$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: c8KinWL1F5eAmhdiZiRuBseP59CXC/gVPLnWkk7W3wM= Subject key identifier: 4A:01:8B:8C:C4:4A:E2:12:55:70:DD:48:F5:4E:8E:D3:2A:B1:96:7C Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 0283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 027D Signing time: Mon 27 Jul 2026 03:27:17 +0000 Manifest this update: Mon 27 Jul 2026 03:27:17 +0000 Manifest next update: Mon 03 Aug 2026 03:27:17 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: SOqA6xq3EOowVR14hc9AbL2TcG9s5cBJPoklWBPo4fs=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: UUPPLcKEvUEhkpvRtioLB7LEWMQls2sTWKjKgUgudGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 03:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 643 (0x283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Jul 27 03:27:17 2026 GMT Not After : Aug 3 03:27:17 2026 GMT Subject: CN=6a66d015-6303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:ac:2f:9d:2b:bc:23:6f:0b:e6:1f:a6:4b: 83:5d:e9:d4:9f:22:d8:34:d1:05:82:56:2c:eb:7a: 8a:45:d6:cc:76:f6:ab:29:77:62:6d:08:2f:ed:b2: 50:3b:c5:52:39:fb:8c:11:7e:10:b0:02:0a:3b:83: 03:20:1a:cb:94:5a:32:8f:f1:49:c3:18:16:eb:85: 90:9b:0b:7c:ab:a9:ca:c7:5f:d1:e3:ca:e3:ee:dd: 54:10:68:3e:c8:81:02:dd:0b:f8:a8:3f:3a:cb:b8: c3:d6:b2:0c:86:98:9d:37:5e:2c:19:87:fb:16:f0: 07:e7:56:a6:8c:bd:72:56:43:c5:8b:a2:09:60:71: 55:cd:11:1f:fd:c3:4d:a1:0b:4d:5a:ee:ae:bd:e6: e3:58:12:c4:7a:90:77:39:02:b5:d2:5b:34:d2:b5: 36:bc:d7:a5:cc:6f:c5:15:fc:a5:50:25:65:c0:08: 38:36:83:4e:e2:66:8d:4c:12:76:f9:33:4c:69:06: b9:df:c2:96:75:af:b7:49:a7:7f:66:64:95:fc:9d: 89:a0:fe:00:4b:a9:8a:64:aa:cc:6b:04:8f:92:7f: b2:8f:88:07:87:c1:87:39:c8:b9:7a:a5:b8:b0:51: 96:19:97:6c:11:eb:a1:54:2d:a4:9f:39:b7:6a:d4: ed:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:01:8B:8C:C4:4A:E2:12:55:70:DD:48:F5:4E:8E:D3:2A:B1:96:7C X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:02:99:d7:8d:aa:5b:8c:e7:13:17:1c:d5:64:90:33:24:1c: 55:5e:77:91:62:72:3f:f6:3d:0d:95:56:5c:99:60:39:45:c0: fc:bb:e5:fc:6d:e5:65:f8:53:0c:a0:2b:74:d2:fa:6f:2e:62: 29:90:d1:fe:0b:8f:2c:41:27:16:49:a1:b5:9a:43:f2:a1:1e: 2f:a4:99:32:ef:38:f5:21:a6:df:21:f4:0b:70:85:11:3b:6d: de:a3:32:75:0d:17:35:03:d1:28:48:b7:63:4a:dd:05:12:33: f7:0a:60:53:4c:d7:0c:9a:39:0e:af:17:5e:40:aa:fd:78:fe: b9:d1:46:ff:63:21:cb:e6:3f:39:c6:ae:76:b3:fd:88:7b:09: 4b:e3:cc:a5:b5:4a:65:9a:9f:c8:f6:3b:86:9f:76:d8:b5:9f: 3c:60:3b:55:36:b1:d6:a3:31:9a:07:fd:19:29:e3:12:ca:fc: 60:de:95:8c:ff:e0:ab:ea:b2:9d:67:bb:15:10:fb:c7:3c:f9: 4c:44:a1:e5:a8:0e:41:76:97:8b:dc:09:3c:e7:e0:02:7d:6f: 42:12:8c:b7:1a:15:77:b3:1d:4f:ff:92:35:26:4c:79:2f:48: 7b:fb:4c:13:12:f1:51:b8:f8:8b:ce:31:dc:4e:53:a1:66:6c: 8b:5a:72:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjYwNzI3MDMyNzE3WhcNMjYwODAzMDMyNzE3WjAYMRYwFAYD VQQDEw02YTY2ZDAxNS02MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoACsL50rvCNvC+YfpkuDXenUnyLYNNEFglYs63qKRdbMdvarKXdibQgv7bJQ O8VSOfuMEX4QsAIKO4MDIBrLlFoyj/FJwxgW64WQmwt8q6nKx1/R48rj7t1UEGg+ yIEC3Qv4qD86y7jD1rIMhpidN14sGYf7FvAH51amjL1yVkPFi6IJYHFVzREf/cNN oQtNWu6uvebjWBLEepB3OQK10ls00rU2vNelzG/FFfylUCVlwAg4NoNO4maNTBJ2 +TNMaQa538KWda+3Sad/ZmSV/J2JoP4AS6mKZKrMawSPkn+yj4gHh8GHOci5eqW4 sFGWGZdsEeuhVC2knzm3atTtrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEoBi4zE SuISVXDdSPVOjtMqsZZ8MB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhAKZ142qW4znExcc1WSQMyQcVV53kWJyP/Y9DZVWXJlgOUXA/Lvl/G3lZfhT DKArdNL6by5iKZDR/guPLEEnFkmhtZpD8qEeL6SZMu849SGm3yH0C3CFETtt3qMy dQ0XNQPRKEi3Y0rdBRIz9wpgU0zXDJo5Dq8XXkCq/Xj+udFG/2Mhy+Y/OcaudrP9 iHsJS+PMpbVKZZqfyPY7hp922LWfPGA7VTax1qMxmgf9GSnjEsr8YN6VjP/gq+qy nWe7FRD7xzz5TESh5agOQXaXi9wJPOfgAn1vQhKMtxoVd7MdT/+SNSZMeS9Ie/tM ExLxUbj4i84x3E5ToWZsi1py9g== -----END CERTIFICATE-----Generated at Tue Jul 28 22:20:41 2026 by rpki-client