeqYv4ji4SL8t+Ry6ktBFeiDXd65Cd3XFhRwJrCdT+DdbGTuKrS3WzzOoQyMs +U7TCUw+6N+26/R/APemMrkMnwzsvAipIe8+sCPIJKT2TgQBew60LAxZypjCehwM cydjevlq7qLgTB6lojEN3fh54wYar5p3XeTZ4Y+tpQG3RrOwfVzZwziVy07JuXVM IxBvEkjPU4yvx7dclgtzGYzW2+DmG+2u/QN0HAdMJJZI1/IkLTpddzmkIWvJtdZA laIABes1yMny2+32OvmdNBY2eGWmmitiP9wBq7TUDVMYYxkp1XbFJNMWI/dOqMp5 cQrBIwhmdUBocGX9jOtrLe8cWg== -----END CERTIFICATE-----Generated at Tue Jul 28 18:30:36 2026 by rpki-client